$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.mft File: 5MWJuJPSconPhG3wWt-1lgNkKP0.mft (raw, json) Hash identifier: /7m68+SdXVsH8JoO27fHanLZQo7D8oTJPfVX7Vrm5oU= Subject key identifier: 27:F5:77:8E:5B:33:51:23:F1:64:1C:0E:1D:C3:3C:7E:26:55:B7:C6 Authority key identifier: E4:C5:89:B8:93:D2:72:89:CF:84:6D:F0:5A:DF:B5:96:03:64:28:FD Certificate issuer: /CN=A91B8AC8/serialNumber=E4C589B893D27289CF846DF05ADFB596036428FD Certificate serial: 88 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5MWJuJPSconPhG3wWt-1lgNkKP0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.mft Manifest number: 85 Signing time: Sat 09 Aug 2025 07:10:00 +0000 Manifest this update: Sat 09 Aug 2025 07:10:00 +0000 Manifest next update: Sat 16 Aug 2025 07:09:59 +0000 Files and hashes: 1: 5MWJuJPSconPhG3wWt-1lgNkKP0.crl (hash: kFWX19T/zdKeaPD8oyEiTX8rvW712tcNlcRxYYB3k8g=) 2: 8FFA61D4B13D11EF9EFDE433C4F9AE02.roa (hash: EhNDnWOJJGSPSxGl0lercQlAl3yvPmyKkzL2DPkH1sg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.crl rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5MWJuJPSconPhG3wWt-1lgNkKP0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 136 (0x88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8AC8, serialNumber=E4C589B893D27289CF846DF05ADFB596036428FD Validity Not Before: Aug 9 07:10:00 2025 GMT Not After : Aug 16 07:09:59 2025 GMT Subject: CN=6896f448-6802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:77:c3:26:ce:88:d7:a3:61:43:54:22:c4:2c: d4:d4:ca:ba:79:50:59:5c:e4:57:ca:29:09:87:42: a8:68:87:a0:59:0a:63:4d:e2:8b:30:7d:0a:32:d1: 38:54:b4:24:02:34:cd:22:f7:b9:eb:f7:94:22:eb: 83:7f:99:a0:6b:1a:fc:6f:8f:c2:39:30:24:da:a6: 01:16:3a:c1:a9:fd:b1:de:48:9a:6d:77:77:0d:31: be:9e:7c:44:e5:01:71:4d:4a:3d:34:05:80:69:ce: 5d:0d:63:7d:ac:5c:14:38:67:f0:b3:25:43:18:ec: 75:92:1f:71:fb:19:be:49:9b:fe:3c:33:66:a8:c1: e4:52:23:34:6c:be:d8:d4:06:70:5b:24:76:a1:35: f3:4c:c0:7d:41:86:4a:f2:99:37:74:2f:9c:e2:22: 55:75:53:04:0a:0e:11:4c:fb:9c:fa:f3:d2:de:f8: 04:66:57:da:28:54:e9:0a:1b:29:69:07:80:8d:d2: 8b:eb:13:8e:ca:de:03:4c:c9:7e:f6:1e:69:2a:11: 96:ee:e9:3b:54:48:84:eb:fa:c9:d9:4a:94:ea:e3: 29:d9:07:43:30:01:53:8c:21:e3:54:bd:98:42:0b: 63:f3:54:74:0c:dc:e4:31:4d:97:02:85:60:80:f5: 62:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:F5:77:8E:5B:33:51:23:F1:64:1C:0E:1D:C3:3C:7E:26:55:B7:C6 X509v3 Authority Key Identifier: keyid:E4:C5:89:B8:93:D2:72:89:CF:84:6D:F0:5A:DF:B5:96:03:64:28:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5MWJuJPSconPhG3wWt-1lgNkKP0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:55:34:59:8a:ee:cc:61:26:78:53:90:5f:ad:54:3d:a2:2a: 82:9c:f1:0a:84:33:00:2e:6f:16:69:ac:b4:ad:f9:b6:b8:e9: 4f:6b:b4:06:bb:75:c5:f2:42:e6:71:6f:a8:29:93:86:fe:36: a2:b7:01:eb:3f:f4:73:3d:e4:b9:b8:7f:05:ed:33:74:a3:bd: c1:cc:27:94:2a:15:d1:91:e8:b7:47:e7:cb:c0:55:e1:52:e8: 35:75:bb:88:e8:2f:2b:ea:aa:81:16:48:41:b9:0e:61:30:bc: 0f:c8:63:da:ec:a8:58:c5:3d:f1:53:de:4d:0c:0c:ad:47:ae: a6:4c:61:07:71:8e:b0:7f:3b:d1:19:dd:26:99:47:1e:0f:46: a1:66:1b:36:f4:e9:9f:59:36:25:4b:1c:88:1e:e8:42:93:ec: 98:63:41:6f:a1:43:ee:69:d3:d8:47:c4:1a:6c:8f:53:67:b5: ff:bd:e4:4c:96:b3:6f:bb:29:35:f0:16:62:4a:2c:6f:53:8d: 01:f4:1f:04:da:8c:bc:bb:fd:2c:66:a4:73:1b:4c:d5:86:52: 71:ba:62:cd:17:9b:5a:4f:4e:89:f3:a6:10:fa:3b:14:cb:4e: bf:ea:0e:35:f4:54:cf:83:49:17:15:ee:bd:5a:a0:89:7e:b0: 8b:d4:31:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhBQzgxMTAvBgNVBAUTKEU0QzU4OUI4OTNEMjcyODlDRjg0NkRGMDVBREZCNTk2 MDM2NDI4RkQwHhcNMjUwODA5MDcxMDAwWhcNMjUwODE2MDcwOTU5WjAYMRYwFAYD VQQDEw02ODk2ZjQ0OC02ODAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAunfDJs6I16NhQ1QixCzU1Mq6eVBZXORXyikJh0KoaIegWQpjTeKLMH0KMtE4 VLQkAjTNIve56/eUIuuDf5mgaxr8b4/COTAk2qYBFjrBqf2x3kiabXd3DTG+nnxE 5QFxTUo9NAWAac5dDWN9rFwUOGfwsyVDGOx1kh9x+xm+SZv+PDNmqMHkUiM0bL7Y 1AZwWyR2oTXzTMB9QYZK8pk3dC+c4iJVdVMECg4RTPuc+vPS3vgEZlfaKFTpChsp aQeAjdKL6xOOyt4DTMl+9h5pKhGW7uk7VEiE6/rJ2UqU6uMp2QdDMAFTjCHjVL2Y Qgtj81R0DNzkMU2XAoVggPVi0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCf1d45b M1Ej8WQcDh3DPH4mVbfGMB8GA1UdIwQYMBaAFOTFibiT0nKJz4Rt8FrftZYDZCj9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEFDOC9FMTJEMTA1MkIx M0MxMUVGQUFGOUQ3MzFDNEY5QUUwMi81TVdKdUpQU2NvblBoRzN3V3QtMWxnTmtL UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzVNV0p1SlBTY29uUGhHM3dXdC0xbGdOa0tQMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEFDOC9FMTJEMTA1MkIxM0MxMUVGQUFGOUQ3MzFDNEY5QUUwMi81TVdKdUpQU2Nv blBoRzN3V3QtMWxnTmtLUDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdVTRZiu7MYSZ4U5BfrVQ9oiqCnPEKhDMALm8Waay0rfm2uOlPa7QG u3XF8kLmcW+oKZOG/jaitwHrP/RzPeS5uH8F7TN0o73BzCeUKhXRkei3R+fLwFXh Uug1dbuI6C8r6qqBFkhBuQ5hMLwPyGPa7KhYxT3xU95NDAytR66mTGEHcY6wfzvR Gd0mmUceD0ahZhs29OmfWTYlSxyIHuhCk+yYY0FvoUPuadPYR8QabI9TZ7X/veRM lrNvuyk18BZiSixvU40B9B8E2oy8u/0sZqRzG0zVhlJxumLNF5taT06J86YQ+jsU y06/6g419FTPg0kXFe69WqCJfrCL1DHa -----END CERTIFICATE-----Generated at Mon Aug 11 07:27:07 2025 by rpki-client