$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.mft File: r5ACm-EBySLPz0vRRdevHcZA5eA.mft (raw, json) Hash identifier: uQx4EgFvnBrDsTPUVR6V7Met5j7hvw3/afO2yxuKr8s= Subject key identifier: 42:D7:B0:43:85:5E:4B:C3:CC:0A:4B:1D:1B:C3:2C:F4:4D:7D:B5:02 Authority key identifier: AF:90:02:9B:E1:01:C9:22:CF:CF:4B:D1:45:D7:AF:1D:C6:40:E5:E0 Certificate issuer: /CN=A91D2646/serialNumber=AF90029BE101C922CFCF4BD145D7AF1DC640E5E0 Certificate serial: 0A11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r5ACm-EBySLPz0vRRdevHcZA5eA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.mft Manifest number: 0A08 Signing time: Wed 06 Aug 2025 20:07:59 +0000 Manifest this update: Wed 06 Aug 2025 20:07:59 +0000 Manifest next update: Wed 13 Aug 2025 20:07:59 +0000 Files and hashes: 1: r5ACm-EBySLPz0vRRdevHcZA5eA.crl (hash: s2OVijLY8fCucE/RD7LQr2+xDNeqQcq0Z5USDlD1C0c=) 2: EE675FC27BED11EABD4A3A27C4F9AE02.roa (hash: AgjaL53ax01ov0J7/NtNC0271FAg3f2kxQ+XWNRqNo8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.crl rsync://rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r5ACm-EBySLPz0vRRdevHcZA5eA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 20:07:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2577 (0xa11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2646, serialNumber=AF90029BE101C922CFCF4BD145D7AF1DC640E5E0 Validity Not Before: Aug 6 20:07:59 2025 GMT Not After : Aug 13 20:07:59 2025 GMT Subject: CN=6893b61f-560d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6a:3c:30:f8:04:ce:46:c1:6c:84:97:c8:f6: 60:44:09:82:e9:2d:38:0a:31:69:cc:b0:42:08:14: 7e:d9:60:b9:d7:b6:70:6e:94:d5:73:d6:43:3e:56: 1a:90:b1:9a:8e:76:cc:97:94:61:bd:fd:25:d9:4d: 55:4c:ea:74:59:ce:52:20:be:a0:b6:af:e0:a7:47: d5:9c:c2:f9:b0:6b:13:3e:79:4f:fb:16:96:21:72: 9e:b3:f0:cd:7b:51:33:b7:7f:a5:76:a0:b9:f6:70: 19:b8:13:28:5f:2c:0c:c9:97:fe:2e:3a:0c:6e:50: 24:c5:9b:1c:37:ee:af:57:c0:d8:7e:f6:b8:99:6e: c6:7e:1b:f6:63:62:50:73:e4:85:78:17:2a:f5:10: f3:a1:97:dc:c9:a9:1d:f0:47:0c:40:74:2b:18:4a: 89:04:c2:55:25:c3:12:6f:7e:4e:33:19:76:6f:ab: 37:58:0e:aa:fd:56:4f:c3:6f:2d:48:a1:24:66:be: 20:3e:f4:c9:eb:ca:e0:5d:59:67:79:19:32:ae:03: 58:f3:da:cd:ee:63:3a:a4:9f:bc:d9:bc:50:e4:36: 15:c1:2c:1c:e0:be:d5:29:fc:c2:5b:03:99:4b:56: d3:9a:91:80:3f:51:27:6b:85:91:ee:a4:75:1f:33: 4f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:D7:B0:43:85:5E:4B:C3:CC:0A:4B:1D:1B:C3:2C:F4:4D:7D:B5:02 X509v3 Authority Key Identifier: keyid:AF:90:02:9B:E1:01:C9:22:CF:CF:4B:D1:45:D7:AF:1D:C6:40:E5:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r5ACm-EBySLPz0vRRdevHcZA5eA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:51:98:4a:b8:1c:f9:56:2a:7f:86:f6:09:5d:15:7f:7a:f4: f2:32:81:35:63:f3:ff:25:4c:a5:e7:b8:93:4e:3b:23:4f:b1: 2f:5c:35:06:91:a8:93:17:08:53:d9:d9:75:19:df:56:16:d1: 64:eb:f9:61:29:75:b0:69:49:61:e9:3a:3b:de:f8:50:0f:fc: 15:62:94:bc:5b:26:a1:b2:d1:b9:61:47:69:2a:f0:5a:a6:b0: cc:d2:80:f6:11:90:03:b1:ef:71:d7:6b:1a:a3:8d:9d:3d:ad: 95:7a:87:88:27:e2:b0:8e:5a:41:c9:16:83:47:3e:1d:f1:d3: 75:a3:a9:ef:e4:fa:33:10:ce:ae:92:b7:61:94:a6:1b:e3:b8: c7:7d:f3:f2:69:93:01:c2:c1:3d:71:d0:05:22:b9:6b:68:d2: 5a:c0:16:2f:70:ae:a7:c0:eb:ef:b3:5b:3a:92:7d:86:40:5d: 46:29:58:3e:ee:24:bc:a0:97:f1:c8:bf:d9:69:ae:20:4c:cd: 5c:85:5e:49:5e:70:e7:9c:1c:b1:99:13:37:63:b8:83:b9:8e: 8e:60:e3:6d:30:07:58:b7:e8:c0:d6:66:a4:05:c9:28:70:d4: 7b:c0:41:b7:81:42:ca:b7:d9:30:0d:96:cd:fd:87:52:4d:e1: 42:35:70:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICChEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI2NDYxMTAvBgNVBAUTKEFGOTAwMjlCRTEwMUM5MjJDRkNGNEJEMTQ1RDdBRjFE QzY0MEU1RTAwHhcNMjUwODA2MjAwNzU5WhcNMjUwODEzMjAwNzU5WjAYMRYwFAYD VQQDEw02ODkzYjYxZi01NjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqmo8MPgEzkbBbISXyPZgRAmC6S04CjFpzLBCCBR+2WC517ZwbpTVc9ZDPlYa kLGajnbMl5Rhvf0l2U1VTOp0Wc5SIL6gtq/gp0fVnML5sGsTPnlP+xaWIXKes/DN e1Ezt3+ldqC59nAZuBMoXywMyZf+LjoMblAkxZscN+6vV8DYfva4mW7Gfhv2Y2JQ c+SFeBcq9RDzoZfcyakd8EcMQHQrGEqJBMJVJcMSb35OMxl2b6s3WA6q/VZPw28t SKEkZr4gPvTJ68rgXVlneRkyrgNY89rN7mM6pJ+82bxQ5DYVwSwc4L7VKfzCWwOZ S1bTmpGAP1Ena4WR7qR1HzNPhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFELXsEOF XkvDzApLHRvDLPRNfbUCMB8GA1UdIwQYMBaAFK+QApvhAckiz89L0UXXrx3GQOXg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjY0Ni9EMjAzN0QxMjdC RUMxMUVBQTlBNkM3MjVDNEY5QUUwMi9yNUFDbS1FQnlTTFB6MHZSUmRldkhjWkE1 ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I1QUNtLUVCeVNMUHowdlJSZGV2SGNaQTVlQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjY0Ni9EMjAzN0QxMjdCRUMxMUVBQTlBNkM3MjVDNEY5QUUwMi9yNUFDbS1FQnlT TFB6MHZSUmRldkhjWkE1ZUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMUZhKuBz5Vip/hvYJXRV/evTyMoE1Y/P/JUyl57iTTjsjT7EvXDUG kaiTFwhT2dl1Gd9WFtFk6/lhKXWwaUlh6To73vhQD/wVYpS8WyahstG5YUdpKvBa prDM0oD2EZADse9x12sao42dPa2VeoeIJ+KwjlpByRaDRz4d8dN1o6nv5PozEM6u krdhlKYb47jHffPyaZMBwsE9cdAFIrlraNJawBYvcK6nwOvvs1s6kn2GQF1GKVg+ 7iS8oJfxyL/Zaa4gTM1chV5JXnDnnByxmRM3Y7iDuY6OYONtMAdYt+jA1makBcko cNR7wEG3gULKt9kwDZbN/YdSTeFCNXDh -----END CERTIFICATE-----Generated at Thu Aug 7 04:40:47 2025 by rpki-client