$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.mft File: b5wj5AN3j-Ace8lQiL_R5rMoqps.mft (raw, json) Hash identifier: Q5SoYxIg97EhwYb3ian07qvoVYUVuGpuU8Mb4OR8GV0= Subject key identifier: 5E:54:FA:45:D6:C9:BF:63:CD:12:36:48:E7:96:6F:CC:2F:95:57:BF Authority key identifier: 6F:9C:23:E4:03:77:8F:E0:1C:7B:C9:50:88:BF:D1:E6:B3:28:AA:9B Certificate issuer: /CN=A91DB6FB/serialNumber=6F9C23E403778FE01C7BC95088BFD1E6B328AA9B Certificate serial: 015B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5wj5AN3j-Ace8lQiL_R5rMoqps.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.mft Manifest number: 0157 Signing time: Tue 05 Aug 2025 04:34:40 +0000 Manifest this update: Tue 05 Aug 2025 04:34:40 +0000 Manifest next update: Tue 12 Aug 2025 04:34:40 +0000 Files and hashes: 1: b5wj5AN3j-Ace8lQiL_R5rMoqps.crl (hash: hPwVxPMrO5LukCWPvv9f5X8+Fw3j9kU5Q3KU6/2GQEw=) 2: 4F445CCE1FF311F0833FC50BC4F9AE02.roa (hash: YP3rrk25ovglIxC3TZqFZ4Gk13Gj9mIwNLz7ISlP4I0=) 3: 512CFEFE68BD11EE87942B4EC4F9AE02.roa (hash: wxzifKiO/1duDLAOqG/EgJqXNOBnq5EBtgG/0AK/VlY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.crl rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5wj5AN3j-Ace8lQiL_R5rMoqps.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 04:34:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 347 (0x15b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB6FB, serialNumber=6F9C23E403778FE01C7BC95088BFD1E6B328AA9B Validity Not Before: Aug 5 04:34:40 2025 GMT Not After : Aug 12 04:34:40 2025 GMT Subject: CN=689189e0-99bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:d4:73:42:0c:cf:e3:bd:15:6e:bd:89:83:b4: 22:b0:8c:3f:97:85:1a:5b:b2:1b:8d:4d:53:81:61: e0:c4:6d:bf:00:aa:ba:96:58:c2:84:74:44:96:9d: 30:e4:c4:1b:1c:14:39:b2:a0:fa:b3:b4:35:8c:e8: 51:21:8f:81:c4:2a:04:54:a9:1c:2a:2a:b1:b4:e9: a4:d1:66:55:10:0c:76:74:d6:e2:0e:9a:ba:79:03: ec:00:d5:79:c8:35:ac:a4:b9:27:cc:68:ff:dd:13: ea:73:bd:5e:b9:e0:9e:9e:f1:22:c2:29:bb:22:c7: 80:9f:22:7d:41:33:95:e6:59:3f:ba:96:fa:47:3e: 79:03:4e:46:9b:cf:0d:44:59:29:27:0e:71:53:bf: b4:8b:26:a0:d2:8e:17:7c:e1:fa:31:02:22:fa:27: 1a:14:74:6a:37:15:e8:57:6a:b2:11:d8:38:5a:b3: e2:ef:05:03:5e:31:a3:d8:b4:ff:15:fa:d6:25:24: 4f:d1:d8:8d:09:fd:0c:b3:00:60:07:5d:b3:44:f2: 00:fc:69:a5:09:94:5f:5f:01:13:c7:86:75:ed:7f: ba:7a:b5:06:fc:73:5f:be:3b:4c:f2:2c:05:c9:63: 50:46:6e:16:8c:36:c0:94:00:2d:15:05:da:cb:da: a1:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:54:FA:45:D6:C9:BF:63:CD:12:36:48:E7:96:6F:CC:2F:95:57:BF X509v3 Authority Key Identifier: keyid:6F:9C:23:E4:03:77:8F:E0:1C:7B:C9:50:88:BF:D1:E6:B3:28:AA:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5wj5AN3j-Ace8lQiL_R5rMoqps.