$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/5yN2M529XTAqWcz6d6wJzRcjlU0.mft File: 5yN2M529XTAqWcz6d6wJzRcjlU0.mft (raw, json) Hash identifier: j9IIp2AiyyHJRt6yqwDN0Oj/ctNVsVQZPCLItEx77ao= Subject key identifier: 7C:8B:71:B8:43:71:02:2F:91:B6:BD:F9:63:49:8C:C9:02:A8:56:08 Authority key identifier: E7:23:76:33:9D:BD:5D:30:2A:59:CC:FA:77:AC:09:CD:17:23:95:4D Certificate issuer: /CN=A91CD60C/serialNumber=E72376339DBD5D302A59CCFA77AC09CD1723954D Certificate serial: 9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5yN2M529XTAqWcz6d6wJzRcjlU0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/5yN2M529XTAqWcz6d6wJzRcjlU0.mft Manifest number: 9A Signing time: Mon 11 Aug 2025 06:40:08 +0000 Manifest this update: Mon 11 Aug 2025 06:40:08 +0000 Manifest next update: Mon 18 Aug 2025 06:40:08 +0000 Files and hashes: 1: 5yN2M529XTAqWcz6d6wJzRcjlU0.crl (hash: 0x55/5vL3q8DEJFCrKJ54EE/JLHg7hwCUouylEi9ubE=) 2: AC8EE79E975B11EFB1D18E82C4F9AE02.roa (hash: sqDKPZ1qrocmicYcNGEqHeOR7eFUFOhb8W65lVkqel0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/5yN2M529XTAqWcz6d6wJzRcjlU0.crl rsync://rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/5yN2M529XTAqWcz6d6wJzRcjlU0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5yN2M529XTAqWcz6d6wJzRcjlU0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 06:40:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 159 (0x9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD60C, serialNumber=E72376339DBD5D302A59CCFA77AC09CD1723954D Validity Not Before: Aug 11 06:40:08 2025 GMT Not After : Aug 18 06:40:08 2025 GMT Subject: CN=68999048-e65d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a6:d9:61:28:22:6a:bf:3a:38:1a:4f:2e:ba: c1:32:e2:3a:e3:e9:7f:25:4f:6f:2f:a6:3b:8d:64: 6b:91:93:13:55:4c:b7:2b:cb:48:2d:d7:db:02:6f: f9:37:f6:9a:e3:1b:6c:73:b2:51:2a:a7:02:65:b5: 93:66:46:88:6e:33:af:bc:06:40:27:1f:6c:4f:4c: e8:67:83:4b:4d:7e:10:b3:d2:05:af:e6:80:79:2e: f5:a0:01:f3:06:7f:8a:46:a8:53:a1:e8:11:27:47: 92:8f:04:77:c7:25:0b:1b:f5:c1:48:eb:05:68:c1: 23:c1:0c:82:cd:f0:1d:77:34:fa:ee:d9:62:c6:41: b8:90:72:16:e4:b8:ba:e4:d4:6b:be:46:74:ce:c6: 3f:6c:a7:2a:83:12:7f:ba:20:e2:63:d1:0a:ca:09: c8:3f:3f:c8:03:00:d3:3d:c2:26:e6:32:aa:63:8d: 2b:23:6d:b6:79:f3:96:9b:5a:9f:dc:20:f0:36:33: 4b:9b:8b:0d:09:78:c7:fd:77:b9:89:64:77:93:41: 74:8c:c1:6e:c6:4e:ac:8e:23:12:c0:d2:27:1c:21: 60:90:57:e0:f2:be:77:59:86:95:ff:bf:6d:2e:9e: 20:6a:f1:32:9f:3b:92:69:94:2f:8c:16:6c:4b:8f: 13:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:8B:71:B8:43:71:02:2F:91:B6:BD:F9:63:49:8C:C9:02:A8:56:08 X509v3 Authority Key Identifier: keyid:E7:23:76:33:9D:BD:5D:30:2A:59:CC:FA:77:AC:09:CD:17:23:95:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/5yN2M529XTAqWcz6d6wJzRcjlU0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5yN2M529XTAqWcz6d6wJzRcjlU0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/5yN2M529XTAqWcz6d6wJzRcjlU0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:f3:3c:28:55:ad:7d:d0:df:bd:85:22:af:8e:29:84:27:e4: 76:51:3b:7d:3f:d4:31:72:e2:2c:ed:d4:e9:5c:be:4b:97:83: 6e:c6:ea:2c:b2:41:a3:e7:53:3d:40:f8:f8:97:fa:7e:f1:22: e4:f4:4f:0d:d2:86:1b:f6:76:f4:32:44:76:7a:f6:d7:8a:22: 50:25:71:4d:de:eb:c7:5a:97:8b:b6:5c:64:9e:06:59:2b:bf: c0:4c:94:98:28:da:be:a9:78:60:83:92:e5:19:cf:51:65:10: a8:46:ce:e8:ac:3f:a7:53:5d:83:30:e1:59:c0:53:a6:b1:75: 39:dc:51:6a:6d:09:00:ec:95:3a:40:61:ce:a9:f6:98:48:03: 07:54:1c:0a:d9:79:a2:c9:d8:2b:43:90:2d:8a:44:70:77:69: 8a:b4:9f:1a:14:a8:c8:d8:e8:b4:cb:53:59:a8:a5:eb:82:72: ea:aa:75:98:ca:72:4a:b6:33:69:1a:fa:26:4d:a3:51:ca:92: 1b:96:8e:14:7d:43:28:17:75:d9:41:68:70:ea:f0:23:d0:aa: b7:70:a2:c2:8e:3e:42:0c:66:5c:d3:42:da:08:0b:5c:7c:a6: 3f:2a:21:bd:71:6f:63:36:a4:7c:a3:4f:2a:94:bf:32:da:96: e0:41:1a:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Q2MEMxMTAvBgNVBAUTKEU3MjM3NjMzOURCRDVEMzAyQTU5Q0NGQTc3QUMwOUNE MTcyMzk1NEQwHhcNMjUwODExMDY0MDA4WhcNMjUwODE4MDY0MDA4WjAYMRYwFAYD VQQDEw02ODk5OTA0OC1lNjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtabZYSgiar86OBpPLrrBMuI64+l/JU9vL6Y7jWRrkZMTVUy3K8tILdfbAm/5 N/aa4xtsc7JRKqcCZbWTZkaIbjOvvAZAJx9sT0zoZ4NLTX4Qs9IFr+aAeS71oAHz Bn+KRqhToegRJ0eSjwR3xyULG/XBSOsFaMEjwQyCzfAddzT67tlixkG4kHIW5Li6 5NRrvkZ0zsY/bKcqgxJ/uiDiY9EKygnIPz/IAwDTPcIm5jKqY40rI222efOWm1qf 3CDwNjNLm4sNCXjH/Xe5iWR3k0F0jMFuxk6sjiMSwNInHCFgkFfg8r53WYaV/79t Lp4gavEynzuSaZQvjBZsS48TuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHyLcbhD cQIvkba9+WNJjMkCqFYIMB8GA1UdIwQYMBaAFOcjdjOdvV0wKlnM+nesCc0XI5VN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDYwQy8xODhGMTE3Mjk3 M0QxMUVGQTUxOTYwNThDNEY5QUUwMi81eU4yTTUyOVhUQXFXY3o2ZDZ3SnpSY2ps VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV5TjJNNTI5WFRBcVdjejZkNndKelJjamxVMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDYwQy8xODhGMTE3Mjk3M0QxMUVGQTUxOTYwNThDNEY5QUUwMi81eU4yTTUyOVhU QXFXY3o2ZDZ3SnpSY2psVTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA68zwoVa190N+9hSKvjimEJ+R2UTt9P9QxcuIs7dTpXL5Ll4Nuxuos skGj51M9QPj4l/p+8SLk9E8N0oYb9nb0MkR2evbXiiJQJXFN3uvHWpeLtlxkngZZ K7/ATJSYKNq+qXhgg5LlGc9RZRCoRs7orD+nU12DMOFZwFOmsXU53FFqbQkA7JU6 QGHOqfaYSAMHVBwK2XmiydgrQ5AtikRwd2mKtJ8aFKjI2Oi0y1NZqKXrgnLqqnWY ynJKtjNpGvomTaNRypIblo4UfUMoF3XZQWhw6vAj0Kq3cKLCjj5CDGZc00LaCAtc fKY/KiG9cW9jNqR8o08qlL8y2pbgQRrT -----END CERTIFICATE-----Generated at Tue Aug 12 22:50:12 2025 by rpki-client