$ rpki-client -vvf rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.mft File: x-V5CwXg1NIJ20PcaA-3iCeYFKk.mft (raw, json) Hash identifier: JQ03E4H8JoWvr/GoURwZOIMVH+oZwfm/Hws8wI5rAuM= Subject key identifier: BA:AB:B2:7A:0B:F3:E9:36:1C:AB:4A:90:C2:B0:5B:C3:4F:62:45:D1 Authority key identifier: C7:E5:79:0B:05:E0:D4:D2:09:DB:43:DC:68:0F:B7:88:27:98:14:A9 Certificate issuer: /CN=A91E01B2/serialNumber=C7E5790B05E0D4D209DB43DC680FB788279814A9 Certificate serial: 0391 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-V5CwXg1NIJ20PcaA-3iCeYFKk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.mft Manifest number: 0385 Signing time: Sat 23 Aug 2025 01:05:41 +0000 Manifest this update: Sat 23 Aug 2025 01:05:40 +0000 Manifest next update: Sat 30 Aug 2025 01:05:40 +0000 Files and hashes: 1: x-V5CwXg1NIJ20PcaA-3iCeYFKk.crl (hash: OYx/690u1xJ72lYeP0MkSd0D87SxEANiCAFRL3lwdPA=) 2: A8E34E9CB66611ECAF76DA4CC4F9AE02.roa (hash: U+TSb4gwFFQAjrhJgD02yjkinWTnlvFp6oUJxouw0Y4=) 3: A9906244B66611ECAF76DA4CC4F9AE02.roa (hash: +CW3v5l7R9gMqeCZZxElin+bWDGaYeldrsVB5lTI+Bw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.crl rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-V5CwXg1NIJ20PcaA-3iCeYFKk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 913 (0x391) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E01B2, serialNumber=C7E5790B05E0D4D209DB43DC680FB788279814A9 Validity Not Before: Aug 23 01:05:40 2025 GMT Not After : Aug 30 01:05:40 2025 GMT Subject: CN=68a913e5-c598 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a1:dd:85:e4:78:b8:c1:8b:d5:3a:59:d7:ed: ae:f0:0e:47:6d:64:5c:c2:d2:6c:8b:4b:e8:2b:de: 5f:07:bc:c2:d0:c8:80:1b:ae:15:2a:e2:49:c1:d9: 23:6b:94:44:e4:13:dc:6b:ba:76:62:a0:ea:cc:92: 5b:00:f4:de:98:b1:69:92:18:3c:d5:73:0b:f8:71: 71:0d:27:fe:33:8b:ed:74:1c:84:bf:f2:81:e1:8b: a7:f2:93:40:f2:61:1a:00:13:2f:e9:b8:ce:ea:42: 3c:c8:38:e5:22:45:8a:e0:a8:0f:cd:a5:d9:a0:3e: b8:50:55:99:d6:4b:f8:ac:bf:d7:d0:10:fb:21:db: 87:a8:1f:4a:70:c5:af:da:76:0a:2f:d8:79:52:16: 4d:fd:6b:a6:91:ad:d8:4a:d1:47:f8:31:f4:5e:b5: d8:c6:d2:7c:81:a5:44:4d:da:37:53:4f:f6:66:bd: 2e:0a:cc:9c:dc:b3:3a:b7:ca:e8:22:0e:07:d1:ac: b1:c0:93:78:af:08:a7:3e:61:7b:e6:c1:91:ae:e5: 89:68:39:3b:db:30:1e:c1:97:47:82:06:c1:04:5b: 9f:e9:f6:d7:f3:f4:df:77:72:dc:dd:c0:ea:15:35: 4f:6d:f8:52:7e:ae:27:c6:57:2b:4f:d5:a1:0b:23: 89:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:AB:B2:7A:0B:F3:E9:36:1C:AB:4A:90:C2:B0:5B:C3:4F:62:45:D1 X509v3 Authority Key Identifier: