$ rpki-client -vvf rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.mft File: 5h-hJKYY4lZnzDHM_EkWzgdv2lc.mft (raw, json) Hash identifier: IJTEUNGv6NRHLU6sALDjKFfOm1wQap4I0F3nV6T3Q/U= Subject key identifier: DF:06:09:6D:5B:6D:EB:92:9E:91:6B:68:07:4C:C5:4C:7C:2E:28:FD Authority key identifier: E6:1F:A1:24:A6:18:E2:56:67:CC:31:CC:FC:49:16:CE:07:6F:DA:57 Certificate issuer: /CN=A91F35BB/serialNumber=E61FA124A618E25667CC31CCFC4916CE076FDA57 Certificate serial: 04E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5h-hJKYY4lZnzDHM_EkWzgdv2lc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.mft Manifest number: 04E7 Signing time: Fri 22 Aug 2025 23:54:34 +0000 Manifest this update: Fri 22 Aug 2025 23:54:34 +0000 Manifest next update: Fri 29 Aug 2025 23:54:34 +0000 Files and hashes: 1: 5h-hJKYY4lZnzDHM_EkWzgdv2lc.crl (hash: 6ys6eGQQP+1ipzi93fq/6Nkwo+cmLUenF9lOeGuX2ps=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.crl rsync://rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5h-hJKYY4lZnzDHM_EkWzgdv2lc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1255 (0x4e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F35BB, serialNumber=E61FA124A618E25667CC31CCFC4916CE076FDA57 Validity Not Before: Aug 22 23:54:34 2025 GMT Not After : Aug 29 23:54:34 2025 GMT Subject: CN=68a9033a-d93f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:32:51:60:bc:3f:68:b5:0b:73:99:de:1e:43: b3:80:13:d6:88:27:1e:7d:3e:22:03:da:8b:9e:fb: 75:5a:fb:0d:af:a4:f6:52:2f:09:38:30:28:d9:6b: 0d:28:ad:c1:8b:16:53:d7:0e:1c:d9:0e:9b:0f:89: 42:f5:08:80:fb:b9:e8:bd:03:39:60:d9:f5:24:55: be:0b:6f:9b:76:d9:ab:cf:51:d5:7a:44:c9:aa:23: 1d:eb:ae:4b:9b:35:bc:be:bc:7d:4e:24:03:6a:99: 3b:7a:de:5d:a5:fa:4b:be:1f:8e:4b:b5:51:05:f2: b3:c9:7b:8b:46:00:be:5e:26:11:b1:d8:1c:22:de: 5b:4f:cd:8a:a2:7c:b3:7b:41:1a:cf:96:f9:ab:ce: 5e:20:bf:1a:d5:09:34:00:0d:24:86:3e:62:ed:3a: 62:da:da:19:7d:1d:b7:bc:76:18:ad:5f:a7:a7:31: c8:e5:9c:da:68:ce:ac:00:ee:9d:c1:08:30:39:2a: c9:4f:d9:34:a4:28:d5:b5:b2:e2:b6:45:0b:a4:6d: ea:27:2c:55:37:3a:14:d4:91:d1:9d:7e:f2:fb:d3: 58:50:c9:14:7c:c2:90:80:41:97:4a:dd:c4:a1:04: 5a:35:a3:7d:ad:45:f0:46:1e:ad:07:96:21:32:5f: f6:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:06:09:6D:5B:6D:EB:92:9E:91:6B:68:07:4C:C5:4C:7C:2E:28:FD X509v3 Authority Key Identifier: keyid:E6:1F:A1:24:A6:18:E2:56:67:CC:31:CC:FC:49:16:CE:07:6F:DA:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5h-hJKYY4lZnzDHM_EkWzgdv2lc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:76:46:2a:e8:29:f2:6c:41:c8:cb:bf:c7:66:79:d7:6f:f2: 