$ rpki-client -vvf rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft File: C5I347CGtYw82c5v1JrCYffVJaM.mft (raw, json) Hash identifier: UwDHDGXCru6EL48tTatU7qjxVDghRHns5yqdLMDceOc= Subject key identifier: EA:83:35:D6:6C:B0:4A:94:AB:CD:EC:35:FD:E9:6B:88:D1:F1:DD:93 Authority key identifier: 0B:92:37:E3:B0:86:B5:8C:3C:D9:CE:6F:D4:9A:C2:61:F7:D5:25:A3 Certificate issuer: /CN=A91F08FA/serialNumber=0B9237E3B086B58C3CD9CE6FD49AC261F7D525A3 Certificate serial: 6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C5I347CGtYw82c5v1JrCYffVJaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft Manifest number: 68 Signing time: Sat 23 Aug 2025 07:14:49 +0000 Manifest this update: Sat 23 Aug 2025 07:14:48 +0000 Manifest next update: Sat 30 Aug 2025 07:14:48 +0000 Files and hashes: 1: C5I347CGtYw82c5v1JrCYffVJaM.crl (hash: QutqQJKDlyXuDL9dtn0gnOcKLNxFNI6CYfZkqMzzShs=) 2: B4F27262FA2911EFA783CE2DC4F9AE02.roa (hash: bP9/t2AlBY53g2t6Q5eQ3rldZs73eo2gwKpDvHbyV4Y=) 3: 9C9C1046F7CD11EF9245601CC4F9AE02.roa (hash: DqTJbrCn4Uj3CYLjBwjQvRunEdKhXtsy8A7Y63yZ9r4=) 4: 24E20F9E6B7011F0ACA1BB56C4F9AE02.roa (hash: LBvJJ/XeKAW7YpPt8QijWt6ARJJn+Uyg1XhvCYuwjks=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.crl rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C5I347CGtYw82c5v1JrCYffVJaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:10:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108 (0x6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F08FA, serialNumber=0B9237E3B086B58C3CD9CE6FD49AC261F7D525A3 Validity Not Before: Aug 23 07:14:48 2025 GMT Not After : Aug 30 07:14:48 2025 GMT Subject: CN=68a96a69-08da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8c:1f:f4:db:3e:b4:5d:50:e9:56:f0:3c:8d: 7a:d3:dd:61:88:56:11:b5:da:aa:f9:3c:1b:bc:2f: b0:3b:f9:de:4f:06:b8:cb:7d:ec:3f:67:cb:9a:8a: dc:42:da:74:f5:36:50:d2:86:7b:fa:b3:4b:1e:5a: fb:21:f6:71:f2:5a:e3:99:a6:df:ce:39:ca:5c:7e: 08:7a:89:78:1d:aa:dc:08:44:70:de:b7:87:3f:10: 8b:7d:e3:11:03:19:a8:7f:9f:61:ba:b6:cd:98:0b: 27:08:2c:87:b1:42:bd:93:0a:15:16:9e:ac:ce:f5: 4a:e1:d4:d7:54:4c:54:10:ed:ac:18:31:ee:2e:0c: 66:4c:07:d1:6c:fa:4a:30:95:6a:95:80:e1:c0:16: 38:fd:9e:3f:dd:a5:66:74:97:8c:cb:4a:ee:b9:cf: 58:00:65:77:7c:fe:49:e8:de:2b:45:b7:28:57:ca: 55:93:c1:fc:cf:6b:d8:10:b2:4a:b8:e9:cc:f1:49: c4:e0:db:bb:84:7c:f2:11:cd:3b:af:d4:c1:2c:fc: 1c:68:87:af:1e:6c:5b:41:bf:12:40:d9:77:ae:89: d0:68:58:71:c2:fa:6f:54:de:50:d8:b6:e0:cc:a0: d7:08:fa:88:47:28:aa:b1:5d:f9:1b:89:08:37:d4: ba:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:83:35:D6:6C:B0:4A:94:AB:CD:EC:35:FD:E9:6B:88:D1:F1:DD:93 X509v3 