$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/c5C6Rl4CIu4xQH5VCebenj-pENs.mft File: c5C6Rl4CIu4xQH5VCebenj-pENs.mft (raw, json) Hash identifier: WBN3zewqq8aEheohBa+rjMHj2eOVXmqCg4PZEVaPZ30= Subject key identifier: CB:48:11:8F:F9:40:F8:60:6F:EF:8A:33:0A:1B:B4:A9:4A:C4:09:4D Authority key identifier: 73:90:BA:46:5E:02:22:EE:31:40:7E:55:09:E6:DE:9E:3F:A9:10:DB Certificate issuer: /CN=A91CA6E6/serialNumber=7390BA465E0222EE31407E5509E6DE9E3FA910DB Certificate serial: F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5C6Rl4CIu4xQH5VCebenj-pENs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/c5C6Rl4CIu4xQH5VCebenj-pENs.mft Manifest number: 029C Signing time: Sat 23 Aug 2025 03:18:10 +0000 Manifest this update: Sat 23 Aug 2025 03:18:10 +0000 Manifest next update: Sat 30 Aug 2025 03:18:10 +0000 Files and hashes: 1: c5C6Rl4CIu4xQH5VCebenj-pENs.crl (hash: JhO3vOvS1qWcViBU+82h7wVapUrx11870jvdkRmtwuo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/c5C6Rl4CIu4xQH5VCebenj-pENs.crl rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/c5C6Rl4CIu4xQH5VCebenj-pENs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5C6Rl4CIu4xQH5VCebenj-pENs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:18:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 241 (0xf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA6E6, serialNumber=7390BA465E0222EE31407E5509E6DE9E3FA910DB Validity Not Before: Aug 23 03:18:10 2025 GMT Not After : Aug 30 03:18:10 2025 GMT Subject: CN=68a932f2-7adf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a9:18:4a:91:84:92:f8:d4:03:ea:93:11:02: d6:72:9a:8d:af:39:12:5e:ab:f7:c8:a1:f2:6f:84: 56:ee:11:e9:87:12:f8:57:b7:7e:7d:f2:89:80:95: 1a:96:21:ab:61:d1:54:96:76:2f:a2:f5:d8:6b:ef: 49:45:4e:af:35:79:4a:55:52:3c:de:b9:b3:36:bd: 6f:4d:69:13:3f:16:4e:71:3a:df:89:5c:1b:27:59: 05:cc:67:ca:fd:91:49:1b:f4:90:91:d7:e9:33:6c: 5d:9a:b1:98:a8:72:0a:4f:dd:2e:08:aa:29:47:c9: 3c:04:22:c6:11:b2:9a:76:8c:fe:2f:e5:7f:0c:51: a9:53:ed:0c:e4:da:b9:06:e6:f7:57:97:0d:05:82: 3d:eb:19:a8:99:75:2e:fd:11:e9:19:7f:a9:c6:02: 93:85:82:b3:04:88:dd:6a:44:ba:ae:8f:cc:23:e1: 50:1a:c9:b3:2a:7e:ae:06:b5:cf:58:23:92:02:6e: 85:ff:35:32:30:41:e2:f2:7a:1c:12:ca:dc:f1:1b: 70:07:dd:cb:69:cf:64:08:73:54:e4:99:6d:04:5e: 2c:ad:63:7c:c7:72:fa:35:fa:50:06:38:79:2e:be: a5:c3:dd:b9:6d:7e:91:9b:6b:9f:5b:27:ee:ab:b3: f5:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:48:11:8F:F9:40:F8:60:6F:EF:8A:33:0A:1B:B4:A9:4A:C4:09:4D X509v3 Authority Key Identifier: keyid:73:90:BA:46:5E:02:22:EE:31:40:7E:55:09:E6:DE:9E:3F:A9:10:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/c5C6Rl4CIu4xQH5VCebenj-pENs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5C6Rl4CIu4xQH5VCebenj-pENs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/c5C6Rl4CIu4xQH5VCebenj-pENs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:ee:fd:3f:03:2d:5f:14:fe:26:12:14:f9:d2:00:af:21:9a: 1e:1b:77:a2:de:70:b3:03:da:58:42:33:25:8c:e1:ab:94:77: 85:c9:e0:9a:50:43:af:7f:33:1f:de:63:da:75:bf:8b:28:5a: 78:b7:5e:b6:dc:8f:d7:90:bf:d8:77:94:a2:b5:06:6a:30:09: e2:4c:99:49:17:63:65:4f:63:5f:44:9e:15:60:be:04:6c:2e: b4:94:32:fa:e0:9b:8c:b2:ef:89:ae:09:36:eb:19:dd:a1:f2: e6:b3:5e:f7:fd:34:51:6c:f8:17:80:d6:8a:e9:6c:6e:24:fd: 8a:15:77:9f:d7:02:0f:16:33:6d:55:8e:cb:8e:fc:fb:98:e1: 6a:44:91:29:78:b4:25:53:29:cc:55:6c:58:db:70:7b:6a:90: 40:02:1b:4e:ed:c6:00:02:56:f3:95:21:02:4a:89:b3:9d:9c: ca:ea:42:ea:4c:8c:1e:0f:9a:1e:85:97:8b:33:78:35:97:30: 55:6b:b8:df:75:04:41:19:ab:b1:8d:b4:d2:bf:53:14:69:af: 3e:88:8a:89:25:34:b7:5b:d4:20:cf:23:25:93:85:3d:fe:ed: e7:da:bd:55:67:83:d7:48:89:b5:f9:4d:eb:ed:18:a0:48:33: f1:6c:8e:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0E2RTYxMTAvBgNVBAUTKDczOTBCQTQ2NUUwMjIyRUUzMTQwN0U1NTA5RTZERTlF M0ZBOTEwREIwHhcNMjUwODIzMDMxODEwWhcNMjUwODMwMDMxODEwWjAYMRYwFAYD VQQDEw02OGE5MzJmMi03YWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmKkYSpGEkvjUA+qTEQLWcpqNrzkSXqv3yKHyb4RW7hHphxL4V7d+ffKJgJUa liGrYdFUlnYvovXYa+9JRU6vNXlKVVI83rmzNr1vTWkTPxZOcTrfiVwbJ1kFzGfK /ZFJG/SQkdfpM2xdmrGYqHIKT90uCKopR8k8BCLGEbKadoz+L+V/DFGpU+0M5Nq5 Bub3V5cNBYI96xmomXUu/RHpGX+pxgKThYKzBIjdakS6ro/MI+FQGsmzKn6uBrXP WCOSAm6F/zUyMEHi8nocEsrc8RtwB93Lac9kCHNU5JltBF4srWN8x3L6NfpQBjh5 Lr6lw925bX6Rm2ufWyfuq7P1+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMtIEY/5 QPhgb++KMwobtKlKxAlNMB8GA1UdIwQYMBaAFHOQukZeAiLuMUB+VQnm3p4/qRDb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTZFNi8zQjgzQUZFMEYw RDAxMUVEODA1MDc2NkFDNEY5QUUwMi9jNUM2Umw0Q0l1NHhRSDVWQ2ViZW5qLXBF TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M1QzZSbDRDSXU0eFFINVZDZWJlbmotcEVOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTZFNi8zQjgzQUZFMEYwRDAxMUVEODA1MDc2NkFDNEY5QUUwMi9jNUM2Umw0Q0l1 NHhRSDVWQ2ViZW5qLXBFTnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAD7v0/Ay1fFP4mEhT50gCvIZoeG3ei3nCzA9pYQjMljOGrlHeFyeCa UEOvfzMf3mPadb+LKFp4t1623I/XkL/Yd5SitQZqMAniTJlJF2NlT2NfRJ4VYL4E bC60lDL64JuMsu+Jrgk26xndofLms173/TRRbPgXgNaK6WxuJP2KFXef1wIPFjNt VY7Ljvz7mOFqRJEpeLQlUynMVWxY23B7apBAAhtO7cYAAlbzlSECSomznZzK6kLq TIweD5oehZeLM3g1lzBVa7jfdQRBGauxjbTSv1MUaa8+iIqJJTS3W9QgzyMlk4U9 /u3n2r1VZ4PXSIm1+U3r7RigSDPxbI51 -----END CERTIFICATE-----Generated at Sat Aug 23 22:37:21 2025 by rpki-client