$ rpki-client -vvf rpki.apnic.net/member_repository/A91D98FC/1C899E26F4EC11E98FBE9B0FC4F9AE02/s5m0raB1Aagp1W8h2o613DIDSlY.mft File: s5m0raB1Aagp1W8h2o613DIDSlY.mft (raw, json) Hash identifier: PUt3rku3tH0iDOPRNqoyrWyhkr2AwopDB49xiKtFqMk= Subject key identifier: DB:33:13:F2:CB:D5:E5:00:C7:80:BB:14:E4:0A:8D:B2:EE:38:33:83 Authority key identifier: B3:99:B4:AD:A0:75:01:A8:29:D5:6F:21:DA:8E:B5:DC:32:03:4A:56 Certificate issuer: /CN=A91D98FC/serialNumber=B399B4ADA07501A829D56F21DA8EB5DC32034A56 Certificate serial: 0CD9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5m0raB1Aagp1W8h2o613DIDSlY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D98FC/1C899E26F4EC11E98FBE9B0FC4F9AE02/s5m0raB1Aagp1W8h2o613DIDSlY.mft Manifest number: 0CCB Signing time: Fri 22 Aug 2025 18:15:52 +0000 Manifest this update: Fri 22 Aug 2025 18:15:51 +0000 Manifest next update: Fri 29 Aug 2025 18:15:51 +0000 Files and hashes: 1: s5m0raB1Aagp1W8h2o613DIDSlY.crl (hash: XZ16aqZVPdAs6whSzaBgjWVofRNAED1Ku3bxGRLhALY=) 2: 238AAE04B3CD11EF82D5B34FC4F9AE02.roa (hash: Vh7yMYlqWkmmCVoJUzEKALaYDnLO+UKuaoILrbL+tGw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D98FC/1C899E26F4EC11E98FBE9B0FC4F9AE02/s5m0raB1Aagp1W8h2o613DIDSlY.crl rsync://rpki.apnic.net/member_repository/A91D98FC/1C899E26F4EC11E98FBE9B0FC4F9AE02/s5m0raB1Aagp1W8h2o613DIDSlY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5m0raB1Aagp1W8h2o613DIDSlY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:15:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3289 (0xcd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D98FC, serialNumber=B399B4ADA07501A829D56F21DA8EB5DC32034A56 Validity Not Before: Aug 22 18:15:51 2025 GMT Not After : Aug 29 18:15:51 2025 GMT Subject: CN=68a8b3d7-3f9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:4a:d5:b3:9b:ec:22:6d:e6:60:bb:c9:9e:f8: 52:df:7c:f6:e5:c1:eb:fa:47:7c:31:60:93:48:77: 46:5a:9a:c1:e7:30:e3:c8:81:7f:fd:80:a9:24:7d: 0f:41:30:bc:cb:06:45:5f:54:17:76:8b:83:df:8a: 9f:6a:12:6d:45:8f:e2:06:a2:76:8b:0c:e9:e1:5f: 89:62:ba:f2:20:a2:21:5e:fe:5c:e4:84:e8:3d:90: d1:1c:9e:5c:f5:d4:86:28:83:b8:ca:83:69:34:24: ba:8d:e6:13:d2:05:71:d1:c1:b6:b9:52:93:d5:ab: ab:1d:1f:c1:45:4f:c3:a1:f8:b1:6e:de:7a:a5:ff: e8:bd:25:24:5b:d4:3a:68:13:67:b9:ca:ca:62:f0: 39:91:6d:ba:2f:a1:cd:d1:c1:b3:e6:17:b5:c3:12: 01:59:08:0c:29:7a:a7:c0:67:d8:50:61:c7:b4:3b: 2b:e5:ad:0a:4b:90:02:0b:9e:0b:c6:9c:c4:56:2a: fa:32:87:e7:f9:06:9d:7c:12:a7:68:c7:e7:21:16: ee:dc:cd:b0:8d:6a:cf:bb:43:fd:d3:b0:0a:74:e6: b4:da:24:0a:da:dd:ba:03:ce:95:08:43:91:b6:12: 7c:d3:1b:bd:df:49:4a:21:96:97:bd:66:2b:21:e1: fa:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:33:13:F2:CB:D5:E5:00:C7:80:BB:14:E4:0A:8D:B2:EE:38:33:83 X509v3 Authority Key Identifier: keyid:B3:99:B4:AD:A0:75:01:A8:29:D5:6F:21:DA:8E:B5:DC:32:03:4A:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D98FC/1C899E26F4EC11E98FBE9B0FC4F9AE02/s5m0raB1Aagp1W8h2o613DIDSlY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5m0raB1Aagp1W8h2o613DIDSlY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D98FC/1C899E26F4EC11E98FBE9B0FC4F9AE02/s5m0raB1Aagp1W8h2o613DIDSlY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:80:24:d0:84:44:e3:3d:54:0d:72:6d:27:a8:25:6f:35:19: 9f:f0:25:58:17:b9:30:2b:e9:c4:b7:12:95:44:56:1a:cf:e4: 55:1f:d0:f3:17:0f:f4:27:b8:a7:06:fc:a5:48:4b:fc:f8:21: 2d:c1:0e:ee:55:c5:e5:08:e2:8a:72:3b:7e:67:08:0d:e6:45: 4f:00:46:37:30:f1:e6:97:4a:8d:dc:ec:95:fc:01:c1:08:16: fd:85:88:e1:c4:49:fd:45:c8:bd:17:4c:8a:c9:2b:a1:a0:13: 8f:1c:b2:8a:b4:31:31:2c:1a:ff:6c:66:7a:3f:bf:8a:91:92: 80:c7:13:10:27:09:7b:fd:5d:fe:3d:e0:6e:a3:1b:5f:e4:62: 3e:e9:10:23:2f:1b:ce:f9:d9:b3:9f:f0:36:fa:8a:f8:60:81: 5b:90:75:ae:c9:b3:21:61:19:df:87:a6:51:ea:4b:57:a2:0b: 12:24:77:aa:3e:ba:cd:77:88:76:bc:37:9b:d8:93:5a:22:b6: 1b:21:76:8c:b7:fa:8d:80:c7:13:df:36:e9:4e:0f:e9:5d:96: 5e:b9:5f:58:c9:77:7d:51:a5:93:b9:f5:08:b3:a7:14:0a:e1: 0f:a7:87:b1:91:fc:30:42:da:5e:ae:ca:a3:c8:3a:6d:a9:53: 3a:75:c8:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDNkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDk4RkMxMTAvBgNVBAUTKEIzOTlCNEFEQTA3NTAxQTgyOUQ1NkYyMURBOEVCNURD MzIwMzRBNTYwHhcNMjUwODIyMTgxNTUxWhcNMjUwODI5MTgxNTUxWjAYMRYwFAYD VQQDEw02OGE4YjNkNy0zZjliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA50rVs5vsIm3mYLvJnvhS33z25cHr+kd8MWCTSHdGWprB5zDjyIF//YCpJH0P QTC8ywZFX1QXdouD34qfahJtRY/iBqJ2iwzp4V+JYrryIKIhXv5c5IToPZDRHJ5c 9dSGKIO4yoNpNCS6jeYT0gVx0cG2uVKT1aurHR/BRU/Dofixbt56pf/ovSUkW9Q6 aBNnucrKYvA5kW26L6HN0cGz5he1wxIBWQgMKXqnwGfYUGHHtDsr5a0KS5ACC54L xpzEVir6Mofn+QadfBKnaMfnIRbu3M2wjWrPu0P907AKdOa02iQK2t26A86VCEOR thJ80xu930lKIZaXvWYrIeH6kQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNszE/LL 1eUAx4C7FOQKjbLuODODMB8GA1UdIwQYMBaAFLOZtK2gdQGoKdVvIdqOtdwyA0pW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOThGQy8xQzg5OUUyNkY0 RUMxMUU5OEZCRTlCMEZDNEY5QUUwMi9zNW0wcmFCMUFhZ3AxVzhoMm82MTNESURT bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3M1bTByYUIxQWFncDFXOGgybzYxM0RJRFNsWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OThGQy8xQzg5OUUyNkY0RUMxMUU5OEZCRTlCMEZDNEY5QUUwMi9zNW0wcmFCMUFh Z3AxVzhoMm82MTNESURTbFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCngCTQhETjPVQNcm0nqCVvNRmf8CVYF7kwK+nEtxKVRFYaz+RVH9Dz Fw/0J7inBvylSEv8+CEtwQ7uVcXlCOKKcjt+ZwgN5kVPAEY3MPHml0qN3OyV/AHB CBb9hYjhxEn9Rci9F0yKySuhoBOPHLKKtDExLBr/bGZ6P7+KkZKAxxMQJwl7/V3+ PeBuoxtf5GI+6RAjLxvO+dmzn/A2+or4YIFbkHWuybMhYRnfh6ZR6ktXogsSJHeq PrrNd4h2vDeb2JNaIrYbIXaMt/qNgMcT3zbpTg/pXZZeuV9YyXd9UaWTufUIs6cU CuEPp4exkfwwQtpersqjyDptqVM6dciH -----END CERTIFICATE-----Generated at Sat Aug 23 17:20:34 2025 by rpki-client