$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/5vZdIhtZX2uhPrMU3uM4yiQeJyA.mft File: 5vZdIhtZX2uhPrMU3uM4yiQeJyA.mft (raw, json) Hash identifier: dTbJkxSmxqY6ou/5aW5cQFXRHu6iuSXzjwA5sFeI2l0= Subject key identifier: 14:DD:EA:9F:8E:54:DA:71:08:CE:2F:51:9C:BA:F2:9E:EA:CB:E6:35 Authority key identifier: E6:F6:5D:22:1B:59:5F:6B:A1:3E:B3:14:DE:E3:38:CA:24:1E:27:20 Certificate issuer: /CN=A91D2B62/serialNumber=E6F65D221B595F6BA13EB314DEE338CA241E2720 Certificate serial: C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vZdIhtZX2uhPrMU3uM4yiQeJyA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/5vZdIhtZX2uhPrMU3uM4yiQeJyA.mft Manifest number: C1 Signing time: Sat 23 Aug 2025 05:58:48 +0000 Manifest this update: Sat 23 Aug 2025 05:58:48 +0000 Manifest next update: Sat 30 Aug 2025 05:58:48 +0000 Files and hashes: 1: 5vZdIhtZX2uhPrMU3uM4yiQeJyA.crl (hash: L2nX/VgodvUgcvNirAegsJVn4bGJZAq8cM4n9omFoHE=) 2: F47CB05C5AE011EFB4CD7428C4F9AE02.roa (hash: dP/ms8awhu5P0L5X1kq3UaHwPpJfEdsfRvw8IFgrpFk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/5vZdIhtZX2uhPrMU3uM4yiQeJyA.crl rsync://rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/5vZdIhtZX2uhPrMU3uM4yiQeJyA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vZdIhtZX2uhPrMU3uM4yiQeJyA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:58:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 195 (0xc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2B62, serialNumber=E6F65D221B595F6BA13EB314DEE338CA241E2720 Validity Not Before: Aug 23 05:58:48 2025 GMT Not After : Aug 30 05:58:48 2025 GMT Subject: CN=68a95898-3e78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:cd:01:3b:10:85:1b:99:9f:ce:2b:82:c9:5d: de:ce:fd:6a:0b:20:6b:33:d7:9f:61:73:66:69:d2: 42:d4:f4:92:1c:7f:be:11:ca:e6:bf:af:ea:fc:0a: 52:1e:5c:fe:b8:c3:6f:65:8d:b3:94:43:97:e7:62: c2:2e:d8:51:2d:fd:64:c4:4a:44:a0:ea:2a:d8:1b: 61:d8:55:3a:e9:6b:9c:11:3e:f1:3c:22:64:75:4a: 80:3e:6d:c2:d5:7d:b5:0b:61:c9:8b:63:5c:c4:1a: ff:64:29:d8:58:39:ff:ed:a4:8d:05:67:27:06:af: 93:4f:09:a5:f2:94:3c:99:1e:5d:d3:48:e0:78:c0: 10:e4:90:97:95:26:cf:b6:f8:db:6a:2d:71:c9:ec: 6f:ee:a5:a0:95:7c:eb:1c:2b:4d:74:3a:7f:70:8d: 62:fe:bb:9e:b0:0a:0c:72:a9:98:39:e8:47:f6:34: 8a:06:79:e6:81:5f:24:d6:8b:6b:c6:b6:34:2e:93: 6c:5d:0c:53:4f:78:97:2b:cf:3f:9b:d1:ae:79:a9: 87:b1:c8:a2:77:41:45:a5:5c:38:8e:aa:81:2d:37: be:35:aa:99:67:6d:e7:78:6d:05:ae:fc:8b:24:7b: 84:6d:6c:fb:aa:8c:d0:55:ad:c0:4b:7c:9c:b9:8e: 93:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:DD:EA:9F:8E:54:DA:71:08:CE:2F:51:9C:BA:F2:9E:EA:CB:E6:35 X509v3 Authority Key Identifier: keyid:E6:F6:5D:22:1B:59:5F:6B:A1:3E:B3:14:DE:E3:38:CA:24:1E:27:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/5vZdIhtZX2uhPrMU3uM4yiQeJyA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vZdIhtZX2uhPrMU3uM4yiQeJyA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/5vZdIhtZX2uhPrMU3uM4yiQeJyA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:20:14:c5:2f:c7:97:bc:ac:53:fc:f2:09:10:54:5f:a4:e5: 34:e2:3d:be:53:02:ba:b6:13:d4:b5:a6:22:14:f1:ab:93:56: 64:a0:8e:91:bf:c8:b4:b0:9b:dc:9e:82:b8:8d:ba:05:c8:e6: 58:7c:b9:94:c7:77:3d:da:67:ef:d9:fa:f7:e5:b8:8b:6b:49: 98:78:c6:90:e0:c4:1b:d0:16:33:b0:a9:90:e6:34:00:cb:d0: 43:6e:30:4e:90:e4:07:06:ed:79:09:56:5f:9f:94:8b:85:5e: 15:ee:91:ff:70:53:0c:56:f5:aa:bc:54:71:0d:40:06:48:6f: 08:4f:67:e1:3b:a1:6e:9a:96:36:3e:9c:e0:f5:3d:3f:fd:29: 6c:95:03:94:97:67:ef:d1:86:74:7f:33:b8:dc:fc:9a:54:e0: 17:fa:b2:72:69:e1:dd:88:48:aa:af:a2:ac:21:45:57:61:66: 53:f8:e7:62:4f:5c:40:2e:1e:e9:f9:79:76:2e:e6:a2:b7:a1: 10:f1:ca:db:30:e9:9e:0f:dc:47:5c:5e:a4:8c:ef:c8:66:f7: 4d:ee:86:84:d9:3a:13:68:a0:25:08:42:31:38:10:35:6c:15: c0:b2:0c:f0:7d:43:00:60:41:61:3b:a1:b5:7b:8a:df:3f:ba: 56:0f:bb:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDJCNjIxMTAvBgNVBAUTKEU2RjY1RDIyMUI1OTVGNkJBMTNFQjMxNERFRTMzOENB MjQxRTI3MjAwHhcNMjUwODIzMDU1ODQ4WhcNMjUwODMwMDU1ODQ4WjAYMRYwFAYD VQQDEw02OGE5NTg5OC0zZTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqs0BOxCFG5mfziuCyV3ezv1qCyBrM9efYXNmadJC1PSSHH++Ecrmv6/q/ApS Hlz+uMNvZY2zlEOX52LCLthRLf1kxEpEoOoq2Bth2FU66WucET7xPCJkdUqAPm3C 1X21C2HJi2NcxBr/ZCnYWDn/7aSNBWcnBq+TTwml8pQ8mR5d00jgeMAQ5JCXlSbP tvjbai1xyexv7qWglXzrHCtNdDp/cI1i/ruesAoMcqmYOehH9jSKBnnmgV8k1otr xrY0LpNsXQxTT3iXK88/m9GueamHsciid0FFpVw4jqqBLTe+NaqZZ23neG0FrvyL JHuEbWz7qozQVa3AS3ycuY6ThwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBTd6p+O VNpxCM4vUZy68p7qy+Y1MB8GA1UdIwQYMBaAFOb2XSIbWV9roT6zFN7jOMokHicg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkI2Mi9CRDI5QjgxNjVB RTAxMUVGODY1MUI2MUJDNEY5QUUwMi81dlpkSWh0WlgydWhQck1VM3VNNHlpUWVK eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV2WmRJaHRaWDJ1aFByTVUzdU00eWlRZUp5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MkI2Mi9CRDI5QjgxNjVBRTAxMUVGODY1MUI2MUJDNEY5QUUwMi81dlpkSWh0Wlgy dWhQck1VM3VNNHlpUWVKeUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDGIBTFL8eXvKxT/PIJEFRfpOU04j2+UwK6thPUtaYiFPGrk1ZkoI6R v8i0sJvcnoK4jboFyOZYfLmUx3c92mfv2fr35biLa0mYeMaQ4MQb0BYzsKmQ5jQA y9BDbjBOkOQHBu15CVZfn5SLhV4V7pH/cFMMVvWqvFRxDUAGSG8IT2fhO6FumpY2 Ppzg9T0//SlslQOUl2fv0YZ0fzO43PyaVOAX+rJyaeHdiEiqr6KsIUVXYWZT+Odi T1xALh7p+Xl2Luait6EQ8crbMOmeD9xHXF6kjO/IZvdN7oaE2ToTaKAlCEIxOBA1 bBXAsgzwfUMAYEFhO6G1e4rfP7pWD7ug -----END CERTIFICATE-----Generated at Sat Aug 23 20:29:34 2025 by rpki-client