$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.mft File: f5auCiLKk4vV-dmnMor1g2LrIsE.mft (raw, json) Hash identifier: 3iYjDqnKCCPCBgBuPzgji0ACOwt3X4vm6uPB4Bnc/Sw= Subject key identifier: FC:B4:78:08:E3:8D:64:4D:14:57:34:36:32:AE:EE:17:32:55:A2:53 Authority key identifier: 7F:96:AE:0A:22:CA:93:8B:D5:F9:D9:A7:32:8A:F5:83:62:EB:22:C1 Certificate issuer: /CN=A91BFFBE/serialNumber=7F96AE0A22CA938BD5F9D9A7328AF58362EB22C1 Certificate serial: 8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f5auCiLKk4vV-dmnMor1g2LrIsE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.mft Manifest number: 8D Signing time: Sat 09 Aug 2025 06:57:59 +0000 Manifest this update: Sat 09 Aug 2025 06:57:59 +0000 Manifest next update: Sat 16 Aug 2025 06:57:59 +0000 Files and hashes: 1: f5auCiLKk4vV-dmnMor1g2LrIsE.crl (hash: 72fyvO/J+JG5CyxVua7pBNzv1A2/Kb1eXziAyue1MaM=) 2: 4450DA2C9D0311EF877CD229C4F9AE02.roa (hash: buSMZTKEc3PdwiMwBtG/n0gmpQCMqdjfMf4AjKQfjyg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.crl rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f5auCiLKk4vV-dmnMor1g2LrIsE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 142 (0x8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFFBE, serialNumber=7F96AE0A22CA938BD5F9D9A7328AF58362EB22C1 Validity Not Before: Aug 9 06:57:59 2025 GMT Not After : Aug 16 06:57:59 2025 GMT Subject: CN=6896f177-f3f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:a3:1e:ff:64:3c:c5:ec:c5:95:4e:d8:85:24: 36:fa:d1:e1:2c:57:40:61:8d:aa:8d:0c:fd:f9:ed: d3:e4:d5:8c:d7:4e:9d:b1:6a:ae:d8:2a:d7:be:7c: 03:74:e4:10:c4:fb:b7:61:81:39:e1:1e:9f:0b:17: fd:df:f1:74:1a:03:9d:be:67:39:42:6c:49:7b:8b: 99:a4:ef:a1:28:ea:e9:98:f7:00:ee:c5:df:89:ec: ce:a0:50:4c:c4:6b:d3:91:a9:bf:e7:ad:0b:71:8a: ce:02:8e:29:84:98:a9:81:19:8b:cb:1e:98:3c:ac: 5b:6b:01:a3:89:9f:b0:61:72:af:d6:2a:f4:fc:48: 4f:b3:09:2d:13:00:6b:84:da:33:a4:0d:6d:cd:98: 6a:41:22:47:8f:44:a6:4b:54:60:5a:be:37:61:f8: a9:4c:59:34:b4:de:68:55:01:ea:07:85:ff:3a:b6: b3:f6:a0:13:7f:b6:76:14:ff:86:72:3a:70:a6:ab: 05:c7:a6:12:92:3a:c5:07:60:ed:84:a3:fd:6a:49: e3:b2:67:67:a9:bd:e7:e0:14:f4:b3:5a:78:26:bd: 45:67:a7:d0:90:5d:1d:06:7f:be:82:8b:c8:90:fb: f5:83:1c:e1:a1:2f:20:04:4b:89:7a:36:08:68:34: a8:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:B4:78:08:E3:8D:64:4D:14:57:34:36:32:AE:EE:17:32:55:A2:53 X509v3 Authority Key Identifier: keyid:7F:96:AE:0A:22:CA:93:8B:D5:F9:D9:A7:32:8A:F5:83:62:EB:22:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f5auCiLKk4vV-dmnMor1g2LrIsE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:17:1d:69:52:d0:0d:e8:e9:64:54:c0:ab:ee:49:6c:ad:9b: 8f:ff:4a:b2:a1:92:41:d3:ed:4f:e1:83:34:9a:1b:c9:2c:b6: 28:ca:96:c2:4d:0e:9d:37:bc:a6:b2:1f:d6:cb:d8:7e:7d:22: 5a:91:3a:0c:13:68:69:e6:de:a4:cf:84:c0:a5:4b:3c:be:ff: 1b:c9:61:74:bf:75:22:3f:5b:c6:85:a8:52:db:7b:f8:cf:a9: f5:ae:06:6a:bf:eb:ef:68:b8:a9:57:6a:06:41:eb:75:63:1a: fe:18:03:9d:0b:bc:ff:38:50:a2:fe:47:84:49:0c:2c:f5:bc: e3:5f:99:e8:3b:5c:2f:b2:3c:5e:de:13:9e:35:1c:69:40:68: 21:4d:42:20:98:d1:c4:2a:aa:69:60:5a:5d:11:1b:b4:83:36: 02:fa:c6:46:31:33:c5:56:08:55:5a:18:6d:ee:41:7d:0a:3d: 73:e4:84:48:3d:7e:68:0d:5e:ff:d5:1d:a5:2b:69:1f:3b:db: 47:76:69:b1:58:f8:cf:8d:ce:e9:c3:42:2e:70:68:60:b3:3b: 2f:46:69:1c:42:85:68:c3:27:fe:a1:17:9e:cd:ff:d1:cd:31: 45:01:01:1d:b1:69:80:c2:be:4f:52:93:a3:ed:f8:a9:59:48: c8:d4:ce:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkZGQkUxMTAvBgNVBAUTKDdGOTZBRTBBMjJDQTkzOEJENUY5RDlBNzMyOEFGNTgz NjJFQjIyQzEwHhcNMjUwODA5MDY1NzU5WhcNMjUwODE2MDY1NzU5WjAYMRYwFAYD VQQDEw02ODk2ZjE3Ny1mM2Y4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5qMe/2Q8xezFlU7YhSQ2+tHhLFdAYY2qjQz9+e3T5NWM106dsWqu2CrXvnwD dOQQxPu3YYE54R6fCxf93/F0GgOdvmc5QmxJe4uZpO+hKOrpmPcA7sXfiezOoFBM xGvTkam/560LcYrOAo4phJipgRmLyx6YPKxbawGjiZ+wYXKv1ir0/EhPswktEwBr hNozpA1tzZhqQSJHj0SmS1RgWr43YfipTFk0tN5oVQHqB4X/Oraz9qATf7Z2FP+G cjpwpqsFx6YSkjrFB2DthKP9aknjsmdnqb3n4BT0s1p4Jr1FZ6fQkF0dBn++govI kPv1gxzhoS8gBEuJejYIaDSo6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPy0eAjj jWRNFFc0NjKu7hcyVaJTMB8GA1UdIwQYMBaAFH+WrgoiypOL1fnZpzKK9YNi6yLB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRkZCRS80MjE1OUY1QTlE MDIxMUVGOTlDQzg2MDlDNEY5QUUwMi9mNWF1Q2lMS2s0dlYtZG1uTW9yMWcyTHJJ c0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Y1YXVDaUxLazR2Vi1kbW5Nb3IxZzJMcklzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RkZCRS80MjE1OUY1QTlEMDIxMUVGOTlDQzg2MDlDNEY5QUUwMi9mNWF1Q2lMS2s0 dlYtZG1uTW9yMWcyTHJJc0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaFx1pUtAN6OlkVMCr7klsrZuP/0qyoZJB0+1P4YM0mhvJLLYoypbC TQ6dN7ymsh/Wy9h+fSJakToME2hp5t6kz4TApUs8vv8byWF0v3UiP1vGhahS23v4 z6n1rgZqv+vvaLipV2oGQet1Yxr+GAOdC7z/OFCi/keESQws9bzjX5noO1wvsjxe 3hOeNRxpQGghTUIgmNHEKqppYFpdERu0gzYC+sZGMTPFVghVWhht7kF9Cj1z5IRI PX5oDV7/1R2lK2kfO9tHdmmxWPjPjc7pw0IucGhgszsvRmkcQoVowyf+oReezf/R zTFFAQEdsWmAwr5PUpOj7fipWUjI1M6C -----END CERTIFICATE-----Generated at Sun Aug 10 04:49:52 2025 by rpki-client