$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.mft File: 5aTU-VYLW1xcX-TQYbS4gcjSI1I.mft (raw, json) Hash identifier: cMD8z4Sy4uoIlZb0GAXRq5SNIGKIfO6kHHBmqnoPLmM= Subject key identifier: 4E:8B:DE:5A:CF:44:6C:1D:A5:D2:71:0E:A0:E5:E4:92:A4:89:87:6A Authority key identifier: E5:A4:D4:F9:56:0B:5B:5C:5C:5F:E4:D0:61:B4:B8:81:C8:D2:23:52 Certificate issuer: /CN=A91C8790/serialNumber=E5A4D4F9560B5B5C5C5FE4D061B4B881C8D22352 Certificate serial: 04DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5aTU-VYLW1xcX-TQYbS4gcjSI1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.mft Manifest number: 04D7 Signing time: Sat 23 Aug 2025 00:00:13 +0000 Manifest this update: Sat 23 Aug 2025 00:00:12 +0000 Manifest next update: Sat 30 Aug 2025 00:00:12 +0000 Files and hashes: 1: 5aTU-VYLW1xcX-TQYbS4gcjSI1I.crl (hash: cm6cWyDghQjNyZnTwNzqIBVeDjd+RJu5E3HfDkqorQo=) 2: BA7E6B1A30B911EC974C3830C4F9AE02.roa (hash: DlfXyvIdL0s+0tBp2hXjHGEv5V90Epcx4LrbGdX7dDk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.crl rsync://rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5aTU-VYLW1xcX-TQYbS4gcjSI1I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1244 (0x4dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8790, serialNumber=E5A4D4F9560B5B5C5C5FE4D061B4B881C8D22352 Validity Not Before: Aug 23 00:00:12 2025 GMT Not After : Aug 30 00:00:12 2025 GMT Subject: CN=68a9048d-327d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:07:d6:6d:95:07:f2:40:50:c4:1a:e6:49:c2: c6:98:6a:1f:80:a1:f6:61:69:87:cd:43:56:17:b5: 4e:78:95:46:74:5e:4c:42:4f:66:b7:8d:bf:f8:42: aa:d4:b6:6b:93:29:09:e3:c2:b7:b6:51:40:11:f5: ab:83:e2:ff:9a:de:ce:cc:92:e6:cc:86:c8:de:eb: 8a:71:45:0c:56:89:3c:50:59:60:9e:8d:dd:8b:e4: 0e:93:57:06:85:13:dc:95:38:ad:92:5f:21:f3:3b: 5a:b5:f6:f2:2a:84:fb:23:fa:01:ef:2b:b6:04:1d: ff:7c:14:1d:f6:03:6f:0b:86:dc:d4:34:3a:f6:c2: 38:c2:75:57:51:cb:dc:c0:62:be:9c:97:e9:70:ad: 82:98:ea:5b:96:6e:ee:fc:42:f3:85:64:3c:08:28: 6a:76:a4:08:bb:da:cf:ab:3a:62:ec:0e:e5:bc:4f: 27:57:2b:90:38:11:48:12:92:67:15:d1:21:3b:f1: 21:c5:72:90:ec:07:43:5d:56:f8:61:7f:50:94:d9: 88:9c:15:99:11:41:49:70:21:58:43:07:04:96:96: 52:5e:3b:12:97:b8:67:15:9d:da:f9:e5:b9:2d:dd: 1a:c3:a2:11:05:f2:2a:b4:ef:ed:37:96:d3:40:69: fa:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:8B:DE:5A:CF:44:6C:1D:A5:D2:71:0E:A0:E5:E4:92:A4:89:87:6A X509v3 Authority Key Identifier: keyid:E5:A4:D4:F9:56:0B:5B:5C:5C:5F:E4:D0:61:B4:B8:81:C8:D2:23:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5aTU-VYLW1xcX-TQYbS4gcjSI1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:1f:81:0f:63:d2:78:ed:4a:52:a5:61:53:51:fb:5f:96:b1: a2:2e:4d:a9:b3:b8:69:90:31:33:36:24:f2:3d:c8:ce:a7:99: 88:39:82:45:6c:60:c8:e5:8f:90:0d:4a:cb:78:2e:a9:3d:7f: 0a:fe:b8:ee:4b:56:02:3a:ba:5d:9b:f5:cd:3a:24:2a:a8:51: ab:94:64:49:c3:bc:f3:de:a4:af:19:bf:59:a8:12:6e:6c:1e: d4:41:b8:8b:d1:f1:8c:ed:08:1c:62:67:0f:cb:bf:81:2a:37: 65:86:5d:48:79:e8:3b:ed:77:d8:08:2a:25:1e:a4:70:74:35: d7:80:f4:54:22:a1:c3:7d:19:10:dd:8a:62:e3:c7:c1:74:54: 2a:97:15:52:77:2a:d2:e4:a0:f1:31:2f:8e:bb:57:aa:5b:d5: 80:7d:9f:48:93:82:e2:ba:6e:c4:23:a9:88:19:83:31:c5:be: 62:b8:aa:0a:9e:92:1e:2c:2f:2f:b8:15:5b:df:4f:28:52:6c: 15:fc:5a:0c:ad:a0:3f:9e:3a:a6:b5:ea:76:27:ec:88:fe:4c: b2:02:76:5a:83:8a:51:91:f8:a9:11:d3:a6:25:67:a4:fe:4e: 08:bb:1c:15:aa:59:fe:26:6a:1d:1e:e0:25:95:62:39:65:4a: 5c:63:15:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzg3OTAxMTAvBgNVBAUTKEU1QTRENEY5NTYwQjVCNUM1QzVGRTREMDYxQjRCODgx QzhEMjIzNTIwHhcNMjUwODIzMDAwMDEyWhcNMjUwODMwMDAwMDEyWjAYMRYwFAYD VQQDEw02OGE5MDQ4ZC0zMjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAowfWbZUH8kBQxBrmScLGmGofgKH2YWmHzUNWF7VOeJVGdF5MQk9mt42/+EKq 1LZrkykJ48K3tlFAEfWrg+L/mt7OzJLmzIbI3uuKcUUMVok8UFlgno3di+QOk1cG hRPclTitkl8h8ztatfbyKoT7I/oB7yu2BB3/fBQd9gNvC4bc1DQ69sI4wnVXUcvc wGK+nJfpcK2CmOpblm7u/ELzhWQ8CChqdqQIu9rPqzpi7A7lvE8nVyuQOBFIEpJn FdEhO/EhxXKQ7AdDXVb4YX9QlNmInBWZEUFJcCFYQwcElpZSXjsSl7hnFZ3a+eW5 Ld0aw6IRBfIqtO/tN5bTQGn6CwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE6L3lrP RGwdpdJxDqDl5JKkiYdqMB8GA1UdIwQYMBaAFOWk1PlWC1tcXF/k0GG0uIHI0iNS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODc5MC8zM0ZFMzYyNjMw QjcxMUVDOUIwMjk0MkRDNEY5QUUwMi81YVRVLVZZTFcxeGNYLVRRWWJTNGdjalNJ MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVhVFUtVllMVzF4Y1gtVFFZYlM0Z2NqU0kxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODc5MC8zM0ZFMzYyNjMwQjcxMUVDOUIwMjk0MkRDNEY5QUUwMi81YVRVLVZZTFcx eGNYLVRRWWJTNGdjalNJMUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2H4EPY9J47UpSpWFTUftflrGiLk2ps7hpkDEzNiTyPcjOp5mIOYJF bGDI5Y+QDUrLeC6pPX8K/rjuS1YCOrpdm/XNOiQqqFGrlGRJw7zz3qSvGb9ZqBJu bB7UQbiL0fGM7QgcYmcPy7+BKjdlhl1Ieeg77XfYCColHqRwdDXXgPRUIqHDfRkQ 3Ypi48fBdFQqlxVSdyrS5KDxMS+Ou1eqW9WAfZ9Ik4Lium7EI6mIGYMxxb5iuKoK npIeLC8vuBVb308oUmwV/FoMraA/njqmtep2J+yI/kyyAnZag4pRkfipEdOmJWek /k4IuxwVqln+JmodHuAllWI5ZUpcYxV0 -----END CERTIFICATE-----Generated at Sun Aug 24 05:17:12 2025 by rpki-client