$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/c5C6Rl4CIu4xQH5VCebenj-pENs.mft File: c5C6Rl4CIu4xQH5VCebenj-pENs.mft (raw, json) Hash identifier: 2ReRwM2/k7xmWOoXPXUUlH9KhqplDvOex0l5WPlsgXg= Subject key identifier: 58:43:97:56:AF:D4:F1:44:10:C4:E5:C2:36:BB:70:85:7C:EA:FE:78 Authority key identifier: 73:90:BA:46:5E:02:22:EE:31:40:7E:55:09:E6:DE:9E:3F:A9:10:DB Certificate issuer: /CN=A91CA6E6/serialNumber=7390BA465E0222EE31407E5509E6DE9E3FA910DB Certificate serial: EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5C6Rl4CIu4xQH5VCebenj-pENs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/c5C6Rl4CIu4xQH5VCebenj-pENs.mft Manifest number: 028E Signing time: Sat 09 Aug 2025 03:37:26 +0000 Manifest this update: Sat 09 Aug 2025 03:37:26 +0000 Manifest next update: Sat 16 Aug 2025 03:37:26 +0000 Files and hashes: 1: c5C6Rl4CIu4xQH5VCebenj-pENs.crl (hash: 1IFcGPA402YGL8N5G2pL0Q2xfY7H3iJvXixpNxW352w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/c5C6Rl4CIu4xQH5VCebenj-pENs.crl rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/c5C6Rl4CIu4xQH5VCebenj-pENs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5C6Rl4CIu4xQH5VCebenj-pENs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 234 (0xea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA6E6, serialNumber=7390BA465E0222EE31407E5509E6DE9E3FA910DB Validity Not Before: Aug 9 03:37:26 2025 GMT Not After : Aug 16 03:37:26 2025 GMT Subject: CN=6896c276-15e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d2:dd:44:94:3c:26:5b:fb:8d:50:4b:cd:9f: 30:fd:0c:c1:30:c3:8f:3a:c7:d9:3a:5c:c6:3c:f4: 2e:59:cc:59:64:2d:90:e9:51:57:a9:da:7f:06:25: 20:9b:54:ca:0c:45:e5:c9:e6:16:61:d2:d4:55:13: e3:e9:84:f4:86:13:b9:01:8e:e3:d8:e2:83:39:e6: 28:6f:8d:35:45:87:75:54:b6:53:53:46:67:cb:c6: 1c:13:7f:17:2e:55:a0:66:44:73:f5:d7:4d:a9:fe: 33:c8:56:fb:78:15:f9:a5:6e:58:17:6a:45:82:00: 80:37:03:f8:b7:0b:9c:1c:c0:ab:41:70:58:54:cc: 4d:48:a9:5b:60:81:33:13:b2:ba:15:53:8e:d1:3f: 4b:bb:df:c9:31:5b:d7:7a:58:9d:7c:da:54:d2:e6: a4:dd:6e:ee:0f:67:71:e0:3c:fc:6b:d0:5a:c8:6c: de:c4:c5:b5:3f:86:3e:7c:39:64:20:96:cd:2a:1a: d2:c4:6c:cd:5d:b6:66:10:8f:2a:2f:71:c0:41:93: 22:69:c2:ed:1e:36:12:af:a2:51:09:90:b4:25:38: ea:80:31:d4:0a:9d:7f:41:4a:9b:05:e0:f9:4a:6b: 90:23:f7:33:41:f7:09:66:19:b6:a2:15:b7:f9:57: f7:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:43:97:56:AF:D4:F1:44:10:C4:E5:C2:36:BB:70:85:7C:EA:FE:78 X509v3 Authority Key Identifier: keyid:73:90:BA:46:5E:02:22:EE:31:40:7E:55:09:E6:DE:9E:3F:A9:10:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/c5C6Rl4CIu4xQH5VCebenj-pENs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5C6Rl4CIu4xQH5VCebenj-pENs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/c5C6Rl4CIu4xQH5VCebenj-pENs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:f2:df:b4:8c:ea:0f:64:36:67:4a:8a:a4:dd:bd:6b:e4:50: 60:b1:85:f3:de:0a:08:23:9a:07:b3:5b:e9:ef:26:bb:ea:fd: 91:69:e0:b6:0b:e0:81:67:9e:e1:b7:65:35:f5:d1:31:94:d9: cc:3a:a2:28:e1:da:22:43:d3:60:0a:3d:37:dd:13:d5:d3:32: d0:f0:39:1a:c1:e1:9a:30:0b:b0:14:6e:8c:a6:a6:6d:83:68: ef:b4:58:b6:51:f1:46:3a:b6:6e:95:3e:df:9d:a6:f8:00:97: 8c:a2:32:9b:16:dc:d4:c1:17:42:e5:74:bf:08:35:30:47:fd: 5b:51:89:af:e9:4f:5a:ef:ba:b2:24:4f:b9:b2:59:b2:58:5b: d6:97:2f:a9:00:3f:67:c7:6d:24:19:23:bd:79:57:5d:f8:f9: 0e:da:be:3e:2f:dd:cc:b8:1a:a7:2e:a9:a3:a9:20:bd:f0:1f: 5e:3d:03:f3:6e:6c:8f:03:c4:23:18:3e:d0:ee:21:e0:fa:e7: 5d:7c:27:89:5b:10:59:f8:cf:ed:71:10:35:8d:15:e1:ec:d1: f4:a9:a6:28:06:37:0a:3d:26:ca:e1:fc:fa:15:5d:4e:65:ff: 4c:d8:c3:75:9e:93:05:b8:65:53:58:ed:74:33:65:63:f5:ba: 87:09:c6:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0E2RTYxMTAvBgNVBAUTKDczOTBCQTQ2NUUwMjIyRUUzMTQwN0U1NTA5RTZERTlF M0ZBOTEwREIwHhcNMjUwODA5MDMzNzI2WhcNMjUwODE2MDMzNzI2WjAYMRYwFAYD VQQDEw02ODk2YzI3Ni0xNWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmtLdRJQ8Jlv7jVBLzZ8w/QzBMMOPOsfZOlzGPPQuWcxZZC2Q6VFXqdp/BiUg m1TKDEXlyeYWYdLUVRPj6YT0hhO5AY7j2OKDOeYob401RYd1VLZTU0Zny8YcE38X LlWgZkRz9ddNqf4zyFb7eBX5pW5YF2pFggCANwP4twucHMCrQXBYVMxNSKlbYIEz E7K6FVOO0T9Lu9/JMVvXelidfNpU0uak3W7uD2dx4Dz8a9BayGzexMW1P4Y+fDlk IJbNKhrSxGzNXbZmEI8qL3HAQZMiacLtHjYSr6JRCZC0JTjqgDHUCp1/QUqbBeD5 SmuQI/czQfcJZhm2ohW3+Vf3jwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFhDl1av 1PFEEMTlwja7cIV86v54MB8GA1UdIwQYMBaAFHOQukZeAiLuMUB+VQnm3p4/qRDb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTZFNi8zQjgzQUZFMEYw RDAxMUVEODA1MDc2NkFDNEY5QUUwMi9jNUM2Umw0Q0l1NHhRSDVWQ2ViZW5qLXBF TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M1QzZSbDRDSXU0eFFINVZDZWJlbmotcEVOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTZFNi8zQjgzQUZFMEYwRDAxMUVEODA1MDc2NkFDNEY5QUUwMi9jNUM2Umw0Q0l1 NHhRSDVWQ2ViZW5qLXBFTnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAU8t+0jOoPZDZnSoqk3b1r5FBgsYXz3goII5oHs1vp7ya76v2RaeC2 C+CBZ57ht2U19dExlNnMOqIo4doiQ9NgCj033RPV0zLQ8DkaweGaMAuwFG6MpqZt g2jvtFi2UfFGOrZulT7fnab4AJeMojKbFtzUwRdC5XS/CDUwR/1bUYmv6U9a77qy JE+5slmyWFvWly+pAD9nx20kGSO9eVdd+PkO2r4+L93MuBqnLqmjqSC98B9ePQPz bmyPA8QjGD7Q7iHg+uddfCeJWxBZ+M/tcRA1jRXh7NH0qaYoBjcKPSbK4fz6FV1O Zf9M2MN1npMFuGVTWO10M2Vj9bqHCcaF -----END CERTIFICATE-----Generated at Sun Aug 10 10:36:05 2025 by rpki-client