$ rpki-client -vvf rpki.apnic.net/member_repository/A91E504E/4E3E367E960811ECA04A0086C4F9AE02/5HfTiqrEo3zG3xZlvxyICvmbe08.mft File: 5HfTiqrEo3zG3xZlvxyICvmbe08.mft (raw, json) Hash identifier: xdBtx8RpwOe69T3Y8C797mQ2kvBAlUfDtoEODnvW8KI= Subject key identifier: 5F:19:9F:63:BC:AA:20:03:94:19:5F:2B:7B:FD:EF:8B:96:08:D1:4A Authority key identifier: E4:77:D3:8A:AA:C4:A3:7C:C6:DF:16:65:BF:1C:88:0A:F9:9B:7B:4F Certificate issuer: /CN=A91E504E/serialNumber=E477D38AAAC4A37CC6DF1665BF1C880AF99B7B4F Certificate serial: 03EE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5HfTiqrEo3zG3xZlvxyICvmbe08.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E504E/4E3E367E960811ECA04A0086C4F9AE02/5HfTiqrEo3zG3xZlvxyICvmbe08.mft Manifest number: 03E0 Signing time: Sat 23 Aug 2025 00:49:53 +0000 Manifest this update: Sat 23 Aug 2025 00:49:52 +0000 Manifest next update: Sat 30 Aug 2025 00:49:52 +0000 Files and hashes: 1: 5HfTiqrEo3zG3xZlvxyICvmbe08.crl (hash: dnZQbl+jN8OgNqPNIe0CkaAqRufUKVjCMBMh/r4ASCI=) 2: 5F9FA12E0CA411ED96936D79C4F9AE02.roa (hash: 1kY42j3eWLAd8yp1AvznjQwJBoHaBnQrkaPK6EtSCdQ=) 3: 06820D08961011ECA540626AC4F9AE02.roa (hash: XbxtLk1+2CfWndcMlMOnwCxgbfEchquqUDJGfTWj61E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E504E/4E3E367E960811ECA04A0086C4F9AE02/5HfTiqrEo3zG3xZlvxyICvmbe08.crl rsync://rpki.apnic.net/member_repository/A91E504E/4E3E367E960811ECA04A0086C4F9AE02/5HfTiqrEo3zG3xZlvxyICvmbe08.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5HfTiqrEo3zG3xZlvxyICvmbe08.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:49:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1006 (0x3ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E504E, serialNumber=E477D38AAAC4A37CC6DF1665BF1C880AF99B7B4F Validity Not Before: Aug 23 00:49:52 2025 GMT Not After : Aug 30 00:49:52 2025 GMT Subject: CN=68a91030-0222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:64:54:1e:62:b3:40:f2:88:78:e4:e0:e0:da: bc:be:e3:0b:d3:fb:45:92:77:0d:44:d6:c6:52:c5: 06:e3:6f:82:f0:dd:1d:c0:cd:6d:49:77:80:5f:c1: f1:af:e9:23:9c:1a:d2:7d:a4:e4:82:62:26:65:2f: 7d:d9:f6:16:66:58:ac:ee:41:d6:91:1e:3c:4c:a6: dd:db:c1:d0:4b:00:92:37:4c:23:41:3a:d0:b5:bf: 73:ce:43:12:af:a4:eb:5d:e4:fa:fb:dc:68:57:c9: 12:26:31:c4:a6:6a:d1:28:dd:b8:c9:eb:cf:6a:b7: b3:e3:5e:90:0d:0a:7c:d4:38:00:60:1a:09:b3:c2: 7d:09:d6:2a:fe:7d:a5:cc:c2:cf:d3:1b:d2:8a:51: 77:db:0c:16:37:ad:66:01:2f:61:86:1f:dd:c4:31: 86:86:36:ea:39:86:3c:b1:b0:48:14:a9:b5:53:f2: 2d:e1:2a:5d:b0:13:28:fb:93:2c:ed:12:a3:92:15: 06:de:3b:4c:79:6b:e4:ba:be:bb:a3:8d:d5:c5:03: 88:3d:1f:2a:6c:d2:48:87:bc:fe:59:d9:9c:71:74: cf:ff:8f:f1:24:16:1c:9e:1c:52:d0:46:6e:01:36: 4c:f1:8a:0d:dc:d6:28:b2:54:10:96:71:f4:de:5d: f4:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:19:9F:63:BC:AA:20:03:94:19:5F:2B:7B:FD:EF:8B:96:08:D1:4A X509v3 Authority Key Identifier: keyid:E4:77:D3:8A:AA:C4:A3:7C:C6:DF:16:65:BF:1C:88:0A:F9:9B:7B:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E504E/4E3E367E960811ECA04A0086C4F9AE02/5HfTiqrEo3zG3xZlvxyICvmbe08.