$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft File: G5HVFg99VrcFqFFsahz0L0ln71Y.mft (raw, json) Hash identifier: oXDr/weEhJ2N6mPQxJHR4bVDKptkfUmWHfbtQBfYfGU= Subject key identifier: D5:89:4A:5C:4B:48:6A:1F:39:C8:E7:A6:57:BC:B9:66:76:51:76:62 Authority key identifier: 1B:91:D5:16:0F:7D:56:B7:05:A8:51:6C:6A:1C:F4:2F:49:67:EF:56 Certificate issuer: /CN=A91EF554/serialNumber=1B91D5160F7D56B705A8516C6A1CF42F4967EF56 Certificate serial: 096B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G5HVFg99VrcFqFFsahz0L0ln71Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft Manifest number: 0963 Signing time: Fri 22 Aug 2025 20:17:42 +0000 Manifest this update: Fri 22 Aug 2025 20:17:41 +0000 Manifest next update: Fri 29 Aug 2025 20:17:41 +0000 Files and hashes: 1: G5HVFg99VrcFqFFsahz0L0ln71Y.crl (hash: 30y83LvlArhpA+M95jXqI1uctezsdbwQgpkzq6oRKS4=) 2: 156CEB62DC6011ECB2698C14C4F9AE02.roa (hash: reuaGLtn1xD8mIcBhpyoMRgE/LzBHNExqumLX0mZnsc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.crl rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G5HVFg99VrcFqFFsahz0L0ln71Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:17:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2411 (0x96b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF554, serialNumber=1B91D5160F7D56B705A8516C6A1CF42F4967EF56 Validity Not Before: Aug 22 20:17:41 2025 GMT Not After : Aug 29 20:17:41 2025 GMT Subject: CN=68a8d066-1efd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:8f:a2:35:92:b7:10:b3:39:81:d5:ed:85:db: e3:cf:da:fd:88:58:58:93:91:fa:3e:9b:a2:af:d8: 53:57:b1:b5:f2:57:b6:4f:03:55:4a:3c:3e:00:9f: ac:7b:f3:eb:8f:38:64:8e:74:61:c0:83:95:ee:5c: fa:3a:3f:59:11:77:f5:ed:b2:a0:2b:b8:27:bb:a4: 12:81:7e:5b:bc:7f:e2:97:b0:2f:4a:a5:69:8d:e3: 32:ba:d3:9b:c2:b6:25:74:e6:f6:da:d3:c1:3d:e5: 02:34:56:d8:49:8c:93:ca:18:90:37:5e:66:92:54: 91:7b:81:8c:29:21:ec:e9:0f:0a:37:97:b3:d1:6d: b2:39:69:d2:74:75:54:12:43:13:8b:eb:8c:f0:09: b9:59:36:56:21:26:71:29:54:f5:f8:40:c9:c7:4a: 46:ff:1b:9d:0c:b8:0b:32:9b:8e:5c:ca:d1:d8:4f: e7:a5:3b:c2:c2:03:b4:db:04:f0:a2:76:f3:c0:bd: 4c:e2:2c:dc:be:f2:71:26:9e:5f:36:ad:98:68:30: d1:7d:60:4e:8b:b4:50:7e:8c:f1:a1:ad:f8:e1:28: 45:46:18:81:d5:97:4d:84:af:43:8a:b2:ba:d2:d8: a7:b8:d1:7b:72:a1:82:ed:06:22:00:f6:95:f5:05: cf:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:89:4A:5C:4B:48:6A:1F:39:C8:E7:A6:57:BC:B9:66:76:51:76:62 X509v3 Authority Key Identifier: