$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8400/F681BBA4781111ECA397D034C4F9AE02/5dmsjXWxbbnyPICt2LO72OWLaHg.mft File: 5dmsjXWxbbnyPICt2LO72OWLaHg.mft (raw, json) Hash identifier: xsYBQ3eee/nIsXoIF/G+e6Gb0Jx2cnCk20Fy+P4ZB+0= Subject key identifier: 1F:CF:E9:6E:DB:31:80:9C:5A:07:74:AE:8B:B7:D8:51:2E:EC:7E:4A Authority key identifier: E5:D9:AC:8D:75:B1:6D:B9:F2:3C:80:AD:D8:B3:BB:D8:E5:8B:68:78 Certificate issuer: /CN=A91D8400/serialNumber=E5D9AC8D75B16DB9F23C80ADD8B3BBD8E58B6878 Certificate serial: 041F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5dmsjXWxbbnyPICt2LO72OWLaHg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8400/F681BBA4781111ECA397D034C4F9AE02/5dmsjXWxbbnyPICt2LO72OWLaHg.mft Manifest number: 041A Signing time: Thu 07 Aug 2025 00:54:44 +0000 Manifest this update: Thu 07 Aug 2025 00:54:44 +0000 Manifest next update: Thu 14 Aug 2025 00:54:44 +0000 Files and hashes: 1: 5dmsjXWxbbnyPICt2LO72OWLaHg.crl (hash: 0nz/RpzVH/C1SK71L1jgaUMxEj/rsakUsrQ2qqTJcGg=) 2: 46C1646C781611ECADCDAB0EC4F9AE02.roa (hash: X0bJVDOuH3hxzxDqtFhaGE8zyPysnrk6jtT4gfdw6QQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8400/F681BBA4781111ECA397D034C4F9AE02/5dmsjXWxbbnyPICt2LO72OWLaHg.crl rsync://rpki.apnic.net/member_repository/A91D8400/F681BBA4781111ECA397D034C4F9AE02/5dmsjXWxbbnyPICt2LO72OWLaHg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5dmsjXWxbbnyPICt2LO72OWLaHg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 00:54:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1055 (0x41f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8400, serialNumber=E5D9AC8D75B16DB9F23C80ADD8B3BBD8E58B6878 Validity Not Before: Aug 7 00:54:44 2025 GMT Not After : Aug 14 00:54:44 2025 GMT Subject: CN=6893f954-3c1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e6:d3:23:f3:70:70:00:14:28:35:1d:df:e7: 75:35:6d:92:eb:ef:f0:46:17:06:22:fa:dc:ee:a3: 18:ce:63:1c:c0:91:b8:21:35:dc:b3:8c:e4:18:6c: 5d:c8:70:a9:13:64:df:4e:5d:90:2e:3b:5f:db:10: 46:86:42:66:1c:d1:43:9a:c3:a9:22:0b:25:78:95: 90:07:2b:af:2b:37:6f:1b:7c:ee:51:ec:a7:84:1b: bb:38:54:56:ca:fe:07:d5:95:d3:65:b6:a6:7f:05: 1b:e7:51:54:1a:c5:43:af:b8:a2:b2:de:45:13:be: 37:ae:46:f9:3c:32:cf:aa:d1:98:17:a2:6d:06:e9: fb:15:71:c0:29:1a:1a:c0:f6:04:c6:44:7d:5d:96: 6d:aa:28:d0:1a:7b:ea:84:9d:c2:c2:38:66:fe:6b: 54:0b:d1:d6:39:48:6b:68:52:a2:c1:63:41:59:43: a6:21:de:0f:6d:55:ab:f2:91:1d:c4:60:d7:ea:d7: 18:e2:c2:93:f8:d5:c5:53:4a:e1:8b:0a:47:8a:4f: 9b:1f:c4:c4:59:a5:48:bf:f4:e8:c3:27:5c:07:db: f1:27:89:40:d1:11:65:8d:7f:46:c2:c6:cb:bf:f6: 42:aa:41:1d:ee:c9:ab:ee:30:f0:6a:d9:5a:88:2b: 63:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:CF:E9:6E:DB:31:80:9C:5A:07:74:AE:8B:B7:D8:51:2E:EC:7E:4A X509v3 Authority Key Identifier: keyid:E5:D9:AC:8D:75:B1:6D:B9:F2:3C:80:AD:D8:B3:BB:D8:E5:8B:68:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8400/F681BBA4781111ECA397D034C4F9AE02/5dmsjXWxbbnyPICt2LO72OWLaHg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5dmsjXWxbbnyPICt2LO72OWLaHg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8400/F681BBA4781111ECA397D034C4F9AE02/5dmsjXWxbbnyPICt2LO72OWLaHg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:96:7d:75:a4:46:d7:8f:4f:69:0b:14:d2:00:5e:ce:55:8f: bb:bb:c0:c7:f6:0f:48:80:3e:b3:98:21:9f:70:ee:f5:87:51: 54:6e:26:4c:36:99:07:40:6b:7b:96:fd:c3:39:84:e5:08:22: 7b:57:6f:e5:ed:07:8b:ed:f7:84:af:32:3c:fe:8a:2b:66:de: ce:e1:08:e4:ae:e9:72:02:4f:40:f7:78:71:e3:20:fd:a4:1e: 0a:81:e6:34:50:4d:74:93:a2:62:58:57:16:ed:78:82:00:9f: 0a:57:41:f6:cd:6c:32:23:e0:28:d7:0f:d1:14:59:0f:31:70: 0f:cd:ac:7b:43:53:d2:75:96:0c:c3:f5:5d:87:25:52:fa:5f: e2:db:61:8f:34:ab:8c:d6:3e:9b:d3:dd:9a:d3:b5:cc:fd:51: 05:2a:f9:82:38:73:f9:b7:ff:dc:5f:98:e4:3c:3c:c3:a3:30: 7c:5c:08:e9:df:0a:d7:47:bc:18:8f:a2:e7:f0:20:d7:09:0c: 75:aa:c2:0d:b3:f2:ac:81:11:cf:ac:dc:a8:fd:78:e1:d9:18: a8:fa:60:2d:9b:d3:c7:8e:9f:18:1a:fc:34:44:b8:ff:33:2f: 3a:32:27:5b:d0:18:94:ea:14:ed:52:f5:95:e3:74:21:48:b8: 90:93:ca:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBB8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg0MDAxMTAvBgNVBAUTKEU1RDlBQzhENzVCMTZEQjlGMjNDODBBREQ4QjNCQkQ4 RTU4QjY4NzgwHhcNMjUwODA3MDA1NDQ0WhcNMjUwODE0MDA1NDQ0WjAYMRYwFAYD VQQDEw02ODkzZjk1NC0zYzFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzubTI/NwcAAUKDUd3+d1NW2S6+/wRhcGIvrc7qMYzmMcwJG4ITXcs4zkGGxd yHCpE2TfTl2QLjtf2xBGhkJmHNFDmsOpIgsleJWQByuvKzdvG3zuUeynhBu7OFRW yv4H1ZXTZbamfwUb51FUGsVDr7iist5FE743rkb5PDLPqtGYF6JtBun7FXHAKRoa wPYExkR9XZZtqijQGnvqhJ3Cwjhm/mtUC9HWOUhraFKiwWNBWUOmId4PbVWr8pEd xGDX6tcY4sKT+NXFU0rhiwpHik+bH8TEWaVIv/TowydcB9vxJ4lA0RFljX9GwsbL v/ZCqkEd7smr7jDwatlaiCtj6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB/P6W7b MYCcWgd0rou32FEu7H5KMB8GA1UdIwQYMBaAFOXZrI11sW258jyArdizu9jli2h4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODQwMC9GNjgxQkJBNDc4 MTExMUVDQTM5N0QwMzRDNEY5QUUwMi81ZG1zalhXeGJibnlQSUN0MkxPNzJPV0xh SGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVkbXNqWFd4YmJueVBJQ3QyTE83Mk9XTGFIZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODQwMC9GNjgxQkJBNDc4MTExMUVDQTM5N0QwMzRDNEY5QUUwMi81ZG1zalhXeGJi bnlQSUN0MkxPNzJPV0xhSGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAln11pEbXj09pCxTSAF7OVY+7u8DH9g9IgD6zmCGfcO71h1FUbiZM NpkHQGt7lv3DOYTlCCJ7V2/l7QeL7feErzI8/oorZt7O4QjkrulyAk9A93hx4yD9 pB4KgeY0UE10k6JiWFcW7XiCAJ8KV0H2zWwyI+Ao1w/RFFkPMXAPzax7Q1PSdZYM w/VdhyVS+l/i22GPNKuM1j6b092a07XM/VEFKvmCOHP5t//cX5jkPDzDozB8XAjp 3wrXR7wYj6Ln8CDXCQx1qsINs/KsgRHPrNyo/Xjh2Rio+mAtm9PHjp8YGvw0RLj/ My86Midb0BiU6hTtUvWV43QhSLiQk8oI -----END CERTIFICATE-----Generated at Fri Aug 8 19:26:23 2025 by rpki-client