$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6B8E/97A451B62E9111EBA51EE83CC4F9AE02/X5M9MPJH0EGf8L4GA-FtXCfEBAc.mft File: X5M9MPJH0EGf8L4GA-FtXCfEBAc.mft (raw, json) Hash identifier: Mhb848XNjU/5ccF9n2sCNYgZ4sXPVqfXNXVVMdH0t34= Subject key identifier: 6A:45:05:1B:67:70:BD:24:8A:55:CC:65:47:D6:3D:25:4A:23:A3:73 Authority key identifier: 5F:93:3D:30:F2:47:D0:41:9F:F0:BE:06:03:E1:6D:5C:27:C4:04:07 Certificate issuer: /CN=A91A6B8E/serialNumber=5F933D30F247D0419FF0BE0603E16D5C27C40407 Certificate serial: 0768 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5M9MPJH0EGf8L4GA-FtXCfEBAc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6B8E/97A451B62E9111EBA51EE83CC4F9AE02/X5M9MPJH0EGf8L4GA-FtXCfEBAc.mft Manifest number: 075E Signing time: Mon 04 Aug 2025 21:59:58 +0000 Manifest this update: Mon 04 Aug 2025 21:59:57 +0000 Manifest next update: Mon 11 Aug 2025 21:59:57 +0000 Files and hashes: 1: X5M9MPJH0EGf8L4GA-FtXCfEBAc.crl (hash: +GQkwODmT4jVvJaxPJqRwbIL3WXRW1PGrX7raCfgep8=) 2: 4D12DEAE2E9311EBB9FC5259C4F9AE02.roa (hash: 7nAwvijUmnaIMOxevk905gWR2HOoFSC7V0ZEJzsRaVE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6B8E/97A451B62E9111EBA51EE83CC4F9AE02/X5M9MPJH0EGf8L4GA-FtXCfEBAc.crl rsync://rpki.apnic.net/member_repository/A91A6B8E/97A451B62E9111EBA51EE83CC4F9AE02/X5M9MPJH0EGf8L4GA-FtXCfEBAc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5M9MPJH0EGf8L4GA-FtXCfEBAc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 21:59:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1896 (0x768) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6B8E, serialNumber=5F933D30F247D0419FF0BE0603E16D5C27C40407 Validity Not Before: Aug 4 21:59:57 2025 GMT Not After : Aug 11 21:59:57 2025 GMT Subject: CN=68912d5e-2e69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3d:85:0f:34:a1:8f:ca:07:84:eb:13:4c:40: ec:83:93:57:a8:0e:e3:ba:74:06:eb:5e:c0:b6:16: 8a:2f:8e:77:f5:7c:a8:34:9d:b5:1f:e9:a0:59:3d: ae:2d:de:95:c0:6a:25:43:93:1b:ea:fd:78:58:c3: f0:f0:bf:af:9f:98:ed:bb:e6:3b:89:3e:b8:ae:e0: 3a:dc:cb:4b:70:32:b5:fc:31:b6:85:ae:0e:d1:2d: 33:06:16:f9:dc:d6:f9:a3:38:bc:66:df:4c:6a:bb: f1:33:cd:22:e2:2d:19:03:fc:c6:e2:20:bd:0b:24: 87:d7:56:7f:82:ff:73:e4:54:cb:57:6e:3a:79:c4: 72:51:c1:f7:d1:52:ad:33:2f:ce:c0:6d:02:5a:96: 9f:1c:92:f8:5a:89:c6:d5:c4:f6:50:c4:89:11:87: 60:72:a9:c0:b3:c3:dd:f2:4b:df:36:4a:19:6a:bc: 22:03:11:a4:9e:2d:9d:c2:d8:dc:03:a4:6d:44:a3: 2b:b3:75:77:b3:24:2f:1c:f9:ea:4b:d4:9b:7f:ee: ce:3a:ec:35:e1:dd:57:69:d5:2b:e1:1b:84:59:15: 07:f8:65:95:3e:cf:a3:39:99:c8:17:28:47:da:1f: 28:af:1e:ad:2a:68:14:dc:dc:13:23:73:f7:2d:1b: ca:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:45:05:1B:67:70:BD:24:8A:55:CC:65:47:D6:3D:25:4A:23:A3:73 X509v3 Authority Key Identifier: keyid:5F:93:3D:30:F2:47:D0:41:9F:F0:BE:06:03:E1:6D:5C:27:C4:04:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6B8E/97A451B62E9111EBA51EE83CC4F9AE02/X5M9MPJH0EGf8L4GA-FtXCfEBAc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5M9MPJH0EGf8L4GA-FtXCfEBAc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6B8E/97A451B62E9111EBA51EE83CC4F9AE02/X5M9MPJH0EGf8L4GA-FtXCfEBAc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:49:c5:15:11:14:60:64:b8:df:e7:12:10:54:51:df:9b:9e: 2a:a0:e5:98:59:6e:3c:ae:d4:70:c0:9c:e9:8b:b8:d0:55:d8: 68:6b:f9:ec:b7:68:57:77:b9:d6:c3:76:a6:c1:11:7d:8a:13: 55:b3:69:52:71:29:39:2b:d9:6d:4f:b2:3f:cd:d8:8c:3b:fa: d8:2d:39:49:e4:fc:83:46:bb:fe:b6:b3:f8:c2:39:bd:87:02: 5f:9a:d3:42:3b:62:8f:1c:e3:6e:93:7a:a4:48:0d:60:c8:d5: 08:6b:24:19:a4:30:2d:46:a6:2b:a0:61:ab:e7:fb:34:a0:23: f4:67:30:23:9d:dc:0d:1b:23:3b:a5:65:85:73:ab:30:98:42: 6a:ca:20:d1:d1:ea:44:ac:70:e5:ed:64:e8:52:6f:3c:a2:7f: b6:08:c5:c5:cb:5f:cb:1a:de:e1:4e:91:8d:99:f7:e7:1f:b8: 3c:7e:48:09:94:e5:10:81:1b:f3:7d:02:e0:6f:da:0a:00:4d: c2:f0:03:b1:84:6c:01:2c:1e:79:8e:d8:da:1b:29:ab:c2:11: a3:d1:22:cf:9a:0a:44:97:5e:cd:19:8b:ce:0d:d9:78:0e:79: f5:7f:4b:1a:3a:e9:c6:c5:92:da:13:dc:72:bd:c1:38:2e:1e: a3:a9:90:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZCOEUxMTAvBgNVBAUTKDVGOTMzRDMwRjI0N0QwNDE5RkYwQkUwNjAzRTE2RDVD MjdDNDA0MDcwHhcNMjUwODA0MjE1OTU3WhcNMjUwODExMjE1OTU3WjAYMRYwFAYD VQQDEw02ODkxMmQ1ZS0yZTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArD2FDzShj8oHhOsTTEDsg5NXqA7junQG617AthaKL4539XyoNJ21H+mgWT2u Ld6VwGolQ5Mb6v14WMPw8L+vn5jtu+Y7iT64ruA63MtLcDK1/DG2ha4O0S0zBhb5 3Nb5ozi8Zt9MarvxM80i4i0ZA/zG4iC9CySH11Z/gv9z5FTLV246ecRyUcH30VKt My/OwG0CWpafHJL4WonG1cT2UMSJEYdgcqnAs8Pd8kvfNkoZarwiAxGkni2dwtjc A6RtRKMrs3V3syQvHPnqS9Sbf+7OOuw14d1XadUr4RuEWRUH+GWVPs+jOZnIFyhH 2h8orx6tKmgU3NwTI3P3LRvKbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGpFBRtn cL0kilXMZUfWPSVKI6NzMB8GA1UdIwQYMBaAFF+TPTDyR9BBn/C+BgPhbVwnxAQH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkI4RS85N0E0NTFCNjJF OTExMUVCQTUxRUU4M0NDNEY5QUUwMi9YNU05TVBKSDBFR2Y4TDRHQS1GdFhDZkVC QWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1g1TTlNUEpIMEVHZjhMNEdBLUZ0WENmRUJBYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkI4RS85N0E0NTFCNjJFOTExMUVCQTUxRUU4M0NDNEY5QUUwMi9YNU05TVBKSDBF R2Y4TDRHQS1GdFhDZkVCQWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAScUVERRgZLjf5xIQVFHfm54qoOWYWW48rtRwwJzpi7jQVdhoa/ns t2hXd7nWw3amwRF9ihNVs2lScSk5K9ltT7I/zdiMO/rYLTlJ5PyDRrv+trP4wjm9 hwJfmtNCO2KPHONuk3qkSA1gyNUIayQZpDAtRqYroGGr5/s0oCP0ZzAjndwNGyM7 pWWFc6swmEJqyiDR0epErHDl7WToUm88on+2CMXFy1/LGt7hTpGNmffnH7g8fkgJ lOUQgRvzfQLgb9oKAE3C8AOxhGwBLB55jtjaGymrwhGj0SLPmgpEl17NGYvODdl4 Dnn1f0saOunGxZLaE9xyvcE4Lh6jqZDV -----END CERTIFICATE-----Generated at Wed Aug 6 11:05:35 2025 by rpki-client