keyid:1B:91:D5:16:0F:7D:56:B7:05:A8:51:6C:6A:1C:F4:2F:49:67:EF:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G5HVFg99VrcFqFFsahz0L0ln71Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:8b:cc:13:1f:8c:b5:7e:b9:16:6b:48:15:ce:41:4a:e5:5e: db:0a:08:fa:fb:66:51:07:97:b0:23:ec:cc:9b:c4:3c:c7:88: a6:41:3c:fc:ec:55:6d:b6:c4:88:ab:5c:f2:3d:e9:8f:86:f2: 2b:fb:06:25:1c:a5:e9:34:08:4e:e5:7e:6b:6b:f3:2d:c9:0d: 60:d5:5e:1e:64:68:fc:bc:3e:e2:6b:85:65:5b:68:ef:e4:41: 9e:d5:01:d4:a0:a4:c7:57:7f:37:6a:21:73:14:8e:51:38:7c: 48:bb:e3:97:44:a1:ea:26:75:50:b0:ad:79:d4:56:1c:4f:95: e8:e4:bd:41:49:b2:3b:80:0f:d6:6f:a6:5e:b1:0e:28:0a:83: bf:7d:7a:7b:1b:5d:4e:09:6e:81:8b:f2:16:b2:f9:9f:26:37: 6a:04:ec:53:0f:f6:3d:21:7c:da:76:3b:66:9a:d8:05:01:0c: c6:15:64:d4:55:2a:67:d3:2f:78:52:73:74:ba:0d:38:06:2b: f1:b7:39:2b:fd:b8:a0:6d:8e:77:d4:13:6a:4b:e7:fc:70:58: 54:b3:3a:06:45:4d:93:2b:4e:bc:91:88:74:26:42:fe:32:32: 67:f3:cd:5d:2c:4c:fb:a2:21:90:02:be:c5:21:fa:99:80:51: 43:cd:2f:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCWswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY1NTQxMTAvBgNVBAUTKDFCOTFENTE2MEY3RDU2QjcwNUE4NTE2QzZBMUNGNDJG NDk2N0VGNTYwHhcNMjUwODIyMjAxNzQxWhcNMjUwODI5MjAxNzQxWjAYMRYwFAYD VQQDEw02OGE4ZDA2Ni0xZWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn4+iNZK3ELM5gdXthdvjz9r9iFhYk5H6Ppuir9hTV7G18le2TwNVSjw+AJ+s e/PrjzhkjnRhwIOV7lz6Oj9ZEXf17bKgK7gnu6QSgX5bvH/il7AvSqVpjeMyutOb wrYldOb22tPBPeUCNFbYSYyTyhiQN15mklSRe4GMKSHs6Q8KN5ez0W2yOWnSdHVU EkMTi+uM8Am5WTZWISZxKVT1+EDJx0pG/xudDLgLMpuOXMrR2E/npTvCwgO02wTw onbzwL1M4izcvvJxJp5fNq2YaDDRfWBOi7RQfozxoa344ShFRhiB1ZdNhK9DirK6 0tinuNF7cqGC7QYiAPaV9QXPxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNWJSlxL SGofOcjnple8uWZ2UXZiMB8GA1UdIwQYMBaAFBuR1RYPfVa3BahRbGoc9C9JZ+9W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjU1NC9FQjFDQkJFMjlF NUIxMUVBQjI0OEZDNTFDNEY5QUUwMi9HNUhWRmc5OVZyY0ZxRkZzYWh6MEwwbG43 MVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0c1SFZGZzk5VnJjRnFGRnNhaHowTDBsbjcxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjU1NC9FQjFDQkJFMjlFNUIxMUVBQjI0OEZDNTFDNEY5QUUwMi9HNUhWRmc5OVZy Y0ZxRkZzYWh6MEwwbG43MVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEi8wTH4y1frkWa0gVzkFK5V7bCgj6+2ZRB5ewI+zMm8Q8x4imQTz8 7FVttsSIq1zyPemPhvIr+wYlHKXpNAhO5X5ra/MtyQ1g1V4eZGj8vD7ia4VlW2jv 5EGe1QHUoKTHV383aiFzFI5ROHxIu+OXRKHqJnVQsK151FYcT5Xo5L1BSbI7gA/W b6ZesQ4oCoO/fXp7G11OCW6Bi/IWsvmfJjdqBOxTD/Y9IXzadjtmmtgFAQzGFWTU VSpn0y94UnN0ug04Bivxtzkr/bigbY531BNqS+f8cFhUszoGRU2TK068kYh0JkL+ MjJn881dLEz7oiGQAr7FIfqZgFFDzS87 -----END CERTIFICATE-----Generated at Sun Aug 24 03:33:10 2025 by rpki-client