$ rpki-client -vvf rpki.apnic.net/member_repository/A91380F7/A7EBC1D2A7F811EFBB44F371C4F9AE02/A5HZpw6JPnUbxhKJxUQXuHoQRVk.mft File: A5HZpw6JPnUbxhKJxUQXuHoQRVk.mft (raw, json) Hash identifier: IrLlwX0vZMaHHchX2/5djD4EqS7fUFkKN5VPptSepRg= Subject key identifier: F6:CB:A0:43:95:35:76:4D:25:ED:BC:71:0A:42:A7:49:9A:A5:29:55 Authority key identifier: 03:91:D9:A7:0E:89:3E:75:1B:C6:12:89:C5:44:17:B8:7A:10:45:59 Certificate issuer: /CN=A91380F7/serialNumber=0391D9A70E893E751BC61289C54417B87A104559 Certificate serial: 87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A5HZpw6JPnUbxhKJxUQXuHoQRVk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91380F7/A7EBC1D2A7F811EFBB44F371C4F9AE02/A5HZpw6JPnUbxhKJxUQXuHoQRVk.mft Manifest number: 86 Signing time: Sat 09 Aug 2025 07:04:06 +0000 Manifest this update: Sat 09 Aug 2025 07:04:05 +0000 Manifest next update: Sat 16 Aug 2025 07:04:05 +0000 Files and hashes: 1: A5HZpw6JPnUbxhKJxUQXuHoQRVk.crl (hash: 1rId+1Ok5Se/iCqYv7Xz2hS3c/tU0IQmSvxmIoTuB1I=) 2: 9B3FE178A7FA11EFA7886875C4F9AE02.roa (hash: wskyOCDE340iqc6+xbxJBMsRJGfe9vODWh/hz8Ga1HM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91380F7/A7EBC1D2A7F811EFBB44F371C4F9AE02/A5HZpw6JPnUbxhKJxUQXuHoQRVk.crl rsync://rpki.apnic.net/member_repository/A91380F7/A7EBC1D2A7F811EFBB44F371C4F9AE02/A5HZpw6JPnUbxhKJxUQXuHoQRVk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A5HZpw6JPnUbxhKJxUQXuHoQRVk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 135 (0x87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91380F7, serialNumber=0391D9A70E893E751BC61289C54417B87A104559 Validity Not Before: Aug 9 07:04:05 2025 GMT Not After : Aug 16 07:04:05 2025 GMT Subject: CN=6896f2e5-34c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5f:3b:04:a6:ae:11:98:b0:7d:0a:5c:fc:ef: 7b:c7:0c:6d:68:a3:26:79:df:04:d2:0a:65:1b:b0: 9a:70:c4:1e:58:66:99:db:da:1c:45:0e:cc:79:00: 03:9f:68:5c:4b:67:09:92:99:df:d4:74:79:49:b0: c7:17:da:33:83:93:64:b3:5c:c7:75:8c:d6:e0:9b: 59:ec:f0:c8:64:84:33:c7:62:97:55:3e:41:26:db: 16:24:98:ea:30:c6:8a:d5:47:e6:03:06:48:f4:fe: 02:42:62:7c:e4:3b:26:95:dc:ae:a2:37:65:30:37: 37:6b:b0:61:87:1c:de:59:8c:16:3d:ec:15:0b:2f: ce:57:bb:77:b7:d6:b5:d5:cc:64:99:f1:a9:9a:89: 63:f7:e0:44:44:d6:01:55:c1:8d:22:8a:58:37:27: 28:eb:0c:a8:50:cb:aa:84:88:3a:d8:9c:07:f0:bd: 43:27:e0:41:af:a1:9a:93:96:27:d5:7e:14:73:07: b5:da:a8:9c:1e:54:11:ef:bb:d1:83:14:75:66:2e: 66:0e:6a:c6:be:90:47:10:39:89:33:b1:cb:32:73: 1c:eb:d0:be:45:66:e7:5e:79:50:86:60:db:86:73: 1e:aa:00:52:38:2a:6f:75:60:bc:3d:bc:ec:0d:4e: f0:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:CB:A0:43:95:35:76:4D:25:ED:BC:71:0A:42:A7:49:9A:A5:29:55 X509v3 Authority Key Identifier: keyid:03:91:D9:A7:0E:89:3E:75:1B:C6:12:89:C5:44:17:B8:7A:10:45:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91380F7/A7EBC1D2A7F811EFBB44F371C4F9AE02/A5HZpw6JPnUbxhKJxUQXuHoQRVk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A5HZpw6JPnUbxhKJxUQXuHoQRVk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91380F7/A7EBC1D2A7F811EFBB44F371C4F9AE02/A5HZpw6JPnUbxhKJxUQXuHoQRVk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:45:22:21:0d:07:6d:77:9d:2a:c5:ab:ef:62:e5:dd:ac:f9: ef:51:ba:75:f4:6b:90:94:5f:42:44:7b:74:df:bb:58:b7:19: 5b:24:27:da:24:84:cd:d3:fa:52:96:59:24:4b:ab:4a:1d:29: 00:b6:ef:bd:5a:db:b8:d4:d9:a1:6c:9f:59:fa:8a:49:b7:37: 22:cc:29:f9:30:ae:c3:73:22:02:e2:89:42:66:9e:fd:90:b7: e2:3e:87:13:d4:1c:7c:6f:58:df:85:e2:c6:e7:84:19:cb:f3: 7f:17:e1:24:15:97:26:9e:79:ec:ff:78:74:6b:60:9a:b4:bf: 8a:86:09:d6:71:50:14:f3:64:7a:78:7a:8b:5d:63:45:71:5e: 41:39:75:3d:86:86:74:ec:89:3d:1a:84:a6:91:2a:f6:ab:e7: f4:ff:a3:56:15:18:04:d1:cb:25:4f:af:7e:24:24:20:80:20: 11:36:c0:cd:bd:19:ee:a8:bc:b2:a9:f2:10:7b:2a:0a:55:de: 22:8d:2e:f7:92:16:48:23:c1:3e:1b:ff:b7:f0:2a:48:9d:3d: d2:4f:9b:92:a9:1d:9d:6c:45:b6:f0:71:64:6b:0f:6d:b4:3d: 20:32:6d:66:cf:b7:ea:e7:f8:73:8c:27:91:fa:42:78:64:b7: f8:cd:98:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgwRjcxMTAvBgNVBAUTKDAzOTFEOUE3MEU4OTNFNzUxQkM2MTI4OUM1NDQxN0I4 N0ExMDQ1NTkwHhcNMjUwODA5MDcwNDA1WhcNMjUwODE2MDcwNDA1WjAYMRYwFAYD VQQDEw02ODk2ZjJlNS0zNGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuV87BKauEZiwfQpc/O97xwxtaKMmed8E0gplG7CacMQeWGaZ29ocRQ7MeQAD n2hcS2cJkpnf1HR5SbDHF9ozg5Nks1zHdYzW4JtZ7PDIZIQzx2KXVT5BJtsWJJjq MMaK1UfmAwZI9P4CQmJ85DsmldyuojdlMDc3a7BhhxzeWYwWPewVCy/OV7t3t9a1 1cxkmfGpmolj9+BERNYBVcGNIopYNyco6wyoUMuqhIg62JwH8L1DJ+BBr6Gak5Yn 1X4Ucwe12qicHlQR77vRgxR1Zi5mDmrGvpBHEDmJM7HLMnMc69C+RWbnXnlQhmDb hnMeqgBSOCpvdWC8PbzsDU7wKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPbLoEOV NXZNJe28cQpCp0mapSlVMB8GA1UdIwQYMBaAFAOR2acOiT51G8YSicVEF7h6EEVZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODBGNy9BN0VCQzFEMkE3 RjgxMUVGQkI0NEYzNzFDNEY5QUUwMi9BNUhacHc2SlBuVWJ4aEtKeFVRWHVIb1FS VmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E1SFpwdzZKUG5VYnhoS0p4VVFYdUhvUVJWay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODBGNy9BN0VCQzFEMkE3RjgxMUVGQkI0NEYzNzFDNEY5QUUwMi9BNUhacHc2SlBu VWJ4aEtKeFVRWHVIb1FSVmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDJRSIhDQdtd50qxavvYuXdrPnvUbp19GuQlF9CRHt037tYtxlbJCfa JITN0/pSllkkS6tKHSkAtu+9Wtu41NmhbJ9Z+opJtzcizCn5MK7DcyIC4olCZp79 kLfiPocT1Bx8b1jfheLG54QZy/N/F+EkFZcmnnns/3h0a2CatL+KhgnWcVAU82R6 eHqLXWNFcV5BOXU9hoZ07Ik9GoSmkSr2q+f0/6NWFRgE0cslT69+JCQggCARNsDN vRnuqLyyqfIQeyoKVd4ijS73khZII8E+G/+38CpInT3ST5uSqR2dbEW28HFkaw9t tD0gMm1mz7fq5/hzjCeR+kJ4ZLf4zZjf -----END CERTIFICATE-----Generated at Sun Aug 10 19:55:02 2025 by rpki-client