$ rpki-client -vvf rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.mft File: 5NzsWVobtnOJciNlasY5uVNS3XM.mft (raw, json) Hash identifier: u4v7oCNak2ai/QDFvQ9QgW4+/MtvjDTlGjGst8qXcSM= Subject key identifier: 37:42:4C:16:99:A6:CE:C1:DE:5C:06:EB:E0:90:6C:37:90:EA:5A:9A Authority key identifier: E4:DC:EC:59:5A:1B:B6:73:89:72:23:65:6A:C6:39:B9:53:52:DD:73 Certificate issuer: /CN=A91D604E/serialNumber=E4DCEC595A1BB673897223656AC639B95352DD73 Certificate serial: 0CDD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5NzsWVobtnOJciNlasY5uVNS3XM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.mft Manifest number: 0CCF Signing time: Fri 22 Aug 2025 18:15:59 +0000 Manifest this update: Fri 22 Aug 2025 18:15:58 +0000 Manifest next update: Fri 29 Aug 2025 18:15:58 +0000 Files and hashes: 1: 5NzsWVobtnOJciNlasY5uVNS3XM.crl (hash: 8XjCzJiE/X9j6Z9i4HYKrD2xtNkDdec2UcOnzly19VU=) 2: D1C40E28183411EF99FD8776C4F9AE02.roa (hash: BW1R5F8lMobavVuSC6yNoOLGmek/bg4xwsTofEurscc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.crl rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5NzsWVobtnOJciNlasY5uVNS3XM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:15:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3293 (0xcdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D604E, serialNumber=E4DCEC595A1BB673897223656AC639B95352DD73 Validity Not Before: Aug 22 18:15:58 2025 GMT Not After : Aug 29 18:15:58 2025 GMT Subject: CN=68a8b3df-387a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:9b:ef:b7:b1:fd:21:7d:46:1f:22:bf:0c:51: 57:69:02:85:65:0f:f9:5d:e6:a0:5f:9d:d0:06:2b: 5e:5c:57:59:b0:27:14:78:0e:43:0f:f8:2e:67:ef: 9f:c3:c8:6a:fd:81:06:20:68:70:de:14:57:bb:be: 7b:13:e2:f5:d9:02:bf:c9:11:98:e9:17:6b:21:e3: 6a:5a:52:e4:69:25:df:dc:fd:11:4d:7e:ad:6d:5b: 4d:d6:8b:fa:60:79:8c:93:79:d3:b7:8d:eb:0d:0b: 11:ce:8e:ef:a6:43:39:ff:fe:d8:43:2f:10:79:d7: de:70:70:a9:e9:67:11:47:32:91:47:b4:03:52:21: f1:8e:b9:47:4c:79:79:4c:80:2d:f2:55:3b:81:0b: 35:49:91:3b:82:ea:74:3e:7b:33:90:32:6e:1b:ba: a9:68:10:f6:dd:ba:64:b6:1a:a1:08:f4:5b:8a:53: 4a:d8:7f:46:f3:43:52:e0:4e:44:2c:ca:b4:47:25: 65:86:fa:16:7c:9d:10:63:29:51:fd:0d:39:2a:67: 97:14:3c:6e:9c:eb:3e:aa:da:45:d9:c2:35:63:5b: ab:6c:cb:71:25:f2:48:41:63:10:66:d3:e9:4f:37: ad:37:59:0e:66:ce:3c:14:2c:77:a1:e9:f2:ac:f9: be:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:42:4C:16:99:A6:CE:C1:DE:5C:06:EB:E0:90:6C:37:90:EA:5A:9A X509v3 Authority Key Identifier: