$ rpki-client -vvf rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.mft File: a5tdFBgYlY1zBFgvJU6hddhD4_0.mft (raw, json) Hash identifier: PiK5+NBOiBqnbluCs3g7ruWL86RNU3URbT8xEvecugI= Subject key identifier: A2:48:31:BF:49:2F:C2:5E:39:7F:B5:61:B6:BA:92:A5:D9:A8:21:38 Authority key identifier: 6B:9B:5D:14:18:18:95:8D:73:04:58:2F:25:4E:A1:75:D8:43:E3:FD Certificate issuer: /CN=A91359CD/serialNumber=6B9B5D141818958D7304582F254EA175D843E3FD Certificate serial: 09EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a5tdFBgYlY1zBFgvJU6hddhD4_0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.mft Manifest number: 09E4 Signing time: Fri 08 Aug 2025 20:13:36 +0000 Manifest this update: Fri 08 Aug 2025 20:13:36 +0000 Manifest next update: Fri 15 Aug 2025 20:13:36 +0000 Files and hashes: 1: a5tdFBgYlY1zBFgvJU6hddhD4_0.crl (hash: pazBvq5phQX6fB6qQ3ejcklfr5nv/RUOT9TSEecbES8=) 2: 8F467E0082DD11EABD325010C4F9AE02.roa (hash: nTti14+ixHvCqHgk8IwtFdkQ1Ouiq6aL3zx3Hm8MMGs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.crl rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a5tdFBgYlY1zBFgvJU6hddhD4_0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2540 (0x9ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91359CD, serialNumber=6B9B5D141818958D7304582F254EA175D843E3FD Validity Not Before: Aug 8 20:13:36 2025 GMT Not After : Aug 15 20:13:36 2025 GMT Subject: CN=68965a70-6580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a6:da:3b:95:33:41:59:bd:a4:1b:7f:8a:61: 5d:27:41:80:d9:ca:0e:e8:d7:78:d1:d9:f8:64:85: 15:b7:65:b4:cf:83:37:d2:2c:3b:18:08:8f:93:3a: 31:85:36:61:8b:54:c6:f7:b5:18:51:d2:54:e6:e9: d5:68:bb:d3:95:82:27:d5:de:f2:4d:31:09:14:31: ec:99:b9:aa:48:5b:dd:17:e6:f8:8e:6a:84:64:95: 83:f5:1d:04:8a:ff:2d:9b:07:b8:6a:d5:3c:9a:9f: 4a:9f:21:5b:e2:c8:b7:61:a7:0f:97:97:bd:a8:91: 36:ce:5a:5c:2f:92:15:b6:73:29:f9:93:76:90:99: b9:a4:95:ec:4a:c0:b7:85:f3:47:b2:e0:16:b3:91: 3b:3a:eb:e9:ef:42:76:0c:1b:11:78:37:13:90:30: 5c:e1:fa:30:11:28:88:67:55:dc:3e:bd:04:2f:4f: 5b:bd:21:19:21:26:10:d9:33:04:a7:11:7b:97:b7: b6:c9:6a:ea:d3:2a:1c:37:ee:bd:c5:03:11:2e:69: 4b:71:9b:d6:c2:ee:52:9d:7b:df:62:bd:5a:40:00: c3:0f:96:d2:ca:41:72:d1:0e:4c:46:e5:37:53:84: 52:81:2b:bd:43:12:4d:f0:23:b8:bf:32:e7:e7:94: 8c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:48:31:BF:49:2F:C2:5E:39:7F:B5:61:B6:BA:92:A5:D9:A8:21:38 X509v3 Authority Key Identifier: keyid:6B:9B:5D:14:18:18:95:8D:73:04:58:2F:25:4E:A1:75:D8:43:E3:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a5tdFBgYlY1zBFgvJU6hddhD4_0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:9e:3c:eb:20:89:2e:ca:16:cd:3e:2e:19:82:3d:90:81:d8: 38:f7:be:47:91:fc:0a:70:ae:86:7e:98:5b:6c:8b:1e:2c:0e: 19:70:22:18:6e:aa:71:48:08:81:ac:5d:88:1d:8d:d3:62:50: 03:9c:1a:d2:7c:e8:ab:2e:c2:30:0a:df:4f:d2:6f:4b:c3:9a: 35:6c:05:71:57:ac:8c:8d:15:fc:2b:89:18:47:25:f1:1b:c2: 29:31:8d:d8:22:cb:57:38:18:bd:f1:61:17:37:5a:7d:bd:c5: a8:b3:9b:7b:84:7d:21:a8:0e:da:4e:16:9c:3e:09:10:46:1f: 82:6d:25:7f:6b:d7:59:38:6a:03:f2:b7:f2:83:ad:9e:de:3c: 8b:be:20:b8:21:5d:48:da:73:55:6f:7e:96:3c:a7:a7:aa:5d: 4c:aa:6d:38:1c:7a:e6:78:0a:f1:25:b9:10:ec:df:2b:23:9c: 4d:3c:e2:dc:05:22:d5:e3:86:26:75:07:58:ce:54:d2:e8:ac: e8:8f:95:bc:a8:ba:3e:25:4f:ee:2a:54:88:9d:74:53:af:ce: 76:ac:a8:be:14:ca:a5:f1:aa:7e:d4:82:6b:3a:02:4d:04:06: f7:fb:b4:b1:e9:db:5a:73:3e:e5:49:8f:0a:75:a6:b1:0d:eb: 3b:f9:f2:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU5Q0QxMTAvBgNVBAUTKDZCOUI1RDE0MTgxODk1OEQ3MzA0NTgyRjI1NEVBMTc1 RDg0M0UzRkQwHhcNMjUwODA4MjAxMzM2WhcNMjUwODE1MjAxMzM2WjAYMRYwFAYD VQQDEw02ODk2NWE3MC02NTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn6baO5UzQVm9pBt/imFdJ0GA2coO6Nd40dn4ZIUVt2W0z4M30iw7GAiPkzox hTZhi1TG97UYUdJU5unVaLvTlYIn1d7yTTEJFDHsmbmqSFvdF+b4jmqEZJWD9R0E iv8tmwe4atU8mp9KnyFb4si3YacPl5e9qJE2zlpcL5IVtnMp+ZN2kJm5pJXsSsC3 hfNHsuAWs5E7Ouvp70J2DBsReDcTkDBc4fowESiIZ1XcPr0EL09bvSEZISYQ2TME pxF7l7e2yWrq0yocN+69xQMRLmlLcZvWwu5SnXvfYr1aQADDD5bSykFy0Q5MRuU3 U4RSgSu9QxJN8CO4vzLn55SMeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKJIMb9J L8JeOX+1Yba6kqXZqCE4MB8GA1UdIwQYMBaAFGubXRQYGJWNcwRYLyVOoXXYQ+P9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTlDRC8xODVGRkMyODgy REIxMUVBQUMyQ0Q2MEFDNEY5QUUwMi9hNXRkRkJnWWxZMXpCRmd2SlU2aGRkaEQ0 XzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E1dGRGQmdZbFkxekJGZ3ZKVTZoZGRoRDRfMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTlDRC8xODVGRkMyODgyREIxMUVBQUMyQ0Q2MEFDNEY5QUUwMi9hNXRkRkJnWWxZ MXpCRmd2SlU2aGRkaEQ0XzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTnjzrIIkuyhbNPi4Zgj2Qgdg4975HkfwKcK6GfphbbIseLA4ZcCIY bqpxSAiBrF2IHY3TYlADnBrSfOirLsIwCt9P0m9Lw5o1bAVxV6yMjRX8K4kYRyXx G8IpMY3YIstXOBi98WEXN1p9vcWos5t7hH0hqA7aThacPgkQRh+CbSV/a9dZOGoD 8rfyg62e3jyLviC4IV1I2nNVb36WPKenql1Mqm04HHrmeArxJbkQ7N8rI5xNPOLc BSLV44YmdQdYzlTS6Kzoj5W8qLo+JU/uKlSInXRTr852rKi+FMql8ap+1IJrOgJN BAb3+7Sx6dtacz7lSY8KdaaxDes7+fJE -----END CERTIFICATE-----Generated at Sat Aug 9 10:37:55 2025 by rpki-client