$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8525/52212610612F11E7BD2EDA0BC4F9AE02/5xqfIU6Aybw7LSOf-LmqtxP27bc.mft File: 5xqfIU6Aybw7LSOf-LmqtxP27bc.mft (raw, json) Hash identifier: LpDDOdvW3xEflOGlDH2HypR3g4jfmMoQyDOd0Rn500A= Subject key identifier: 32:B7:14:96:FB:89:0F:55:5D:42:79:B5:24:8A:61:E4:A3:D1:30:68 Authority key identifier: E7:1A:9F:21:4E:80:C9:BC:3B:2D:23:9F:F8:B9:AA:B7:13:F6:ED:B7 Certificate issuer: /CN=A91E8525/serialNumber=E71A9F214E80C9BC3B2D239FF8B9AAB713F6EDB7 Certificate serial: 1A00 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xqfIU6Aybw7LSOf-LmqtxP27bc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8525/52212610612F11E7BD2EDA0BC4F9AE02/5xqfIU6Aybw7LSOf-LmqtxP27bc.mft Manifest number: 19ED Signing time: Fri 22 Aug 2025 16:28:21 +0000 Manifest this update: Fri 22 Aug 2025 16:28:21 +0000 Manifest next update: Fri 29 Aug 2025 16:28:21 +0000 Files and hashes: 1: 5xqfIU6Aybw7LSOf-LmqtxP27bc.crl (hash: uLfEr3gWU8CUSu6SIVnBjf9TyFqYZv+HiObzKs/0n44=) 2: 3A21C144E51211EBB1225278C4F9AE02.roa (hash: nW5GBU8+whiRwJPpyl+4Uvg+meP7sM49SIVv5JyITRM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8525/52212610612F11E7BD2EDA0BC4F9AE02/5xqfIU6Aybw7LSOf-LmqtxP27bc.crl rsync://rpki.apnic.net/member_repository/A91E8525/52212610612F11E7BD2EDA0BC4F9AE02/5xqfIU6Aybw7LSOf-LmqtxP27bc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xqfIU6Aybw7LSOf-LmqtxP27bc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:28:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6656 (0x1a00) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8525, serialNumber=E71A9F214E80C9BC3B2D239FF8B9AAB713F6EDB7 Validity Not Before: Aug 22 16:28:21 2025 GMT Not After : Aug 29 16:28:21 2025 GMT Subject: CN=68a89aa5-fb09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:52:4e:9b:7b:ad:6a:f4:e3:6e:a2:cf:92:64: 5e:52:6f:f3:db:da:92:3f:96:14:f9:67:b0:8a:27: f9:b5:b6:db:f8:f8:30:c5:f2:b3:10:9f:84:a8:9e: 6d:ec:3f:a5:af:2c:23:33:0a:27:6a:41:2d:53:c9: 60:65:7a:0f:f4:6f:aa:43:07:61:e8:14:a3:78:34: eb:f3:da:02:da:d7:b7:f8:02:6f:b2:77:8c:d0:47: 04:7d:d1:0f:75:02:d7:cd:cf:e7:84:b2:dc:ad:05: 3b:bc:b3:ee:d1:d1:75:45:3b:7e:5c:1c:88:77:86: 40:f1:c4:9c:a5:12:20:1b:f9:7c:3c:a7:ce:af:91: e3:a6:6a:03:24:37:26:4a:d9:f0:e2:f6:51:d9:68: fe:a4:aa:67:49:a0:c6:22:ef:b4:9c:fe:e6:f2:b9: 3a:ff:7a:83:94:99:91:3f:69:59:18:02:ea:a8:e5: 97:87:8e:47:d2:f8:a1:bf:29:18:ce:f9:5f:68:19: 8b:16:00:eb:50:8f:1c:0c:da:2a:5c:8b:64:4a:01: 2a:10:a5:a2:11:d4:4d:c7:d1:60:4c:36:35:f6:94: a8:42:48:d1:16:7e:0a:a8:8f:60:2a:cc:eb:73:a6: 8c:08:34:a7:cc:c1:f2:0f:f6:3c:7d:5d:3b:bf:85: e6:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:B7:14:96:FB:89:0F:55:5D:42:79:B5:24:8A:61:E4:A3:D1:30:68 X509v3 Authority Key Identifier: keyid:E7:1A:9F:21:4E:80:C9:BC:3B:2D:23:9F:F8:B9:AA:B7:13:F6:ED:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8525/52212610612F11E7BD2EDA0BC4F9AE02/5xqfIU6Aybw7LSOf-LmqtxP27bc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xqfIU6Aybw7LSOf-LmqtxP27bc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8525/52212610612F11E7BD2EDA0BC4F9AE02/5xqfIU6Aybw7LSOf-LmqtxP27bc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d3:a3:64:8a:55:ed:87:91:d3:78:42:24:5d:0b:84:33:dd:5e: e2:e0:6d:ab:c0:12:9b:db:9d:77:91:85:13:2d:9e:8e:ae:f2: b0:d5:59:1c:1e:f0:42:0f:94:db:5d:ee:31:6f:f4:a9:3f:bb: 29:ae:5a:e0:40:c2:50:71:c2:c7:5c:3c:6c:8b:70:2c:4f:b2: 84:90:f2:e1:03:fc:05:54:5b:a3:c7:c8:22:3c:d0:2d:61:8b: d0:54:c5:72:a2:f3:a9:82:af:62:04:b1:34:88:de:8c:12:2a: 46:be:6f:c2:88:5d:d4:5c:44:20:1d:b6:f3:c1:4b:e2:e5:ee: f6:31:99:b0:f2:7f:37:51:90:f6:c0:07:01:3b:f2:81:88:a9: 20:5f:94:d6:04:63:b1:f8:5c:ce:91:6d:73:bb:f0:8a:92:42: dc:da:6d:db:43:bb:96:3e:d4:cb:8c:ae:47:d0:b9:cb:d6:87: 56:b7:31:5a:71:70:07:6e:12:64:a5:68:4d:1a:b4:62:5b:b1: 78:98:1d:47:a6:11:dd:a5:ef:26:02:d1:73:0c:d8:36:d4:07: 2d:5b:9c:88:dc:f9:94:9c:fd:2e:d1:79:0b:c4:e8:cb:38:98: c1:cc:46:45:b9:46:13:d6:22:d8:27:0b:e2:2b:eb:b9:08:d3: 13:5d:17:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGgAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg1MjUxMTAvBgNVBAUTKEU3MUE5RjIxNEU4MEM5QkMzQjJEMjM5RkY4QjlBQUI3 MTNGNkVEQjcwHhcNMjUwODIyMTYyODIxWhcNMjUwODI5MTYyODIxWjAYMRYwFAYD VQQDEw02OGE4OWFhNS1mYjA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAslJOm3utavTjbqLPkmReUm/z29qSP5YU+Wewiif5tbbb+PgwxfKzEJ+EqJ5t 7D+lrywjMwonakEtU8lgZXoP9G+qQwdh6BSjeDTr89oC2te3+AJvsneM0EcEfdEP dQLXzc/nhLLcrQU7vLPu0dF1RTt+XById4ZA8cScpRIgG/l8PKfOr5HjpmoDJDcm Stnw4vZR2Wj+pKpnSaDGIu+0nP7m8rk6/3qDlJmRP2lZGALqqOWXh45H0vihvykY zvlfaBmLFgDrUI8cDNoqXItkSgEqEKWiEdRNx9FgTDY19pSoQkjRFn4KqI9gKszr c6aMCDSnzMHyD/Y8fV07v4XmDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDK3FJb7 iQ9VXUJ5tSSKYeSj0TBoMB8GA1UdIwQYMBaAFOcanyFOgMm8Oy0jn/i5qrcT9u23 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODUyNS81MjIxMjYxMDYx MkYxMUU3QkQyRURBMEJDNEY5QUUwMi81eHFmSVU2QXlidzdMU09mLUxtcXR4UDI3 YmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV4cWZJVTZBeWJ3N0xTT2YtTG1xdHhQMjdiYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODUyNS81MjIxMjYxMDYxMkYxMUU3QkQyRURBMEJDNEY5QUUwMi81eHFmSVU2QXli dzdMU09mLUxtcXR4UDI3YmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDTo2SKVe2HkdN4QiRdC4Qz3V7i4G2rwBKb2513kYUTLZ6OrvKw1Vkc HvBCD5TbXe4xb/SpP7sprlrgQMJQccLHXDxsi3AsT7KEkPLhA/wFVFujx8giPNAt YYvQVMVyovOpgq9iBLE0iN6MEipGvm/CiF3UXEQgHbbzwUvi5e72MZmw8n83UZD2 wAcBO/KBiKkgX5TWBGOx+FzOkW1zu/CKkkLc2m3bQ7uWPtTLjK5H0LnL1odWtzFa cXAHbhJkpWhNGrRiW7F4mB1HphHdpe8mAtFzDNg21ActW5yI3PmUnP0u0XkLxOjL OJjBzEZFuUYT1iLYJwviK+u5CNMTXRe4 -----END CERTIFICATE-----Generated at Sat Aug 23 20:29:01 2025 by rpki-client