$ rpki-client -vvf rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft File: vK5XMu8hlzK0msgoTbGBTpLIaxE.mft (raw, json) Hash identifier: 0Qme0dFQC7TCPw8stn6UISNiacKR2cNT3Zni5RhGnaE= Subject key identifier: 5C:18:DE:A8:07:0E:19:A2:B5:A4:DA:FC:C8:D8:E9:22:C4:ED:34:47 Authority key identifier: BC:AE:57:32:EF:21:97:32:B4:9A:C8:28:4D:B1:81:4E:92:C8:6B:11 Certificate issuer: /CN=A91B653B/serialNumber=BCAE5732EF219732B49AC8284DB1814E92C86B11 Certificate serial: 08AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vK5XMu8hlzK0msgoTbGBTpLIaxE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft Manifest number: 089F Signing time: Fri 08 Aug 2025 20:54:56 +0000 Manifest this update: Fri 08 Aug 2025 20:54:55 +0000 Manifest next update: Fri 15 Aug 2025 20:54:55 +0000 Files and hashes: 1: vK5XMu8hlzK0msgoTbGBTpLIaxE.crl (hash: 7lO1oCh9J8+SWNrYVkw9Yffpm65b0MvlLlfBFO/ToBM=) 2: 2015E6B2C66F11EAA0B1B019C4F9AE02.roa (hash: h3J4Tvd13De8oeu9y10qw5WhotHnj9E107WlmlhLTLE=) 3: 1F99EBD4C66F11EAA0B1B019C4F9AE02.roa (hash: WRLRqvOq3SfDppm3IqDFX7iVTIlxw9qpmPcVf6+EH5s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.crl rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vK5XMu8hlzK0msgoTbGBTpLIaxE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2221 (0x8ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B653B, serialNumber=BCAE5732EF219732B49AC8284DB1814E92C86B11 Validity Not Before: Aug 8 20:54:55 2025 GMT Not After : Aug 15 20:54:55 2025 GMT Subject: CN=6896641f-c494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f4:a0:56:a4:10:d0:c1:91:f2:2c:a7:46:31: d0:a0:c7:c4:9f:e2:56:1d:ad:06:6b:cb:12:2c:16: 82:19:95:d4:83:57:07:c3:b8:11:e7:d3:87:9d:b6: 31:d6:54:73:71:e6:82:9f:95:5b:45:f8:df:49:0c: f2:03:60:a0:62:41:11:fc:be:c0:1c:e5:5c:8d:6c: fb:05:9c:24:d1:1e:fc:41:e9:bd:8e:52:8b:1a:dc: aa:c8:cc:be:6e:ac:72:2a:7d:04:d6:e7:2e:d5:97: ca:9c:d6:01:de:6a:14:fc:58:56:d3:e9:12:9d:b5: 83:2d:23:a8:3d:32:92:25:93:ef:a2:a4:7c:5e:c3: 56:9d:ef:16:86:95:07:94:95:8f:4d:9b:de:ad:c0: 63:b3:3e:c4:63:9d:3c:42:54:1c:7a:f9:fa:d5:1a: 75:39:85:c4:55:df:42:93:8d:ea:33:37:43:d5:06: b4:e6:60:7a:c7:fd:38:e7:d7:bc:e6:62:b0:7b:42: 0d:c8:f1:c7:10:68:11:83:4b:dc:91:35:d1:23:d0: d6:3a:91:29:0b:c2:93:81:ae:59:f2:db:c3:03:33: cf:ee:e2:99:ab:fa:f0:b4:e7:8a:0c:df:e3:a6:f6: a0:83:7b:4e:91:6a:32:31:ac:ca:0e:ff:a8:cd:3a: a4:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:18:DE:A8:07:0E:19:A2:B5:A4:DA:FC:C8:D8:E9:22:C4:ED:34:47 X509v3 Authority Key Identifier: keyid:BC:AE:57:32:EF:21:97:32:B4:9A:C8:28:4D:B1:81:4E:92:C8:6B:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vK5XMu8hlzK0msgoTbGBTpLIaxE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:ae:51:c6:c0:1e:d2:a6:b2:d1:85:42:99:9e:e0:5d:69:90: a3:e5:11:c4:15:d1:60:ef:cd:27:2f:8d:f9:df:82:3c:7c:20: 99:d0:35:66:3a:05:00:38:e6:c6:fb:6f:71:f5:4d:0d:66:95: ad:25:0e:c3:c2:1b:ce:0b:ae:df:cc:dc:0d:48:a0:d6:16:e9: 3c:2d:cc:ef:83:91:1d:80:2c:ae:64:88:42:2e:91:b6:b8:71: 90:ea:b2:8d:86:93:08:c3:d7:bb:aa:e6:3f:08:f5:5f:77:dc: f4:6a:7e:2c:7e:82:7b:ca:ca:29:2f:39:da:dc:ba:a1:09:9f: 7f:6a:3c:27:74:46:08:e7:33:18:8f:55:3a:da:91:21:80:4c: 0e:56:96:01:2f:b5:6c:df:ea:e4:7d:b0:7d:f7:98:48:7d:05: 29:f8:b7:be:07:95:44:98:81:83:e6:98:56:10:5c:c4:f4:7c: 1c:15:26:fa:21:e1:7c:b8:6a:7f:46:18:96:35:34:6e:8d:77: c5:a4:b5:15:31:18:e1:0e:7e:e8:9b:a1:08:41:87:b4:ee:62: 39:23:62:e0:49:26:3d:ce:63:97:be:7f:58:f1:92:dd:08:8c: 59:11:b1:35:91:3d:73:48:dc:f2:59:53:e0:88:d0:85:13:a3: 4a:be:68:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY1M0IxMTAvBgNVBAUTKEJDQUU1NzMyRUYyMTk3MzJCNDlBQzgyODREQjE4MTRF OTJDODZCMTEwHhcNMjUwODA4MjA1NDU1WhcNMjUwODE1MjA1NDU1WjAYMRYwFAYD VQQDEw02ODk2NjQxZi1jNDk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq/SgVqQQ0MGR8iynRjHQoMfEn+JWHa0Ga8sSLBaCGZXUg1cHw7gR59OHnbYx 1lRzceaCn5VbRfjfSQzyA2CgYkER/L7AHOVcjWz7BZwk0R78Qem9jlKLGtyqyMy+ bqxyKn0E1ucu1ZfKnNYB3moU/FhW0+kSnbWDLSOoPTKSJZPvoqR8XsNWne8WhpUH lJWPTZvercBjsz7EY508QlQcevn61Rp1OYXEVd9Ck43qMzdD1Qa05mB6x/0459e8 5mKwe0INyPHHEGgRg0vckTXRI9DWOpEpC8KTga5Z8tvDAzPP7uKZq/rwtOeKDN/j pvagg3tOkWoyMazKDv+ozTqkVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFwY3qgH DhmitaTa/MjY6SLE7TRHMB8GA1UdIwQYMBaAFLyuVzLvIZcytJrIKE2xgU6SyGsR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjUzQi8yOTM4M0NERUMy MEMxMUVBQjgxMkEwMUFDNEY5QUUwMi92SzVYTXU4aGx6SzBtc2dvVGJHQlRwTElh eEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZLNVhNdThobHpLMG1zZ29UYkdCVHBMSWF4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjUzQi8yOTM4M0NERUMyMEMxMUVBQjgxMkEwMUFDNEY5QUUwMi92SzVYTXU4aGx6 SzBtc2dvVGJHQlRwTElheEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4rlHGwB7SprLRhUKZnuBdaZCj5RHEFdFg780nL43534I8fCCZ0DVm OgUAOObG+29x9U0NZpWtJQ7DwhvOC67fzNwNSKDWFuk8Lczvg5EdgCyuZIhCLpG2 uHGQ6rKNhpMIw9e7quY/CPVfd9z0an4sfoJ7ysopLzna3LqhCZ9/ajwndEYI5zMY j1U62pEhgEwOVpYBL7Vs3+rkfbB995hIfQUp+Le+B5VEmIGD5phWEFzE9HwcFSb6 IeF8uGp/RhiWNTRujXfFpLUVMRjhDn7om6EIQYe07mI5I2LgSSY9zmOXvn9Y8ZLd CIxZEbE1kT1zSNzyWVPgiNCFE6NKvmgw -----END CERTIFICATE-----Generated at Sat Aug 9 01:02:50 2025 by rpki-client