$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft File: -xEsrVYxm_qsoasoznvX9MsmjOk.mft (raw, json) Hash identifier: hRRjyY640v1tpl0jGzsfmIr+xgsQS61Y6nQAatk5Em8= Subject key identifier: E3:0E:AC:A4:C0:D2:AA:A4:4F:94:8A:0C:12:8A:7E:B8:55:9D:24:15 Authority key identifier: FB:11:2C:AD:56:31:9B:FA:AC:A1:AB:28:CE:7B:D7:F4:CB:26:8C:E9 Certificate issuer: /CN=A91ADDD5/serialNumber=FB112CAD56319BFAACA1AB28CE7BD7F4CB268CE9 Certificate serial: 05A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft Manifest number: 0597 Signing time: Fri 08 Aug 2025 23:41:08 +0000 Manifest this update: Fri 08 Aug 2025 23:41:07 +0000 Manifest next update: Fri 15 Aug 2025 23:41:07 +0000 Files and hashes: 1: -xEsrVYxm_qsoasoznvX9MsmjOk.crl (hash: 2j70EE8mE6oddnQjEF2P8GwpJiD/0eNhYPUdecxHeWY=) 2: ABCDCC4EE16711EEA88FAE64C4F9AE02.roa (hash: +uMy6pf4Gt8KymBYpp9dNbF+7Zqp/sfAyxYpWwI1HYE=) 3: 128DFF02E14611EE80D6C425C4F9AE02.roa (hash: gD7R9l3u/rGhrD05ZuMK8R9HTGQM3qYyh4Dz8BqVAmo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.crl rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1445 (0x5a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADDD5, serialNumber=FB112CAD56319BFAACA1AB28CE7BD7F4CB268CE9 Validity Not Before: Aug 8 23:41:07 2025 GMT Not After : Aug 15 23:41:07 2025 GMT Subject: CN=68968b13-50ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a1:e8:45:b5:4b:bd:f6:7c:b9:65:c3:4b:61: 87:75:18:46:69:68:ec:6c:34:5f:35:e1:68:ac:f9: db:f5:77:c1:c5:c6:31:de:11:7e:64:07:83:c4:29: ec:39:e3:6f:e4:9c:be:28:da:71:eb:2e:f5:72:ea: f6:21:c9:52:ca:54:9d:e8:bf:81:63:24:a9:a8:00: ca:ed:a2:1f:88:01:fc:23:b2:6d:23:45:64:e1:53: ab:c9:8a:01:60:86:d5:5a:85:6f:e9:66:33:ff:3f: 52:92:08:7d:98:6e:e0:6d:5d:78:a5:7f:b7:f7:6f: bc:df:57:42:56:65:73:1f:00:e8:01:7b:c8:97:c0: c1:b5:0d:ef:dc:e4:ed:3d:dc:59:0f:77:70:bb:bd: cf:42:e3:b6:43:03:5d:b5:7f:ec:10:dd:0e:cc:56: cf:d9:39:7f:87:00:34:fe:16:e6:25:20:1a:87:8b: b2:fb:f1:dc:af:ed:3c:c6:f1:4d:57:e9:ea:cd:76: 26:bd:49:aa:ab:09:93:2b:7e:78:ed:08:94:af:a1: 68:b1:61:a6:21:e6:7e:9e:1b:ec:f2:44:70:e4:39: 94:3f:92:7e:3f:f5:47:81:64:35:ea:a4:55:b6:fd: 86:95:2e:8e:b5:2f:ba:13:3d:7c:b4:6f:f2:8c:a6: 0a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:0E:AC:A4:C0:D2:AA:A4:4F:94:8A:0C:12:8A:7E:B8:55:9D:24:15 X509v3 Authority Key Identifier: keyid:FB:11:2C:AD:56:31:9B:FA:AC:A1:AB:28:CE:7B:D7:F4:CB:26:8C:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:60:96:3e:88:42:fe:73:4e:af:0f:f7:84:e4:bd:f9:68:bf: 