$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.mft File: u5MlbmB9QutuNCDcxxN_ILhNDIo.mft (raw, json) Hash identifier: 6EIk2DA7RUbdkpKjOo4tfxDElG1TavkueS+qrdzFVGs= Subject key identifier: A3:7E:A1:14:E3:E9:7C:7B:EB:1F:32:B3:B9:0A:8B:3F:3C:43:FA:D1 Authority key identifier: BB:93:25:6E:60:7D:42:EB:6E:34:20:DC:C7:13:7F:20:B8:4D:0C:8A Certificate issuer: /CN=A91DF3CA/serialNumber=BB93256E607D42EB6E3420DCC7137F20B84D0C8A Certificate serial: 1803 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5MlbmB9QutuNCDcxxN_ILhNDIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.mft Manifest number: 17F5 Signing time: Fri 22 Aug 2025 16:39:16 +0000 Manifest this update: Fri 22 Aug 2025 16:39:15 +0000 Manifest next update: Fri 29 Aug 2025 16:39:15 +0000 Files and hashes: 1: u5MlbmB9QutuNCDcxxN_ILhNDIo.crl (hash: r7C/ObfW4gCQNwhnhyK0JwfQCgDivubmKJRE/5RJLfY=) 2: 7D4E6EDCC3A511E78971975FC4F9AE02.roa (hash: b8auFL+OGTstQHyewNvl2CDT74Oau9yNM7VkRWGDuEg=) 3: 0EB22CD66BBE11EDBF717818C4F9AE02.roa (hash: gFLbFRy/ivjEl0Dcp/t/VXs92pwAJ2tSip4UwHoVC3M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.crl rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5MlbmB9QutuNCDcxxN_ILhNDIo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:39:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6147 (0x1803) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF3CA, serialNumber=BB93256E607D42EB6E3420DCC7137F20B84D0C8A Validity Not Before: Aug 22 16:39:15 2025 GMT Not After : Aug 29 16:39:15 2025 GMT Subject: CN=68a89d33-d75c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:9f:b7:7c:21:7c:cf:69:3a:63:aa:73:5b:88: 72:27:f3:78:db:26:3c:c3:52:c1:75:fa:9a:18:6b: 4b:af:e8:90:15:40:33:be:cb:4f:bb:e8:88:e5:2c: 66:5b:15:71:22:2c:95:47:bf:3a:59:9f:75:79:73: e1:29:b3:17:99:d5:b5:6f:7d:80:9b:97:18:c8:70: 5d:e1:8e:42:c4:48:42:6e:c3:44:fd:a4:d4:6d:1a: 64:9b:7f:93:6d:b8:8c:63:f3:d7:e9:8a:0e:10:61: c8:ce:5e:0c:2e:73:1a:00:b7:57:64:b2:81:5f:e5: dc:11:33:b9:56:fd:0a:94:7d:57:b4:8d:56:a5:8e: e2:aa:76:74:d7:ba:32:9e:cd:c1:47:fd:0b:5c:cc: 0e:6a:27:ca:21:18:03:3e:aa:c9:84:13:40:09:af: 54:1b:2c:f5:a5:bc:ca:e8:6e:7b:86:c4:0b:b1:ba: 0a:70:fc:c8:1d:5b:a4:44:ad:d1:78:26:99:59:e1: b0:b5:a1:59:c7:f7:99:6b:3b:52:43:6d:d4:e2:a8: 68:27:13:a7:fc:42:21:78:94:c3:9e:bf:bd:4d:5b: e7:1c:e0:2b:0b:59:14:52:96:01:d2:a8:0c:d4:49: 47:9e:8a:0e:1e:04:04:18:28:97:c6:c7:91:9f:bc: 29:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:7E:A1:14:E3:E9:7C:7B:EB:1F:32:B3:B9:0A:8B:3F:3C:43:FA:D1 X509v3 Authority Key Identifier: keyid:BB:93:25:6E:60:7D:42:EB:6E:34:20:DC:C7:13:7F:20:B8:4D:0C:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5MlbmB9QutuNCDcxxN_ILhNDIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:20:b5:07:31:dd:7a:26:6e:1f:46:f0:94:2a:51:21:49:98: 7f:d2:60:fc:97:23:3b:02:7b:71:3d:c3:fe:9b:26:c9:0c:0c: 67:f8:0d:cd:79:1e:bb:f1:da:b9:0e:41:f0:ba:28:c3:74:7b: ad:b5:e8:7f:69:b4:f2:9f:c5:7a:d7:a5:b3:19:c0:a4:84:cb: 69:aa:1e:8a:1d:05:ba:7b:86:bb:95:f8:d7:ae:1d:0f:08:dc: ac:d8:82:a1:da:13:eb:e0:eb:00:b6:a9:f3:16:a3:8b:a2:2b: 62:04:90:0c:f3:2a:89:c0:0d:a6:62:18:35:01:0d:41:ee:bb: 9f:0f:ec:64:81:02:93:39:74:e2:25:27:ee:66:ef:7a:28:e2: 31:93:a8:da:df:92:69:64:2b:a0:fc:5d:82:67:bd:b7:7a:8b: 54:f6:0d:e9:8d:9b:e6:46:97:c9:df:de:e7:68:7c:92:cf:f3: 28:28:6f:5e:4e:d3:94:f9:19:4a:72:f6:c3:73:08:13:0f:07: db:7d:fa:dd:ed:1f:59:d6:f9:7e:50:90:64:18:ab:41:81:fe: a3:70:89:90:eb:52:9c:83:8b:f4:f5:05:c5:ae:4e:a1:f5:e3: f2:ed:0c:52:ab:aa:d1:f4:7d:58:89:95:ac:bc:fd:0a:6a:7c: 52:fd:00:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGAMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REYzQ0ExMTAvBgNVBAUTKEJCOTMyNTZFNjA3RDQyRUI2RTM0MjBEQ0M3MTM3RjIw Qjg0RDBDOEEwHhcNMjUwODIyMTYzOTE1WhcNMjUwODI5MTYzOTE1WjAYMRYwFAYD VQQDEw02OGE4OWQzMy1kNzVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlJ+3fCF8z2k6Y6pzW4hyJ/N42yY8w1LBdfqaGGtLr+iQFUAzvstPu+iI5Sxm WxVxIiyVR786WZ91eXPhKbMXmdW1b32Am5cYyHBd4Y5CxEhCbsNE/aTUbRpkm3+T bbiMY/PX6YoOEGHIzl4MLnMaALdXZLKBX+XcETO5Vv0KlH1XtI1WpY7iqnZ017oy ns3BR/0LXMwOaifKIRgDPqrJhBNACa9UGyz1pbzK6G57hsQLsboKcPzIHVukRK3R eCaZWeGwtaFZx/eZaztSQ23U4qhoJxOn/EIheJTDnr+9TVvnHOArC1kUUpYB0qgM 1ElHnooOHgQEGCiXxseRn7wpkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKN+oRTj 6Xx76x8ys7kKiz88Q/rRMB8GA1UdIwQYMBaAFLuTJW5gfULrbjQg3McTfyC4TQyK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjNDQS9FRjRGOTM3Q0Mz QTQxMUU3OTdCQkYxNUVDNEY5QUUwMi91NU1sYm1COVF1dHVOQ0RjeHhOX0lMaE5E SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U1TWxibUI5UXV0dU5DRGN4eE5fSUxoTkRJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjNDQS9FRjRGOTM3Q0MzQTQxMUU3OTdCQkYxNUVDNEY5QUUwMi91NU1sYm1COVF1 dHVOQ0RjeHhOX0lMaE5ESW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiILUHMd16Jm4fRvCUKlEhSZh/0mD8lyM7AntxPcP+mybJDAxn+A3N eR678dq5DkHwuijDdHutteh/abTyn8V616WzGcCkhMtpqh6KHQW6e4a7lfjXrh0P CNys2IKh2hPr4OsAtqnzFqOLoitiBJAM8yqJwA2mYhg1AQ1B7rufD+xkgQKTOXTi JSfuZu96KOIxk6ja35JpZCug/F2CZ723eotU9g3pjZvmRpfJ397naHySz/MoKG9e TtOU+RlKcvbDcwgTDwfbffrd7R9Z1vl+UJBkGKtBgf6jcImQ61Kcg4v09QXFrk6h 9ePy7QxSq6rR9H1YiZWsvP0KanxS/QA9 -----END CERTIFICATE-----Generated at Sat Aug 23 17:16:32 2025 by rpki-client