keyid:C7:E5:79:0B:05:E0:D4:D2:09:DB:43:DC:68:0F:B7:88:27:98:14:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-V5CwXg1NIJ20PcaA-3iCeYFKk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:ec:09:a2:87:16:cb:9e:2c:f4:e3:21:0a:f9:f7:11:3d:ad: c2:45:97:01:25:ae:1d:53:85:a3:f6:5d:fd:0e:cc:a5:f3:f5: a2:a1:be:ae:2a:8e:70:0d:dc:d5:66:c6:d6:10:20:19:eb:3d: f1:8f:8a:7b:2a:41:da:22:96:7d:f9:5b:96:25:61:c6:ad:7c: 0f:ae:1f:92:32:b5:73:3b:bb:eb:fb:e0:ac:43:41:91:58:2f: 4e:d0:c6:94:c2:0a:13:cb:b8:b8:c9:58:f2:dd:4a:bc:da:59: d1:8f:2c:56:31:5f:14:5f:8c:f7:0f:83:3e:39:c8:90:3a:f7: ce:a6:83:87:43:b2:13:26:f1:0a:f5:df:8c:e1:d0:45:28:2e: f8:d0:00:54:c7:84:6f:3a:1d:3f:07:04:87:25:54:01:73:ee: f8:18:b8:54:b9:94:7b:78:e3:7c:2d:b6:39:ed:c8:85:6e:04: 24:da:1f:3e:ca:ae:78:84:69:f4:44:9e:3d:9f:cc:ff:43:4b: f6:fc:5c:fd:18:83:28:25:d1:4a:0d:b7:b5:54:05:da:81:bb: a0:df:38:07:48:76:9d:9b:18:50:96:cb:2f:8f:9e:05:1a:b8: b7:3e:80:de:47:a8:d9:f9:27:00:d6:b5:a1:75:b3:34:1d:ca: b9:84:a4:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAxQjIxMTAvBgNVBAUTKEM3RTU3OTBCMDVFMEQ0RDIwOURCNDNEQzY4MEZCNzg4 Mjc5ODE0QTkwHhcNMjUwODIzMDEwNTQwWhcNMjUwODMwMDEwNTQwWjAYMRYwFAYD VQQDEw02OGE5MTNlNS1jNTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn6HdheR4uMGL1TpZ1+2u8A5HbWRcwtJsi0voK95fB7zC0MiAG64VKuJJwdkj a5RE5BPca7p2YqDqzJJbAPTemLFpkhg81XML+HFxDSf+M4vtdByEv/KB4Yun8pNA 8mEaABMv6bjO6kI8yDjlIkWK4KgPzaXZoD64UFWZ1kv4rL/X0BD7IduHqB9KcMWv 2nYKL9h5UhZN/Wumka3YStFH+DH0XrXYxtJ8gaVETdo3U0/2Zr0uCsyc3LM6t8ro Ig4H0ayxwJN4rwinPmF75sGRruWJaDk72zAewZdHggbBBFuf6fbX8/Tfd3Lc3cDq FTVPbfhSfq4nxlcrT9WhCyOJywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLqrsnoL 8+k2HKtKkMKwW8NPYkXRMB8GA1UdIwQYMBaAFMfleQsF4NTSCdtD3GgPt4gnmBSp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDFCMi82REU5RjQxMEI2 NjMxMUVDOEQ1NEE0NDlDNEY5QUUwMi94LVY1Q3dYZzFOSUoyMFBjYUEtM2lDZVlG S2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3gtVjVDd1hnMU5JSjIwUGNhQS0zaUNlWUZLay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDFCMi82REU5RjQxMEI2NjMxMUVDOEQ1NEE0NDlDNEY5QUUwMi94LVY1Q3dYZzFO SUoyMFBjYUEtM2lDZVlGS2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBt7AmihxbLniz04yEK+fcRPa3CRZcBJa4dU4Wj9l39Dsyl8/Wiob6u Ko5wDdzVZsbWECAZ6z3xj4p7KkHaIpZ9+VuWJWHGrXwPrh+SMrVzO7vr++CsQ0GR WC9O0MaUwgoTy7i4yVjy3Uq82lnRjyxWMV8UX4z3D4M+OciQOvfOpoOHQ7ITJvEK 9d+M4dBFKC740ABUx4RvOh0/BwSHJVQBc+74GLhUuZR7eON8LbY57ciFbgQk2h8+ yq54hGn0RJ49n8z/Q0v2/Fz9GIMoJdFKDbe1VAXagbug3zgHSHadmxhQlssvj54F Gri3PoDeR6jZ+ScA1rWhdbM0Hcq5hKTB -----END CERTIFICATE-----Generated at Sat Aug 23 17:10:09 2025 by rpki-client