$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC985/673AA2F4F5B711EF8C1FF611C4F9AE02/Ka2zm2IOrjy4r8osoYX1xIdv0EM.mft File: Ka2zm2IOrjy4r8osoYX1xIdv0EM.mft (raw, json) Hash identifier: jZxM/Cf9pKH/7xD8m31HKykexCcAOYxfORRlAbi56fo= Subject key identifier: F6:24:26:5A:02:75:CD:90:56:A4:01:C2:0E:E4:70:D2:C5:98:85:71 Authority key identifier: 29:AD:B3:9B:62:0E:AE:3C:B8:AF:CA:2C:A1:85:F5:C4:87:6F:D0:43 Certificate issuer: /CN=A91FC985/serialNumber=29ADB39B620EAE3CB8AFCA2CA185F5C4876FD043 Certificate serial: 5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ka2zm2IOrjy4r8osoYX1xIdv0EM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC985/673AA2F4F5B711EF8C1FF611C4F9AE02/Ka2zm2IOrjy4r8osoYX1xIdv0EM.mft Manifest number: 5D Signing time: Sat 23 Aug 2025 07:22:44 +0000 Manifest this update: Sat 23 Aug 2025 07:22:44 +0000 Manifest next update: Sat 30 Aug 2025 07:22:44 +0000 Files and hashes: 1: Ka2zm2IOrjy4r8osoYX1xIdv0EM.crl (hash: b/6uqP6XhQ7XKNC+XxE/Yg+m98jDkieJZ/CWbw+tY3c=) 2: DA3E289CF5B811EFA1046714C4F9AE02.roa (hash: ghtYYnHvBHOXjjafNw/o3b7nWMJznKoJtYacsPdc8uY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC985/673AA2F4F5B711EF8C1FF611C4F9AE02/Ka2zm2IOrjy4r8osoYX1xIdv0EM.crl rsync://rpki.apnic.net/member_repository/A91FC985/673AA2F4F5B711EF8C1FF611C4F9AE02/Ka2zm2IOrjy4r8osoYX1xIdv0EM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ka2zm2IOrjy4r8osoYX1xIdv0EM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:22:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 95 (0x5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC985, serialNumber=29ADB39B620EAE3CB8AFCA2CA185F5C4876FD043 Validity Not Before: Aug 23 07:22:44 2025 GMT Not After : Aug 30 07:22:44 2025 GMT Subject: CN=68a96c44-bbb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:5c:ca:15:bc:ad:4f:54:db:a4:3e:34:b5:d5: 85:b0:db:71:6b:39:6c:e3:92:04:d3:8f:cd:a5:f2: 95:f1:20:f4:c0:da:6b:0f:7d:15:78:be:06:e8:2c: ba:f4:c9:16:ee:dc:6a:21:4e:ee:ba:1c:e1:fe:13: d3:17:60:03:f1:c8:cb:d2:5c:48:ff:ee:ef:70:52: 21:ab:49:3d:2f:d5:3c:25:95:5d:53:9b:15:8c:0a: 10:c3:31:1c:64:31:02:53:3c:88:bc:23:78:64:99: 23:c4:a0:59:f8:ca:e8:df:fa:c2:8c:9f:d4:b3:7d: 43:e8:63:de:ad:4b:39:35:29:d8:15:69:19:09:34: da:d3:ca:65:1e:b0:7a:52:58:ab:60:2f:83:48:a1: 72:e1:d0:d6:63:69:7b:ab:f5:69:17:fe:a4:b3:10: b2:4f:92:8c:e3:4f:e6:0c:06:2a:00:38:7a:ab:6c: 7f:8b:d1:4e:ff:cb:71:40:09:77:b6:c8:61:29:be: bf:0b:05:ae:5b:7f:b5:29:88:6b:03:4a:4b:f2:8f: 5a:52:00:72:3b:c2:6c:be:7d:ea:49:4c:b6:01:94: 8f:9b:11:10:37:91:65:f6:ae:dd:43:e6:5e:6a:f7: 37:56:4a:f9:90:cf:22:26:60:e2:4e:74:7f:73:0d: 02:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:24:26:5A:02:75:CD:90:56:A4:01:C2:0E:E4:70:D2:C5:98:85:71 X509v3 Authority Key Identifier: keyid:29:AD:B3:9B:62:0E:AE:3C:B8:AF:CA:2C:A1:85:F5:C4:87:6F:D0:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC985/673AA2F4F5B711EF8C1FF611C4F9AE02/Ka2zm2IOrjy4r8osoYX1xIdv0EM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ka2zm2IOrjy4r8osoYX1xIdv0EM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC985/673AA2F4F5B711EF8C1FF611C4F9AE02/Ka2zm2IOrjy4r8osoYX1xIdv0EM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:52:12:6c:44:84:7b:61:f9:33:42:f2:ed:75:1b:93:8f:d0: d2:c3:79:d4:b3:23:37:b2:ef:eb:a4:c6:66:80:61:c8:76:40: 78:02:72:99:ed:3f:05:a8:48:e8:f7:92:9a:c1:9c:a8:6f:5d: 57:96:34:cb:ea:8d:e1:32:11:31:e4:22:97:a3:f7:ae:93:94: 0d:af:34:55:9b:8e:34:1c:d6:76:65:21:5c:c6:e5:44:41:1e: 58:53:b6:a3:54:af:5e:a1:d8:83:4a:3e:c9:7c:21:47:4c:0f: 00:f2:d7:5a:99:73:82:72:ca:d5:b8:bc:17:09:da:c7:aa:02: 8d:57:a8:74:fd:eb:13:a3:14:48:03:62:63:8b:f8:0d:a7:4e: 6d:19:61:6d:3f:90:4e:ac:66:df:6f:22:f5:ab:9d:ac:50:ed: 3d:e9:eb:86:af:43:21:13:fa:15:17:54:bb:b6:60:03:00:39: 91:17:21:3b:6c:9f:15:53:d0:e0:e6:81:48:ad:fa:0f:16:ec: f4:3f:fa:95:8f:07:9c:26:7d:7a:cc:a7:0a:d4:ff:c6:51:1b: ae:19:f6:d4:91:b0:ff:9f:f7:77:83:b4:31:d0:fe:91:6a:8e: e1:60:87:f3:b2:ac:d7:30:34:33:83:63:87:a2:b3:4f:c3:19: 9a:56:b6:32 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG Qzk4NTExMC8GA1UEBRMoMjlBREIzOUI2MjBFQUUzQ0I4QUZDQTJDQTE4NUY1QzQ4 NzZGRDA0MzAeFw0yNTA4MjMwNzIyNDRaFw0yNTA4MzAwNzIyNDRaMBgxFjAUBgNV BAMTDTY4YTk2YzQ0LWJiYjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCdXMoVvK1PVNukPjS11YWw23FrOWzjkgTTj82l8pXxIPTA2msPfRV4vgboLLr0 yRbu3GohTu66HOH+E9MXYAPxyMvSXEj/7u9wUiGrST0v1TwllV1TmxWMChDDMRxk MQJTPIi8I3hkmSPEoFn4yujf+sKMn9SzfUPoY96tSzk1KdgVaRkJNNrTymUesHpS WKtgL4NIoXLh0NZjaXur9WkX/qSzELJPkozjT+YMBioAOHqrbH+L0U7/y3FACXe2 yGEpvr8LBa5bf7UpiGsDSkvyj1pSAHI7wmy+fepJTLYBlI+bERA3kWX2rt1D5l5q 9zdWSvmQzyImYOJOdH9zDQJZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9iQmWgJ1 zZBWpAHCDuRw0sWYhXEwHwYDVR0jBBgwFoAUKa2zm2IOrjy4r8osoYX1xIdv0EMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZDOTg1LzY3M0FBMkY0RjVC NzExRUY4QzFGRjYxMUM0RjlBRTAyL0thMnptMklPcmp5NHI4b3NvWVgxeElkdjBF TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvS2Eyem0ySU9yank0cjhvc29ZWDF4SWR2MEVNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZD OTg1LzY3M0FBMkY0RjVCNzExRUY4QzFGRjYxMUM0RjlBRTAyL0thMnptMklPcmp5 NHI4b3NvWVgxeElkdjBFTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIdSEmxEhHth+TNC8u11G5OP0NLDedSzIzey7+ukxmaAYch2QHgCcpnt PwWoSOj3kprBnKhvXVeWNMvqjeEyETHkIpej966TlA2vNFWbjjQc1nZlIVzG5URB HlhTtqNUr16h2INKPsl8IUdMDwDy11qZc4JyytW4vBcJ2seqAo1XqHT96xOjFEgD YmOL+A2nTm0ZYW0/kE6sZt9vIvWrnaxQ7T3p64avQyET+hUXVLu2YAMAOZEXITts nxVT0ODmgUit+g8W7PQ/+pWPB5wmfXrMpwrU/8ZRG64Z9tSRsP+f93eDtDHQ/pFq juFgh/OyrNcwNDODY4eis0/DGZpWtjI= -----END CERTIFICATE-----Generated at Sat Aug 23 20:41:18 2025 by rpki-client