keyid:E4:DC:EC:59:5A:1B:B6:73:89:72:23:65:6A:C6:39:B9:53:52:DD:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5NzsWVobtnOJciNlasY5uVNS3XM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:26:b4:c2:56:ba:8c:4d:f8:9c:53:02:04:8a:a4:d5:d9:18: 71:ba:39:2d:29:39:9d:5e:67:20:9d:0d:63:3c:a7:50:27:a3: 04:41:32:4f:00:c0:8a:ab:57:49:0b:b2:9b:ef:84:ae:e3:1f: 40:03:8a:15:e7:90:77:ce:c0:b6:41:eb:39:42:10:d5:42:e9: 68:59:75:da:3c:7d:85:1b:82:b1:cd:2e:da:94:e7:55:f9:a3: 19:c0:ea:27:3d:fa:2d:a4:53:9f:8f:40:01:c3:c3:55:02:21: 27:78:ad:88:10:2f:50:f0:2c:be:82:53:f4:3c:01:92:10:38: a6:1f:33:87:13:40:b3:b5:a7:a3:5d:40:f0:92:25:5e:46:c6: ba:30:8f:38:55:79:22:97:a1:9a:5e:e9:bf:0e:6b:df:0d:4e: c3:35:ca:57:be:6a:7b:d6:d0:6f:b5:0d:5d:60:43:4b:96:c8: d8:e9:9c:ca:57:8d:11:a7:ef:88:6c:2e:a6:0f:70:06:84:15: c2:a3:b8:78:49:38:9a:44:e2:d8:79:f0:c4:2d:7b:cd:e7:05: 58:5e:65:47:d6:85:34:c6:db:f6:12:c5:43:74:11:dd:ad:2e: 2d:19:10:5c:0f:5e:a4:a1:f8:ba:66:87:86:91:4c:62:da:50: ac:aa:bb:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYwNEUxMTAvBgNVBAUTKEU0RENFQzU5NUExQkI2NzM4OTcyMjM2NTZBQzYzOUI5 NTM1MkRENzMwHhcNMjUwODIyMTgxNTU4WhcNMjUwODI5MTgxNTU4WjAYMRYwFAYD VQQDEw02OGE4YjNkZi0zODdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Zvvt7H9IX1GHyK/DFFXaQKFZQ/5XeagX53QBiteXFdZsCcUeA5DD/guZ++f w8hq/YEGIGhw3hRXu757E+L12QK/yRGY6RdrIeNqWlLkaSXf3P0RTX6tbVtN1ov6 YHmMk3nTt43rDQsRzo7vpkM5//7YQy8QedfecHCp6WcRRzKRR7QDUiHxjrlHTHl5 TIAt8lU7gQs1SZE7gup0PnszkDJuG7qpaBD23bpkthqhCPRbilNK2H9G80NS4E5E LMq0RyVlhvoWfJ0QYylR/Q05KmeXFDxunOs+qtpF2cI1Y1urbMtxJfJIQWMQZtPp TzetN1kOZs48FCx3oenyrPm+/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDdCTBaZ ps7B3lwG6+CQbDeQ6lqaMB8GA1UdIwQYMBaAFOTc7FlaG7ZziXIjZWrGOblTUt1z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjA0RS85MUI1QzBDMEY0 RUQxMUU5OENCRkEwMTNDNEY5QUUwMi81TnpzV1ZvYnRuT0pjaU5sYXNZNXVWTlMz WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVOenNXVm9idG5PSmNpTmxhc1k1dVZOUzNYTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjA0RS85MUI1QzBDMEY0RUQxMUU5OENCRkEwMTNDNEY5QUUwMi81TnpzV1ZvYnRu T0pjaU5sYXNZNXVWTlMzWE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkJrTCVrqMTficUwIEiqTV2RhxujktKTmdXmcgnQ1jPKdQJ6MEQTJP AMCKq1dJC7Kb74Su4x9AA4oV55B3zsC2Qes5QhDVQuloWXXaPH2FG4KxzS7alOdV +aMZwOonPfotpFOfj0ABw8NVAiEneK2IEC9Q8Cy+glP0PAGSEDimHzOHE0Cztaej XUDwkiVeRsa6MI84VXkil6GaXum/DmvfDU7DNcpXvmp71tBvtQ1dYENLlsjY6ZzK V40Rp++IbC6mD3AGhBXCo7h4STiaROLYefDELXvN5wVYXmVH1oU0xtv2EsVDdBHd rS4tGRBcD16kofi6ZoeGkUxi2lCsqruU -----END CERTIFICATE-----Generated at Sat Aug 23 21:23:33 2025 by rpki-client