$ rpki-client -vvf rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.mft File: u5dqWY5eywXjf6wApbeIjlf1HFI.mft (raw, json) Hash identifier: c4bMHfO+LtcMvxA1fuiHbDljXtbX7N0XrNK0OHpLtKM= Subject key identifier: 9E:75:53:92:20:DD:D1:7C:55:51:3C:7F:DD:80:1E:5A:85:98:75:A2 Authority key identifier: BB:97:6A:59:8E:5E:CB:05:E3:7F:AC:00:A5:B7:88:8E:57:F5:1C:52 Certificate issuer: /CN=A91590E3/serialNumber=BB976A598E5ECB05E37FAC00A5B7888E57F51C52 Certificate serial: 1923 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5dqWY5eywXjf6wApbeIjlf1HFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.mft Manifest number: 18EC Signing time: Tue 12 Aug 2025 16:34:25 +0000 Manifest this update: Tue 12 Aug 2025 16:34:24 +0000 Manifest next update: Tue 19 Aug 2025 16:34:24 +0000 Files and hashes: 1: u5dqWY5eywXjf6wApbeIjlf1HFI.crl (hash: NWrtr7M12Q5J5rdBMy0HFpRBwv3F/oP1zkxwBMVWw4A=) 2: 1295ACC8511811F0BC16C641C4F9AE02.roa (hash: 84OKZziZJhzWPyx/Qu58m71qp96Ia8UIPI3npSmJSak=) 3: 4D12993446CC11F08EB9471AC4F9AE02.roa (hash: vbJhtFwjv9AiVVu2dZyRBj8FMJ3ESi6HyljVMBZDFwA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.crl rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5dqWY5eywXjf6wApbeIjlf1HFI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 16:34:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6435 (0x1923) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91590E3, serialNumber=BB976A598E5ECB05E37FAC00A5B7888E57F51C52 Validity Not Before: Aug 12 16:34:24 2025 GMT Not After : Aug 19 16:34:24 2025 GMT Subject: CN=689b6d11-52e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a4:59:93:8c:83:19:ad:22:4f:bd:88:a9:6a: 64:51:1e:c2:d4:c5:55:12:15:31:52:fa:26:06:4c: ff:d7:ce:b2:1a:c0:95:49:08:de:74:4f:3a:7a:b5: da:fb:04:8c:a9:2d:b7:ff:eb:26:10:39:73:7f:31: ae:07:04:5d:cd:ba:88:84:0f:50:4c:80:57:0b:bd: 5b:86:a1:38:e1:bf:04:f2:24:b0:23:71:25:11:40: 8c:3f:fe:1d:7f:4e:82:dd:b2:2d:26:dd:30:c7:86: 25:f0:c3:f9:77:2c:de:bb:f1:a1:27:ce:6c:84:c1: 38:b6:24:89:69:45:28:d7:9e:86:1a:4f:d2:11:2e: de:88:33:39:61:d3:e2:db:e9:43:27:97:61:4a:fb: c6:e5:bd:14:11:44:ad:50:6d:ab:c1:7e:f7:94:c6: 88:0c:a9:fc:24:38:5f:6e:2e:e1:cf:72:b6:a3:b8: 87:d0:9f:9a:27:44:9a:e4:20:5c:e6:c3:2b:ba:fb: 33:d0:ce:8b:37:c2:fb:9a:b8:32:5f:6a:63:ff:36: c1:b4:3c:96:25:8d:f9:a2:1d:aa:71:e5:b6:5f:0d: 72:83:b1:b0:3b:85:c8:53:f4:07:99:f5:b1:39:b0: 01:69:9c:d2:a2:b4:eb:fb:0d:a7:fc:b6:67:a7:9b: 00:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:75:53:92:20:DD:D1:7C:55:51:3C:7F:DD:80:1E:5A:85:98:75:A2 X509v3 Authority Key Identifier: keyid:BB:97:6A:59:8E:5E:CB:05:E3:7F:AC:00:A5:B7:88:8E:57:F5:1C:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5dqWY5eywXjf6wApbeIjlf1HFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:dd:1f:85:33:7b:af:39:e6:e5:bc:62:b0:41:f3:3f:06:43: e4:f7:51:86:cb:c9:21:b3:b6:99:56:55:97:48:9b:fd:fe:57: 5b:b3:69:dd:55:0d:5a:b7:d6:f1:48:25:e6:88:fd:a7:97:4a: 81:30:42:c3:45:a9:3a:fa:ea:b2:e3:5b:ad:2b:d8:d3:e8:59: f2:9c:bd:7a:43:27:dd:ed:b5:3e:30:7f:f0:1d:18:00:ae:f1: 10:63:6c:77:2b:0e:eb:d9:22:63:6d:12:09:e2:66:3c:8a:16: 65:27:f7:7f:9f:ba:da:5d:9d:1e:65:bc:45:6d:42:80:01:90: c8:a8:8c:45:92:2e:59:5c:56:b3:e1:61:66:0a:06:99:17:14: 90:5e:60:ac:58:80:cc:69:d2:71:58:e1:da:90:ca:57:da:7e: 46:14:2a:79:d5:b8:9b:1b:ad:e1:0a:3d:44:ea:e1:f4:66:9f: 9d:35:80:7d:19:6e:65:21:7e:41:b9:e9:1f:aa:f5:8e:7c:bd: ad:00:96:0a:f9:14:e8:16:09:f9:a3:b0:f6:ed:84:55:fb:43: 2e:9a:27:ee:1a:97:dd:77:fb:3c:46:de:9d:74:90:c2:31:62: 21:75:2a:84:b9:ae:b3:b0:d5:63:74:0c:b9:eb:98:02:17:69: ce:1c:ec:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGSMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTkwRTMxMTAvBgNVBAUTKEJCOTc2QTU5OEU1RUNCMDVFMzdGQUMwMEE1Qjc4ODhF NTdGNTFDNTIwHhcNMjUwODEyMTYzNDI0WhcNMjUwODE5MTYzNDI0WjAYMRYwFAYD VQQDEw02ODliNmQxMS01MmU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs6RZk4yDGa0iT72IqWpkUR7C1MVVEhUxUvomBkz/186yGsCVSQjedE86erXa +wSMqS23/+smEDlzfzGuBwRdzbqIhA9QTIBXC71bhqE44b8E8iSwI3ElEUCMP/4d f06C3bItJt0wx4Yl8MP5dyzeu/GhJ85shME4tiSJaUUo156GGk/SES7eiDM5YdPi 2+lDJ5dhSvvG5b0UEUStUG2rwX73lMaIDKn8JDhfbi7hz3K2o7iH0J+aJ0Sa5CBc 5sMruvsz0M6LN8L7mrgyX2pj/zbBtDyWJY35oh2qceW2Xw1yg7GwO4XIU/QHmfWx ObABaZzSorTr+w2n/LZnp5sAVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ51U5Ig 3dF8VVE8f92AHlqFmHWiMB8GA1UdIwQYMBaAFLuXalmOXssF43+sAKW3iI5X9RxS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTBFMy9EQTE4QjE4NDlB NDkxMUU3OUE5RjMwMzBDNEY5QUUwMi91NWRxV1k1ZXl3WGpmNndBcGJlSWpsZjFI RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U1ZHFXWTVleXdYamY2d0FwYmVJamxmMUhGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTBFMy9EQTE4QjE4NDlBNDkxMUU3OUE5RjMwMzBDNEY5QUUwMi91NWRxV1k1ZXl3 WGpmNndBcGJlSWpsZjFIRkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCG3R+FM3uvOeblvGKwQfM/BkPk91GGy8khs7aZVlWXSJv9/ldbs2nd VQ1at9bxSCXmiP2nl0qBMELDRak6+uqy41utK9jT6FnynL16Qyfd7bU+MH/wHRgA rvEQY2x3Kw7r2SJjbRIJ4mY8ihZlJ/d/n7raXZ0eZbxFbUKAAZDIqIxFki5ZXFaz 4WFmCgaZFxSQXmCsWIDMadJxWOHakMpX2n5GFCp51bibG63hCj1E6uH0Zp+dNYB9 GW5lIX5BuekfqvWOfL2tAJYK+RToFgn5o7D27YRV+0MumifuGpfdd/s8Rt6ddJDC MWIhdSqEua6zsNVjdAy565gCF2nOHOwa -----END CERTIFICATE-----Generated at Wed Aug 13 04:27:36 2025 by rpki-client