$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.mft File: 5TfQw0j9fcSfX8OwBmoxxYT64as.mft (raw, json) Hash identifier: IrqfxWPQV6GTZIHc1fZ0w5MWjM2votpei+nbwyp0p4c= Subject key identifier: 1A:83:A4:88:DC:26:23:CF:C8:3A:94:A6:93:A3:C1:DF:11:A4:96:F9 Authority key identifier: E5:37:D0:C3:48:FD:7D:C4:9F:5F:C3:B0:06:6A:31:C5:84:FA:E1:AB Certificate issuer: /CN=A91D4345/serialNumber=E537D0C348FD7DC49F5FC3B0066A31C584FAE1AB Certificate serial: 0C82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5TfQw0j9fcSfX8OwBmoxxYT64as.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.mft Manifest number: 0C75 Signing time: Fri 22 Aug 2025 18:30:32 +0000 Manifest this update: Fri 22 Aug 2025 18:30:32 +0000 Manifest next update: Fri 29 Aug 2025 18:30:32 +0000 Files and hashes: 1: 5TfQw0j9fcSfX8OwBmoxxYT64as.crl (hash: oAzIYgUhDV7j7mC+LT4IYWwmPK/o1KRSw3kdvt6VvFo=) 2: F3529CDCAE1511EE92D99E46C4F9AE02.roa (hash: hTD7DjMK2EnPCWqJypUdiJk7jUHRPt10GcfYU8sN4po=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.crl rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5TfQw0j9fcSfX8OwBmoxxYT64as.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3202 (0xc82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4345, serialNumber=E537D0C348FD7DC49F5FC3B0066A31C584FAE1AB Validity Not Before: Aug 22 18:30:32 2025 GMT Not After : Aug 29 18:30:32 2025 GMT Subject: CN=68a8b748-7740 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b0:f5:f2:2a:1d:6a:ee:be:41:f7:03:ff:2e: 82:c8:f0:7d:c9:7f:b7:c0:9c:95:65:e6:7d:e8:37: 0c:19:b7:52:9f:26:77:29:9b:c2:09:02:32:dd:89: af:97:ba:ac:79:fb:98:aa:9c:0e:8d:3b:d5:c5:95: 69:ac:c1:a9:4b:a6:fb:80:c0:3e:08:ea:25:d0:81: aa:0d:50:a4:84:a7:be:94:63:42:b7:d5:b6:a7:59: 5b:27:7d:81:31:22:31:0a:1a:0e:4c:74:9c:28:a2: 56:52:3f:64:43:bb:c3:a7:72:4a:86:22:f7:8f:fb: e3:72:53:9a:21:02:b0:ac:4f:2f:a1:2d:35:7e:3f: 5e:2f:c5:ed:12:86:4a:4b:65:7a:f5:54:2f:19:af: 33:57:87:0f:c4:16:d6:81:23:4f:fd:6a:64:7f:c6: 84:d8:1b:91:7e:c8:e8:b3:1c:f6:ab:ab:54:c3:28: ce:22:c4:32:2d:0a:1e:bc:c5:12:1a:58:0a:59:b3: 50:da:b9:85:22:cd:62:83:30:93:1f:06:ac:a4:34: bf:9f:41:02:7c:86:84:14:31:10:66:bb:03:62:85: 0c:84:67:3f:0e:23:aa:98:27:9a:0d:86:6c:c5:90: b0:d0:71:be:37:85:27:c7:e0:8f:6b:c7:1a:d7:43: 30:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:83:A4:88:DC:26:23:CF:C8:3A:94:A6:93:A3:C1:DF:11:A4:96:F9 X509v3 Authority Key Identifier: keyid:E5:37:D0:C3:48:FD:7D:C4:9F:5F:C3:B0:06:6A:31:C5:84:FA:E1:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5TfQw0j9fcSfX8OwBmoxxYT64as.