$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC38C/87048DAA310411EC83DF2C5BC4F9AE02/w5bB5QN9M19zQcouz4ImEwDN_pU.mft File: w5bB5QN9M19zQcouz4ImEwDN_pU.mft (raw, json) Hash identifier: 34Vs/1uoglPRT3ywmFPON0cozuj8GPqk87ja9dqM5dU= Subject key identifier: E5:E1:EC:A1:F5:F7:53:11:73:BD:53:EB:74:0B:9F:45:1A:0B:2E:B4 Authority key identifier: C3:96:C1:E5:03:7D:33:5F:73:41:CA:2E:CF:82:26:13:00:CD:FE:95 Certificate issuer: /CN=A91EC38C/serialNumber=C396C1E5037D335F7341CA2ECF82261300CDFE95 Certificate serial: 04DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5bB5QN9M19zQcouz4ImEwDN_pU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC38C/87048DAA310411EC83DF2C5BC4F9AE02/w5bB5QN9M19zQcouz4ImEwDN_pU.mft Manifest number: 04DA Signing time: Sat 23 Aug 2025 00:01:08 +0000 Manifest this update: Sat 23 Aug 2025 00:01:07 +0000 Manifest next update: Sat 30 Aug 2025 00:01:07 +0000 Files and hashes: 1: w5bB5QN9M19zQcouz4ImEwDN_pU.crl (hash: JCTXdpnPacLTPv6N02NCxLe83QHUJ18w7bh+YhRLpvs=) 2: FCF7126E310711ECBFFF5E62C4F9AE02.roa (hash: F3pgM3DGI+wP2jrjrPXa65ZGlXf9TnXpF1OSKK2H5GQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC38C/87048DAA310411EC83DF2C5BC4F9AE02/w5bB5QN9M19zQcouz4ImEwDN_pU.crl rsync://rpki.apnic.net/member_repository/A91EC38C/87048DAA310411EC83DF2C5BC4F9AE02/w5bB5QN9M19zQcouz4ImEwDN_pU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5bB5QN9M19zQcouz4ImEwDN_pU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1247 (0x4df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC38C, serialNumber=C396C1E5037D335F7341CA2ECF82261300CDFE95 Validity Not Before: Aug 23 00:01:07 2025 GMT Not After : Aug 30 00:01:07 2025 GMT Subject: CN=68a904c4-bcf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f4:8c:0e:cc:05:bd:09:8d:1d:3c:cd:70:0b: 44:2b:9a:95:62:45:84:be:e3:11:41:c0:63:af:15: f1:69:66:30:ab:7e:c6:0a:89:1e:ed:d3:28:73:ea: 3b:34:98:13:1b:6e:23:9f:15:f5:e3:e2:19:78:81: 61:76:dd:56:cd:7b:26:41:4f:53:22:b5:df:ac:82: a3:42:85:ac:5b:93:61:44:08:01:3c:b9:63:f3:cf: 7c:54:a7:58:84:b0:df:e1:26:96:81:df:9e:3a:d8: f7:81:78:c7:20:2b:b1:ac:f3:45:97:1b:55:65:ef: 07:16:ae:cb:0e:eb:a2:6a:f8:e8:ae:1b:a1:64:ed: 43:32:ab:d6:80:7d:b5:4f:a9:72:1c:2b:2d:5a:64: 88:05:30:e3:4e:da:74:60:78:d4:a6:9c:b5:2d:c2: 62:2b:f3:0c:23:83:17:9b:8c:06:a8:d9:3c:96:21: f6:8c:a9:a3:27:4a:83:77:69:0c:aa:93:ee:01:b3: 86:2b:3b:b2:c1:03:2b:8c:9a:1c:c6:be:40:33:c1: 74:46:53:96:e6:3f:49:df:ac:f0:6c:28:eb:a8:cd: b6:6d:25:94:d5:44:27:6c:2d:39:3f:61:2b:9c:c1: 93:9a:ad:c9:77:c7:7c:3c:2a:90:3e:22:c4:f0:c1: 4f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:E1:EC:A1:F5:F7:53:11:73:BD:53:EB:74:0B:9F:45:1A:0B:2E:B4 X509v3 Authority Key Identifier: keyid:C3:96:C1:E5:03:7D:33:5F:73:41:CA:2E:CF:82:26:13:00:CD:FE:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC38C/87048DAA310411EC83DF2C5BC4F9AE02/w5bB5QN9M19zQcouz4ImEwDN_pU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5bB5QN9M19zQcouz4ImEwDN_pU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC38C/87048DAA310411EC83DF2C5BC4F9AE02/w5bB5QN9M19zQcouz4ImEwDN_pU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:29:6f:9e:04:50:79:f9:ea:c9:c7:62:56:53:f4:7d:74:bd: d6:ab:86:84:c3:66:ba:7e:27:6c:5c:be:12:de:95:b7:68:70: f1:e9:ae:d5:bd:49:a0:bc:ee:0d:15:b1:02:cf:1b:73:e4:60: fb:42:1b:bd:79:44:b0:38:14:2c:82:21:e4:40:a4:6a:46:21: df:d0:e6:9b:07:68:91:ce:78:4f:6e:f6:33:dc:b7:4b:66:6d: b6:84:a5:66:d1:9e:cc:b0:81:25:ad:b0:56:a5:94:9b:3a:24: 20:45:20:12:3f:65:af:40:60:27:26:02:95:b6:f3:b6:a3:78: b4:69:3a:cf:b6:91:cb:c8:da:25:92:31:9b:78:1b:2b:39:81: 8c:74:e1:5c:98:2c:4d:c6:85:79:40:5c:ce:b1:7f:b1:58:a0: 37:12:ec:9b:c2:9a:06:0d:0a:e5:94:56:61:97:1f:68:ef:0d: e8:1a:a9:63:fb:98:75:4a:06:15:b8:46:52:ae:b0:46:83:f4: 52:18:17:71:bf:e3:1e:e4:e5:e3:ff:39:ad:6e:f0:70:8d:a8: a6:e2:d8:b7:cb:98:49:7d:78:3d:7b:52:6f:2f:89:6b:4c:58: a4:d1:69:a3:5c:55:b5:e2:5e:61:e7:6e:56:28:e1:0e:85:36: e1:e3:17:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUMzOEMxMTAvBgNVBAUTKEMzOTZDMUU1MDM3RDMzNUY3MzQxQ0EyRUNGODIyNjEz MDBDREZFOTUwHhcNMjUwODIzMDAwMTA3WhcNMjUwODMwMDAwMTA3WjAYMRYwFAYD VQQDEw02OGE5MDRjNC1iY2Y1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxvSMDswFvQmNHTzNcAtEK5qVYkWEvuMRQcBjrxXxaWYwq37GCoke7dMoc+o7 NJgTG24jnxX14+IZeIFhdt1WzXsmQU9TIrXfrIKjQoWsW5NhRAgBPLlj8898VKdY hLDf4SaWgd+eOtj3gXjHICuxrPNFlxtVZe8HFq7LDuuiavjorhuhZO1DMqvWgH21 T6lyHCstWmSIBTDjTtp0YHjUppy1LcJiK/MMI4MXm4wGqNk8liH2jKmjJ0qDd2kM qpPuAbOGKzuywQMrjJocxr5AM8F0RlOW5j9J36zwbCjrqM22bSWU1UQnbC05P2Er nMGTmq3Jd8d8PCqQPiLE8MFP4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOXh7KH1 91MRc71T63QLn0UaCy60MB8GA1UdIwQYMBaAFMOWweUDfTNfc0HKLs+CJhMAzf6V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzM4Qy84NzA0OERBQTMx MDQxMUVDODNERjJDNUJDNEY5QUUwMi93NWJCNVFOOU0xOXpRY291ejRJbUV3RE5f cFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3c1YkI1UU45TTE5elFjb3V6NEltRXdETl9wVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzM4Qy84NzA0OERBQTMxMDQxMUVDODNERjJDNUJDNEY5QUUwMi93NWJCNVFOOU0x OXpRY291ejRJbUV3RE5fcFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9KW+eBFB5+erJx2JWU/R9dL3Wq4aEw2a6fidsXL4S3pW3aHDx6a7V vUmgvO4NFbECzxtz5GD7Qhu9eUSwOBQsgiHkQKRqRiHf0OabB2iRznhPbvYz3LdL Zm22hKVm0Z7MsIElrbBWpZSbOiQgRSASP2WvQGAnJgKVtvO2o3i0aTrPtpHLyNol kjGbeBsrOYGMdOFcmCxNxoV5QFzOsX+xWKA3EuybwpoGDQrllFZhlx9o7w3oGqlj +5h1SgYVuEZSrrBGg/RSGBdxv+Me5OXj/zmtbvBwjaim4ti3y5hJfXg9e1JvL4lr TFik0WmjXFW14l5h525WKOEOhTbh4xee -----END CERTIFICATE-----Generated at Sat Aug 23 19:09:49 2025 by rpki-client