62:41:ae:0f:35:64:98:37:0b:ba:7d:f9:f2:4a:f0:1f:ad:cf: 8e:24:9d:20:f9:27:aa:cf:80:6a:1a:78:fe:6a:1c:b6:9c:1b: 47:9f:77:85:99:50:87:38:a9:95:8e:26:c0:9d:42:df:ac:df: b9:05:99:7b:ce:27:85:ac:c4:5a:ea:85:37:43:53:d3:f0:28: c9:b7:cb:bb:18:f4:2b:96:34:6c:c5:bd:5c:aa:36:1a:42:e6: 9e:3c:1b:bc:f8:74:21:b6:4f:02:6b:60:8c:90:0b:f4:df:20: c0:04:56:91:ff:ff:1b:39:e2:5d:ca:2a:9d:cf:b5:e5:8f:39: f7:90:0a:bf:b0:19:4f:3e:c6:ca:3e:a2:b2:49:25:35:3f:49: 82:10:2f:db:da:31:cc:63:c8:8a:63:12:9a:81:d7:45:33:ed: e7:93:a7:0f:81:5b:0f:aa:3f:1d:97:68:76:7c:a7:05:89:61: 1b:d8:72:c4:f6:42:25:41:de:79:5f:4e:bd:b9:ac:cf:8e:d0: aa:24:c0:e6:bd:cc:34:14:bf:91:55:2c:cc:55:c6:6c:e4:ca: ff:32:d2:33:67:5e:be:ea:ae:1a:ad:24:fd:e4:84:0e:db:cf: 69:9d:8c:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURERDUxMTAvBgNVBAUTKEZCMTEyQ0FENTYzMTlCRkFBQ0ExQUIyOENFN0JEN0Y0 Q0IyNjhDRTkwHhcNMjUwODA4MjM0MTA3WhcNMjUwODE1MjM0MTA3WjAYMRYwFAYD VQQDEw02ODk2OGIxMy01MGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs6HoRbVLvfZ8uWXDS2GHdRhGaWjsbDRfNeForPnb9XfBxcYx3hF+ZAeDxCns OeNv5Jy+KNpx6y71cur2IclSylSd6L+BYySpqADK7aIfiAH8I7JtI0Vk4VOryYoB YIbVWoVv6WYz/z9Skgh9mG7gbV14pX+392+831dCVmVzHwDoAXvIl8DBtQ3v3OTt PdxZD3dwu73PQuO2QwNdtX/sEN0OzFbP2Tl/hwA0/hbmJSAah4uy+/Hcr+08xvFN V+nqzXYmvUmqqwmTK3547QiUr6FosWGmIeZ+nhvs8kRw5DmUP5J+P/VHgWQ16qRV tv2GlS6OtS+6Ez18tG/yjKYK6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOMOrKTA 0qqkT5SKDBKKfrhVnSQVMB8GA1UdIwQYMBaAFPsRLK1WMZv6rKGrKM571/TLJozp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRERENS84QjBEMEZGMkUz RjgxMUVCOUUwOERCMTRDNEY5QUUwMi8teEVzclZZeG1fcXNvYXNvem52WDlNc21q T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy14RXNyVll4bV9xc29hc296bnZYOU1zbWpPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RERENS84QjBEMEZGMkUzRjgxMUVCOUUwOERCMTRDNEY5QUUwMi8teEVzclZZeG1f cXNvYXNvem52WDlNc21qT2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiYJY+iEL+c06vD/eE5L35aL9iQa4PNWSYNwu6ffnySvAfrc+OJJ0g +Seqz4BqGnj+ahy2nBtHn3eFmVCHOKmVjibAnULfrN+5BZl7zieFrMRa6oU3Q1PT 8CjJt8u7GPQrljRsxb1cqjYaQuaePBu8+HQhtk8Ca2CMkAv03yDABFaR//8bOeJd yiqdz7Xljzn3kAq/sBlPPsbKPqKySSU1P0mCEC/b2jHMY8iKYxKagddFM+3nk6cP gVsPqj8dl2h2fKcFiWEb2HLE9kIlQd55X069uazPjtCqJMDmvcw0FL+RVSzMVcZs 5Mr/MtIzZ16+6q4arST95IQO289pnYz2 -----END CERTIFICATE-----Generated at Sat Aug 9 10:53:43 2025 by rpki-client