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:68:b4:b2:5f:c2:8e:79:6e:16:15:db:0b:e6:e5:6b:14:9a: 3a:c2:7a:82:18:df:6d:80:ac:73:23:42:cc:52:c0:21:60:7b: 02:eb:d5:04:5b:4b:d2:f4:cc:0b:56:36:e4:16:f3:b6:ab:44: b1:26:4d:3c:08:fc:14:b3:48:46:e4:18:f1:65:4c:4b:5c:29: b7:6f:91:04:35:64:90:c6:ac:ba:5f:3a:25:e8:6d:01:0f:a6: 54:03:73:95:57:82:98:b2:35:54:63:d6:71:2c:ac:36:71:ea: fb:71:9f:94:eb:6a:a6:04:e1:fb:24:e1:1d:59:1c:c4:3e:12: d8:c0:bb:c5:31:30:e9:50:d2:af:30:34:f3:58:ab:88:3f:01: b1:8b:78:c7:fa:38:37:8e:b3:48:c2:85:b1:09:cc:2a:98:f3: 1b:d4:84:9a:11:1f:1c:b2:88:c4:5e:c0:60:81:4c:16:dd:97: 85:e9:13:1d:35:e3:c9:8c:39:bd:bf:13:2c:ec:73:bd:3f:29: 59:0d:0b:8f:3e:b5:e0:e2:66:eb:bd:15:d6:aa:66:f5:93:f0: 33:90:d8:5f:22:fe:d7:ec:b1:06:aa:e0:b4:98:9d:67:15:e8: ca:c4:7f:4a:da:88:5f:bb:13:20:eb:3e:0a:b5:20:9d:b8:f1: 7c:d2:63:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQzNDUxMTAvBgNVBAUTKEU1MzdEMEMzNDhGRDdEQzQ5RjVGQzNCMDA2NkEzMUM1 ODRGQUUxQUIwHhcNMjUwODIyMTgzMDMyWhcNMjUwODI5MTgzMDMyWjAYMRYwFAYD VQQDEw02OGE4Yjc0OC03NzQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA47D18iodau6+QfcD/y6CyPB9yX+3wJyVZeZ96DcMGbdSnyZ3KZvCCQIy3Ymv l7qsefuYqpwOjTvVxZVprMGpS6b7gMA+COol0IGqDVCkhKe+lGNCt9W2p1lbJ32B MSIxChoOTHScKKJWUj9kQ7vDp3JKhiL3j/vjclOaIQKwrE8voS01fj9eL8XtEoZK S2V69VQvGa8zV4cPxBbWgSNP/Wpkf8aE2BuRfsjosxz2q6tUwyjOIsQyLQoevMUS GlgKWbNQ2rmFIs1igzCTHwaspDS/n0ECfIaEFDEQZrsDYoUMhGc/DiOqmCeaDYZs xZCw0HG+N4Unx+CPa8ca10Mw6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBqDpIjc JiPPyDqUppOjwd8RpJb5MB8GA1UdIwQYMBaAFOU30MNI/X3En1/DsAZqMcWE+uGr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDM0NS9FQzc4Q0REQTA1 MzgxMUVBQjU4OTc2NjhDNEY5QUUwMi81VGZRdzBqOWZjU2ZYOE93Qm1veHhZVDY0 YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVUZlF3MGo5ZmNTZlg4T3dCbW94eFlUNjRhcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDM0NS9FQzc4Q0REQTA1MzgxMUVBQjU4OTc2NjhDNEY5QUUwMi81VGZRdzBqOWZj U2ZYOE93Qm1veHhZVDY0YXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDIaLSyX8KOeW4WFdsL5uVrFJo6wnqCGN9tgKxzI0LMUsAhYHsC69UE W0vS9MwLVjbkFvO2q0SxJk08CPwUs0hG5BjxZUxLXCm3b5EENWSQxqy6Xzol6G0B D6ZUA3OVV4KYsjVUY9ZxLKw2cer7cZ+U62qmBOH7JOEdWRzEPhLYwLvFMTDpUNKv MDTzWKuIPwGxi3jH+jg3jrNIwoWxCcwqmPMb1ISaER8csojEXsBggUwW3ZeF6RMd NePJjDm9vxMs7HO9PylZDQuPPrXg4mbrvRXWqmb1k/AzkNhfIv7X7LEGquC0mJ1n FejKxH9K2ohfuxMg6z4KtSCduPF80mO9 -----END CERTIFICATE-----Generated at Sun Aug 24 03:32:22 2025 by rpki-client