$ rpki-client -vvf rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft File: 5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft (raw, json) Hash identifier: PFPltBya2IanFGNcgnbp3VRCja/RokpL73pFBbzC3Xk= Subject key identifier: DA:9E:B9:36:52:E4:82:BC:39:10:F5:F7:1B:3B:0C:C2:2B:EA:C3:8D Authority key identifier: E6:75:8B:9A:37:59:82:C2:C4:D1:C7:64:9A:31:E4:CF:27:D5:A6:80 Certificate issuer: /CN=A91E554A/serialNumber=E6758B9A375982C2C4D1C7649A31E4CF27D5A680 Certificate serial: 9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nWLmjdZgsLE0cdkmjHkzyfVpoA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft Manifest number: 9D Signing time: Sat 23 Aug 2025 06:33:51 +0000 Manifest this update: Sat 23 Aug 2025 06:33:51 +0000 Manifest next update: Sat 30 Aug 2025 06:33:51 +0000 Files and hashes: 1: 5nWLmjdZgsLE0cdkmjHkzyfVpoA.crl (hash: IbKBE8sbpFGtl57+SJI1CfTuHCmo34n1XIk3Rild4Pw=) 2: 388A91E0985A11EFA6912B0EC4F9AE02.roa (hash: JjgqoANmsusAqQnFWaBmauCJuNgw+HQl/ZcBjvaDkfs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.crl rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nWLmjdZgsLE0cdkmjHkzyfVpoA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:33:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 158 (0x9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E554A, serialNumber=E6758B9A375982C2C4D1C7649A31E4CF27D5A680 Validity Not Before: Aug 23 06:33:51 2025 GMT Not After : Aug 30 06:33:51 2025 GMT Subject: CN=68a960cf-fc84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:62:ae:bf:cd:ec:51:2e:f9:e9:ff:10:c4:27: 09:e8:b6:9f:18:14:05:48:8f:5a:31:94:75:df:4d: 4e:19:b9:96:08:a1:27:71:f9:6b:ca:5d:41:03:51: 85:fa:e2:95:e4:46:ad:10:a8:69:5b:b9:30:06:7d: 59:1e:c2:cd:c8:d9:c7:bf:f8:b4:9a:ca:77:ab:8c: f5:24:3f:3d:26:40:e2:40:16:77:79:b2:28:5d:b7: 2d:16:ca:c0:f9:11:50:51:2f:0c:0b:e1:70:8d:1b: 6e:d7:98:fb:b1:cb:38:93:a2:bc:d5:e3:c9:22:e6: 7b:76:0a:19:15:cc:9e:a0:20:40:38:f4:9a:79:6c: 7c:52:ba:de:bf:3d:a3:3f:b0:ef:57:94:a0:35:0a: 42:4c:04:a6:87:63:ae:41:b8:ff:23:f3:fa:1b:42: 3a:41:e7:c1:e3:ae:0a:b1:ef:4b:4b:86:92:c7:79: 01:3f:47:11:b8:c9:bf:e1:79:bd:d9:16:ab:23:85: 62:d6:e1:9e:2a:e5:68:52:f2:22:1e:96:57:d9:c0: 05:7a:69:1c:8f:48:c6:60:76:4f:48:c6:d7:16:3b: 41:5c:74:d0:90:ec:94:fc:32:53:5e:ff:ae:52:74: 89:f0:d1:d8:5f:cc:34:93:d5:e0:1a:39:da:b6:48: da:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:9E:B9:36:52:E4:82:BC:39:10:F5:F7:1B:3B:0C:C2:2B:EA:C3:8D X509v3 Authority Key Identifier: keyid:E6:75:8B:9A:37:59:82:C2:C4:D1:C7:64:9A:31:E4:CF:27:D5:A6:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nWLmjdZgsLE0cdkmjHkzyfVpoA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:f0:67:66:e0:33:8c:f8:ac:07:4a:d9:4b:7a:e8:3d:67:e6: 52:f7:3f:d3:b6:c8:73:de:cf:a9:b2:17:4e:b9:b3:2d:1a:4e: 70:78:4b:3c:e1:e9:50:31:66:b0:0d:da:5c:19:c3:a0:63:64: 3a:c0:67:67:13:82:c9:f7:e3:5d:68:33:77:4d:27:20:51:6d: ac:40:28:29:21:21:24:5f:62:94:0a:35:a4:35:db:96:d9:f2: 16:23:4f:3a:8d:36:86:48:10:6a:26:3a:51:cb:3a:ed:9f:6f: e5:f4:39:47:74:95:3f:f7:44:c3:56:ed:ef:a6:3f:31:3b:21: 83:4a:b9:e7:58:73:fb:13:69:ad:6f:67:5e:c5:2a:6a:3a:c5: 92:d6:8f:a5:28:72:1c:b4:cd:2f:e9:bc:e6:38:29:5e:6f:31: 65:af:0a:fe:2c:20:fb:a8:5b:9c:57:f9:83:f4:1f:b9:8a:c7: 8b:a8:33:2e:6d:5d:8a:91:63:51:78:0d:ed:44:13:3c:a9:99: 29:86:0d:21:dd:19:16:f8:34:9e:00:cb:3b:41:1e:10:55:02: 49:91:6d:ce:d4:09:d2:14:45:15:3e:02:cb:7e:3a:5d:bb:ae: 04:84:aa:80:9a:c8:d3:25:69:0b:32:4d:a9:59:54:33:45:2b: 8f:06:14:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU1NEExMTAvBgNVBAUTKEU2NzU4QjlBMzc1OTgyQzJDNEQxQzc2NDlBMzFFNENG MjdENUE2ODAwHhcNMjUwODIzMDYzMzUxWhcNMjUwODMwMDYzMzUxWjAYMRYwFAYD VQQDEw02OGE5NjBjZi1mYzg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtWKuv83sUS756f8QxCcJ6LafGBQFSI9aMZR1301OGbmWCKEncflryl1BA1GF +uKV5EatEKhpW7kwBn1ZHsLNyNnHv/i0msp3q4z1JD89JkDiQBZ3ebIoXbctFsrA +RFQUS8MC+FwjRtu15j7scs4k6K81ePJIuZ7dgoZFcyeoCBAOPSaeWx8Urrevz2j P7DvV5SgNQpCTASmh2OuQbj/I/P6G0I6QefB464Kse9LS4aSx3kBP0cRuMm/4Xm9 2RarI4Vi1uGeKuVoUvIiHpZX2cAFemkcj0jGYHZPSMbXFjtBXHTQkOyU/DJTXv+u UnSJ8NHYX8w0k9XgGjnatkjaJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNqeuTZS 5IK8ORD19xs7DMIr6sONMB8GA1UdIwQYMBaAFOZ1i5o3WYLCxNHHZJox5M8n1aaA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTU0QS84MjJGQzIyMDkx RjcxMUVGQURFMTEyNjZDNEY5QUUwMi81bldMbWpkWmdzTEUwY2RrbWpIa3p5ZlZw b0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVuV0xtamRaZ3NMRTBjZGttakhrenlmVnBvQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTU0QS84MjJGQzIyMDkxRjcxMUVGQURFMTEyNjZDNEY5QUUwMi81bldMbWpkWmdz TEUwY2RrbWpIa3p5ZlZwb0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCq8Gdm4DOM+KwHStlLeug9Z+ZS9z/Ttshz3s+pshdOubMtGk5weEs8 4elQMWawDdpcGcOgY2Q6wGdnE4LJ9+NdaDN3TScgUW2sQCgpISEkX2KUCjWkNduW 2fIWI086jTaGSBBqJjpRyzrtn2/l9DlHdJU/90TDVu3vpj8xOyGDSrnnWHP7E2mt b2dexSpqOsWS1o+lKHIctM0v6bzmOClebzFlrwr+LCD7qFucV/mD9B+5iseLqDMu bV2KkWNReA3tRBM8qZkphg0h3RkW+DSeAMs7QR4QVQJJkW3O1AnSFEUVPgLLfjpd u64EhKqAmsjTJWkLMk2pWVQzRSuPBhRa -----END CERTIFICATE-----Generated at Sat Aug 23 19:04:55 2025 by rpki-client