$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.mft File: -5w6kNDNa5K-MWAyXafCbH9OWQA.mft (raw, json) Hash identifier: 2ygHJYGT7jDR9B0KlWMPp92XzhjwaXn9Ume2XS2X/TM= Subject key identifier: 3C:DF:96:F7:D0:4D:70:0B:65:B2:05:FE:82:44:A6:1C:C5:B8:67:5F Authority key identifier: FB:9C:3A:90:D0:CD:6B:92:BE:31:60:32:5D:A7:C2:6C:7F:4E:59:00 Certificate issuer: /CN=A91DE1A3/serialNumber=FB9C3A90D0CD6B92BE3160325DA7C26C7F4E5900 Certificate serial: 0206 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-5w6kNDNa5K-MWAyXafCbH9OWQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.mft Manifest number: 0203 Signing time: Sat 23 Aug 2025 02:24:33 +0000 Manifest this update: Sat 23 Aug 2025 02:24:33 +0000 Manifest next update: Sat 30 Aug 2025 02:24:33 +0000 Files and hashes: 1: -5w6kNDNa5K-MWAyXafCbH9OWQA.crl (hash: OTG5ZCibW648Qv/h8iJ5yq1J4tKAcAsI1IJ2eYAgblY=) 2: F396DA1468A211ED9525A86CC4F9AE02.roa (hash: mfCo7xBHkX9UIyrOsrP0XEhPqQke0cTzgybKkz4msYM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.crl rsync://rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-5w6kNDNa5K-MWAyXafCbH9OWQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:24:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 518 (0x206) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE1A3, serialNumber=FB9C3A90D0CD6B92BE3160325DA7C26C7F4E5900 Validity Not Before: Aug 23 02:24:33 2025 GMT Not After : Aug 30 02:24:33 2025 GMT Subject: CN=68a92661-df5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:68:bf:5a:89:b0:f4:d8:bb:57:2d:8e:bf:08: d8:31:18:18:fc:66:5f:28:32:7f:45:ca:f3:cd:f3: 47:32:bc:ae:72:58:bd:b3:fb:c8:05:57:d7:12:68: 3c:32:b8:7e:82:1b:ef:ed:35:43:73:07:97:e0:21: 1b:c8:b7:89:f5:ec:bd:4f:f0:23:fc:6f:03:62:f6: cd:40:e6:e1:9e:96:72:50:3d:4e:6a:dc:ce:4b:df: d0:99:61:54:f7:9a:38:0d:4c:6b:cc:9f:b7:03:4b: 5a:0c:29:31:7d:dc:3d:f0:75:dc:54:3b:e9:59:94: c7:e2:5c:fc:45:53:74:b4:3b:7a:6d:60:32:36:a8: aa:a8:a2:4d:c9:70:8d:3f:2d:cb:04:8a:35:26:bb: 87:86:1e:99:c0:11:62:72:50:83:84:e6:7c:e9:b2: ea:41:18:d5:83:04:e9:03:9e:fd:91:7e:46:cd:7e: ce:81:16:e2:83:65:32:49:d3:29:96:f9:53:f1:7b: 39:8d:65:2a:45:c5:cb:7c:f4:ce:eb:6b:90:ab:ae: 88:28:54:01:6c:40:74:10:90:11:58:9b:e4:ea:eb: 6e:b5:68:52:2f:a3:bc:64:b9:2e:22:76:f0:8f:fc: 25:18:96:96:9e:56:21:cf:4c:17:84:24:d2:2f:d2: 4a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:DF:96:F7:D0:4D:70:0B:65:B2:05:FE:82:44:A6:1C:C5:B8:67:5F X509v3 Authority Key Identifier: