$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.mft File: P5liYas9HvBBZhs6732JMrVwJjc.mft (raw, json) Hash identifier: UjvQ73Zb81IlKRlKklVEaMMpasz9yObBYla0YarPzVc= Subject key identifier: 6F:7D:47:DB:AC:0B:9C:6D:B2:6C:06:D8:4A:A0:E8:D2:FA:9D:51:D5 Authority key identifier: 3F:99:62:61:AB:3D:1E:F0:41:66:1B:3A:EF:7D:89:32:B5:70:26:37 Certificate issuer: /CN=A91DC2A9/serialNumber=3F996261AB3D1EF041661B3AEF7D8932B5702637 Certificate serial: 0193 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5liYas9HvBBZhs6732JMrVwJjc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.mft Manifest number: 018C Signing time: Sat 23 Aug 2025 03:46:16 +0000 Manifest this update: Sat 23 Aug 2025 03:46:15 +0000 Manifest next update: Sat 30 Aug 2025 03:46:15 +0000 Files and hashes: 1: P5liYas9HvBBZhs6732JMrVwJjc.crl (hash: 1RBp981OuqUC1namjN1gsBOqIi9h6Aiy+/lnedKy3OI=) 2: 9908BDDE1CAA11EF80E3BB87C4F9AE02.roa (hash: 0UTp5Ayv/ftDBInci/moVW1XbBA3xfvlEMb4Bw4foQE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.crl rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5liYas9HvBBZhs6732JMrVwJjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:46:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 403 (0x193) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC2A9, serialNumber=3F996261AB3D1EF041661B3AEF7D8932B5702637 Validity Not Before: Aug 23 03:46:15 2025 GMT Not After : Aug 30 03:46:15 2025 GMT Subject: CN=68a93987-2a43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:58:b2:e3:11:14:cf:c7:7d:5f:a0:de:4b:97: 6d:85:eb:46:78:15:c0:b1:7b:8d:46:33:ce:a7:c1: 46:56:16:b1:87:46:88:c0:8a:44:74:8e:32:11:2f: 5d:9c:27:70:e3:51:28:84:80:20:d2:44:1e:b8:73: 69:75:c9:a0:cb:48:33:ee:e0:ea:4a:b2:af:0e:53: 5c:82:4d:a9:a9:02:81:dc:24:9c:1c:db:88:bd:21: 78:08:ff:46:8a:a0:30:a1:06:ad:70:10:94:91:2c: 11:62:19:0a:81:94:57:bf:e1:d7:34:b6:21:18:d9: 51:a8:64:e6:68:c0:eb:33:4d:68:1a:a0:36:e5:37: 98:11:b1:c0:dc:95:21:86:dc:21:24:36:e8:08:78: d8:04:47:d5:0c:a8:a8:02:21:b1:12:c4:d6:01:60: ad:17:26:61:dd:f6:36:9a:f0:81:ba:7b:71:dc:8c: c3:8f:b8:ef:b1:07:2d:46:98:3c:86:9a:68:6b:30: 1e:f0:5c:18:c7:cc:cc:08:c0:44:ae:0d:7a:28:01: 91:38:a9:61:a0:38:2b:12:48:0d:1f:8c:a5:d4:32: 39:08:56:d8:f5:e7:77:90:04:48:eb:cb:2f:c3:57: 94:82:8b:95:1b:64:f1:e7:d7:55:3f:8a:2b:08:9f: 59:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:7D:47:DB:AC:0B:9C:6D:B2:6C:06:D8:4A:A0:E8:D2:FA:9D:51:D5 X509v3 Authority Key Identifier: keyid:3F:99:62:61:AB:3D:1E:F0:41:66:1B:3A:EF:7D:89:32:B5:70:26:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5liYas9HvBBZhs6732JMrVwJjc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:9f:a8:97:73:f3:cf:90:e1:5e:62:fa:52:c0:99:6d:de:e2: d4:e6:63:e1:e3:9e:b3:11:c9:81:9e:04:6d:25:c0:3a:b3:53: 7c:61:ba:da:e9:d7:e2:89:32:dd:57:43:96:23:35:87:99:2d: 38:65:94:15:b5:3b:56:a9:c9:7e:39:24:7b:96:58:7f:79:c7: ef:dd:e2:5b:ce:e3:80:46:85:82:86:10:e8:b0:4a:f8:88:ae: f9:fb:56:d0:fd:f7:97:9c:36:59:2d:c5:c9:02:30:14:5f:9c: 43:1b:c6:3d:25:a5:5c:2e:f7:60:e4:69:f6:b9:eb:08:31:b2: 4e:29:c0:b1:e7:5c:32:d6:4f:25:90:d1:b5:d5:d3:0c:49:38: 4f:c0:fc:29:2e:3e:8f:7a:5e:32:b8:cc:17:46:22:22:0a:6c: d0:73:28:ac:f4:ac:5c:6d:7d:59:f8:68:07:3d:9d:2a:31:0a: 5a:99:f0:7b:f7:e2:6b:b4:da:1b:4b:af:b7:30:9f:94:ef:94: a8:ea:e5:c5:8d:c5:b6:df:a5:0b:9d:4e:b6:8a:b7:d6:c9:f0: 1e:34:b9:61:ca:75:60:76:c7:66:7d:5b:a9:a2:3a:c4:da:7b: e5:41:42:d3:79:8d:dd:62:51:f1:38:d6:ed:23:2f:23:c3:25: 40:f0:c8:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMyQTkxMTAvBgNVBAUTKDNGOTk2MjYxQUIzRDFFRjA0MTY2MUIzQUVGN0Q4OTMy QjU3MDI2MzcwHhcNMjUwODIzMDM0NjE1WhcNMjUwODMwMDM0NjE1WjAYMRYwFAYD VQQDEw02OGE5Mzk4Ny0yYTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Viy4xEUz8d9X6DeS5dthetGeBXAsXuNRjPOp8FGVhaxh0aIwIpEdI4yES9d nCdw41EohIAg0kQeuHNpdcmgy0gz7uDqSrKvDlNcgk2pqQKB3CScHNuIvSF4CP9G iqAwoQatcBCUkSwRYhkKgZRXv+HXNLYhGNlRqGTmaMDrM01oGqA25TeYEbHA3JUh htwhJDboCHjYBEfVDKioAiGxEsTWAWCtFyZh3fY2mvCBuntx3IzDj7jvsQctRpg8 hppoazAe8FwYx8zMCMBErg16KAGROKlhoDgrEkgNH4yl1DI5CFbY9ed3kARI68sv w1eUgouVG2Tx59dVP4orCJ9Z7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG99R9us C5xtsmwG2Eqg6NL6nVHVMB8GA1UdIwQYMBaAFD+ZYmGrPR7wQWYbOu99iTK1cCY3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzJBOS9EOEREQzFBNjM0 QzYxMUVFQjRFQkIwNzBDNEY5QUUwMi9QNWxpWWFzOUh2QkJaaHM2NzMySk1yVndK amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A1bGlZYXM5SHZCQlpoczY3MzJKTXJWd0pqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzJBOS9EOEREQzFBNjM0QzYxMUVFQjRFQkIwNzBDNEY5QUUwMi9QNWxpWWFzOUh2 QkJaaHM2NzMySk1yVndKamMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpn6iXc/PPkOFeYvpSwJlt3uLU5mPh456zEcmBngRtJcA6s1N8Ybra 6dfiiTLdV0OWIzWHmS04ZZQVtTtWqcl+OSR7llh/ecfv3eJbzuOARoWChhDosEr4 iK75+1bQ/feXnDZZLcXJAjAUX5xDG8Y9JaVcLvdg5Gn2uesIMbJOKcCx51wy1k8l kNG11dMMSThPwPwpLj6Pel4yuMwXRiIiCmzQcyis9KxcbX1Z+GgHPZ0qMQpamfB7 9+JrtNobS6+3MJ+U75So6uXFjcW236ULnU62irfWyfAeNLlhynVgdsdmfVupojrE 2nvlQULTeY3dYlHxONbtIy8jwyVA8Mhz -----END CERTIFICATE-----Generated at Sat Aug 23 21:33:07 2025 by rpki-client