$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.mft File: K5XY2CKKiRR9gBk9l3DrUK7du2s.mft (raw, json) Hash identifier: fR7CwwsHyDaV+oDmVoeToEUbZ1nmojxXKnq+hXwy2E8= Subject key identifier: 58:60:F3:3B:33:F3:FA:5F:2E:FE:06:20:5B:51:B4:84:02:C2:FB:7C Authority key identifier: 2B:95:D8:D8:22:8A:89:14:7D:80:19:3D:97:70:EB:50:AE:DD:BB:6B Certificate issuer: /CN=A91FF5A9/serialNumber=2B95D8D8228A89147D80193D9770EB50AEDDBB6B Certificate serial: 16EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5XY2CKKiRR9gBk9l3DrUK7du2s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.mft Manifest number: 16D2 Signing time: Fri 22 Aug 2025 16:44:50 +0000 Manifest this update: Fri 22 Aug 2025 16:44:49 +0000 Manifest next update: Fri 29 Aug 2025 16:44:49 +0000 Files and hashes: 1: K5XY2CKKiRR9gBk9l3DrUK7du2s.crl (hash: ZeCPk1x/kmQJzbwqa0zim3+ivVBI+zyZKtJ6KlkVFC4=) 2: 07D665E0862711EBAC147872C4F9AE02.roa (hash: h1jWRhCaXCGscugt7m7NPkJTh1NUHltfWypGJXiPwZw=) 3: F9E21144D90F11EDB2DBEA49C4F9AE02.roa (hash: fP45NGSHNvdQShMBiD1rePe2Esz9p+VlDQo2vfi2cz0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.crl rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5XY2CKKiRR9gBk9l3DrUK7du2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:44:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5867 (0x16eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF5A9, serialNumber=2B95D8D8228A89147D80193D9770EB50AEDDBB6B Validity Not Before: Aug 22 16:44:49 2025 GMT Not After : Aug 29 16:44:49 2025 GMT Subject: CN=68a89e81-1731 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e4:9b:73:88:f0:19:21:76:ca:06:97:45:90: 14:ac:be:09:ab:54:5c:9f:9d:34:89:eb:fc:8b:e0: 00:1f:84:8f:ef:42:78:b7:46:39:48:2f:1f:36:e5: 32:9d:6a:37:ec:88:8b:33:bc:16:67:75:02:e2:ed: 97:a5:63:f8:69:ed:c4:00:b3:2b:c2:32:c3:12:a0: 8e:07:27:50:f6:a3:38:6a:d9:cb:c0:7e:f4:3b:96: 38:3a:61:0f:36:06:69:5c:9f:99:ea:b2:72:a3:9d: bf:a3:a3:19:6a:ce:03:e9:9c:c5:9d:4f:e3:2c:fc: e9:40:a0:d2:0f:37:79:52:76:18:c1:75:8f:58:e0: 01:5d:83:f7:70:4f:41:fa:24:09:5f:d1:7f:9d:69: dd:7e:51:c4:bb:d7:04:3f:2d:8b:f9:b1:4f:1f:50: ca:53:74:d8:ae:5d:9c:b4:79:2c:5b:ac:65:84:3e: 13:8f:a6:1a:ff:dd:8e:18:cc:97:53:df:22:cb:8f: 44:85:70:a5:b6:e4:50:f7:ca:94:14:f8:b5:99:a9: 15:8d:24:3c:18:03:1a:66:b8:9c:c3:a6:cb:56:53: 0e:ba:03:9b:12:d4:99:ac:5a:0d:dc:b2:c4:0c:61: c4:af:98:23:89:c4:5b:d2:86:f5:f3:5b:53:97:c7: 34:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:60:F3:3B:33:F3:FA:5F:2E:FE:06:20:5B:51:B4:84:02:C2:FB:7C X509v3 Authority Key Identifier: