$ rpki-client -vvf rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.mft File: _5APJL-aiYLZX4RHqnubtPesRjk.mft (raw, json) Hash identifier: BVIHyXpPku6pE5sOx1rcsj8nCH73BLYawURihTHhGkU= Subject key identifier: 85:EE:B5:B2:4C:B6:A2:7B:9E:A7:68:B3:0B:95:D4:6D:06:F1:00:FD Authority key identifier: FF:90:0F:24:BF:9A:89:82:D9:5F:84:47:AA:7B:9B:B4:F7:AC:46:39 Certificate issuer: /CN=A91221EF/serialNumber=FF900F24BF9A8982D95F8447AA7B9BB4F7AC4639 Certificate serial: 09D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5APJL-aiYLZX4RHqnubtPesRjk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.mft Manifest number: 09C9 Signing time: Fri 08 Aug 2025 20:18:30 +0000 Manifest this update: Fri 08 Aug 2025 20:18:29 +0000 Manifest next update: Fri 15 Aug 2025 20:18:29 +0000 Files and hashes: 1: _5APJL-aiYLZX4RHqnubtPesRjk.crl (hash: LmLHLT5e9B49NmpbLMvUw8Hun/qTFe4OtJQQf6TFyiw=) 2: D3037D06738E11ED8283FF53C4F9AE02.roa (hash: fmsh1X3Q3HooxV4YfKkoLFlrGgD13/WeDGjBg2CNmMg=) 3: D1A6B6D0738E11ED8283FF53C4F9AE02.roa (hash: WgMRh1pD8v+j2OuHDw2wLrJ+bXBsyv6ChtDmNGRF1/k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.crl rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5APJL-aiYLZX4RHqnubtPesRjk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2519 (0x9d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91221EF, serialNumber=FF900F24BF9A8982D95F8447AA7B9BB4F7AC4639 Validity Not Before: Aug 8 20:18:29 2025 GMT Not After : Aug 15 20:18:29 2025 GMT Subject: CN=68965b96-9be3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5a:d8:c1:9d:3d:9d:9a:67:24:f2:0a:9b:d3: f1:df:22:e0:69:88:f8:58:3b:5f:af:55:a9:74:94: 07:0b:42:38:a3:49:85:8a:82:55:b8:37:07:40:1f: a9:b9:89:67:a8:e2:a6:23:a7:de:9a:fc:1e:fc:19: 2e:6f:b4:ac:6f:4a:82:ed:ed:9a:de:4b:0d:c7:1c: 68:c4:2c:87:8e:45:af:e9:54:b3:97:dc:1b:8a:9b: f6:e8:b9:e5:b2:5a:b1:cf:0a:49:d7:fd:c6:78:60: 73:24:3e:2b:b0:6c:bf:a7:6a:06:3d:b9:ff:8f:4e: 1b:99:3d:08:d0:3f:f0:32:70:ef:18:b2:31:99:3e: 76:46:ad:88:8c:e9:6f:6b:24:d7:e8:ad:33:6b:33: 78:c0:be:da:56:3a:9b:e0:e5:5e:5e:35:91:05:5b: e1:e3:72:ed:ee:a6:0b:d4:39:f9:a4:bc:78:10:22: 37:f8:e7:00:e4:71:0b:ae:7a:b0:7f:4b:c7:2e:ae: a8:fd:40:8e:29:a0:c5:b0:8c:cc:21:55:65:7a:21: 45:ee:8b:43:f4:75:cb:47:ae:63:2c:19:7b:a6:24: 0f:65:60:e1:b3:ad:bb:1e:b5:a6:1c:36:b2:6c:aa: 8d:25:68:6a:23:d7:e7:f6:08:a0:34:2a:49:44:1a: 78:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:EE:B5:B2:4C:B6:A2:7B:9E:A7:68:B3:0B:95:D4:6D:06:F1:00:FD X509v3 Authority Key Identifier: keyid:FF:90:0F:24:BF:9A:89:82:D9:5F:84:47:AA:7B:9B:B4:F7:AC:46:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5APJL-aiYLZX4RHqnubtPesRjk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:3a:d7:b7:86:bd:fe:cd:95:39:02:fc:eb:4a:0e:c5:9f:f2: ec:ae:1b:4f:dd:f9:60:6e:2b:c6:7b:7d:38:63:f3:ef:68:cc: f2:bb:1b:c2:77:76:b0:ec:e8:3c:83:ba:f3:6f:73:1c:d8:e1: c6:b3:e0:47:d3:07:33:96:d2:f7:e2:d7:02:6d:e5:cb:0e:07: 98:2f:56:f9:24:bc:9c:da:f2:72:9f:28:fc:91:24:bd:15:6c: c0:91:bc:2f:ec:df:8f:f3:89:a7:93:36:68:dc:c4:f2:bf:60: 78:40:a7:05:e6:a5:67:fb:b8:a2:60:3c:1a:30:27:5f:fe:40: 89:a1:d4:74:0f:7a:b0:2d:9e:ca:9a:8b:b1:ab:3c:aa:d8:94: be:0f:79:d4:04:53:ac:5c:1d:ca:33:c6:b5:7a:ad:03:5e:c3: ae:d3:24:c0:9c:66:4e:3b:81:ae:bf:53:0e:ca:9c:bb:ac:d6: a9:6a:ff:5c:ac:83:82:f2:c0:8f:60:3b:61:c2:cf:ef:76:c9: ea:f9:74:b0:4b:42:2d:e6:9a:af:b0:14:69:da:45:33:58:ce: 1d:80:f1:30:af:a5:e1:02:90:e4:54:3e:c4:67:e5:69:de:9b: 01:b9:53:d6:c4:96:e1:11:f3:f5:9a:cb:5b:e5:e7:0a:e6:2d: c6:18:26:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCdcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIxRUYxMTAvBgNVBAUTKEZGOTAwRjI0QkY5QTg5ODJEOTVGODQ0N0FBN0I5QkI0 RjdBQzQ2MzkwHhcNMjUwODA4MjAxODI5WhcNMjUwODE1MjAxODI5WjAYMRYwFAYD VQQDEw02ODk2NWI5Ni05YmUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv1rYwZ09nZpnJPIKm9Px3yLgaYj4WDtfr1WpdJQHC0I4o0mFioJVuDcHQB+p uYlnqOKmI6femvwe/Bkub7Ssb0qC7e2a3ksNxxxoxCyHjkWv6VSzl9wbipv26Lnl slqxzwpJ1/3GeGBzJD4rsGy/p2oGPbn/j04bmT0I0D/wMnDvGLIxmT52Rq2IjOlv ayTX6K0zazN4wL7aVjqb4OVeXjWRBVvh43Lt7qYL1Dn5pLx4ECI3+OcA5HELrnqw f0vHLq6o/UCOKaDFsIzMIVVleiFF7otD9HXLR65jLBl7piQPZWDhs627HrWmHDay bKqNJWhqI9fn9gigNCpJRBp43wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIXutbJM tqJ7nqdoswuV1G0G8QD9MB8GA1UdIwQYMBaAFP+QDyS/momC2V+ER6p7m7T3rEY5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjFFRi82RjJGRUJENjg5 MUYxMUVBODlCNjI3N0NDNEY5QUUwMi9fNUFQSkwtYWlZTFpYNFJIcW51YnRQZXNS amsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL181QVBKTC1haVlMWlg0UkhxbnVidFBlc1Jqay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjFFRi82RjJGRUJENjg5MUYxMUVBODlCNjI3N0NDNEY5QUUwMi9fNUFQSkwtYWlZ TFpYNFJIcW51YnRQZXNSamsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4Ote3hr3+zZU5AvzrSg7Fn/LsrhtP3flgbivGe304Y/PvaMzyuxvC d3aw7Og8g7rzb3Mc2OHGs+BH0wczltL34tcCbeXLDgeYL1b5JLyc2vJynyj8kSS9 FWzAkbwv7N+P84mnkzZo3MTyv2B4QKcF5qVn+7iiYDwaMCdf/kCJodR0D3qwLZ7K mouxqzyq2JS+D3nUBFOsXB3KM8a1eq0DXsOu0yTAnGZOO4Guv1MOypy7rNapav9c rIOC8sCPYDthws/vdsnq+XSwS0It5pqvsBRp2kUzWM4dgPEwr6XhApDkVD7EZ+Vp 3psBuVPWxJbhEfP1mstb5ecK5i3GGCY/ -----END CERTIFICATE-----Generated at Sun Aug 10 16:03:47 2025 by rpki-client