$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft File: 5esYDNbcUWxm01KwR7npxaUCcOM.mft (raw, json) Hash identifier: P5bv/CvuUx5LHdNEkcKHtjwQCUqNZm6aCRO4B5r33C0= Subject key identifier: 71:FA:81:E9:70:84:69:C8:33:8A:4D:69:B6:3E:78:A5:ED:6E:53:3E Authority key identifier: E5:EB:18:0C:D6:DC:51:6C:66:D3:52:B0:47:B9:E9:C5:A5:02:70:E3 Certificate issuer: /CN=A91ABFD9/serialNumber=E5EB180CD6DC516C66D352B047B9E9C5A50270E3 Certificate serial: 08E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5esYDNbcUWxm01KwR7npxaUCcOM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft Manifest number: 08C8 Signing time: Mon 04 Aug 2025 21:01:51 +0000 Manifest this update: Mon 04 Aug 2025 21:01:51 +0000 Manifest next update: Mon 11 Aug 2025 21:01:51 +0000 Files and hashes: 1: 5esYDNbcUWxm01KwR7npxaUCcOM.crl (hash: jBmQCywQ3M3yeNbIg/uLRxhULVPbTn8Q0IPSVOaqj+s=) 2: E2E21364C4F811EAB8D31113C4F9AE02.roa (hash: DP8lG9el46NF03CMOLzrMzttp6pe74xkZuZziqnxmJ4=) 3: F1A54AC47A5611EB876D281FC4F9AE02.roa (hash: mYMneOcMzVSjWOSfz2l4H7HMRndq3Nml1V+jd7+ZSu8=) 4: 36945EC2232711EBA0F14F17C4F9AE02.roa (hash: EeEFahw1S1xzRQMqYweCJnCU9S+/LW0T/PuPJ3E+UWM=) 5: 6AE50E1C21E011EBBF36CD21C4F9AE02.roa (hash: LdDw24/Or3M92peybKBWsStvdJIFCX02q7LqBzB3QW8=) 6: E22ECDEAC4F811EAB8D31113C4F9AE02.roa (hash: 1QX8DyT1A4CiikAaWBicwaY94hYcJgWNUoKN7UlLwiU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.crl rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5esYDNbcUWxm01KwR7npxaUCcOM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 21:01:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2281 (0x8e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ABFD9, serialNumber=E5EB180CD6DC516C66D352B047B9E9C5A50270E3 Validity Not Before: Aug 4 21:01:51 2025 GMT Not After : Aug 11 21:01:51 2025 GMT Subject: CN=68911fbf-7202 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:06:63:69:10:0b:7f:23:d9:46:e8:f9:a1:c8: f6:f6:aa:c0:88:95:04:c2:0a:ce:8f:0d:3d:3f:d5: 3f:ba:7b:16:5b:72:3f:f2:06:17:82:18:85:8f:fa: 72:2b:24:90:66:4e:69:af:1e:44:8a:82:71:c0:4d: 42:3e:50:f0:5d:14:e6:2d:ac:75:97:96:35:a8:d5: e9:a0:c7:02:a8:7f:f0:25:74:a7:af:9e:f1:0e:ce: e5:b7:8b:d4:66:26:47:ec:a6:87:aa:2c:34:20:3f: 8a:8a:64:36:94:a3:60:b8:70:09:c2:68:7a:ce:47: d0:4e:d1:de:0a:c6:2a:67:cd:71:8c:f7:36:33:0f: 61:d7:d8:5d:24:6e:c6:48:ba:88:6e:60:50:7b:e7: e9:23:c6:aa:c9:b5:0e:15:82:2c:d5:ea:cb:97:0b: 00:de:b4:81:44:da:f2:a4:e6:8c:98:60:b4:0f:3d: cd:b1:80:8c:0c:2c:bf:69:de:e6:e2:7f:b1:af:7e: ff:87:e4:24:58:1a:c8:8b:fe:bb:b5:ad:d4:9c:8c: 30:20:fa:a0:84:80:13:fd:da:34:72:10:11:25:77: 66:95:46:25:18:6c:f7:c5:eb:59:d4:ca:63:30:f1: cc:69:82:0a:ef:58:32:54:62:23:e6:f7:97:96:7f: 88:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:FA:81:E9:70:84:69:C8:33:8A:4D:69:B6:3E:78:A5:ED:6E:53:3E X509v3 Authority Key Identifier: keyid:E5:EB:18:0C:D6:DC:51:6C:66:D3:52:B0:47:B9:E9:C5:A5:02:70:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5esYDNbcUWxm01KwR7npxaUCcOM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:63:fb:59:6f:07:bd:2e:a3:ae:c3:98:71:f4:e4:e1:d2:d9: 5f:11:05:b0:ff:71:d7:1a:80:b7:18:29:72:b6:cb:7e:67:2e: e9:f0:0d:c1:c1:72:dc:70:f1:ff:30:a7:c6:26:ee:f0:c5:29: f9:98:74:25:98:99:14:72:30:b8:05:16:7c:24:c9:d5:60:36: 4e:0d:39:b6:2b:31:30:f5:bf:10:80:66:0a:32:9d:02:1f:6f: 1c:c0:1c:48:e0:4e:bc:f4:53:10:94:c6:6d:4b:37:ce:cd:a6: ed:e2:15:3d:5f:fb:6d:4a:d3:fa:85:71:4e:ec:c3:43:95:f2: 34:fd:4a:a7:0c:23:35:83:80:2c:e8:c7:5f:4e:ee:52:8c:97: 42:9f:c0:6a:3f:73:d1:02:06:6c:7d:33:1b:32:18:a2:01:27: fb:9f:76:07:21:60:88:eb:26:17:e7:d0:bc:66:4f:35:85:48: d6:ff:7b:62:fc:c6:1d:6c:c2:7b:04:5a:6c:02:a8:a1:fe:e9: d5:e3:10:cc:a4:0f:c6:47:c8:bc:50:b2:40:c8:4c:27:e2:27: dd:ec:23:41:6d:d0:fc:29:ee:a8:a4:4a:91:41:74:b1:45:2e: 28:4a:4e:31:92:2a:cd:56:00:ed:89:00:79:47:8d:a7:99:24: 0a:d0:85:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUJGRDkxMTAvBgNVBAUTKEU1RUIxODBDRDZEQzUxNkM2NkQzNTJCMDQ3QjlFOUM1 QTUwMjcwRTMwHhcNMjUwODA0MjEwMTUxWhcNMjUwODExMjEwMTUxWjAYMRYwFAYD VQQDEw02ODkxMWZiZi03MjAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzAZjaRALfyPZRuj5ocj29qrAiJUEwgrOjw09P9U/unsWW3I/8gYXghiFj/py KySQZk5prx5EioJxwE1CPlDwXRTmLax1l5Y1qNXpoMcCqH/wJXSnr57xDs7lt4vU ZiZH7KaHqiw0ID+KimQ2lKNguHAJwmh6zkfQTtHeCsYqZ81xjPc2Mw9h19hdJG7G SLqIbmBQe+fpI8aqybUOFYIs1erLlwsA3rSBRNrypOaMmGC0Dz3NsYCMDCy/ad7m 4n+xr37/h+QkWBrIi/67ta3UnIwwIPqghIAT/do0chARJXdmlUYlGGz3xetZ1Mpj MPHMaYIK71gyVGIj5veXln+I+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHH6gelw hGnIM4pNabY+eKXtblM+MB8GA1UdIwQYMBaAFOXrGAzW3FFsZtNSsEe56cWlAnDj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQkZEOS80QUU4MDQxRUI5 RDcxMUVBOUNGNTFFNUZDNEY5QUUwMi81ZXNZRE5iY1VXeG0wMUt3UjducHhhVUNj T00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVlc1lETmJjVVd4bTAxS3dSN25weGFVQ2NPTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QkZEOS80QUU4MDQxRUI5RDcxMUVBOUNGNTFFNUZDNEY5QUUwMi81ZXNZRE5iY1VX eG0wMUt3UjducHhhVUNjT00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwY/tZbwe9LqOuw5hx9OTh0tlfEQWw/3HXGoC3GClytst+Zy7p8A3B wXLccPH/MKfGJu7wxSn5mHQlmJkUcjC4BRZ8JMnVYDZODTm2KzEw9b8QgGYKMp0C H28cwBxI4E689FMQlMZtSzfOzabt4hU9X/ttStP6hXFO7MNDlfI0/UqnDCM1g4As 6MdfTu5SjJdCn8BqP3PRAgZsfTMbMhiiASf7n3YHIWCI6yYX59C8Zk81hUjW/3ti /MYdbMJ7BFpsAqih/unV4xDMpA/GR8i8ULJAyEwn4ifd7CNBbdD8Ke6opEqRQXSx RS4oSk4xkirNVgDtiQB5R42nmSQK0IUB -----END CERTIFICATE-----Generated at Tue Aug 5 17:22:48 2025 by rpki-client