keyid:2B:95:D8:D8:22:8A:89:14:7D:80:19:3D:97:70:EB:50:AE:DD:BB:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5XY2CKKiRR9gBk9l3DrUK7du2s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:1d:e6:cb:81:07:07:8c:8d:23:ac:33:53:a1:b2:d4:25:6b: 1d:83:68:38:ce:ee:7d:fe:f1:6c:08:c4:99:40:37:f7:f4:27: 88:80:71:17:c4:a7:56:d4:37:e7:b2:ab:1e:5d:1e:94:af:8b: 58:60:6e:2f:41:8a:01:cc:18:af:f7:44:3a:f2:ba:fb:cc:23: 51:22:86:47:98:bd:fe:76:c5:9a:1d:df:42:1a:1f:a1:75:41: 09:0f:ba:bf:8b:af:24:0f:e1:6e:89:31:14:d5:73:a2:54:48: 12:57:a9:79:2c:22:cd:cf:cf:6c:94:e5:3d:d0:20:99:21:24: 18:ac:d0:71:4e:3a:68:6a:36:e3:77:c0:1b:87:a6:40:42:51: 9c:42:b4:74:ce:8b:ea:89:6b:a5:5a:34:c5:c4:f9:be:64:3a: 4b:23:3e:78:d8:8f:ff:9b:0f:52:9e:ae:09:1a:7b:b1:3f:b4: 6d:9c:84:5e:d1:d1:82:fb:cb:b6:3b:da:be:d3:87:d0:5b:3b: 3e:b4:11:3d:be:6b:85:ca:e2:0a:d1:77:2b:03:e6:b5:bd:74: 8e:06:c0:86:78:9e:fd:d3:24:96:b8:4d:8d:84:7c:07:b3:94: ab:92:24:f4:7b:85:07:ed:95:f2:96:4e:a1:6c:fd:e2:ac:e6: d4:b4:1a:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFuswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY1QTkxMTAvBgNVBAUTKDJCOTVEOEQ4MjI4QTg5MTQ3RDgwMTkzRDk3NzBFQjUw QUVEREJCNkIwHhcNMjUwODIyMTY0NDQ5WhcNMjUwODI5MTY0NDQ5WjAYMRYwFAYD VQQDEw02OGE4OWU4MS0xNzMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwuSbc4jwGSF2ygaXRZAUrL4Jq1Rcn500iev8i+AAH4SP70J4t0Y5SC8fNuUy nWo37IiLM7wWZ3UC4u2XpWP4ae3EALMrwjLDEqCOBydQ9qM4atnLwH70O5Y4OmEP NgZpXJ+Z6rJyo52/o6MZas4D6ZzFnU/jLPzpQKDSDzd5UnYYwXWPWOABXYP3cE9B +iQJX9F/nWndflHEu9cEPy2L+bFPH1DKU3TYrl2ctHksW6xlhD4Tj6Ya/92OGMyX U98iy49EhXCltuRQ98qUFPi1makVjSQ8GAMaZricw6bLVlMOugObEtSZrFoN3LLE DGHEr5gjicRb0ob181tTl8c0bwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFhg8zsz 8/pfLv4GIFtRtIQCwvt8MB8GA1UdIwQYMBaAFCuV2NgiiokUfYAZPZdw61Cu3btr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjVBOS8wMEI3MTUxQ0ZE MDgxMUU3QTQyOEZGMEZDNEY5QUUwMi9LNVhZMkNLS2lSUjlnQms5bDNEclVLN2R1 MnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0s1WFkyQ0tLaVJSOWdCazlsM0RyVUs3ZHUycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjVBOS8wMEI3MTUxQ0ZEMDgxMUU3QTQyOEZGMEZDNEY5QUUwMi9LNVhZMkNLS2lS UjlnQms5bDNEclVLN2R1MnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/HebLgQcHjI0jrDNTobLUJWsdg2g4zu59/vFsCMSZQDf39CeIgHEX xKdW1DfnsqseXR6Ur4tYYG4vQYoBzBiv90Q68rr7zCNRIoZHmL3+dsWaHd9CGh+h dUEJD7q/i68kD+FuiTEU1XOiVEgSV6l5LCLNz89slOU90CCZISQYrNBxTjpoajbj d8Abh6ZAQlGcQrR0zovqiWulWjTFxPm+ZDpLIz542I//mw9Snq4JGnuxP7RtnIRe 0dGC+8u2O9q+04fQWzs+tBE9vmuFyuIK0XcrA+a1vXSOBsCGeJ790ySWuE2NhHwH s5SrkiT0e4UH7ZXylk6hbP3irObUtBpf -----END CERTIFICATE-----Generated at Sun Aug 24 09:03:03 2025 by rpki-client