$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.mft File: S5pjiBqFVgIQVOlL3DInTse33fI.mft (raw, json) Hash identifier: 8HSdck5c6XWYh5kzi/lkJwTBEfZnhDpxlGzjTodzRvM= Subject key identifier: A0:5A:8F:53:B3:88:F0:E5:96:38:41:FC:F7:C0:8A:1D:64:13:68:38 Authority key identifier: 4B:9A:63:88:1A:85:56:02:10:54:E9:4B:DC:32:27:4E:C7:B7:DD:F2 Certificate issuer: /CN=A91FD90A/serialNumber=4B9A63881A8556021054E94BDC32274EC7B7DDF2 Certificate serial: 0629 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5pjiBqFVgIQVOlL3DInTse33fI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.mft Manifest number: 061A Signing time: Fri 22 Aug 2025 23:00:43 +0000 Manifest this update: Fri 22 Aug 2025 23:00:42 +0000 Manifest next update: Fri 29 Aug 2025 23:00:42 +0000 Files and hashes: 1: S5pjiBqFVgIQVOlL3DInTse33fI.crl (hash: MLPi7NZaqiRcxwLFZBa9/oICU7lC190L7sRM0xEqIUA=) 2: 79F19E0A5BDA11F0980FE961C4F9AE02.roa (hash: HsxGKT/AjI8jr4OZJvk0BqTrzYCNl3TOedPqlsVo7ok=) 3: 410F8C0EDBC611EEA717194DC4F9AE02.roa (hash: WalTM0heTU/pB4x2h5BFYPYTixxcx+WNC43Aop8+j9U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.crl rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5pjiBqFVgIQVOlL3DInTse33fI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1577 (0x629) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD90A, serialNumber=4B9A63881A8556021054E94BDC32274EC7B7DDF2 Validity Not Before: Aug 22 23:00:42 2025 GMT Not After : Aug 29 23:00:42 2025 GMT Subject: CN=68a8f69a-5e5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:40:ea:84:5c:04:2f:9b:4b:1a:17:17:bf:53: 2c:c8:a2:a3:1d:a3:54:21:25:b5:98:ae:3b:25:f7: 15:1c:2d:80:6c:e2:65:37:84:58:5f:97:4d:a8:ad: d6:29:08:e4:5f:28:9f:91:d3:5c:46:e1:93:57:a6: 64:85:61:5e:1c:8c:72:4b:71:75:83:25:66:13:a1: 85:ed:6b:d4:9b:10:6e:89:a4:2d:72:24:f3:a8:8e: 6d:f8:95:dc:c2:dd:91:25:f7:85:15:fc:a0:e6:9d: 5e:f6:38:e6:f1:24:4b:ef:f8:5b:72:cd:9e:a2:e8: 25:47:0c:f6:0e:eb:b3:b4:5f:3e:9e:5b:93:32:37: f9:6d:72:cf:70:46:9d:52:c0:6f:56:4b:ad:5f:6a: b7:a5:dd:03:c5:61:d6:0c:18:a0:dd:94:b2:aa:07: a4:cc:19:61:5b:cf:58:1d:bd:98:16:e9:ea:04:b2: 55:1e:dc:ab:12:cb:a0:04:c2:8b:06:f8:14:8e:f8: 58:c1:5d:e2:ef:2b:35:1a:41:0a:14:5c:0d:a1:eb: 70:7f:bf:4b:7d:06:19:29:d5:d8:96:4f:ce:fe:77: ba:84:ce:c4:6d:b5:c4:e4:b4:a8:15:91:ee:c7:41: 28:6d:ae:dc:1c:25:7a:2d:56:39:49:5f:69:4b:30: 6f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:5A:8F:53:B3:88:F0:E5:96:38:41:FC:F7:C0:8A:1D:64:13:68:38 X509v3 Authority Key Identifier: keyid:4B:9A:63:88:1A:85:56:02:10:54:E9:4B:DC:32:27:4E:C7:B7:DD:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5pjiBqFVgIQVOlL3DInTse33fI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:d9:80:5f:c5:06:81:ec:1a:0e:eb:d9:0f:63:8c:0c:8a:02: 7d:0f:ee:8c:ab:24:8d:5c:1f:8e:07:78:dd:ed:93:98:04:2d: 51:87:1e:4d:3d:11:1d:d2:0d:76:36:89:f4:67:c5:29:d1:34: a3:28:33:e1:1b:1b:e5:cc:56:ed:60:09:8c:99:b9:15:6b:d2: b8:13:e9:03:88:5a:e3:bc:45:07:89:22:6f:ba:c1:c7:5e:18: bc:54:e2:d0:69:33:b7:65:54:cf:71:25:3a:1c:3b:52:e2:d8: ce:63:7e:35:e0:be:b7:6f:8e:e0:fe:9a:96:a5:68:66:c2:93: b5:36:8e:81:c1:25:b7:ec:63:f0:7a:7f:49:56:ef:ac:20:5e: 81:be:35:6a:c9:6a:3a:83:c8:69:29:45:12:0a:6f:c6:35:7a: ec:4b:eb:e4:22:d2:d5:17:80:e4:37:5a:d9:ad:95:07:e1:ea: 14:5e:95:f5:98:50:d2:bd:45:4d:c0:3e:da:6c:1e:7e:ee:27: fc:db:87:f2:10:ec:1e:5b:5d:b7:e5:15:64:7d:f6:de:30:07: 84:43:09:9e:c3:cc:a2:2b:e6:9d:fa:be:bc:0d:13:a1:8e:0a: 1f:ec:14:7c:a3:38:14:1c:ce:0d:3c:aa:42:3a:b6:17:c8:a2: b9:d7:ec:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQ5MEExMTAvBgNVBAUTKDRCOUE2Mzg4MUE4NTU2MDIxMDU0RTk0QkRDMzIyNzRF QzdCN0RERjIwHhcNMjUwODIyMjMwMDQyWhcNMjUwODI5MjMwMDQyWjAYMRYwFAYD VQQDEw02OGE4ZjY5YS01ZTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoUDqhFwEL5tLGhcXv1MsyKKjHaNUISW1mK47JfcVHC2AbOJlN4RYX5dNqK3W KQjkXyifkdNcRuGTV6ZkhWFeHIxyS3F1gyVmE6GF7WvUmxBuiaQtciTzqI5t+JXc wt2RJfeFFfyg5p1e9jjm8SRL7/hbcs2eouglRwz2DuuztF8+nluTMjf5bXLPcEad UsBvVkutX2q3pd0DxWHWDBig3ZSyqgekzBlhW89YHb2YFunqBLJVHtyrEsugBMKL BvgUjvhYwV3i7ys1GkEKFFwNoetwf79LfQYZKdXYlk/O/ne6hM7EbbXE5LSoFZHu x0Eoba7cHCV6LVY5SV9pSzBvOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKBaj1Oz iPDlljhB/PfAih1kE2g4MB8GA1UdIwQYMBaAFEuaY4gahVYCEFTpS9wyJ07Ht93y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDkwQS8xN0UyQ0Y1MEI1 QzUxMUVCQjU0RTAxNDZDNEY5QUUwMi9TNXBqaUJxRlZnSVFWT2xMM0RJblRzZTMz ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1M1cGppQnFGVmdJUVZPbEwzREluVHNlMzNmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDkwQS8xN0UyQ0Y1MEI1QzUxMUVCQjU0RTAxNDZDNEY5QUUwMi9TNXBqaUJxRlZn SVFWT2xMM0RJblRzZTMzZkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC92YBfxQaB7BoO69kPY4wMigJ9D+6MqySNXB+OB3jd7ZOYBC1Rhx5N PREd0g12Non0Z8Up0TSjKDPhGxvlzFbtYAmMmbkVa9K4E+kDiFrjvEUHiSJvusHH Xhi8VOLQaTO3ZVTPcSU6HDtS4tjOY3414L63b47g/pqWpWhmwpO1No6BwSW37GPw en9JVu+sIF6BvjVqyWo6g8hpKUUSCm/GNXrsS+vkItLVF4DkN1rZrZUH4eoUXpX1 mFDSvUVNwD7abB5+7if824fyEOweW1235RVkffbeMAeEQwmew8yiK+ad+r68DROh jgof7BR8ozgUHM4NPKpCOrYXyKK51+wB -----END CERTIFICATE-----Generated at Sat Aug 23 16:19:17 2025 by rpki-client