$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6BB9/6BDEAA7E390C11EBB2181D63C4F9AE02/x5ESx8WsNlgyIdH5RnUZbCE26r4.mft File: x5ESx8WsNlgyIdH5RnUZbCE26r4.mft (raw, json) Hash identifier: JBYy8n+lej2NJJFdhGEcs6JMgBEqF96sw1KUIXjm2Ww= Subject key identifier: 2B:BE:EB:C1:D3:68:DD:99:28:18:B8:BC:26:92:86:EE:5C:67:07:D7 Authority key identifier: C7:91:12:C7:C5:AC:36:58:32:21:D1:F9:46:75:19:6C:21:36:EA:BE Certificate issuer: /CN=A91C6BB9/serialNumber=C79112C7C5AC36583221D1F94675196C2136EABE Certificate serial: 0762 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5ESx8WsNlgyIdH5RnUZbCE26r4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6BB9/6BDEAA7E390C11EBB2181D63C4F9AE02/x5ESx8WsNlgyIdH5RnUZbCE26r4.mft Manifest number: 0756 Signing time: Fri 22 Aug 2025 21:51:36 +0000 Manifest this update: Fri 22 Aug 2025 21:51:35 +0000 Manifest next update: Fri 29 Aug 2025 21:51:35 +0000 Files and hashes: 1: x5ESx8WsNlgyIdH5RnUZbCE26r4.crl (hash: Aw6BHGNZvF64NjCuoFyQRVYVLbiTOxYnE+5Xm2dnM8k=) 2: 2E7B4F0CD45811EF908AFE44C4F9AE02.roa (hash: 0gWp5PyGmTihYDNzToQweag+/yXIgKytaRcZImh3PUI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6BB9/6BDEAA7E390C11EBB2181D63C4F9AE02/x5ESx8WsNlgyIdH5RnUZbCE26r4.crl rsync://rpki.apnic.net/member_repository/A91C6BB9/6BDEAA7E390C11EBB2181D63C4F9AE02/x5ESx8WsNlgyIdH5RnUZbCE26r4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5ESx8WsNlgyIdH5RnUZbCE26r4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:51:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1890 (0x762) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6BB9, serialNumber=C79112C7C5AC36583221D1F94675196C2136EABE Validity Not Before: Aug 22 21:51:35 2025 GMT Not After : Aug 29 21:51:35 2025 GMT Subject: CN=68a8e668-36e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:90:0a:73:2e:55:87:3f:33:18:eb:d2:31:4e: f7:e5:5d:a6:3e:ce:6a:64:ae:a3:25:b6:41:99:1e: eb:09:f8:0f:97:cc:57:1e:92:c0:1c:c9:4a:6d:2a: 00:52:26:01:c0:a5:d1:a2:fe:75:4b:19:43:eb:f8: f5:7b:cf:57:0a:7d:34:07:d0:b9:a6:39:8c:84:27: ce:95:9c:7d:5f:c0:d8:24:b5:30:ba:ba:91:02:f9: 6a:50:a1:1a:ae:a8:57:37:ab:61:2b:0a:c7:9d:ad: 67:87:34:f8:c0:8c:6b:53:37:65:0a:e8:20:f3:eb: 1f:8f:f1:c6:7c:0d:2c:c8:a2:7a:c7:f2:80:e2:76: 9c:bc:cd:ac:81:1c:40:95:d8:77:29:a3:c8:05:e9: c3:34:51:62:75:90:3e:1e:b8:e6:1c:d4:f9:52:3d: 44:8a:76:61:c8:fd:d2:99:d0:57:15:fc:b1:bd:25: e0:8e:7e:cc:98:18:c1:b8:e5:ce:99:ad:f9:7f:ae: c8:8a:07:e6:b4:49:aa:fb:73:0b:d1:a3:53:9e:80: ed:f4:16:67:58:1d:7b:81:d5:98:4d:65:8c:98:60: 9f:50:d1:89:b1:49:92:f4:b4:87:97:0e:35:fe:33: c3:b1:8d:b6:ca:3c:33:42:2b:c4:c8:02:a9:4d:85: 3f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:BE:EB:C1:D3:68:DD:99:28:18:B8:BC:26:92:86:EE:5C:67:07:D7 X509v3 Authority Key Identifier: keyid:C7:91:12:C7:C5:AC:36:58:32:21:D1:F9:46:75:19:6C:21:36:EA:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6BB9/6BDEAA7E390C11EBB2181D63C4F9AE02/x5ESx8WsNlgyIdH5RnUZbCE26r4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5ESx8WsNlgyIdH5RnUZbCE26r4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6BB9/6BDEAA7E390C11EBB2181D63C4F9AE02/x5ESx8WsNlgyIdH5RnUZbCE26r4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:35:05:35:d6:7b:06:e4:f9:2a:6c:32:06:43:eb:09:a9:6c: 39:4e:eb:b4:68:ee:c8:8d:b0:ec:af:c3:68:ac:a0:c9:f7:eb: ac:ef:b9:13:f5:6a:e1:71:21:6c:da:15:52:fe:d3:58:d5:57: 2c:78:e7:c9:62:f4:2a:04:ac:a5:0f:3e:11:79:97:b5:d3:af: ff:a9:02:85:95:9a:6d:5c:78:e7:3b:77:39:25:52:4a:92:3d: 4c:5b:31:7e:64:7f:23:80:08:a5:27:34:00:8f:23:09:7a:03: c7:7b:41:73:05:d1:52:e2:49:67:de:2d:93:9d:d8:11:d8:22: 43:11:31:01:eb:0b:89:64:16:95:4b:36:4f:22:36:71:64:c9: 06:52:f8:cf:9d:ae:21:7a:d4:c7:99:22:79:fb:c2:a3:4e:df: 06:cc:a5:64:37:cf:02:ae:de:66:61:10:61:93:25:52:5f:b4: 8d:d9:76:e6:25:31:9d:df:4a:b9:09:1e:2d:9a:5d:62:dc:82: 3a:a8:44:c1:68:fa:59:79:81:34:d3:16:8a:10:fa:25:5e:dc: c2:10:96:86:ea:f4:32:f6:5b:80:bf:22:57:2d:1d:a3:5f:08: 9b:55:e2:f3:67:f7:ae:58:b7:d2:08:5d:ed:17:66:26:b9:68: f5:59:4c:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZCQjkxMTAvBgNVBAUTKEM3OTExMkM3QzVBQzM2NTgzMjIxRDFGOTQ2NzUxOTZD MjEzNkVBQkUwHhcNMjUwODIyMjE1MTM1WhcNMjUwODI5MjE1MTM1WjAYMRYwFAYD VQQDEw02OGE4ZTY2OC0zNmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0JAKcy5Vhz8zGOvSMU735V2mPs5qZK6jJbZBmR7rCfgPl8xXHpLAHMlKbSoA UiYBwKXRov51SxlD6/j1e89XCn00B9C5pjmMhCfOlZx9X8DYJLUwurqRAvlqUKEa rqhXN6thKwrHna1nhzT4wIxrUzdlCugg8+sfj/HGfA0syKJ6x/KA4nacvM2sgRxA ldh3KaPIBenDNFFidZA+HrjmHNT5Uj1EinZhyP3SmdBXFfyxvSXgjn7MmBjBuOXO ma35f67IigfmtEmq+3ML0aNTnoDt9BZnWB17gdWYTWWMmGCfUNGJsUmS9LSHlw41 /jPDsY22yjwzQivEyAKpTYU/qwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCu+68HT aN2ZKBi4vCaShu5cZwfXMB8GA1UdIwQYMBaAFMeREsfFrDZYMiHR+UZ1GWwhNuq+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkJCOS82QkRFQUE3RTM5 MEMxMUVCQjIxODFENjNDNEY5QUUwMi94NUVTeDhXc05sZ3lJZEg1Um5VWmJDRTI2 cjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g1RVN4OFdzTmxneUlkSDVSblVaYkNFMjZyNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkJCOS82QkRFQUE3RTM5MEMxMUVCQjIxODFENjNDNEY5QUUwMi94NUVTeDhXc05s Z3lJZEg1Um5VWmJDRTI2cjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFNQU11nsG5PkqbDIGQ+sJqWw5Tuu0aO7IjbDsr8NorKDJ9+us77kT 9WrhcSFs2hVS/tNY1VcseOfJYvQqBKylDz4ReZe106//qQKFlZptXHjnO3c5JVJK kj1MWzF+ZH8jgAilJzQAjyMJegPHe0FzBdFS4kln3i2TndgR2CJDETEB6wuJZBaV SzZPIjZxZMkGUvjPna4hetTHmSJ5+8KjTt8GzKVkN88Crt5mYRBhkyVSX7SN2Xbm JTGd30q5CR4tml1i3II6qETBaPpZeYE00xaKEPolXtzCEJaG6vQy9luAvyJXLR2j XwibVeLzZ/euWLfSCF3tF2YmuWj1WUwd -----END CERTIFICATE-----Generated at Sat Aug 23 19:39:24 2025 by rpki-client