$ rpki-client -vvf rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.mft File: 5r9G5TDfkimPrAMq-8mECcRDBDk.mft (raw, json) Hash identifier: poTIRFL8OyFmarwSyVzFeh0frBb6KozoSvpj8ogNxus= Subject key identifier: D2:9D:6C:65:E5:C3:11:F3:92:C8:82:E1:2F:B0:3D:F4:05:45:20:66 Authority key identifier: E6:BF:46:E5:30:DF:92:29:8F:AC:03:2A:FB:C9:84:09:C4:43:04:39 Certificate issuer: /CN=A91527F9/serialNumber=E6BF46E530DF92298FAC032AFBC98409C4430439 Certificate serial: 34CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5r9G5TDfkimPrAMq-8mECcRDBDk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.mft Manifest number: 34B9 Signing time: Wed 06 Aug 2025 14:57:32 +0000 Manifest this update: Wed 06 Aug 2025 14:57:32 +0000 Manifest next update: Wed 13 Aug 2025 14:57:32 +0000 Files and hashes: 1: 5r9G5TDfkimPrAMq-8mECcRDBDk.crl (hash: 5hY0WGESILc6J20VVSSZHRfUlBcLxTHiDwOTC+wUypw=) 2: 909C5126F0A711EEA6150174C4F9AE02.roa (hash: HW9R1Ep56SryGIz4W6P5CqXSgSxlXz4KavtGaF387a4=) 3: AD5BA998D85D11EB8E31070BC4F9AE02.roa (hash: AqcTvl3JE8iQmp2mHhzhnxH+2xnTnNkhAQ8gJbtZg+I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.crl rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5r9G5TDfkimPrAMq-8mECcRDBDk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 14:57:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13517 (0x34cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91527F9, serialNumber=E6BF46E530DF92298FAC032AFBC98409C4430439 Validity Not Before: Aug 6 14:57:32 2025 GMT Not After : Aug 13 14:57:32 2025 GMT Subject: CN=68936d5c-ce6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:52:07:5b:76:49:a4:fa:20:ab:cc:98:28:ab: 21:07:a5:e0:b0:29:f3:4c:27:4c:bb:8d:03:56:d4: ec:90:2f:5a:21:d9:b8:7c:fc:71:f7:9c:86:d2:14: 48:9f:92:00:4c:ba:c1:88:3c:bc:34:e8:12:9d:75: 3a:0e:bd:36:5c:ea:fc:08:00:72:e5:85:d3:7f:e0: 4a:e2:d9:1c:48:c7:01:2a:2a:bb:6d:f0:b3:d8:2d: 07:0c:a5:4d:94:20:16:bc:f2:b9:65:85:1a:ec:15: 4e:90:28:42:24:31:50:86:ae:61:9b:e9:67:d1:c8: 4f:13:04:cb:c9:83:17:d6:49:db:b4:4b:8b:50:33: ea:0c:4c:53:56:d4:08:40:85:c2:b5:09:e9:f2:37: aa:43:a0:a4:0c:be:7f:a5:34:af:cf:0a:96:84:1f: 32:25:85:50:32:01:81:90:b9:5a:a9:e7:b1:07:09: 78:0f:6a:3f:6e:04:54:0e:39:99:5f:9e:be:2a:19: c3:78:4f:06:18:fe:63:c8:5b:64:df:2e:9e:8b:9a: 43:4a:bc:bd:24:2c:5c:53:bd:14:28:00:be:c5:92: b6:4b:12:74:9e:9c:a5:d7:80:ca:04:75:90:18:59: 42:80:d8:ea:99:0b:4f:6f:7b:61:1b:2b:a6:47:64: 9a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:9D:6C:65:E5:C3:11:F3:92:C8:82:E1:2F:B0:3D:F4:05:45:20:66 X509v3 Authority Key Identifier: keyid:E6:BF:46:E5:30:DF:92:29:8F:AC:03:2A:FB:C9:84:09:C4:43:04:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5r9G5TDfkimPrAMq-8mECcRDBDk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:86:2f:fc:68:75:52:43:45:ef:10:0d:63:a1:a7:35:4d:47: 20:2c:d3:d7:9d:27:03:28:f8:6d:32:86:0c:3c:38:37:01:7c: 31:a2:25:cf:a9:ee:b2:a8:7b:0f:de:fa:fb:f7:9f:00:71:5f: 30:b1:30:f7:99:4c:ba:93:d4:f4:60:13:47:ae:c5:38:c9:f2: d9:aa:64:de:84:15:cf:91:43:d2:c2:12:e7:f5:98:d6:3e:05: a9:33:57:20:6d:9f:fa:56:2d:ee:07:dd:13:06:4f:44:b6:0d: 2a:9f:79:7c:f3:b2:1e:cd:63:d9:93:89:f6:fc:31:2f:f3:cb: a6:80:3f:cb:c6:0d:fe:ea:7f:be:c3:ba:ac:41:54:5d:88:52: fb:a3:07:47:82:e7:a3:92:38:f6:03:05:13:89:31:09:58:b9: 46:02:bd:a2:28:ab:15:66:83:41:9f:92:c1:c0:c0:86:c0:6f: 8a:78:1a:98:a6:26:cb:89:08:db:7b:05:13:0b:13:9d:3c:c2: 4c:d4:61:98:0c:44:cb:21:33:ad:3c:42:28:16:58:58:97:83: e4:79:24:fd:63:23:cb:1b:f3:88:5b:9c:33:df:bd:05:c9:2c: 45:8d:e1:70:e2:92:95:29:a8:b4:0f:72:98:11:4d:3c:cc:a6: d6:a8:37:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTI3RjkxMTAvBgNVBAUTKEU2QkY0NkU1MzBERjkyMjk4RkFDMDMyQUZCQzk4NDA5 QzQ0MzA0MzkwHhcNMjUwODA2MTQ1NzMyWhcNMjUwODEzMTQ1NzMyWjAYMRYwFAYD VQQDEw02ODkzNmQ1Yy1jZTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxlIHW3ZJpPogq8yYKKshB6XgsCnzTCdMu40DVtTskC9aIdm4fPxx95yG0hRI n5IATLrBiDy8NOgSnXU6Dr02XOr8CABy5YXTf+BK4tkcSMcBKiq7bfCz2C0HDKVN lCAWvPK5ZYUa7BVOkChCJDFQhq5hm+ln0chPEwTLyYMX1knbtEuLUDPqDExTVtQI QIXCtQnp8jeqQ6CkDL5/pTSvzwqWhB8yJYVQMgGBkLlaqeexBwl4D2o/bgRUDjmZ X56+KhnDeE8GGP5jyFtk3y6ei5pDSry9JCxcU70UKAC+xZK2SxJ0npyl14DKBHWQ GFlCgNjqmQtPb3thGyumR2SaUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNKdbGXl wxHzksiC4S+wPfQFRSBmMB8GA1UdIwQYMBaAFOa/RuUw35Ipj6wDKvvJhAnEQwQ5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjdGOS82RUQyRUJBQTFE OUExMUUyQUU5M0FEODcwOEIwMkNEMi81cjlHNVREZmtpbVByQU1xLThtRUNjUkRC RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVyOUc1VERma2ltUHJBTXEtOG1FQ2NSREJEay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjdGOS82RUQyRUJBQTFEOUExMUUyQUU5M0FEODcwOEIwMkNEMi81cjlHNVREZmtp bVByQU1xLThtRUNjUkRCRGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBhi/8aHVSQ0XvEA1joac1TUcgLNPXnScDKPhtMoYMPDg3AXwxoiXP qe6yqHsP3vr7958AcV8wsTD3mUy6k9T0YBNHrsU4yfLZqmTehBXPkUPSwhLn9ZjW PgWpM1cgbZ/6Vi3uB90TBk9Etg0qn3l887IezWPZk4n2/DEv88umgD/Lxg3+6n++ w7qsQVRdiFL7owdHguejkjj2AwUTiTEJWLlGAr2iKKsVZoNBn5LBwMCGwG+KeBqY pibLiQjbewUTCxOdPMJM1GGYDETLITOtPEIoFlhYl4PkeST9YyPLG/OIW5wz370F ySxFjeFw4pKVKai0D3KYEU08zKbWqDeH -----END CERTIFICATE-----Generated at Thu Aug 7 11:09:52 2025 by rpki-client