$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.mft File: r5ACm-EBySLPz0vRRdevHcZA5eA.mft (raw, json) Hash identifier: XlY7AUducnsWMHUOSFX4V+88BWB3G/u/QOiKaxhqYgE= Subject key identifier: 3D:D0:01:81:C1:97:60:2D:C5:8B:45:F6:FB:06:1C:D0:48:56:35:3C Authority key identifier: AF:90:02:9B:E1:01:C9:22:CF:CF:4B:D1:45:D7:AF:1D:C6:40:E5:E0 Certificate issuer: /CN=A91D2646/serialNumber=AF90029BE101C922CFCF4BD145D7AF1DC640E5E0 Certificate serial: 0A19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r5ACm-EBySLPz0vRRdevHcZA5eA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.mft Manifest number: 0A10 Signing time: Fri 22 Aug 2025 19:57:24 +0000 Manifest this update: Fri 22 Aug 2025 19:57:24 +0000 Manifest next update: Fri 29 Aug 2025 19:57:24 +0000 Files and hashes: 1: r5ACm-EBySLPz0vRRdevHcZA5eA.crl (hash: R/zxCPRzI/H6f/9+XoVYNR3kioxklDeaN/KxT+CONzY=) 2: EE675FC27BED11EABD4A3A27C4F9AE02.roa (hash: AgjaL53ax01ov0J7/NtNC0271FAg3f2kxQ+XWNRqNo8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.crl rsync://rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r5ACm-EBySLPz0vRRdevHcZA5eA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2585 (0xa19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2646, serialNumber=AF90029BE101C922CFCF4BD145D7AF1DC640E5E0 Validity Not Before: Aug 22 19:57:24 2025 GMT Not After : Aug 29 19:57:24 2025 GMT Subject: CN=68a8cba4-aa08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:2f:e0:e4:e1:15:e0:36:eb:99:fc:e5:6c:a6: a9:0a:15:a6:f1:8b:6a:a3:6a:62:a9:e4:0e:8c:36: 71:12:04:59:de:97:48:1d:b5:81:38:0a:6c:97:c5: fa:c6:25:08:53:9a:e0:42:2c:0e:a9:aa:39:ac:dd: d5:f2:bc:24:a1:99:91:6b:42:b1:81:40:bd:d5:ed: b3:86:50:4b:40:ac:b4:49:60:5d:52:3e:a6:b6:2b: 15:3d:9e:6f:05:f0:87:c4:fe:54:1a:41:9d:d1:c4: 25:c3:9e:f0:bf:ab:ea:64:f1:3f:cf:bc:10:41:56: 69:e7:ab:6a:99:b3:34:4a:30:02:25:69:3f:e6:93: 2b:91:a6:62:bd:34:d6:6b:50:fc:47:65:02:24:ae: f4:a2:87:0a:f1:4c:1f:66:bb:b2:52:ab:3d:94:d3: 23:88:40:95:53:e8:b9:00:a2:5d:30:2f:08:9f:33: ff:27:48:2d:5a:da:dd:06:5d:83:dd:14:f4:e4:f4: b7:69:d5:df:e0:df:2d:8f:92:13:56:61:f5:31:dc: 47:d8:fc:5e:49:b0:2a:46:c2:75:d4:41:e5:e9:73: 8b:74:f4:75:fe:f4:6b:bc:90:ec:0c:99:cc:3b:11: af:4e:da:b6:7c:31:3f:f6:bb:04:50:9b:62:81:80: 6d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:D0:01:81:C1:97:60:2D:C5:8B:45:F6:FB:06:1C:D0:48:56:35:3C X509v3 Authority Key Identifier: keyid:AF:90:02:9B:E1:01:C9:22:CF:CF:4B:D1:45:D7:AF:1D:C6:40:E5:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r5ACm-EBySLPz0vRRdevHcZA5eA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:ce:86:16:5d:9f:05:59:43:f6:0e:e9:1f:e1:f5:3f:10:de: 83:a5:47:aa:58:40:72:55:1d:8f:44:1d:81:34:02:52:33:5d: 19:77:8c:cc:54:1e:fe:2f:60:4b:51:0d:8c:02:96:dd:b1:e3: 9e:8c:66:47:bb:72:52:f2:1f:13:58:19:83:ef:ac:d1:e6:5b: 38:61:15:37:64:25:da:f7:e7:ed:d4:16:ed:ef:1a:3c:00:2d: 38:da:e6:6d:88:b7:78:15:de:7d:16:a3:2d:fa:e8:f7:eb:47: 48:04:4c:76:7c:02:70:6f:7e:78:4d:00:e6:7c:59:3a:4c:ac: 0f:cf:70:8a:4a:94:3f:26:ac:f7:d5:24:d8:91:ed:0e:86:b7: 61:b3:be:cd:22:0c:cc:11:c0:fd:3a:d9:91:32:92:64:3c:1d: 2b:47:d3:6a:9e:a1:33:10:be:6b:e7:4e:67:cc:f3:b8:97:e9: f1:ea:5a:c1:18:37:7c:de:d2:39:21:33:e4:41:da:15:20:76: c4:4f:3e:98:8e:51:04:78:4c:8a:14:39:03:3a:1a:cb:fb:09: e9:de:91:53:d5:4d:96:e7:5b:ee:b2:cb:db:a1:75:9e:04:24: 6d:cf:af:cc:50:a4:20:ea:3c:86:40:b2:04:17:94:45:2b:b2: 74:b4:cf:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICChkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI2NDYxMTAvBgNVBAUTKEFGOTAwMjlCRTEwMUM5MjJDRkNGNEJEMTQ1RDdBRjFE QzY0MEU1RTAwHhcNMjUwODIyMTk1NzI0WhcNMjUwODI5MTk1NzI0WjAYMRYwFAYD VQQDEw02OGE4Y2JhNC1hYTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzi/g5OEV4DbrmfzlbKapChWm8Ytqo2piqeQOjDZxEgRZ3pdIHbWBOApsl8X6 xiUIU5rgQiwOqao5rN3V8rwkoZmRa0KxgUC91e2zhlBLQKy0SWBdUj6mtisVPZ5v BfCHxP5UGkGd0cQlw57wv6vqZPE/z7wQQVZp56tqmbM0SjACJWk/5pMrkaZivTTW a1D8R2UCJK70oocK8UwfZruyUqs9lNMjiECVU+i5AKJdMC8InzP/J0gtWtrdBl2D 3RT05PS3adXf4N8tj5ITVmH1MdxH2PxeSbAqRsJ11EHl6XOLdPR1/vRrvJDsDJnM OxGvTtq2fDE/9rsEUJtigYBtdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD3QAYHB l2AtxYtF9vsGHNBIVjU8MB8GA1UdIwQYMBaAFK+QApvhAckiz89L0UXXrx3GQOXg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjY0Ni9EMjAzN0QxMjdC RUMxMUVBQTlBNkM3MjVDNEY5QUUwMi9yNUFDbS1FQnlTTFB6MHZSUmRldkhjWkE1 ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I1QUNtLUVCeVNMUHowdlJSZGV2SGNaQTVlQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjY0Ni9EMjAzN0QxMjdCRUMxMUVBQTlBNkM3MjVDNEY5QUUwMi9yNUFDbS1FQnlT TFB6MHZSUmRldkhjWkE1ZUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXzoYWXZ8FWUP2Dukf4fU/EN6DpUeqWEByVR2PRB2BNAJSM10Zd4zM VB7+L2BLUQ2MApbdseOejGZHu3JS8h8TWBmD76zR5ls4YRU3ZCXa9+ft1Bbt7xo8 AC042uZtiLd4Fd59FqMt+uj360dIBEx2fAJwb354TQDmfFk6TKwPz3CKSpQ/Jqz3 1STYke0Ohrdhs77NIgzMEcD9OtmRMpJkPB0rR9NqnqEzEL5r505nzPO4l+nx6lrB GDd83tI5ITPkQdoVIHbETz6YjlEEeEyKFDkDOhrL+wnp3pFT1U2W51vussvboXWe BCRtz6/MUKQg6jyGQLIEF5RFK7J0tM8w -----END CERTIFICATE-----Generated at Sat Aug 23 16:32:45 2025 by rpki-client