$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.mft File: rg5L7FaP5v7kkvcuTTrLko2cHk8.mft (raw, json) Hash identifier: 52BhQ6QLG2+We6Dq8vH3oBRiUG3QkOr8NtioH0x2A4Q= Subject key identifier: F5:3E:6D:03:1B:28:70:F3:19:A2:91:E5:F9:C4:E5:DB:8D:3D:F0:51 Authority key identifier: AE:0E:4B:EC:56:8F:E6:FE:E4:92:F7:2E:4D:3A:CB:92:8D:9C:1E:4F Certificate issuer: /CN=A91DBF0C/serialNumber=AE0E4BEC568FE6FEE492F72E4D3ACB928D9C1E4F Certificate serial: 9E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rg5L7FaP5v7kkvcuTTrLko2cHk8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.mft Manifest number: 9B Signing time: Thu 07 Aug 2025 06:57:29 +0000 Manifest this update: Thu 07 Aug 2025 06:57:29 +0000 Manifest next update: Thu 14 Aug 2025 06:57:29 +0000 Files and hashes: 1: rg5L7FaP5v7kkvcuTTrLko2cHk8.crl (hash: xCA6++xJ1AFYepdURwv1PvzheQszwRVhz39qqQ0++V8=) 2: 9E4987668C7F11EFB4290976C4F9AE02.roa (hash: cHJy1BLtElHS3p1bo+4QsrHmfc/col4vczERE1sjyMs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.crl rsync://rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rg5L7FaP5v7kkvcuTTrLko2cHk8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 158 (0x9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBF0C, serialNumber=AE0E4BEC568FE6FEE492F72E4D3ACB928D9C1E4F Validity Not Before: Aug 7 06:57:29 2025 GMT Not After : Aug 14 06:57:29 2025 GMT Subject: CN=68944e59-4428 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:64:a4:60:a2:c9:77:ac:19:80:72:2d:53:fe: 24:3a:fc:f4:b9:ed:67:b2:6d:83:e3:02:07:79:bd: 2a:20:e9:8b:2c:a8:86:58:e4:cb:02:44:16:3c:12: 7a:7b:a2:03:78:24:ab:27:fa:80:3a:ab:22:67:85: b0:cb:2d:7e:7d:b2:2a:3b:37:64:78:18:c0:5a:74: 35:08:54:9b:a2:3c:7e:ee:2f:09:3e:bd:5f:e8:37: b2:57:e8:d0:c7:61:72:b5:d6:af:01:c0:4c:d8:a3: 5b:99:72:01:a8:c6:67:40:23:5c:46:f3:66:17:9e: 03:12:ba:f5:cd:fa:57:ea:3c:a4:40:0f:1e:fc:95: d8:c3:ba:1f:68:8c:ad:15:2f:08:1a:84:61:3f:1e: ce:3b:a6:47:11:ea:83:99:5a:1b:f4:f9:f5:51:ff: de:ae:04:55:01:87:2d:f1:1a:ae:5d:f8:3e:94:e5: 53:31:a4:90:12:ba:69:fc:8d:e5:c7:ad:e8:75:c0: 12:54:06:d9:7c:ec:32:cf:ee:3a:b4:c5:55:fa:46: 69:3c:f3:d3:b6:6d:65:23:c0:5d:f1:c8:00:78:98: d0:f0:d3:ce:ed:f2:92:09:fe:c7:18:d9:71:d6:ab: 84:f7:62:d6:76:5f:96:a3:22:cc:31:24:cd:8d:b0: 3c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:3E:6D:03:1B:28:70:F3:19:A2:91:E5:F9:C4:E5:DB:8D:3D:F0:51 X509v3 Authority Key Identifier: