$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft File: DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft (raw, json) Hash identifier: Q4EaJwA6glkiJmgNUfrXJRrbXDN2Nu7quOSS51l5cSc= Subject key identifier: 5D:BF:0C:D5:85:FA:5B:FB:E8:ED:7B:9A:81:A0:4A:3A:5D:0C:96:21 Authority key identifier: 0E:66:3C:B4:90:0E:F4:D8:22:F9:9A:BD:E2:7F:A4:03:AB:9F:4C:40 Certificate issuer: /CN=A91EDFAF/serialNumber=0E663CB4900EF4D822F99ABDE27FA403AB9F4C40 Certificate serial: AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft Manifest number: A5 Signing time: Sat 23 Aug 2025 06:31:15 +0000 Manifest this update: Sat 23 Aug 2025 06:31:15 +0000 Manifest next update: Sat 30 Aug 2025 06:31:15 +0000 Files and hashes: 1: DmY8tJAO9Ngi-Zq94n-kA6ufTEA.crl (hash: cJB2sZwCpHoyS1JwcRMhb0Wit/V1JHH1sSpR4wrU6U0=) 2: 5E89A9888CBD11EFBA479615C4F9AE02.roa (hash: Ccx7SnGjPCxsvKUBeamLN1Oa9v9jyBTBtL74lgFdLHk=) 3: 5D58A6368CBD11EFBA479615C4F9AE02.roa (hash: k2dEAv933yKqFgM4NCZBdb4Xn5r7WtBWqggONtm/gBQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.crl rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 171 (0xab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EDFAF, serialNumber=0E663CB4900EF4D822F99ABDE27FA403AB9F4C40 Validity Not Before: Aug 23 06:31:15 2025 GMT Not After : Aug 30 06:31:15 2025 GMT Subject: CN=68a96033-5ec7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:95:c7:a5:a7:73:05:8a:70:c0:2e:d5:19:f5: b9:62:72:5f:ea:0b:7c:34:36:8a:bd:c9:e1:04:0f: 08:14:9f:08:3b:17:a4:88:f0:9e:e7:eb:e2:45:e3: 02:6f:7b:aa:a6:14:9c:2d:e2:d7:cc:f9:4b:b4:ad: 7f:2c:84:f6:b1:69:57:ce:38:d1:a3:05:20:66:fa: 9c:c5:8a:9e:8d:b0:0e:e5:9a:31:7e:af:a9:71:c8: 77:ed:8b:df:41:51:52:17:b2:26:d7:dc:b1:3e:a1: 6c:df:53:6d:dd:a3:78:58:8a:d9:a1:c0:78:ea:6d: e0:a8:81:eb:69:8a:0a:ab:1b:41:51:a3:26:31:36: 89:ec:32:f4:61:7f:76:53:ca:7d:71:52:c2:dd:e9: 0e:f9:27:90:a8:ac:f5:b1:b2:e2:9a:a9:4e:e7:f2: 3e:8d:2b:75:61:a5:18:4f:c7:8d:83:dd:38:48:f0: 86:4e:d8:d5:3c:7e:6d:f4:da:92:48:3b:f3:0d:ae: c3:0c:1d:fb:e3:8e:c5:3b:fc:b2:4c:6a:88:3a:f1: fe:1f:ca:e3:20:45:df:b0:24:db:a6:d9:e6:63:86: 01:28:06:d1:27:e3:91:3e:cc:3a:b7:d8:73:c6:20: 75:1e:29:a3:98:c7:31:a9:bb:78:2b:26:b9:e1:84: 7c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:BF:0C:D5:85:FA:5B:FB:E8:ED:7B:9A:81:A0:4A:3A:5D:0C:96:21 X509v3 Authority Key Identifier: keyid:0E:66:3C:B4:90:0E:F4:D8:22:F9:9A:BD:E2:7F:A4:03:AB:9F:4C:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:e8:05:78:65:74:e0:3f:82:0b:ad:5f:38:d2:a1:96:e7:8b: 78:ce:2e:c8:6f:96:fd:65:1a:ce:d3:46:4b:46:03:df:26:d1: 1d:f3:64:e3:55:46:7f:7f:f9:b5:b8:97:52:c5:a9:40:26:37: 53:95:4e:68:25:68:63:b2:11:53:41:14:57:f8:07:b6:5b:d5: f4:90:c3:8d:3e:00:87:54:63:dd:9e:a1:35:37:37:36:8c:3c: e8:ae:22:a4:8f:f4:b2:86:57:d3:33:ea:1f:d5:e3:b2:30:51: 19:15:56:ad:db:d7:76:de:3b:81:80:3a:1e:1b:d8:3c:2a:0b: 60:bb:e7:e0:67:f3:33:09:b8:53:c1:c2:20:1f:36:a9:be:11: b0:fb:18:54:33:43:1e:c2:c2:c6:d9:c6:44:c3:67:7f:a2:d0: f6:88:96:bf:df:ec:03:22:fd:a9:77:58:6e:91:ab:1b:7d:6b: eb:b3:40:e8:69:31:35:ab:5d:d2:c0:ea:b4:4f:de:cd:18:32: 8b:1f:74:bb:f2:bb:17:aa:90:cf:82:95:6f:21:ee:39:12:bf: c0:f9:6a:25:18:2a:13:88:c7:34:fe:84:44:e5:1a:93:18:cd: 01:ce:80:7f:3e:c7:b5:7c:38:0e:d0:5e:f3:56:bf:cc:2f:fa: d1:a6:2d:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RURGQUYxMTAvBgNVBAUTKDBFNjYzQ0I0OTAwRUY0RDgyMkY5OUFCREUyN0ZBNDAz QUI5RjRDNDAwHhcNMjUwODIzMDYzMTE1WhcNMjUwODMwMDYzMTE1WjAYMRYwFAYD VQQDEw02OGE5NjAzMy01ZWM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqZXHpadzBYpwwC7VGfW5YnJf6gt8NDaKvcnhBA8IFJ8IOxekiPCe5+viReMC b3uqphScLeLXzPlLtK1/LIT2sWlXzjjRowUgZvqcxYqejbAO5Zoxfq+pcch37Yvf QVFSF7Im19yxPqFs31Nt3aN4WIrZocB46m3gqIHraYoKqxtBUaMmMTaJ7DL0YX92 U8p9cVLC3ekO+SeQqKz1sbLimqlO5/I+jSt1YaUYT8eNg904SPCGTtjVPH5t9NqS SDvzDa7DDB37447FO/yyTGqIOvH+H8rjIEXfsCTbptnmY4YBKAbRJ+ORPsw6t9hz xiB1HimjmMcxqbt4Kya54YR8eQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF2/DNWF +lv76O17moGgSjpdDJYhMB8GA1UdIwQYMBaAFA5mPLSQDvTYIvmaveJ/pAOrn0xA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREZBRi85N0JFOTMwRThD QkMxMUVGQkYyMjAwMTJDNEY5QUUwMi9EbVk4dEpBTzlOZ2ktWnE5NG4ta0E2dWZU RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RtWTh0SkFPOU5naS1acTk0bi1rQTZ1ZlRFQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF REZBRi85N0JFOTMwRThDQkMxMUVGQkYyMjAwMTJDNEY5QUUwMi9EbVk4dEpBTzlO Z2ktWnE5NG4ta0E2dWZURUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCS6AV4ZXTgP4ILrV840qGW54t4zi7Ib5b9ZRrO00ZLRgPfJtEd82Tj VUZ/f/m1uJdSxalAJjdTlU5oJWhjshFTQRRX+Ae2W9X0kMONPgCHVGPdnqE1Nzc2 jDzoriKkj/SyhlfTM+of1eOyMFEZFVat29d23juBgDoeG9g8Kgtgu+fgZ/MzCbhT wcIgHzapvhGw+xhUM0MewsLG2cZEw2d/otD2iJa/3+wDIv2pd1hukasbfWvrs0Do aTE1q13SwOq0T97NGDKLH3S78rsXqpDPgpVvIe45Er/A+WolGCoTiMc0/oRE5RqT GM0BzoB/Pse1fDgO0F7zVr/ML/rRpi1B -----END CERTIFICATE-----Generated at Sat Aug 23 20:27:03 2025 by rpki-client