$ rpki-client -vvf rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.mft File: 5eHPyuH55vEhyhNVG0D2mJhLnZ0.mft (raw, json) Hash identifier: HFAZyliIHQgk45jXuuP4OI5tinYnpgfFah82liG1N6I= Subject key identifier: 39:10:15:08:67:EA:9C:0F:0E:A3:6C:8E:23:6E:64:B5:C2:76:B8:13 Authority key identifier: E5:E1:CF:CA:E1:F9:E6:F1:21:CA:13:55:1B:40:F6:98:98:4B:9D:9D Certificate issuer: /CN=A91801A5/serialNumber=E5E1CFCAE1F9E6F121CA13551B40F698984B9D9D Certificate serial: 06A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eHPyuH55vEhyhNVG0D2mJhLnZ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.mft Manifest number: 0697 Signing time: Fri 08 Aug 2025 22:40:02 +0000 Manifest this update: Fri 08 Aug 2025 22:40:01 +0000 Manifest next update: Fri 15 Aug 2025 22:40:01 +0000 Files and hashes: 1: 5eHPyuH55vEhyhNVG0D2mJhLnZ0.crl (hash: 1kkTxNqO+9xPBgj6iuA9o4WWh/rjjJvXRwyyhPTzLz8=) 2: 54F537EC32CD11EFA6C5320EC4F9AE02.roa (hash: S4JJ7jAyBRSnbNqlDJcNsJ3iSBBNhU/Ff59dfcwJJB4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.crl rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eHPyuH55vEhyhNVG0D2mJhLnZ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1696 (0x6a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91801A5, serialNumber=E5E1CFCAE1F9E6F121CA13551B40F698984B9D9D Validity Not Before: Aug 8 22:40:01 2025 GMT Not After : Aug 15 22:40:01 2025 GMT Subject: CN=68967cc2-c831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ac:af:91:ba:45:ea:b5:91:b9:9b:59:4d:76: 99:c1:f8:b1:e9:70:31:e9:b4:e9:fb:e3:05:12:37: d2:72:1c:e9:01:ca:8c:54:22:4b:cb:17:f7:27:21: 0e:e9:98:cc:84:49:d7:0b:7a:2e:7b:02:e4:9e:15: 67:e3:f7:1a:16:f2:8d:32:e5:d0:09:7f:40:b0:f1: 0e:7a:d2:d0:08:72:1a:c0:4b:fb:dc:23:13:cb:7c: a3:ed:af:86:22:1d:ce:af:85:38:9f:17:f9:1a:ca: 87:33:8c:ae:01:95:66:e9:42:20:27:38:5d:64:cc: ac:a4:f4:ed:8d:41:aa:4b:a5:44:53:cf:33:1f:90: b2:29:63:0a:30:45:92:9b:56:fe:b0:0f:1a:b4:e3: 90:45:75:8f:e4:1a:91:89:02:a9:be:a1:71:4d:be: 5e:fa:51:29:63:9a:1a:7d:98:bf:1f:b0:2a:9e:94: 52:e1:5b:a8:51:18:d2:3d:c0:76:0b:47:78:ba:99: bb:14:3a:c2:14:7f:f2:8a:de:ae:01:0d:c2:d7:85: 13:17:42:56:73:0b:a3:aa:44:e7:ff:f9:b9:2a:85: d0:18:56:c0:77:82:30:a9:94:35:ba:dc:86:56:bc: a0:b2:18:3a:82:ae:69:24:5f:92:5f:92:88:11:c5: 64:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:10:15:08:67:EA:9C:0F:0E:A3:6C:8E:23:6E:64:B5:C2:76:B8:13 X509v3 Authority Key Identifier: keyid:E5:E1:CF:CA:E1:F9:E6:F1:21:CA:13:55:1B:40:F6:98:98:4B:9D:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eHPyuH55vEhyhNVG0D2mJhLnZ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:a3:11:a4:dd:95:4f:10:aa:7d:77:e4:5f:cb:67:1d:73:d1: 7f:39:47:fb:53:ea:d8:66:72:a6:76:f1:39:11:2b:cc:35:1b: 4a:27:c1:22:56:19:e1:e7:99:eb:50:a0:37:fb:7a:82:08:41: 14:a4:20:5a:d8:d1:f3:b2:dd:b5:a8:73:71:1e:39:04:1b:21: 68:74:d0:96:a0:2b:57:0d:fa:06:25:e4:6b:ee:87:06:65:01: 5a:b3:85:87:9b:58:8e:6b:04:45:de:09:3e:a1:ba:6f:a7:cc: e0:af:d6:06:6d:29:8f:b2:53:6a:d3:e4:53:56:07:7f:79:51: be:6c:15:14:f5:24:ba:87:eb:7f:1f:ac:09:f7:af:d4:42:a2: 26:63:32:64:3f:d4:1c:29:f7:6a:51:b6:35:54:93:55:62:79: e6:70:07:f5:1a:c2:c4:c6:54:11:c4:ee:23:98:bf:b6:97:d1: dc:3b:a4:51:9b:b9:d1:a6:22:fd:f8:c2:6f:7c:90:e2:de:83: 41:47:4d:86:6b:80:25:23:6d:7e:3f:b6:8d:c4:a2:4a:91:04: 71:bb:da:2a:ec:61:15:40:a0:6d:aa:24:1d:88:40:be:90:81: c0:cc:8d:f3:65:a1:23:1d:23:b3:fb:04:db:87:25:7a:b3:6c: e0:86:4d:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAxQTUxMTAvBgNVBAUTKEU1RTFDRkNBRTFGOUU2RjEyMUNBMTM1NTFCNDBGNjk4 OTg0QjlEOUQwHhcNMjUwODA4MjI0MDAxWhcNMjUwODE1MjI0MDAxWjAYMRYwFAYD VQQDEw02ODk2N2NjMi1jODMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0qyvkbpF6rWRuZtZTXaZwfix6XAx6bTp++MFEjfSchzpAcqMVCJLyxf3JyEO 6ZjMhEnXC3ouewLknhVn4/caFvKNMuXQCX9AsPEOetLQCHIawEv73CMTy3yj7a+G Ih3Or4U4nxf5GsqHM4yuAZVm6UIgJzhdZMyspPTtjUGqS6VEU88zH5CyKWMKMEWS m1b+sA8atOOQRXWP5BqRiQKpvqFxTb5e+lEpY5oafZi/H7AqnpRS4VuoURjSPcB2 C0d4upm7FDrCFH/yit6uAQ3C14UTF0JWcwujqkTn//m5KoXQGFbAd4IwqZQ1utyG Vrygshg6gq5pJF+SX5KIEcVk1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDkQFQhn 6pwPDqNsjiNuZLXCdrgTMB8GA1UdIwQYMBaAFOXhz8rh+ebxIcoTVRtA9piYS52d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDFBNS84NEI1RDYxQzdE NkQxMUVCQTZBNEE4MTdDNEY5QUUwMi81ZUhQeXVINTV2RWh5aE5WRzBEMm1KaExu WjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVlSFB5dUg1NXZFaHloTlZHMEQybUpoTG5aMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDFBNS84NEI1RDYxQzdENkQxMUVCQTZBNEE4MTdDNEY5QUUwMi81ZUhQeXVINTV2 RWh5aE5WRzBEMm1KaExuWjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPoxGk3ZVPEKp9d+Rfy2cdc9F/OUf7U+rYZnKmdvE5ESvMNRtKJ8Ei Vhnh55nrUKA3+3qCCEEUpCBa2NHzst21qHNxHjkEGyFodNCWoCtXDfoGJeRr7ocG ZQFas4WHm1iOawRF3gk+obpvp8zgr9YGbSmPslNq0+RTVgd/eVG+bBUU9SS6h+t/ H6wJ96/UQqImYzJkP9QcKfdqUbY1VJNVYnnmcAf1GsLExlQRxO4jmL+2l9HcO6RR m7nRpiL9+MJvfJDi3oNBR02Ga4AlI21+P7aNxKJKkQRxu9oq7GEVQKBtqiQdiEC+ kIHAzI3zZaEjHSOz+wTbhyV6s2zghk2H -----END CERTIFICATE-----Generated at Sat Aug 9 23:18:36 2025 by rpki-client