$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.mft File: 5KlM-o0vn1s570Y1BZHOMS5RT7M.mft (raw, json) Hash identifier: 8BQ6wJ5YzOK88G0QxE9M2PMBGSAWcOzRueEnKtaz0Tg= Subject key identifier: E8:E8:29:0E:0B:A5:E0:97:DF:F0:97:94:97:F9:61:04:D8:CC:49:C9 Authority key identifier: E4:A9:4C:FA:8D:2F:9F:5B:39:EF:46:35:05:91:CE:31:2E:51:4F:B3 Certificate issuer: /CN=A91A3AB3/serialNumber=E4A94CFA8D2F9F5B39EF46350591CE312E514FB3 Certificate serial: 02AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KlM-o0vn1s570Y1BZHOMS5RT7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.mft Manifest number: 0298 Signing time: Mon 11 Aug 2025 01:56:23 +0000 Manifest this update: Mon 11 Aug 2025 01:56:23 +0000 Manifest next update: Mon 18 Aug 2025 01:56:23 +0000 Files and hashes: 1: 5KlM-o0vn1s570Y1BZHOMS5RT7M.crl (hash: bT2E2/6TunMA6yOT4x2wv/EkNp3R/dcu4RvckrJSN8E=) 2: F3997FACE21D11EFA5819B7EC4F9AE02.roa (hash: YJknqh8T+qXW11AGQpkWixPSeb/oim2jtPvDZDC0Y5M=) 3: 5B69CE3A474A11EF8624EE6DC4F9AE02.roa (hash: 0d7okG44VFnG4nuLf3zjFz92ZcS33/9Y18izFVAiNWk=) 4: 3D331986E17211EFA5959B2FC4F9AE02.roa (hash: pOsL4nJKiT9Wc01cD2wPZO+WlYtBX9ZtStyQuOwRJu4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.crl rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KlM-o0vn1s570Y1BZHOMS5RT7M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 686 (0x2ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3AB3, serialNumber=E4A94CFA8D2F9F5B39EF46350591CE312E514FB3 Validity Not Before: Aug 11 01:56:23 2025 GMT Not After : Aug 18 01:56:23 2025 GMT Subject: CN=68994dc7-25f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1f:89:a4:33:f4:79:40:8f:39:fd:58:ab:5a: 48:0a:63:bd:9f:25:ec:01:1d:95:0a:23:59:49:c6: 3c:7f:a2:a0:86:1c:5f:cb:10:25:f5:93:97:22:51: 60:34:33:49:bc:1e:9b:ea:c9:f1:db:59:da:29:30: 81:e0:ba:b3:62:8a:83:27:3b:c8:30:87:42:53:c3: a4:36:1c:ba:0c:f3:c0:c2:89:0b:c1:5e:6a:1c:11: fc:0a:bc:6f:cb:95:79:39:cf:fc:76:62:13:05:eb: 19:79:51:3a:7c:41:9b:46:e2:94:6a:53:58:5b:07: 80:5e:98:ee:5f:c5:6a:d6:28:27:2d:ac:8b:81:ee: 96:77:c3:53:7e:cb:81:dd:aa:73:d5:c2:7c:37:d9: ee:6c:4c:2a:6c:43:3b:22:0c:de:b7:f5:93:f7:5b: fa:a9:7e:be:e0:e0:bc:82:0c:e3:bf:16:0f:80:8c: f8:17:cd:d9:2e:ca:27:27:65:3c:ac:c4:67:d0:09: c2:e0:ea:02:ab:8e:ca:17:75:25:82:51:c5:c2:67: b0:2b:c1:7d:46:e4:eb:5b:01:08:e9:a8:a6:34:9c: 5c:10:61:bd:a9:cd:a4:2b:b8:61:dc:13:32:06:91: d5:eb:94:50:4b:66:1c:ae:34:ba:59:98:61:ae:1a: cf:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:E8:29:0E:0B:A5:E0:97:DF:F0:97:94:97:F9:61:04:D8:CC:49:C9 X509v3 Authority Key Identifier: keyid:E4:A9:4C:FA:8D:2F:9F:5B:39:EF:46:35:05:91:CE:31:2E:51:4F:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KlM-o0vn1s570Y1BZHOMS5RT7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:85:76:80:b1:0b:de:af:59:ea:45:1a:7f:25:14:3a:12:08: b0:bb:b1:44:9b:a8:19:42:b4:8b:67:32:4f:f0:0c:e1:43:1a: c9:5c:1a:ed:37:5e:bd:a2:77:a2:0e:a8:8b:18:7d:66:e2:fd: 3c:b2:11:0c:3b:45:39:5d:fe:b8:31:be:e7:e8:4f:4e:19:71: c0:7d:0f:02:8e:23:fa:c4:7f:9f:6b:d8:fc:81:30:1b:5f:de: 80:57:7a:91:c8:71:0f:37:7a:20:74:64:ce:bb:9a:9d:44:6a: 7d:19:17:8b:80:ae:d1:fc:41:1f:ac:28:75:b8:5f:ed:a9:19: bf:45:21:bf:7b:23:57:e2:e1:f4:5d:d8:5b:5e:8c:0d:60:22: 5b:d8:fb:f8:78:02:0c:09:8a:cb:03:f7:3c:39:50:8a:3b:a9: 17:61:25:b7:dc:bc:ac:e0:a9:ad:03:a0:eb:0f:c8:55:a3:e6: a5:29:11:8b:ac:2e:e4:85:c1:25:a0:4c:ec:d7:9b:73:db:1f: 6f:e6:a9:c8:33:a2:e1:22:00:f7:bf:f6:59:e6:b1:41:23:85: ba:ef:b5:28:b1:c1:17:58:15:92:9d:fa:a4:1f:9a:e2:a8:c5: ea:8a:3d:90:17:4f:09:c4:51:9c:fd:63:67:ea:29:2a:a0:ff: 7c:74:f0:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAq4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNBQjMxMTAvBgNVBAUTKEU0QTk0Q0ZBOEQyRjlGNUIzOUVGNDYzNTA1OTFDRTMx MkU1MTRGQjMwHhcNMjUwODExMDE1NjIzWhcNMjUwODE4MDE1NjIzWjAYMRYwFAYD VQQDEw02ODk5NGRjNy0yNWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyR+JpDP0eUCPOf1Yq1pICmO9nyXsAR2VCiNZScY8f6KghhxfyxAl9ZOXIlFg NDNJvB6b6snx21naKTCB4LqzYoqDJzvIMIdCU8OkNhy6DPPAwokLwV5qHBH8Crxv y5V5Oc/8dmITBesZeVE6fEGbRuKUalNYWweAXpjuX8Vq1ignLayLge6Wd8NTfsuB 3apz1cJ8N9nubEwqbEM7Igzet/WT91v6qX6+4OC8ggzjvxYPgIz4F83ZLsonJ2U8 rMRn0AnC4OoCq47KF3UlglHFwmewK8F9RuTrWwEI6aimNJxcEGG9qc2kK7hh3BMy BpHV65RQS2YcrjS6WZhhrhrPjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOjoKQ4L peCX3/CXlJf5YQTYzEnJMB8GA1UdIwQYMBaAFOSpTPqNL59bOe9GNQWRzjEuUU+z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0FCMy8wNUVEOTRDRTE5 NEMxMUVEQUQzOEYyMkJDNEY5QUUwMi81S2xNLW8wdm4xczU3MFkxQlpIT01TNVJU N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVLbE0tbzB2bjFzNTcwWTFCWkhPTVM1UlQ3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB M0FCMy8wNUVEOTRDRTE5NEMxMUVEQUQzOEYyMkJDNEY5QUUwMi81S2xNLW8wdm4x czU3MFkxQlpIT01TNVJUN00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAshXaAsQver1nqRRp/JRQ6Egiwu7FEm6gZQrSLZzJP8AzhQxrJXBrt N169oneiDqiLGH1m4v08shEMO0U5Xf64Mb7n6E9OGXHAfQ8CjiP6xH+fa9j8gTAb X96AV3qRyHEPN3ogdGTOu5qdRGp9GReLgK7R/EEfrCh1uF/tqRm/RSG/eyNX4uH0 XdhbXowNYCJb2Pv4eAIMCYrLA/c8OVCKO6kXYSW33Lys4KmtA6DrD8hVo+alKRGL rC7khcEloEzs15tz2x9v5qnIM6LhIgD3v/ZZ5rFBI4W677UoscEXWBWSnfqkH5ri qMXqij2QF08JxFGc/WNn6ikqoP98dPBw -----END CERTIFICATE-----Generated at Mon Aug 11 04:12:02 2025 by rpki-client