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5HfTiqrEo3zG3xZlvxyICvmbe08.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E504E/4E3E367E960811ECA04A0086C4F9AE02/5HfTiqrEo3zG3xZlvxyICvmbe08.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:5f:02:4f:a6:17:fd:bb:ad:5a:b8:9f:c1:b4:e0:c9:4d:b9: 77:a8:89:5d:47:6b:b2:5b:41:f6:75:f3:fe:bb:6d:35:e3:7d: c4:33:0d:e3:8b:6b:73:3f:dc:83:31:01:c3:d2:14:9b:54:4d: c3:1e:e5:6b:8f:e0:db:ea:88:11:63:48:fd:a7:64:e7:58:e5: 4f:80:4c:a2:01:5c:67:31:04:dd:02:33:ba:89:7f:8d:f2:90: 1d:2a:fa:93:28:67:0e:68:bc:45:85:f0:ff:04:05:ff:8b:55: 15:f2:49:6b:84:5b:1c:6e:c6:3d:ba:15:00:f3:2b:ae:59:df: 4e:50:0b:ac:7f:77:49:76:1b:23:5f:75:29:57:b2:94:22:c9: 6e:ec:84:db:b0:f2:2a:43:d2:fe:6b:53:b3:26:91:8f:68:cb: 3e:1f:85:6c:8b:c7:f3:22:b8:a3:a9:31:b2:db:b0:8d:be:2b: f7:f1:ff:c3:34:3a:2c:79:65:3d:81:bd:9b:47:75:cc:99:d9: b1:1c:9d:0f:b5:b9:07:c1:d5:3a:e3:b2:d0:1e:85:86:01:af: c2:99:ad:97:e4:86:d0:df:ab:62:b5:6f:ca:c8:5e:14:49:9a: b0:44:bc:0e:df:75:96:44:47:08:ec:39:07:ba:80:fa:21:55: 3d:cf:0c:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTUwNEUxMTAvBgNVBAUTKEU0NzdEMzhBQUFDNEEzN0NDNkRGMTY2NUJGMUM4ODBB Rjk5QjdCNEYwHhcNMjUwODIzMDA0OTUyWhcNMjUwODMwMDA0OTUyWjAYMRYwFAYD VQQDEw02OGE5MTAzMC0wMjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzmRUHmKzQPKIeOTg4Nq8vuML0/tFkncNRNbGUsUG42+C8N0dwM1tSXeAX8Hx r+kjnBrSfaTkgmImZS992fYWZlis7kHWkR48TKbd28HQSwCSN0wjQTrQtb9zzkMS r6TrXeT6+9xoV8kSJjHEpmrRKN24yevParez416QDQp81DgAYBoJs8J9CdYq/n2l zMLP0xvSilF32wwWN61mAS9hhh/dxDGGhjbqOYY8sbBIFKm1U/It4SpdsBMo+5Ms 7RKjkhUG3jtMeWvkur67o43VxQOIPR8qbNJIh7z+WdmccXTP/4/xJBYcnhxS0EZu ATZM8YoN3NYoslQQlnH03l30TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF8Zn2O8 qiADlBlfK3v974uWCNFKMB8GA1UdIwQYMBaAFOR304qqxKN8xt8WZb8ciAr5m3tP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTA0RS80RTNFMzY3RTk2 MDgxMUVDQTA0QTAwODZDNEY5QUUwMi81SGZUaXFyRW8zekczeFpsdnh5SUN2bWJl MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzVIZlRpcXJFbzN6RzN4Wmx2eHlJQ3ZtYmUwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTA0RS80RTNFMzY3RTk2MDgxMUVDQTA0QTAwODZDNEY5QUUwMi81SGZUaXFyRW8z ekczeFpsdnh5SUN2bWJlMDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZXwJPphf9u61auJ/BtODJTbl3qIldR2uyW0H2dfP+u201433EMw3j i2tzP9yDMQHD0hSbVE3DHuVrj+Db6ogRY0j9p2TnWOVPgEyiAVxnMQTdAjO6iX+N 8pAdKvqTKGcOaLxFhfD/BAX/i1UV8klrhFscbsY9uhUA8yuuWd9OUAusf3dJdhsj X3UpV7KUIslu7ITbsPIqQ9L+a1OzJpGPaMs+H4Vsi8fzIrijqTGy27CNviv38f/D NDoseWU9gb2bR3XMmdmxHJ0PtbkHwdU647LQHoWGAa/Cma2X5IbQ36titW/KyF4U SZqwRLwO33WWREcI7DkHuoD6IVU9zwxD -----END CERTIFICATE-----Generated at Sat Aug 23 20:26:00 2025 by rpki-client