keyid:AE:0E:4B:EC:56:8F:E6:FE:E4:92:F7:2E:4D:3A:CB:92:8D:9C:1E:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rg5L7FaP5v7kkvcuTTrLko2cHk8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:5d:a4:cb:23:95:1b:ae:1e:53:95:ea:52:e0:19:db:42:cd: 31:9f:f2:8c:43:fc:b7:76:89:3c:67:ba:83:db:e8:54:fa:8f: b7:b0:21:27:0a:f8:8b:60:a8:8d:58:6e:ff:f7:cb:08:cc:ef: 5d:3d:72:97:36:c5:64:b9:c1:98:31:91:fc:ec:c9:f3:92:c4: a6:30:35:a8:84:52:da:9b:d3:8f:39:b6:04:95:34:fb:75:6b: 98:5d:b6:8f:01:25:40:7f:b7:16:6b:c2:28:b5:ae:03:9c:8f: d0:4e:ea:8c:78:a6:99:f5:f2:d6:33:35:39:c2:5a:88:2e:95: e4:e4:22:b7:b2:f2:84:25:2a:ca:c0:ed:10:d0:24:41:a1:1e: 65:4f:ae:a6:bc:9c:61:70:f9:0e:99:5e:36:d6:95:32:50:fe: 61:52:90:7c:7d:13:d8:85:a1:13:d9:71:11:bc:7f:bf:d1:2a: 9c:5a:78:e2:9f:db:5c:49:ef:67:8d:e1:c0:50:3f:e8:7b:6c: 73:c3:0a:78:6d:d0:2d:20:80:98:5a:22:c0:da:32:e1:4f:17: c4:04:bc:ab:c4:f1:1e:d1:c1:07:29:25:ca:54:3a:f2:e3:d0: 97:1d:dc:08:8c:b0:77:1f:c4:ca:bd:be:21:6c:b7:e7:b8:17: 48:11:4d:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJGMEMxMTAvBgNVBAUTKEFFMEU0QkVDNTY4RkU2RkVFNDkyRjcyRTREM0FDQjky OEQ5QzFFNEYwHhcNMjUwODA3MDY1NzI5WhcNMjUwODE0MDY1NzI5WjAYMRYwFAYD VQQDEw02ODk0NGU1OS00NDI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5mSkYKLJd6wZgHItU/4kOvz0ue1nsm2D4wIHeb0qIOmLLKiGWOTLAkQWPBJ6 e6IDeCSrJ/qAOqsiZ4Wwyy1+fbIqOzdkeBjAWnQ1CFSbojx+7i8JPr1f6DeyV+jQ x2FytdavAcBM2KNbmXIBqMZnQCNcRvNmF54DErr1zfpX6jykQA8e/JXYw7ofaIyt FS8IGoRhPx7OO6ZHEeqDmVob9Pn1Uf/ergRVAYct8RquXfg+lOVTMaSQErpp/I3l x63odcASVAbZfOwyz+46tMVV+kZpPPPTtm1lI8Bd8cgAeJjQ8NPO7fKSCf7HGNlx 1quE92LWdl+WoyLMMSTNjbA8BQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPU+bQMb KHDzGaKR5fnE5duNPfBRMB8GA1UdIwQYMBaAFK4OS+xWj+b+5JL3Lk06y5KNnB5P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkYwQy80MTQ4NTA3MDhD NUIxMUVGQTcwNjc1N0ZDNEY5QUUwMi9yZzVMN0ZhUDV2N2trdmN1VFRyTGtvMmNI azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3JnNUw3RmFQNXY3a2t2Y3VUVHJMa28yY0hrOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkYwQy80MTQ4NTA3MDhDNUIxMUVGQTcwNjc1N0ZDNEY5QUUwMi9yZzVMN0ZhUDV2 N2trdmN1VFRyTGtvMmNIazgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHXaTLI5Ubrh5TlepS4BnbQs0xn/KMQ/y3dok8Z7qD2+hU+o+3sCEn CviLYKiNWG7/98sIzO9dPXKXNsVkucGYMZH87MnzksSmMDWohFLam9OPObYElTT7 dWuYXbaPASVAf7cWa8Iota4DnI/QTuqMeKaZ9fLWMzU5wlqILpXk5CK3svKEJSrK wO0Q0CRBoR5lT66mvJxhcPkOmV421pUyUP5hUpB8fRPYhaET2XERvH+/0SqcWnji n9tcSe9njeHAUD/oe2xzwwp4bdAtIICYWiLA2jLhTxfEBLyrxPEe0cEHKSXKVDry 49CXHdwIjLB3H8TKvb4hbLfnuBdIEU23 -----END CERTIFICATE-----Generated at Sat Aug 9 02:57:56 2025 by rpki-client