$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.mft File: e5n41rlBPOKiluscfX7-bUfQy6Q.mft (raw, json) Hash identifier: Z+gRAbAW51BkbxLZufcrNs/jWiCQw95+sU+PgU665NI= Subject key identifier: 5E:99:3E:C0:91:E9:1F:C3:77:C3:50:65:32:2F:5C:BC:0E:34:E3:8C Authority key identifier: 7B:99:F8:D6:B9:41:3C:E2:A2:96:EB:1C:7D:7E:FE:6D:47:D0:CB:A4 Certificate issuer: /CN=A91C4F1B/serialNumber=7B99F8D6B9413CE2A296EB1C7D7EFE6D47D0CBA4 Certificate serial: 08CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5n41rlBPOKiluscfX7-bUfQy6Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.mft Manifest number: 08C7 Signing time: Fri 22 Aug 2025 20:35:58 +0000 Manifest this update: Fri 22 Aug 2025 20:35:57 +0000 Manifest next update: Fri 29 Aug 2025 20:35:57 +0000 Files and hashes: 1: e5n41rlBPOKiluscfX7-bUfQy6Q.crl (hash: i0vozmboNyoBgE76YlCo4cPiaMO4eU+HofdPfm+iMPI=) 2: 059261A8BC5111EABE07AE32C4F9AE02.roa (hash: xfShO1VY02IlimsR5UFqO1U8WhpdFohjlqZyHRKoITk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.crl rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5n41rlBPOKiluscfX7-bUfQy6Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:35:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2255 (0x8cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4F1B, serialNumber=7B99F8D6B9413CE2A296EB1C7D7EFE6D47D0CBA4 Validity Not Before: Aug 22 20:35:57 2025 GMT Not After : Aug 29 20:35:57 2025 GMT Subject: CN=68a8d4ad-65b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:60:18:8d:81:7e:fd:3c:71:7b:e2:20:ff:94: 68:23:b6:ea:41:63:48:23:f1:e0:89:29:3b:aa:b2: e6:bf:74:00:16:84:a1:f7:5e:a9:64:1c:8e:aa:5a: 4a:c7:39:00:1e:20:80:c5:c6:f7:4d:14:72:31:80: 6f:25:1a:39:d1:85:40:04:dc:e3:fb:9f:2b:86:79: b1:33:ef:89:a1:91:c0:82:82:df:54:55:fa:21:82: a0:53:b5:e3:ef:0e:0c:92:1c:13:61:60:6b:12:67: be:d0:62:2a:18:c0:cf:34:2b:28:f7:ae:3f:1c:99: 7c:52:66:77:db:1e:1f:0b:c7:a8:d8:41:e0:c0:8f: d1:bb:3c:58:74:e9:4d:1f:d8:bf:d3:c8:00:2a:2e: 1e:4d:e9:73:93:97:82:86:d9:23:72:4a:bf:59:24: 52:1c:60:a7:01:74:ac:f5:10:46:05:7f:ea:1f:2f: 4f:18:dc:22:cb:2d:f4:aa:10:39:29:35:5b:43:2e: 02:d2:42:6c:0b:c4:ad:c9:13:89:fb:3b:99:d0:fd: a1:a8:1f:67:51:29:ed:9d:c1:c0:6f:51:0c:46:2a: 50:98:38:95:1c:87:a2:6b:29:8f:00:82:32:ea:99: 1b:08:73:33:9e:c4:f6:35:a7:20:47:98:c7:d7:6b: a5:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:99:3E:C0:91:E9:1F:C3:77:C3:50:65:32:2F:5C:BC:0E:34:E3:8C X509v3 Authority Key Identifier: keyid:7B:99:F8:D6:B9:41:3C:E2:A2:96:EB:1C:7D:7E:FE:6D:47:D0:CB:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5n41rlBPOKiluscfX7-bUfQy6Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:a8:08:99:0b:11:8c:9c:f0:d6:e8:5c:99:43:c5:cf:38:42: 3b:8d:dc:3e:b0:c2:a5:f7:45:ed:3e:1c:8f:f2:ff:f6:a9:b4: 1c:1f:b0:cd:8f:eb:8a:5f:da:1c:5e:fc:f9:27:64:d5:06:7f: 4f:ba:93:0c:4e:1a:6d:4f:37:ff:4f:4e:9b:b9:cc:ee:9c:9f: d1:40:40:c2:01:9c:c3:ac:5d:f0:ea:89:2c:6e:c5:b7:43:82: e7:3f:3e:0a:3a:3c:ee:d3:1f:f8:a8:7c:8a:64:38:1c:6d:d7: 2b:8a:a8:60:10:37:b8:ee:8e:37:4b:03:41:c2:9e:ca:df:de: a7:23:f5:50:c0:68:37:27:9d:52:ba:4f:30:0f:21:09:fe:f6: f3:98:a6:86:e5:89:37:ec:01:f6:04:88:73:ef:e3:75:38:aa: 1b:14:a2:7e:3a:23:d6:c0:65:dc:39:9d:87:b4:55:da:ba:0b: 39:64:19:f0:43:4c:d8:8c:c3:7b:b8:96:53:cd:30:f8:55:0e: bc:5b:ac:47:96:00:6a:14:9f:c2:f2:5f:94:be:de:e0:56:19: e3:75:b9:1b:71:e3:ab:24:a4:01:c8:44:10:8d:21:7d:f9:f8: 6d:e7:68:84:07:8b:8f:c1:5e:77:13:61:9e:8a:1b:2e:fb:7d: a3:94:e9:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRGMUIxMTAvBgNVBAUTKDdCOTlGOEQ2Qjk0MTNDRTJBMjk2RUIxQzdEN0VGRTZE NDdEMENCQTQwHhcNMjUwODIyMjAzNTU3WhcNMjUwODI5MjAzNTU3WjAYMRYwFAYD VQQDEw02OGE4ZDRhZC02NWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArGAYjYF+/Txxe+Ig/5RoI7bqQWNII/HgiSk7qrLmv3QAFoSh916pZByOqlpK xzkAHiCAxcb3TRRyMYBvJRo50YVABNzj+58rhnmxM++JoZHAgoLfVFX6IYKgU7Xj 7w4MkhwTYWBrEme+0GIqGMDPNCso964/HJl8UmZ32x4fC8eo2EHgwI/RuzxYdOlN H9i/08gAKi4eTelzk5eChtkjckq/WSRSHGCnAXSs9RBGBX/qHy9PGNwiyy30qhA5 KTVbQy4C0kJsC8StyROJ+zuZ0P2hqB9nUSntncHAb1EMRipQmDiVHIeiaymPAIIy 6pkbCHMznsT2NacgR5jH12ul/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF6ZPsCR 6R/Dd8NQZTIvXLwONOOMMB8GA1UdIwQYMBaAFHuZ+Na5QTziopbrHH1+/m1H0Muk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEYxQi8yM0YzMDU1MEJD NEYxMUVBQkE4Qzk2MkZDNEY5QUUwMi9lNW40MXJsQlBPS2lsdXNjZlg3LWJVZlF5 NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2U1bjQxcmxCUE9LaWx1c2NmWDctYlVmUXk2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEYxQi8yM0YzMDU1MEJDNEYxMUVBQkE4Qzk2MkZDNEY5QUUwMi9lNW40MXJsQlBP S2lsdXNjZlg3LWJVZlF5NlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDNqAiZCxGMnPDW6FyZQ8XPOEI7jdw+sMKl90XtPhyP8v/2qbQcH7DN j+uKX9ocXvz5J2TVBn9PupMMThptTzf/T06buczunJ/RQEDCAZzDrF3w6oksbsW3 Q4LnPz4KOjzu0x/4qHyKZDgcbdcriqhgEDe47o43SwNBwp7K396nI/VQwGg3J51S uk8wDyEJ/vbzmKaG5Yk37AH2BIhz7+N1OKobFKJ+OiPWwGXcOZ2HtFXaugs5ZBnw Q0zYjMN7uJZTzTD4VQ68W6xHlgBqFJ/C8l+Uvt7gVhnjdbkbceOrJKQByEQQjSF9 +fht52iEB4uPwV53E2Geihsu+32jlOlj -----END CERTIFICATE-----Generated at Sat Aug 23 14:32:53 2025 by rpki-client