$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.mft File: b5rATOWscafCt6-xpVcnoQ5bBu4.mft (raw, json) Hash identifier: gCf1zgoCHRYUC93N5VzRND7d2k+slx2BOiWiPMVanNY= Subject key identifier: B3:19:98:A6:3E:1A:81:DE:A9:F6:6F:85:89:04:CF:3F:C9:C7:83:3B Authority key identifier: 6F:9A:C0:4C:E5:AC:71:A7:C2:B7:AF:B1:A5:57:27:A1:0E:5B:06:EE Certificate issuer: /CN=A91BD9C2/serialNumber=6F9AC04CE5AC71A7C2B7AFB1A55727A10E5B06EE Certificate serial: 0B5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5rATOWscafCt6-xpVcnoQ5bBu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.mft Manifest number: 0B52 Signing time: Wed 06 Aug 2025 19:22:13 +0000 Manifest this update: Wed 06 Aug 2025 19:22:12 +0000 Manifest next update: Wed 13 Aug 2025 19:22:12 +0000 Files and hashes: 1: b5rATOWscafCt6-xpVcnoQ5bBu4.crl (hash: y+Khq5dGIETB3FFv/XXcy03UXYvuoy2Ppt0X5H8D4TU=) 2: 1A0B540E3AA711EA83682876C4F9AE02.roa (hash: Gpxpc8IRQzuHqiyk8bsF5mq9N6coqqpi1UICb22hud0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.crl rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5rATOWscafCt6-xpVcnoQ5bBu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 19:22:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2907 (0xb5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD9C2, serialNumber=6F9AC04CE5AC71A7C2B7AFB1A55727A10E5B06EE Validity Not Before: Aug 6 19:22:12 2025 GMT Not After : Aug 13 19:22:12 2025 GMT Subject: CN=6893ab64-b546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e0:6c:03:88:78:ca:7f:bf:5e:42:d0:d0:3f: 4e:3d:c6:c1:f6:3e:51:80:83:af:e1:e4:77:aa:c9: 0a:88:0a:0c:ca:e9:f9:cb:55:3c:a3:89:30:dc:5b: ea:a1:0c:1f:2c:4a:0a:d8:e5:05:1c:86:ee:38:b1: a9:10:eb:e3:d5:aa:5f:f1:dc:e9:fe:65:57:9d:00: b4:4c:ae:54:7c:18:55:c0:33:4f:be:c6:ef:e7:18: a8:e3:94:f1:c7:92:61:08:7f:54:5a:41:d5:37:62: c8:ef:79:6b:4d:9e:d3:f8:3a:8c:93:9a:57:93:16: b5:ed:b3:cc:9f:85:0d:22:53:3b:35:df:84:d3:bf: 83:e7:48:64:03:fe:55:ed:80:f7:a5:79:48:a9:0a: 40:3c:ab:f9:f5:99:05:34:a5:67:e0:db:fb:b5:83: 16:04:d0:71:a1:40:a0:1b:06:ac:7f:87:2d:76:7c: 40:d0:16:14:5d:19:60:fe:22:a3:59:b3:b8:98:54: 0c:98:7d:02:3c:69:a9:86:01:3f:34:92:2a:1f:ac: 6b:c1:c9:f5:2c:98:95:28:01:42:24:96:7b:a7:96: ce:d2:85:2b:d3:2a:83:86:53:55:8b:2b:74:b1:bd: 0d:24:7c:94:45:1c:63:43:33:cb:0c:f5:b2:bc:c0: ef:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:19:98:A6:3E:1A:81:DE:A9:F6:6F:85:89:04:CF:3F:C9:C7:83:3B X509v3 Authority Key Identifier: keyid:6F:9A:C0:4C:E5:AC:71:A7:C2:B7:AF:B1:A5:57:27:A1:0E:5B:06:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5rATOWscafCt6-xpVcnoQ5bBu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:28:c5:62:f8:57:85:8c:e8:49:63:ea:0d:37:93:28:fe:43: 49:f4:52:7c:48:9d:5d:5c:8a:b4:67:72:f7:90:4f:26:40:32: 90:44:e4:03:64:1c:61:51:49:76:b0:45:59:a5:b7:cd:47:9c: d1:b7:4e:4c:51:e4:e1:d6:3d:cd:96:c2:29:c6:ad:81:54:ce: 33:86:d6:4e:e7:23:90:6a:c3:ae:65:27:09:7e:39:ac:f8:78: c2:25:5d:27:31:ba:08:d7:3c:e5:2a:47:9f:91:9a:4c:0c:51: df:ce:2c:c6:1a:7a:e6:55:c0:69:d5:38:03:46:7d:1a:ad:69: 2d:0f:53:7b:74:ff:30:0c:cc:ea:5c:c2:42:0f:d5:c9:05:3a: 95:e6:82:7d:cf:8e:4d:11:d5:54:9b:ee:da:02:4f:4c:14:86: 61:58:dc:f4:df:b4:d2:2f:dd:c1:81:b7:7c:ef:ce:0a:32:fc: 16:a3:bd:a5:77:8c:74:29:e8:bb:a9:18:1a:81:c9:d3:e5:09: 9a:0c:0a:69:01:ea:71:23:e4:52:af:8e:d2:e1:db:ef:05:50: 71:21:aa:d3:be:d5:94:80:34:0d:3c:a5:9a:c4:32:7f:7f:16: 53:ef:41:89:17:7d:3b:e1:74:72:6d:ba:72:53:9c:57:20:ea: bf:e2:8b:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQ5QzIxMTAvBgNVBAUTKDZGOUFDMDRDRTVBQzcxQTdDMkI3QUZCMUE1NTcyN0Ex MEU1QjA2RUUwHhcNMjUwODA2MTkyMjEyWhcNMjUwODEzMTkyMjEyWjAYMRYwFAYD VQQDEw02ODkzYWI2NC1iNTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsuBsA4h4yn+/XkLQ0D9OPcbB9j5RgIOv4eR3qskKiAoMyun5y1U8o4kw3Fvq oQwfLEoK2OUFHIbuOLGpEOvj1apf8dzp/mVXnQC0TK5UfBhVwDNPvsbv5xio45Tx x5JhCH9UWkHVN2LI73lrTZ7T+DqMk5pXkxa17bPMn4UNIlM7Nd+E07+D50hkA/5V 7YD3pXlIqQpAPKv59ZkFNKVn4Nv7tYMWBNBxoUCgGwasf4ctdnxA0BYUXRlg/iKj WbO4mFQMmH0CPGmphgE/NJIqH6xrwcn1LJiVKAFCJJZ7p5bO0oUr0yqDhlNViyt0 sb0NJHyURRxjQzPLDPWyvMDvJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLMZmKY+ GoHeqfZvhYkEzz/Jx4M7MB8GA1UdIwQYMBaAFG+awEzlrHGnwrevsaVXJ6EOWwbu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDlDMi9BQjBERjRGMjNB QTIxMUVBQTc5RTZBNjlDNEY5QUUwMi9iNXJBVE9Xc2NhZkN0Ni14cFZjbm9RNWJC dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I1ckFUT1dzY2FmQ3Q2LXhwVmNub1E1YkJ1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDlDMi9BQjBERjRGMjNBQTIxMUVBQTc5RTZBNjlDNEY5QUUwMi9iNXJBVE9Xc2Nh ZkN0Ni14cFZjbm9RNWJCdTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASKMVi+FeFjOhJY+oNN5Mo/kNJ9FJ8SJ1dXIq0Z3L3kE8mQDKQROQD ZBxhUUl2sEVZpbfNR5zRt05MUeTh1j3NlsIpxq2BVM4zhtZO5yOQasOuZScJfjms +HjCJV0nMboI1zzlKkefkZpMDFHfzizGGnrmVcBp1TgDRn0arWktD1N7dP8wDMzq XMJCD9XJBTqV5oJ9z45NEdVUm+7aAk9MFIZhWNz037TSL93Bgbd8784KMvwWo72l d4x0Kei7qRgagcnT5QmaDAppAepxI+RSr47S4dvvBVBxIarTvtWUgDQNPKWaxDJ/ fxZT70GJF3074XRybbpyU5xXIOq/4ouH -----END CERTIFICATE-----Generated at Fri Aug 8 20:45:09 2025 by rpki-client