Authority Key Identifier: keyid:0B:92:37:E3:B0:86:B5:8C:3C:D9:CE:6F:D4:9A:C2:61:F7:D5:25:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C5I347CGtYw82c5v1JrCYffVJaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:a5:77:18:ac:ff:14:6f:6d:13:aa:0f:48:5f:11:a4:07:c5: eb:ec:b6:38:85:4c:86:67:f2:c0:a7:1a:c9:b6:f0:af:5d:f2: d5:83:4d:ce:85:a9:72:cb:55:e4:b8:78:3b:a1:cb:75:ba:6e: 96:2b:06:44:8b:a6:98:23:2e:b5:d7:da:66:12:89:39:55:7c: 63:79:37:1a:b3:7d:55:e7:66:2c:99:3e:cb:18:b1:db:23:b3: 59:dd:db:27:8f:d0:ad:39:60:c5:cf:f2:80:14:1a:f9:3f:dd: 4d:ef:fe:4c:4f:5b:4f:0f:7d:e8:d5:c6:98:4b:5f:d1:f1:7a: 98:e0:ab:85:4e:88:63:f4:cb:01:a0:1a:11:cd:98:66:39:3a: 21:3f:6f:b9:e5:0b:c7:2c:41:3c:26:c2:0e:03:24:dd:51:c3: be:66:0c:fb:81:e6:f3:28:17:c8:44:57:8f:b1:b0:cc:c1:f4: cf:5b:af:64:ee:24:67:bd:c1:72:e9:c5:20:10:9a:c7:fe:e8: 30:df:fd:df:ea:09:a0:3c:92:72:2e:44:99:7f:b6:1f:e7:4c: 1b:77:9d:18:3e:13:72:d7:52:94:9f:88:ac:b9:40:6f:de:c8: 2e:09:cc:86:70:be:a3:2d:2d:e9:d9:1e:16:10:c7:07:57:49: 7f:18:ee:b0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MDhGQTExMC8GA1UEBRMoMEI5MjM3RTNCMDg2QjU4QzNDRDlDRTZGRDQ5QUMyNjFG N0Q1MjVBMzAeFw0yNTA4MjMwNzE0NDhaFw0yNTA4MzAwNzE0NDhaMBgxFjAUBgNV BAMTDTY4YTk2YTY5LTA4ZGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCijB/02z60XVDpVvA8jXrT3WGIVhG12qr5PBu8L7A7+d5PBrjLfew/Z8uaitxC 2nT1NlDShnv6s0seWvsh9nHyWuOZpt/OOcpcfgh6iXgdqtwIRHDet4c/EIt94xED Gah/n2G6ts2YCycILIexQr2TChUWnqzO9Urh1NdUTFQQ7awYMe4uDGZMB9Fs+kow lWqVgOHAFjj9nj/dpWZ0l4zLSu65z1gAZXd8/kno3itFtyhXylWTwfzPa9gQskq4 6czxScTg27uEfPIRzTuv1MEs/Bxoh68ebFtBvxJA2XeuidBoWHHC+m9U3lDYtuDM oNcI+ohHKKqxXfkbiQg31Lr7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU6oM11myw SpSrzew1/elriNHx3ZMwHwYDVR0jBBgwFoAUC5I347CGtYw82c5v1JrCYffVJaMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYwOEZBL0QzN0Y2MjVDRTcz RDExRUY4QTA0NjIxN0M0RjlBRTAyL0M1STM0N0NHdFl3ODJjNXYxSnJDWWZmVkph TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQzVJMzQ3Q0d0WXc4MmM1djFKckNZZmZWSmFNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYw OEZBL0QzN0Y2MjVDRTczRDExRUY4QTA0NjIxN0M0RjlBRTAyL0M1STM0N0NHdFl3 ODJjNXYxSnJDWWZmVkphTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEKldxis/xRvbROqD0hfEaQHxevstjiFTIZn8sCnGsm28K9d8tWDTc6F qXLLVeS4eDuhy3W6bpYrBkSLppgjLrXX2mYSiTlVfGN5NxqzfVXnZiyZPssYsdsj s1nd2yeP0K05YMXP8oAUGvk/3U3v/kxPW08PfejVxphLX9Hxepjgq4VOiGP0ywGg GhHNmGY5OiE/b7nlC8csQTwmwg4DJN1Rw75mDPuB5vMoF8hEV4+xsMzB9M9br2Tu JGe9wXLpxSAQmsf+6DDf/d/qCaA8knIuRJl/th/nTBt3nRg+E3LXUpSfiKy5QG/e yC4JzIZwvqMtLenZHhYQxwdXSX8Y7rA= -----END CERTIFICATE-----Generated at Sat Aug 23 10:24:59 2025 by rpki-client