keyid:FB:9C:3A:90:D0:CD:6B:92:BE:31:60:32:5D:A7:C2:6C:7F:4E:59:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-5w6kNDNa5K-MWAyXafCbH9OWQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:3c:ca:d1:80:5d:61:b7:fc:08:42:e4:44:cc:a9:15:12:95: 7a:b2:9f:da:0f:86:4b:5c:df:68:54:f7:06:59:a5:63:c9:14: 82:57:a8:02:a1:2c:9c:a5:05:4c:64:78:93:52:24:8d:04:9c: f9:0a:7f:a2:26:74:c5:9f:be:1b:5f:34:00:d4:d3:e5:3e:6a: 76:1b:69:7b:63:eb:75:6b:63:42:3a:95:74:7c:03:a7:79:e2: 73:f6:c1:43:0f:84:00:73:59:51:d1:75:fe:ad:48:99:47:7c: 99:09:ab:e0:22:10:cf:99:af:e1:59:59:17:f5:0e:02:88:bb: eb:e5:c1:da:9a:59:76:22:48:7a:8b:9e:19:ee:cc:91:f2:ae: 3e:be:bb:f5:1b:b4:55:31:36:b5:07:f6:aa:60:cb:1c:73:9b: b6:0c:83:f8:19:1a:89:f7:a1:f4:63:a7:bf:25:74:82:56:fb: 9e:69:90:a2:93:ba:46:ae:81:7b:c3:93:6c:50:a2:71:20:d3: 5b:bf:40:7f:c6:3d:b4:bd:ee:2a:56:03:12:b0:85:64:31:0b: 13:cb:08:90:36:e9:0f:32:eb:db:d6:48:c2:3b:f0:a1:5d:bf: c2:b6:6d:36:23:ad:fd:cb:3c:d1:8e:83:02:0b:e5:c8:d5:bf: a0:32:0c:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REUxQTMxMTAvBgNVBAUTKEZCOUMzQTkwRDBDRDZCOTJCRTMxNjAzMjVEQTdDMjZD N0Y0RTU5MDAwHhcNMjUwODIzMDIyNDMzWhcNMjUwODMwMDIyNDMzWjAYMRYwFAYD VQQDEw02OGE5MjY2MS1kZjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2mi/Womw9Ni7Vy2OvwjYMRgY/GZfKDJ/RcrzzfNHMryucli9s/vIBVfXEmg8 Mrh+ghvv7TVDcweX4CEbyLeJ9ey9T/Aj/G8DYvbNQObhnpZyUD1OatzOS9/QmWFU 95o4DUxrzJ+3A0taDCkxfdw98HXcVDvpWZTH4lz8RVN0tDt6bWAyNqiqqKJNyXCN Py3LBIo1JruHhh6ZwBFiclCDhOZ86bLqQRjVgwTpA579kX5GzX7OgRbig2UySdMp lvlT8Xs5jWUqRcXLfPTO62uQq66IKFQBbEB0EJARWJvk6ututWhSL6O8ZLkuInbw j/wlGJaWnlYhz0wXhCTSL9JK3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDzflvfQ TXALZbIF/oJEphzFuGdfMB8GA1UdIwQYMBaAFPucOpDQzWuSvjFgMl2nwmx/TlkA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTFBMy84QjlEQkJDRTY4 OUYxMUVEQUQxNzc2NjdDNEY5QUUwMi8tNXc2a05ETmE1Sy1NV0F5WGFmQ2JIOU9X UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy01dzZrTkROYTVLLU1XQXlYYWZDYkg5T1dRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTFBMy84QjlEQkJDRTY4OUYxMUVEQUQxNzc2NjdDNEY5QUUwMi8tNXc2a05ETmE1 Sy1NV0F5WGFmQ2JIOU9XUUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWPMrRgF1ht/wIQuREzKkVEpV6sp/aD4ZLXN9oVPcGWaVjyRSCV6gC oSycpQVMZHiTUiSNBJz5Cn+iJnTFn74bXzQA1NPlPmp2G2l7Y+t1a2NCOpV0fAOn eeJz9sFDD4QAc1lR0XX+rUiZR3yZCavgIhDPma/hWVkX9Q4CiLvr5cHamll2Ikh6 i54Z7syR8q4+vrv1G7RVMTa1B/aqYMscc5u2DIP4GRqJ96H0Y6e/JXSCVvueaZCi k7pGroF7w5NsUKJxINNbv0B/xj20ve4qVgMSsIVkMQsTywiQNukPMuvb1kjCO/Ch Xb/Ctm02I639yzzRjoMCC+XI1b+gMgyG -----END CERTIFICATE-----Generated at Sun Aug 24 11:14:24 2025 by rpki-client