$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.mft File: 5ZkxVcREOi5WwN4jM6RLVsrUkZw.mft (raw, json) Hash identifier: /Jb2xNvG76l6C1coWrhN/mH0lbqrPpUO+XWHn3Lxff4= Subject key identifier: C8:B1:DA:4E:65:4F:52:F2:64:00:EE:80:D9:2A:F3:2D:F4:18:1F:5B Authority key identifier: E5:99:31:55:C4:44:3A:2E:56:C0:DE:23:33:A4:4B:56:CA:D4:91:9C Certificate issuer: /CN=A91C3ABA/serialNumber=E5993155C4443A2E56C0DE2333A44B56CAD4919C Certificate serial: 04D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ZkxVcREOi5WwN4jM6RLVsrUkZw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.mft Manifest number: 04CC Signing time: Sat 23 Aug 2025 00:02:31 +0000 Manifest this update: Sat 23 Aug 2025 00:02:30 +0000 Manifest next update: Sat 30 Aug 2025 00:02:30 +0000 Files and hashes: 1: 5ZkxVcREOi5WwN4jM6RLVsrUkZw.crl (hash: ml7rpnFZxrvxufKCk/VbcJ5NurV2152jJP+12FPghRc=) 2: 4B9F1AA6354F11EC8531C34DC4F9AE02.roa (hash: +rLDpG6E4AF0Dcxf7o8iMswR6KeKAMAGKwbYTVWTRnM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.crl rsync://rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ZkxVcREOi5WwN4jM6RLVsrUkZw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1233 (0x4d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3ABA, serialNumber=E5993155C4443A2E56C0DE2333A44B56CAD4919C Validity Not Before: Aug 23 00:02:30 2025 GMT Not After : Aug 30 00:02:30 2025 GMT Subject: CN=68a90517-cf7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:06:f6:7d:32:a9:14:13:90:48:11:46:13:86: 8d:f8:51:f6:f3:31:90:44:9a:46:10:6a:dc:1b:79: 89:96:d3:97:8b:70:de:05:7f:bb:0d:e8:65:03:cb: d9:26:67:ca:c1:58:9b:ba:37:5b:b5:4b:e2:21:46: bd:60:6f:2d:8b:ef:17:2c:e5:e5:f7:be:93:da:7a: 59:d7:3f:32:a3:23:a1:a6:b2:e0:93:6f:6a:eb:0e: 3b:06:ca:92:9b:0f:af:ed:d3:00:e9:e6:ea:75:15: 76:41:c9:94:38:70:a5:ff:32:ac:3a:58:f1:a6:e3: 79:16:75:05:8f:8c:ee:cc:35:7f:6b:70:60:7c:c6: a8:ac:9d:c3:e9:a8:ab:bd:e5:81:6e:bf:cf:a2:10: 83:5e:cb:7f:c7:0d:ca:85:7a:c7:41:cf:01:30:b1: be:1e:75:6b:ea:17:8e:47:ba:7f:9f:94:eb:1e:33: ca:48:06:58:72:7c:47:1f:b3:99:a7:ec:be:c2:f0: 54:30:c8:08:a3:ce:dc:72:c6:68:11:df:18:6d:a3: a7:81:f7:0b:3b:75:50:fb:f7:49:88:c4:44:78:e2: 63:af:bf:76:77:3d:2c:f5:d3:da:8d:a8:cd:94:dd: 4c:41:9b:e0:3b:60:c9:ea:8f:46:3e:8a:be:d4:d7: ae:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:B1:DA:4E:65:4F:52:F2:64:00:EE:80:D9:2A:F3:2D:F4:18:1F:5B X509v3 Authority Key Identifier: keyid:E5:99:31:55:C4:44:3A:2E:56:C0:DE:23:33:A4:4B:56:CA:D4:91:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ZkxVcREOi5WwN4jM6RLVsrUkZw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:d2:51:92:18:79:23:60:55:cd:5a:d1:22:c3:c2:eb:f3:a1: df:1a:36:28:9b:51:4b:7f:c8:25:c4:8c:ec:82:af:3f:90:2c: e1:f6:dc:97:fb:53:75:cf:1c:6b:ed:c3:3e:4b:4f:b7:c1:cd: 78:0f:91:99:37:08:dc:00:0a:12:dd:fb:36:8b:f2:aa:a5:c3: 4f:86:df:ec:0d:65:6a:60:d3:81:19:f7:8b:01:d1:40:1d:b4: a2:f9:48:11:76:50:47:70:6d:fd:03:f4:c7:05:5a:ad:83:0f: e0:8c:a3:80:5d:36:5b:79:03:d1:dc:b7:cd:4a:9d:cf:14:6d: fd:b1:46:43:f9:73:60:e9:73:8a:1f:73:9e:00:34:7f:45:79: 2f:63:4a:5b:11:df:87:c8:30:7c:05:8b:22:ce:d1:7d:30:35: 92:35:96:3f:be:49:c5:bd:10:e7:ba:4f:50:cb:39:1c:11:dd: a6:9d:21:1c:38:4c:90:5a:cd:97:e3:aa:89:ba:0a:3a:1a:1e: c6:3c:6f:40:8c:ac:8a:b5:47:90:ab:3f:d0:dc:83:3c:b6:d4: ea:b5:50:47:41:11:be:c2:21:37:58:fe:15:d5:2f:a9:8b:65: 9f:37:4d:9f:35:da:d3:b7:a7:c7:68:92:7d:2d:e6:0e:5e:c1: 23:9b:f3:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNBQkExMTAvBgNVBAUTKEU1OTkzMTU1QzQ0NDNBMkU1NkMwREUyMzMzQTQ0QjU2 Q0FENDkxOUMwHhcNMjUwODIzMDAwMjMwWhcNMjUwODMwMDAwMjMwWjAYMRYwFAYD VQQDEw02OGE5MDUxNy1jZjdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Ab2fTKpFBOQSBFGE4aN+FH28zGQRJpGEGrcG3mJltOXi3DeBX+7DehlA8vZ JmfKwVibujdbtUviIUa9YG8ti+8XLOXl976T2npZ1z8yoyOhprLgk29q6w47BsqS mw+v7dMA6ebqdRV2QcmUOHCl/zKsOljxpuN5FnUFj4zuzDV/a3BgfMaorJ3D6air veWBbr/PohCDXst/xw3KhXrHQc8BMLG+HnVr6heOR7p/n5TrHjPKSAZYcnxHH7OZ p+y+wvBUMMgIo87ccsZoEd8YbaOngfcLO3VQ+/dJiMREeOJjr792dz0s9dPajajN lN1MQZvgO2DJ6o9GPoq+1NeuiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMix2k5l T1LyZADugNkq8y30GB9bMB8GA1UdIwQYMBaAFOWZMVXERDouVsDeIzOkS1bK1JGc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0FCQS85ODVGMDkyMjM1 NEIxMUVDQjYyREJENDhDNEY5QUUwMi81Wmt4VmNSRU9pNVd3TjRqTTZSTFZzclVr WncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVaa3hWY1JFT2k1V3dONGpNNlJMVnNyVWtady5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0FCQS85ODVGMDkyMjM1NEIxMUVDQjYyREJENDhDNEY5QUUwMi81Wmt4VmNSRU9p NVd3TjRqTTZSTFZzclVrWncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCb0lGSGHkjYFXNWtEiw8Lr86HfGjYom1FLf8glxIzsgq8/kCzh9tyX +1N1zxxr7cM+S0+3wc14D5GZNwjcAAoS3fs2i/KqpcNPht/sDWVqYNOBGfeLAdFA HbSi+UgRdlBHcG39A/THBVqtgw/gjKOAXTZbeQPR3LfNSp3PFG39sUZD+XNg6XOK H3OeADR/RXkvY0pbEd+HyDB8BYsiztF9MDWSNZY/vknFvRDnuk9QyzkcEd2mnSEc OEyQWs2X46qJugo6Gh7GPG9AjKyKtUeQqz/Q3IM8ttTqtVBHQRG+wiE3WP4V1S+p i2WfN02fNdrTt6fHaJJ9LeYOXsEjm/Mt -----END CERTIFICATE-----Generated at Sat Aug 23 19:35:30 2025 by rpki-client