2e:0c:d6:04:58:da:0d:19:45:50:7a:af:b9:ab:86:75:e3:2f: b2:72:3c:cf:c7:ca:c9:6c:92:b8:eb:83:7d:fd:12:16:79:71: 8c:8a:64:de:8f:b7:79:f5:0b:9b:3e:74:d4:72:85:57:b2:da: 63:e2:9a:25:98:ea:40:2f:a5:a0:ea:33:34:75:48:a7:52:b0: a0:3a:d3:41:40:fa:37:74:bd:af:cb:27:44:fd:5d:ca:ee:7e: bc:44:41:17:c7:fa:5b:df:bd:9c:60:43:70:9f:94:89:c6:9c: 12:b6:8d:01:2a:56:bd:52:da:d1:98:ba:2a:ed:39:dc:83:25: 5a:38:7a:24:07:bd:95:a1:9f:c6:2e:d0:17:17:cc:bc:38:0c: 7c:e8:ec:af:0a:4c:ca:73:57:af:2a:2d:62:06:de:be:99:2c: 7c:b7:e7:d0:5d:a7:8e:93:25:52:c7:03:5e:9c:4f:8a:36:80: 76:f8:91:41:83:a4:ca:4b:1d:0c:34:63:54:ba:5e:c3:b3:15: 1a:e2:64:6d:b6:95:d0:5e:8f:07:4a:13:7b:3a:d3:20:52:29: c5:e9:88:ac:0d:99:d9:e0:15:12:f4:71:93:50:07:9e:fe:20: de:9b:ab:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM1QkIxMTAvBgNVBAUTKEU2MUZBMTI0QTYxOEUyNTY2N0NDMzFDQ0ZDNDkxNkNF MDc2RkRBNTcwHhcNMjUwODIyMjM1NDM0WhcNMjUwODI5MjM1NDM0WjAYMRYwFAYD VQQDEw02OGE5MDMzYS1kOTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtzJRYLw/aLULc5neHkOzgBPWiCcefT4iA9qLnvt1WvsNr6T2Ui8JODAo2WsN KK3BixZT1w4c2Q6bD4lC9QiA+7novQM5YNn1JFW+C2+bdtmrz1HVekTJqiMd665L mzW8vrx9TiQDapk7et5dpfpLvh+OS7VRBfKzyXuLRgC+XiYRsdgcIt5bT82Konyz e0Eaz5b5q85eIL8a1Qk0AA0khj5i7Tpi2toZfR23vHYYrV+npzHI5ZzaaM6sAO6d wQgwOSrJT9k0pCjVtbLitkULpG3qJyxVNzoU1JHRnX7y+9NYUMkUfMKQgEGXSt3E oQRaNaN9rUXwRh6tB5YhMl/2XwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN8GCW1b beuSnpFraAdMxUx8Lij9MB8GA1UdIwQYMBaAFOYfoSSmGOJWZ8wxzPxJFs4Hb9pX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzVCQi8wNzYzN0QwMjI3 RkIxMUVDODg4MEQxNzBDNEY5QUUwMi81aC1oSktZWTRsWm56REhNX0VrV3pnZHYy bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVoLWhKS1lZNGxabnpESE1fRWtXemdkdjJsYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzVCQi8wNzYzN0QwMjI3RkIxMUVDODg4MEQxNzBDNEY5QUUwMi81aC1oSktZWTRs Wm56REhNX0VrV3pnZHYybGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAldkYq6CnybEHIy7/HZnnXb/IuDNYEWNoNGUVQeq+5q4Z14y+ycjzP x8rJbJK464N9/RIWeXGMimTej7d59QubPnTUcoVXstpj4polmOpAL6Wg6jM0dUin UrCgOtNBQPo3dL2vyydE/V3K7n68REEXx/pb372cYENwn5SJxpwSto0BKla9UtrR mLoq7TncgyVaOHokB72VoZ/GLtAXF8y8OAx86OyvCkzKc1evKi1iBt6+mSx8t+fQ XaeOkyVSxwNenE+KNoB2+JFBg6TKSx0MNGNUul7DsxUa4mRttpXQXo8HShN7OtMg UinF6YisDZnZ4BUS9HGTUAee/iDem6v4 -----END CERTIFICATE-----Generated at Sat Aug 23 17:08:00 2025 by rpki-client