$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.mft File: f5auCiLKk4vV-dmnMor1g2LrIsE.mft (raw, json) Hash identifier: u0+EuWcVvEtqc3DV2vNbiK/9L/yAnWc09XzcTm4CllQ= Subject key identifier: CE:A4:13:0F:AA:CA:A7:F8:73:6C:A7:F1:F1:C6:60:FA:AA:78:3A:1A Authority key identifier: 7F:96:AE:0A:22:CA:93:8B:D5:F9:D9:A7:32:8A:F5:83:62:EB:22:C1 Certificate issuer: /CN=A91BFFBE/serialNumber=7F96AE0A22CA938BD5F9D9A7328AF58362EB22C1 Certificate serial: 95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f5auCiLKk4vV-dmnMor1g2LrIsE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.mft Manifest number: 94 Signing time: Sat 23 Aug 2025 06:39:08 +0000 Manifest this update: Sat 23 Aug 2025 06:39:07 +0000 Manifest next update: Sat 30 Aug 2025 06:39:07 +0000 Files and hashes: 1: f5auCiLKk4vV-dmnMor1g2LrIsE.crl (hash: Y2USa7cq4t6zRW35HkulQ0rdXjSsyXZ0fa725MNr6+U=) 2: 4450DA2C9D0311EF877CD229C4F9AE02.roa (hash: buSMZTKEc3PdwiMwBtG/n0gmpQCMqdjfMf4AjKQfjyg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.crl rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f5auCiLKk4vV-dmnMor1g2LrIsE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:39:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 149 (0x95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFFBE, serialNumber=7F96AE0A22CA938BD5F9D9A7328AF58362EB22C1 Validity Not Before: Aug 23 06:39:07 2025 GMT Not After : Aug 30 06:39:07 2025 GMT Subject: CN=68a9620c-64d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:81:7a:2a:95:e6:b6:ab:7b:37:87:64:6f:8a: e6:f7:6b:88:71:c3:16:1e:42:4c:62:fe:44:1d:79: da:e6:eb:68:29:aa:6c:fe:ec:12:6b:55:f0:c7:8d: 93:da:94:af:95:9e:df:13:7c:55:9a:f8:7e:ff:74: cf:f0:0a:6f:eb:43:f8:68:2e:8a:82:68:f5:d2:11: 1c:4f:8d:15:e0:fc:ed:96:a3:6f:98:20:d3:31:26: 48:50:c8:ba:6a:28:6f:13:34:26:7b:4f:52:66:91: fe:61:0a:59:ba:b8:86:c9:27:af:b4:f1:7e:dc:a3: fe:49:db:55:a8:dc:74:2f:53:2d:41:3a:6d:ca:b3: a2:7b:2e:5f:28:f8:38:25:1f:03:e7:63:c4:b0:d5: b7:6b:d5:63:08:4c:33:ce:bd:7b:80:b1:e6:00:19: c3:8b:ac:a3:41:75:8b:49:1c:be:a0:b7:c2:ba:8c: 6a:eb:eb:7d:92:20:d6:19:a1:c2:de:eb:af:28:0f: f9:a2:4a:7c:1c:96:63:55:56:45:98:69:f4:40:0e: 33:52:38:34:f9:90:f1:39:f7:1a:72:dd:69:13:f6: 97:36:2a:19:8f:a3:6c:68:65:1a:e3:5d:1f:50:01: d2:00:1f:81:ef:00:03:3b:ec:77:04:dc:99:f7:77: fa:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:A4:13:0F:AA:CA:A7:F8:73:6C:A7:F1:F1:C6:60:FA:AA:78:3A:1A X509v3 Authority Key Identifier: keyid:7F:96:AE:0A:22:CA:93:8B:D5:F9:D9:A7:32:8A:F5:83:62:EB:22:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f5auCiLKk4vV-dmnMor1g2LrIsE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:38:5e:0c:0f:ac:e3:83:32:76:cb:5d:50:4b:e9:76:f6:87: 5d:8f:d8:68:18:fb:0b:03:20:e1:02:50:26:58:81:4e:05:fa: 39:09:95:e4:a5:33:3f:b2:29:bf:85:42:bb:0b:6f:76:31:4e: 27:77:cf:97:96:c8:2a:ac:f0:00:79:17:fc:62:a7:f2:3e:5f: 5b:f1:29:d1:b1:69:67:8b:39:03:2e:3b:09:55:c3:e2:a6:0a: 84:93:cc:07:05:5f:b9:03:d0:89:71:30:71:ef:36:4f:03:d5: c4:61:8b:47:f9:cc:5b:e3:db:51:86:9c:4d:fa:0c:50:88:2c: 9a:90:04:e2:7f:d5:2a:69:0d:4f:dd:60:b6:78:94:a5:40:4d: a2:64:1a:1e:c8:58:1f:c6:31:08:44:c0:b3:cf:69:4d:ad:5d: d3:a1:70:48:8e:63:25:a5:a4:f6:47:73:a9:e1:cb:fe:94:80: 4c:ee:d4:b8:ae:c1:f6:51:33:bb:ff:55:65:12:c1:e0:81:6a: 4e:8c:a6:47:b1:23:a2:dc:7f:ac:cd:92:ef:03:2a:22:d2:99: 75:eb:4b:e3:4b:e1:a7:ea:e0:70:e7:e6:4c:c8:24:44:45:a0: 9d:7e:ad:68:af:9a:83:08:29:50:18:65:1f:20:4d:ed:ac:c1: ad:4a:c6:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkZGQkUxMTAvBgNVBAUTKDdGOTZBRTBBMjJDQTkzOEJENUY5RDlBNzMyOEFGNTgz NjJFQjIyQzEwHhcNMjUwODIzMDYzOTA3WhcNMjUwODMwMDYzOTA3WjAYMRYwFAYD VQQDEw02OGE5NjIwYy02NGQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxYF6KpXmtqt7N4dkb4rm92uIccMWHkJMYv5EHXna5utoKaps/uwSa1Xwx42T 2pSvlZ7fE3xVmvh+/3TP8Apv60P4aC6Kgmj10hEcT40V4PztlqNvmCDTMSZIUMi6 aihvEzQme09SZpH+YQpZuriGySevtPF+3KP+SdtVqNx0L1MtQTptyrOiey5fKPg4 JR8D52PEsNW3a9VjCEwzzr17gLHmABnDi6yjQXWLSRy+oLfCuoxq6+t9kiDWGaHC 3uuvKA/5okp8HJZjVVZFmGn0QA4zUjg0+ZDxOfcact1pE/aXNioZj6NsaGUa410f UAHSAB+B7wADO+x3BNyZ93f6AQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM6kEw+q yqf4c2yn8fHGYPqqeDoaMB8GA1UdIwQYMBaAFH+WrgoiypOL1fnZpzKK9YNi6yLB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRkZCRS80MjE1OUY1QTlE MDIxMUVGOTlDQzg2MDlDNEY5QUUwMi9mNWF1Q2lMS2s0dlYtZG1uTW9yMWcyTHJJ c0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Y1YXVDaUxLazR2Vi1kbW5Nb3IxZzJMcklzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RkZCRS80MjE1OUY1QTlEMDIxMUVGOTlDQzg2MDlDNEY5QUUwMi9mNWF1Q2lMS2s0 dlYtZG1uTW9yMWcyTHJJc0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8OF4MD6zjgzJ2y11QS+l29oddj9hoGPsLAyDhAlAmWIFOBfo5CZXk pTM/sim/hUK7C292MU4nd8+XlsgqrPAAeRf8YqfyPl9b8SnRsWlnizkDLjsJVcPi pgqEk8wHBV+5A9CJcTBx7zZPA9XEYYtH+cxb49tRhpxN+gxQiCyakATif9UqaQ1P 3WC2eJSlQE2iZBoeyFgfxjEIRMCzz2lNrV3ToXBIjmMlpaT2R3Op4cv+lIBM7tS4 rsH2UTO7/1VlEsHggWpOjKZHsSOi3H+szZLvAyoi0pl160vjS+Gn6uBw5+ZMyCRE RaCdfq1or5qDCClQGGUfIE3trMGtSsYX -----END CERTIFICATE-----Generated at Sat Aug 23 10:42:46 2025 by rpki-client