$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1E1C/25222D80920011EF9E0C3D6BC4F9AE02/5CHll4Srb9cADNFZcQHsNg3ZQGY.mft File: 5CHll4Srb9cADNFZcQHsNg3ZQGY.mft (raw, json) Hash identifier: apF7rIFLnK1nlx4rgw0QFyoa6aIkefH5KOxS/bxFxrU= Subject key identifier: D8:08:DB:45:FE:E5:5B:F1:8F:DB:9F:DA:02:C4:8F:3F:73:9F:07:AE Authority key identifier: E4:21:E5:97:84:AB:6F:D7:00:0C:D1:59:71:01:EC:36:0D:D9:40:66 Certificate issuer: /CN=A91A1E1C/serialNumber=E421E59784AB6FD7000CD1597101EC360DD94066 Certificate serial: 99 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CHll4Srb9cADNFZcQHsNg3ZQGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1E1C/25222D80920011EF9E0C3D6BC4F9AE02/5CHll4Srb9cADNFZcQHsNg3ZQGY.mft Manifest number: 97 Signing time: Sat 09 Aug 2025 06:52:51 +0000 Manifest this update: Sat 09 Aug 2025 06:52:51 +0000 Manifest next update: Sat 16 Aug 2025 06:52:51 +0000 Files and hashes: 1: 5CHll4Srb9cADNFZcQHsNg3ZQGY.crl (hash: Lpb6uoChqfHklKeD0fflzOTpZ/3aQ5tLsSaRWCepjyU=) 2: 5BC18D6C9A6C11EF8C656668C4F9AE02.roa (hash: 1ljn9MSckdlGvWQ7HkpY2v8ly/0oxPt9z/n6V7MEeDM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1E1C/25222D80920011EF9E0C3D6BC4F9AE02/5CHll4Srb9cADNFZcQHsNg3ZQGY.crl rsync://rpki.apnic.net/member_repository/A91A1E1C/25222D80920011EF9E0C3D6BC4F9AE02/5CHll4Srb9cADNFZcQHsNg3ZQGY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CHll4Srb9cADNFZcQHsNg3ZQGY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 153 (0x99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1E1C, serialNumber=E421E59784AB6FD7000CD1597101EC360DD94066 Validity Not Before: Aug 9 06:52:51 2025 GMT Not After : Aug 16 06:52:51 2025 GMT Subject: CN=6896f043-9621 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a6:ce:f8:24:c7:8f:91:a8:4b:93:c3:b3:29: 2a:6a:ea:45:e1:97:df:48:ae:d5:f8:9e:39:9a:f6: d5:3e:fa:58:e5:7a:43:c6:ec:36:4e:fe:e9:ac:57: ff:28:a0:6b:0a:86:7c:d0:18:6f:ef:09:04:0d:b1: 35:72:d1:2a:53:cc:dd:18:74:55:0a:14:b6:ec:f1: 8a:9e:3f:b2:76:68:99:23:96:ec:e2:71:3d:6d:d3: 1e:23:af:62:db:e1:75:d4:1a:be:96:de:7e:ed:1d: dc:5d:b7:53:b7:27:60:cf:38:37:d4:f0:76:99:f9: ef:89:4c:b0:2f:b4:d0:b0:18:fd:4a:54:30:c9:d1: 51:7c:3d:ea:19:70:e9:ee:0e:df:3e:cb:57:1a:45: 52:f0:24:65:c6:1d:13:d0:43:5b:cd:d9:8e:0b:d0: 69:57:c3:2e:f1:44:8d:50:39:d9:f1:d3:ac:df:6d: e1:d2:d0:82:ae:d6:be:4c:6a:6f:48:17:af:ae:4b: f1:54:d3:4f:e0:54:ea:4e:6b:7d:98:a0:2f:60:17: fa:79:ce:8a:1e:c0:40:30:b0:90:c6:9b:63:c1:23: 5c:95:4f:0f:3b:c1:1a:37:5c:05:4d:e1:6f:b4:ac: e4:09:79:d9:c2:5d:9f:44:33:34:34:9f:a2:d2:d5: 32:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:08:DB:45:FE:E5:5B:F1:8F:DB:9F:DA:02:C4:8F:3F:73:9F:07:AE X509v3 Authority Key Identifier: keyid:E4:21:E5:97:84:AB:6F:D7:00:0C:D1:59:71:01:EC:36:0D:D9:40:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1E1C/25222D80920011EF9E0C3D6BC4F9AE02/5CHll4Srb9cADNFZcQHsNg3ZQGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CHll4Srb9cADNFZcQHsNg3ZQGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1E1C/25222D80920011EF9E0C3D6BC4F9AE02/5CHll4Srb9cADNFZcQHsNg3ZQGY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:52:e4:8c:d8:b5:f8:17:7f:7b:08:f8:88:89:f1:27:48:79: 03:49:d9:92:d7:d0:e1:47:b7:0c:9c:d5:9f:68:3e:62:57:1f: 80:12:67:12:df:43:c8:ee:82:5e:70:a1:46:4a:dd:1d:3c:05: c3:5c:cc:68:78:97:b9:3c:20:69:23:18:0b:c9:ce:23:29:2a: 5c:e7:2d:42:df:9a:d7:8f:51:8f:1b:34:b0:b7:d6:88:9e:4b: 70:fa:7b:69:e0:7c:9f:90:95:ed:ad:42:6d:6c:8d:d8:4d:22: df:9d:eb:7b:02:50:cf:b6:7f:72:e7:47:6c:37:0e:54:4d:f8: aa:05:5b:f8:23:4b:57:d4:33:58:c5:4b:98:2e:74:f8:d0:a2: a9:0a:9a:82:b2:6e:20:30:9c:a4:80:06:5e:30:6b:37:94:4a: 3a:db:4e:0a:11:d8:10:98:7f:2c:83:b4:80:6f:14:2c:8d:37: 0b:f2:bc:67:2b:fe:d3:a6:03:73:a6:89:ea:f4:b7:eb:5b:a1: 0b:e4:d0:c1:a5:db:01:b1:33:ee:07:9c:b9:65:24:44:0b:96: 25:c6:9f:3d:ac:0b:49:da:fc:a4:f9:2a:ab:7c:7b:b5:f7:63: 63:31:d1:82:2c:00:80:93:b7:70:3a:96:ba:f2:f6:00:ad:c3: 83:c4:fc:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFFMUMxMTAvBgNVBAUTKEU0MjFFNTk3ODRBQjZGRDcwMDBDRDE1OTcxMDFFQzM2 MEREOTQwNjYwHhcNMjUwODA5MDY1MjUxWhcNMjUwODE2MDY1MjUxWjAYMRYwFAYD VQQDEw02ODk2ZjA0My05NjIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwKbO+CTHj5GoS5PDsykqaupF4ZffSK7V+J45mvbVPvpY5XpDxuw2Tv7prFf/ KKBrCoZ80Bhv7wkEDbE1ctEqU8zdGHRVChS27PGKnj+ydmiZI5bs4nE9bdMeI69i 2+F11Bq+lt5+7R3cXbdTtydgzzg31PB2mfnviUywL7TQsBj9SlQwydFRfD3qGXDp 7g7fPstXGkVS8CRlxh0T0ENbzdmOC9BpV8Mu8USNUDnZ8dOs323h0tCCrta+TGpv SBevrkvxVNNP4FTqTmt9mKAvYBf6ec6KHsBAMLCQxptjwSNclU8PO8EaN1wFTeFv tKzkCXnZwl2fRDM0NJ+i0tUyfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNgI20X+ 5Vvxj9uf2gLEjz9znweuMB8GA1UdIwQYMBaAFOQh5ZeEq2/XAAzRWXEB7DYN2UBm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUUxQy8yNTIyMkQ4MDky MDAxMUVGOUUwQzNENkJDNEY5QUUwMi81Q0hsbDRTcmI5Y0FETkZaY1FIc05nM1pR R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzVDSGxsNFNyYjljQURORlpjUUhzTmczWlFHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUUxQy8yNTIyMkQ4MDkyMDAxMUVGOUUwQzNENkJDNEY5QUUwMi81Q0hsbDRTcmI5 Y0FETkZaY1FIc05nM1pRR1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3UuSM2LX4F397CPiIifEnSHkDSdmS19DhR7cMnNWfaD5iVx+AEmcS 30PI7oJecKFGSt0dPAXDXMxoeJe5PCBpIxgLyc4jKSpc5y1C35rXj1GPGzSwt9aI nktw+ntp4HyfkJXtrUJtbI3YTSLfnet7AlDPtn9y50dsNw5UTfiqBVv4I0tX1DNY xUuYLnT40KKpCpqCsm4gMJykgAZeMGs3lEo6204KEdgQmH8sg7SAbxQsjTcL8rxn K/7TpgNzponq9LfrW6EL5NDBpdsBsTPuB5y5ZSREC5Ylxp89rAtJ2vyk+SqrfHu1 92NjMdGCLACAk7dwOpa68vYArcODxPyz -----END CERTIFICATE-----Generated at Mon Aug 11 04:26:01 2025 by rpki-client