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:ec:08:80:22:61:ed:0b:35:7f:72:38:1c:49:e6:79:aa:46: c9:88:1a:8a:e1:b5:34:75:1e:b2:52:c8:9d:30:b4:f1:71:35: d1:e7:9b:1f:48:ec:ce:42:67:d4:f4:25:50:c7:64:38:96:21: 62:1a:33:ed:3e:12:1b:97:c8:d1:a1:19:47:24:0e:5e:0a:c4: 5c:c9:ac:be:c4:d9:fa:c3:6c:5b:5e:1f:14:a9:d6:56:3d:43: eb:b2:41:cd:37:cb:21:0b:90:18:4c:3f:64:35:49:61:38:e0: 49:4d:dc:28:95:11:47:53:b6:76:03:7b:9e:1d:4c:f7:2a:a7: de:a8:f7:ce:ff:2f:8f:9d:32:19:cf:49:df:70:ed:f4:c0:3b: d2:b4:47:39:92:e6:58:55:98:1c:13:aa:22:be:52:ed:fa:ba: 82:46:dd:ef:1c:03:2a:9c:95:4e:af:ce:f5:bc:be:49:da:a7: 2c:36:a8:05:56:cf:aa:f0:97:3a:ed:b1:59:51:a7:e9:c0:b5: a6:d5:de:be:b2:fb:5d:57:bf:62:de:86:e2:98:1a:2e:b2:07: d5:e8:70:8b:4a:ed:4d:c6:76:a8:2d:ba:f5:c7:b5:40:3a:ad: 7b:bd:cb:2b:81:bc:ee:7e:37:87:2f:61:ab:34:98:4a:db:c0: 93:82:e2:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI2RkIxMTAvBgNVBAUTKDZGOUMyM0U0MDM3NzhGRTAxQzdCQzk1MDg4QkZEMUU2 QjMyOEFBOUIwHhcNMjUwODA1MDQzNDQwWhcNMjUwODEyMDQzNDQwWjAYMRYwFAYD VQQDEw02ODkxODllMC05OWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6NRzQgzP470Vbr2Jg7QisIw/l4UaW7IbjU1TgWHgxG2/AKq6lljChHRElp0w 5MQbHBQ5sqD6s7Q1jOhRIY+BxCoEVKkcKiqxtOmk0WZVEAx2dNbiDpq6eQPsANV5 yDWspLknzGj/3RPqc71eueCenvEiwim7IseAnyJ9QTOV5lk/upb6Rz55A05Gm88N RFkpJw5xU7+0iyag0o4XfOH6MQIi+icaFHRqNxXoV2qyEdg4WrPi7wUDXjGj2LT/ FfrWJSRP0diNCf0MswBgB12zRPIA/GmlCZRfXwETx4Z17X+6erUG/HNfvjtM8iwF yWNQRm4WjDbAlAAtFQXay9qh/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF5U+kXW yb9jzRI2SOeWb8wvlVe/MB8GA1UdIwQYMBaAFG+cI+QDd4/gHHvJUIi/0eazKKqb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjZGQi8xMUNEMUI2RTY4 QkMxMUVFOTIwRURCNERDNEY5QUUwMi9iNXdqNUFOM2otQWNlOGxRaUxfUjVyTW9x cHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I1d2o1QU4zai1BY2U4bFFpTF9SNXJNb3Fwcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjZGQi8xMUNEMUI2RTY4QkMxMUVFOTIwRURCNERDNEY5QUUwMi9iNXdqNUFOM2ot QWNlOGxRaUxfUjVyTW9xcHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAV7AiAImHtCzV/cjgcSeZ5qkbJiBqK4bU0dR6yUsidMLTxcTXR55sf SOzOQmfU9CVQx2Q4liFiGjPtPhIbl8jRoRlHJA5eCsRcyay+xNn6w2xbXh8UqdZW PUPrskHNN8shC5AYTD9kNUlhOOBJTdwolRFHU7Z2A3ueHUz3KqfeqPfO/y+PnTIZ z0nfcO30wDvStEc5kuZYVZgcE6oivlLt+rqCRt3vHAMqnJVOr871vL5J2qcsNqgF Vs+q8Jc67bFZUafpwLWm1d6+svtdV79i3obimBousgfV6HCLSu1NxnaoLbr1x7VA Oq17vcsrgbzufjeHL2GrNJhK28CTguLz -----END CERTIFICATE-----Generated at Wed Aug 6 10:06:42 2025 by rpki-client