$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.mft File: 05fnjG3TxpaFEzQVMschiNd1Z68.mft (raw, json) Hash identifier: aI+tzlpAwwSgUv8zSV1xwR3Ug/BmE75nH9utvDuZMiA= Subject key identifier: 41:E7:F6:8B:BD:A9:8C:4E:8B:8C:92:2E:EE:00:78:50:F1:21:AA:8D Authority key identifier: D3:97:E7:8C:6D:D3:C6:96:85:13:34:15:32:C7:21:88:D7:75:67:AF Certificate issuer: /CN=A91D3CA7/serialNumber=D397E78C6DD3C6968513341532C72188D77567AF Certificate serial: 02E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05fnjG3TxpaFEzQVMschiNd1Z68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.mft Manifest number: 02DE Signing time: Sat 09 Aug 2025 01:52:15 +0000 Manifest this update: Sat 09 Aug 2025 01:52:14 +0000 Manifest next update: Sat 16 Aug 2025 01:52:14 +0000 Files and hashes: 1: 05fnjG3TxpaFEzQVMschiNd1Z68.crl (hash: ihSgNOmfX2YPWf9r6T8CQe6ct2Ax72nXoCxPB/FUHxM=) 2: DE183F1CF46611EC815F7283C4F9AE02.roa (hash: 9MdpJxrwdV0aU1f/zX8n/hykvTdPQn1kKe0kWScV57Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.crl rsync://rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05fnjG3TxpaFEzQVMschiNd1Z68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 739 (0x2e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3CA7, serialNumber=D397E78C6DD3C6968513341532C72188D77567AF Validity Not Before: Aug 9 01:52:14 2025 GMT Not After : Aug 16 01:52:14 2025 GMT Subject: CN=6896a9cf-ddd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:73:0a:89:5c:3b:34:2c:12:14:47:71:18:bb: a5:22:d6:a3:18:e1:a1:86:d7:38:56:98:1e:cb:5a: 9e:a6:e1:40:1c:f2:37:fe:c7:5f:01:26:03:c0:44: b7:53:e8:1b:b3:55:f6:e0:5f:97:99:4d:6b:37:2b: 93:3a:37:17:b3:eb:1e:f9:7d:ac:94:ab:ae:c5:ed: bb:9a:52:b9:77:45:62:1d:ee:76:6e:7f:72:52:c0: 92:ed:ca:8b:fe:87:17:37:7e:91:ad:2c:13:9d:ce: 78:de:5f:4d:00:6d:14:fb:24:8a:b8:d6:8d:5e:a3: 96:94:68:7e:2a:fa:0f:47:b0:68:16:e3:e3:cd:4e: c9:ed:26:21:a6:16:43:0c:86:eb:12:ac:47:34:e2: f9:b2:3b:86:3b:05:9f:af:4e:94:51:56:97:90:17: e4:e4:c1:b0:38:cd:1c:17:6e:f4:bc:0a:b5:86:0c: 15:3d:5e:d1:d0:cc:c5:c9:03:0f:a7:36:ef:1c:ec: 63:d8:10:0f:fd:7f:e1:d8:5a:03:a4:9b:0d:e6:33: d6:77:5f:33:22:ee:72:f6:3e:26:0c:4b:15:4d:dc: 4a:da:56:eb:47:99:0e:70:82:db:40:90:90:84:d4: 34:75:96:52:b7:3c:04:9a:f2:0b:f8:33:59:8a:ee: dd:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:E7:F6:8B:BD:A9:8C:4E:8B:8C:92:2E:EE:00:78:50:F1:21:AA:8D X509v3 Authority Key Identifier: keyid:D3:97:E7:8C:6D:D3:C6:96:85:13:34:15:32:C7:21:88:D7:75:67:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05fnjG3TxpaFEzQVMschiNd1Z68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:32:16:d8:89:32:75:74:ca:e4:b2:c3:3e:75:68:c5:e4:75: 54:23:9c:3e:f7:50:89:88:11:04:27:29:57:3b:00:a5:03:4b: 4a:61:a2:12:cd:e7:f7:5d:c6:56:e5:ab:f3:bf:6e:c8:50:dd: 85:47:5c:4e:09:db:37:51:83:b4:6e:d3:cd:59:80:cd:ce:a6: 7f:ff:15:00:fe:86:56:bc:46:56:82:b8:11:24:60:76:53:f1: 68:33:31:3c:66:fb:e3:66:48:27:16:b0:f9:17:f7:88:d1:e6: 0d:ca:65:22:ab:25:4e:1b:e2:de:3f:a1:27:06:4f:03:84:7f: bd:10:63:f2:6f:67:47:4c:57:fd:22:ac:55:b0:b4:62:8f:9e: fb:d8:e6:b1:61:1f:cf:95:a2:12:72:5d:54:19:68:a5:d3:45: b5:40:bd:83:19:3d:b5:3c:f0:0b:d8:d8:27:25:4c:a0:0d:17: d2:8e:ac:ec:c6:90:84:c8:07:37:a5:eb:ba:19:ab:ed:77:6c: 11:0d:92:0b:02:b9:99:a7:a7:69:f2:76:57:e2:7a:0d:31:7d: c4:37:06:e6:6e:f2:dd:b5:c8:11:8c:2a:fd:09:55:d1:91:d6: 7f:41:64:9e:a2:e1:ef:3d:26:ef:95:d8:23:50:84:9e:49:37: 2a:5a:8e:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAuMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNDQTcxMTAvBgNVBAUTKEQzOTdFNzhDNkREM0M2OTY4NTEzMzQxNTMyQzcyMTg4 RDc3NTY3QUYwHhcNMjUwODA5MDE1MjE0WhcNMjUwODE2MDE1MjE0WjAYMRYwFAYD VQQDEw02ODk2YTljZi1kZGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAonMKiVw7NCwSFEdxGLulItajGOGhhtc4Vpgey1qepuFAHPI3/sdfASYDwES3 U+gbs1X24F+XmU1rNyuTOjcXs+se+X2slKuuxe27mlK5d0ViHe52bn9yUsCS7cqL /ocXN36RrSwTnc543l9NAG0U+ySKuNaNXqOWlGh+KvoPR7BoFuPjzU7J7SYhphZD DIbrEqxHNOL5sjuGOwWfr06UUVaXkBfk5MGwOM0cF270vAq1hgwVPV7R0MzFyQMP pzbvHOxj2BAP/X/h2FoDpJsN5jPWd18zIu5y9j4mDEsVTdxK2lbrR5kOcILbQJCQ hNQ0dZZStzwEmvIL+DNZiu7duQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEHn9ou9 qYxOi4ySLu4AeFDxIaqNMB8GA1UdIwQYMBaAFNOX54xt08aWhRM0FTLHIYjXdWev MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0NBNy8zRjBFMEUwNkY0 NjExMUVDODIzQ0EwN0NDNEY5QUUwMi8wNWZuakczVHhwYUZFelFWTXNjaGlOZDFa NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA1Zm5qRzNUeHBhRkV6UVZNc2NoaU5kMVo2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE M0NBNy8zRjBFMEUwNkY0NjExMUVDODIzQ0EwN0NDNEY5QUUwMi8wNWZuakczVHhw YUZFelFWTXNjaGlOZDFaNjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+MhbYiTJ1dMrkssM+dWjF5HVUI5w+91CJiBEEJylXOwClA0tKYaIS zef3XcZW5avzv27IUN2FR1xOCds3UYO0btPNWYDNzqZ//xUA/oZWvEZWgrgRJGB2 U/FoMzE8ZvvjZkgnFrD5F/eI0eYNymUiqyVOG+LeP6EnBk8DhH+9EGPyb2dHTFf9 IqxVsLRij5772OaxYR/PlaIScl1UGWil00W1QL2DGT21PPAL2NgnJUygDRfSjqzs xpCEyAc3peu6Gavtd2wRDZILArmZp6dp8nZX4noNMX3ENwbmbvLdtcgRjCr9CVXR kdZ/QWSeouHvPSbvldgjUISeSTcqWo7Z -----END CERTIFICATE-----Generated at Mon Aug 11 01:48:42 2025 by rpki-client