$ rpki-client -vvf rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.mft File: 5L99WWC2svPFIUHvK2Aq0RT0DKg.mft (raw, json) Hash identifier: 3WeWbtM+XYlwg0szE0oo97EbBtSTGIVf663hf5rjecI= Subject key identifier: 5C:34:44:E0:40:71:AC:5B:00:D0:E2:7C:62:1B:75:58:FE:E1:6F:A1 Authority key identifier: E4:BF:7D:59:60:B6:B2:F3:C5:21:41:EF:2B:60:2A:D1:14:F4:0C:A8 Certificate issuer: /CN=A91F53A5/serialNumber=E4BF7D5960B6B2F3C52141EF2B602AD114F40CA8 Certificate serial: 0329 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5L99WWC2svPFIUHvK2Aq0RT0DKg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.mft Manifest number: 0325 Signing time: Sat 23 Aug 2025 01:22:44 +0000 Manifest this update: Sat 23 Aug 2025 01:22:43 +0000 Manifest next update: Sat 30 Aug 2025 01:22:43 +0000 Files and hashes: 1: 5L99WWC2svPFIUHvK2Aq0RT0DKg.crl (hash: EulxVBDlVBDWbaMLzhz+sbjSPtOtWIEzpOdQFEuY2mU=) 2: 99C51F96DA6D11EC86CE4D59C4F9AE02.roa (hash: nd3BoBWmWncY6CXZjinblw8tRKQ0C9HJdvIgBJwhEHY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.crl rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5L99WWC2svPFIUHvK2Aq0RT0DKg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:22:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 809 (0x329) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F53A5, serialNumber=E4BF7D5960B6B2F3C52141EF2B602AD114F40CA8 Validity Not Before: Aug 23 01:22:43 2025 GMT Not After : Aug 30 01:22:43 2025 GMT Subject: CN=68a917e3-a3b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9e:23:3e:cc:67:d2:b8:85:05:86:e3:e5:be: 93:33:7f:60:40:79:f4:dd:3f:82:47:0f:27:6c:69: 68:d6:b0:cb:97:90:a5:19:d8:f7:6e:6a:ba:bc:50: d6:d1:5e:49:08:9c:89:3e:59:00:d9:97:2c:c8:04: 12:98:9e:9e:d3:26:6d:42:23:b9:4f:e2:30:e4:3d: 24:38:40:01:f2:21:ee:0e:19:e2:42:82:63:1f:e1: 53:d7:4e:01:35:18:66:26:4b:7f:5d:c4:7b:f1:55: 3b:59:fc:01:dc:72:d2:33:ff:71:a6:3f:ff:42:76: f7:38:22:f1:af:c6:3f:29:d1:35:cc:cc:34:4f:d6: 98:3e:20:03:39:c5:97:3a:01:34:4f:88:ec:fc:d5: 7a:47:b2:27:e7:3d:42:bc:e9:74:5b:00:b4:9d:2a: bf:bf:36:01:73:fc:b8:31:ec:a9:bf:38:cb:b9:ae: 65:f1:53:67:66:70:cf:2a:fb:00:a5:5a:fb:ea:c3: ef:d1:b1:c1:5a:32:ae:7d:24:f6:9d:77:d6:8c:8e: 7e:50:51:67:c5:ef:0c:c7:8b:bb:76:ec:b8:ba:34: c9:a2:40:af:55:68:dc:d9:eb:8c:36:91:81:0a:b1: 1a:68:55:d2:10:00:c3:42:92:b3:9e:d2:af:19:9c: 35:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:34:44:E0:40:71:AC:5B:00:D0:E2:7C:62:1B:75:58:FE:E1:6F:A1 X509v3 Authority Key Identifier: keyid:E4:BF:7D:59:60:B6:B2:F3:C5:21:41:EF:2B:60:2A:D1:14:F4:0C:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5L99WWC2svPFIUHvK2Aq0RT0DKg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:35:e1:02:61:cd:37:d1:e1:ea:2d:45:a8:0b:59:21:51:de: 12:43:82:2a:29:92:2c:37:81:7b:fd:1f:6c:9e:af:75:02:52: a8:4f:d1:6f:0c:26:1d:6e:52:d4:de:b5:fc:67:55:7c:af:42: 38:26:e8:07:71:cc:17:ee:26:21:bc:5d:88:8e:84:75:53:c8: 47:f8:8b:57:b6:bc:b9:43:3a:c1:02:db:f6:b4:47:ee:8e:bd: b6:11:99:0b:fd:1f:73:0a:2a:c7:25:55:d9:48:95:27:9e:57: a6:50:e7:02:01:29:5e:84:95:0f:22:e2:88:57:4b:fe:2f:23: b6:50:ee:cd:2a:a7:87:d5:2b:a4:03:4c:98:ff:d2:98:4d:fb: a8:0a:6b:b1:6b:55:7e:24:78:e6:ec:bb:fc:84:d9:c1:74:54: 51:c2:46:77:5d:41:43:75:33:56:bf:93:9d:84:3b:93:89:da: c6:17:04:fa:c2:7a:cf:05:2a:e2:94:df:50:27:6b:ea:b3:96: e0:b5:ef:20:df:30:5c:75:60:99:01:2e:0d:0c:88:ac:4c:12: f4:0e:39:c2:c0:8a:4b:3c:fa:35:79:16:d0:02:cd:89:da:6e: 89:87:39:1f:7a:30:9c:63:9f:aa:9f:5d:03:91:d3:4b:3f:9d: 34:f6:85:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAykwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjUzQTUxMTAvBgNVBAUTKEU0QkY3RDU5NjBCNkIyRjNDNTIxNDFFRjJCNjAyQUQx MTRGNDBDQTgwHhcNMjUwODIzMDEyMjQzWhcNMjUwODMwMDEyMjQzWjAYMRYwFAYD VQQDEw02OGE5MTdlMy1hM2IzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtJ4jPsxn0riFBYbj5b6TM39gQHn03T+CRw8nbGlo1rDLl5ClGdj3bmq6vFDW 0V5JCJyJPlkA2ZcsyAQSmJ6e0yZtQiO5T+Iw5D0kOEAB8iHuDhniQoJjH+FT104B NRhmJkt/XcR78VU7WfwB3HLSM/9xpj//Qnb3OCLxr8Y/KdE1zMw0T9aYPiADOcWX OgE0T4js/NV6R7In5z1CvOl0WwC0nSq/vzYBc/y4MeypvzjLua5l8VNnZnDPKvsA pVr76sPv0bHBWjKufST2nXfWjI5+UFFnxe8Mx4u7duy4ujTJokCvVWjc2euMNpGB CrEaaFXSEADDQpKzntKvGZw1dQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFw0ROBA caxbANDifGIbdVj+4W+hMB8GA1UdIwQYMBaAFOS/fVlgtrLzxSFB7ytgKtEU9Ayo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTNBNS81MDBDRkU5OERB NjYxMUVDODBERkU3MzZDNEY5QUUwMi81TDk5V1dDMnN2UEZJVUh2SzJBcTBSVDBE S2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVMOTlXV0Myc3ZQRklVSHZLMkFxMFJUMERLZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTNBNS81MDBDRkU5OERBNjYxMUVDODBERkU3MzZDNEY5QUUwMi81TDk5V1dDMnN2 UEZJVUh2SzJBcTBSVDBES2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtNeECYc030eHqLUWoC1khUd4SQ4IqKZIsN4F7/R9snq91AlKoT9Fv DCYdblLU3rX8Z1V8r0I4JugHccwX7iYhvF2IjoR1U8hH+ItXtry5QzrBAtv2tEfu jr22EZkL/R9zCirHJVXZSJUnnlemUOcCASlehJUPIuKIV0v+LyO2UO7NKqeH1Suk A0yY/9KYTfuoCmuxa1V+JHjm7Lv8hNnBdFRRwkZ3XUFDdTNWv5OdhDuTidrGFwT6 wnrPBSrilN9QJ2vqs5bgte8g3zBcdWCZAS4NDIisTBL0DjnCwIpLPPo1eRbQAs2J 2m6JhzkfejCcY5+qn10DkdNLP5009oUt -----END CERTIFICATE-----Generated at Sat Aug 23 21:34:35 2025 by rpki-client