$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.mft File: -5w6kNDNa5K-MWAyXafCbH9OWQA.mft (raw, json) Hash identifier: Bkn9YLyn3wvP/TI00Ugo6qbxseWnZnrGnwiLIcDXCWo= Subject key identifier: 20:37:3F:31:5C:7A:8D:89:E6:31:BC:FB:03:46:10:8E:A0:F9:B9:89 Authority key identifier: FB:9C:3A:90:D0:CD:6B:92:BE:31:60:32:5D:A7:C2:6C:7F:4E:59:00 Certificate issuer: /CN=A91DE1A3/serialNumber=FB9C3A90D0CD6B92BE3160325DA7C26C7F4E5900 Certificate serial: 0200 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-5w6kNDNa5K-MWAyXafCbH9OWQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.mft Manifest number: 01FD Signing time: Mon 11 Aug 2025 02:27:27 +0000 Manifest this update: Mon 11 Aug 2025 02:27:26 +0000 Manifest next update: Mon 18 Aug 2025 02:27:26 +0000 Files and hashes: 1: -5w6kNDNa5K-MWAyXafCbH9OWQA.crl (hash: NpdGim6i23cUTUTLwEFQU3FqXkDeYguZ5sHRoZd70l4=) 2: F396DA1468A211ED9525A86CC4F9AE02.roa (hash: mfCo7xBHkX9UIyrOsrP0XEhPqQke0cTzgybKkz4msYM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.crl rsync://rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-5w6kNDNa5K-MWAyXafCbH9OWQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 02:27:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 512 (0x200) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE1A3, serialNumber=FB9C3A90D0CD6B92BE3160325DA7C26C7F4E5900 Validity Not Before: Aug 11 02:27:26 2025 GMT Not After : Aug 18 02:27:26 2025 GMT Subject: CN=6899550f-af68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b2:bd:ae:77:94:a9:c7:f3:2e:3f:a4:4e:8e: 10:65:48:f0:79:10:2a:46:33:58:19:95:68:0d:5e: ef:fa:df:58:8e:c1:96:4c:d4:1b:8e:62:58:35:6c: 8f:0b:25:ec:66:b8:d8:de:66:23:0b:2d:ae:e1:6f: fd:ed:bc:59:b7:f6:75:02:5f:00:91:81:dc:18:6f: 8f:95:91:43:36:fe:72:53:03:34:8d:80:40:11:35: 14:86:39:aa:93:92:d6:40:a5:44:9a:ff:b2:31:53: 6f:e0:b1:a4:fb:e8:06:51:8b:7f:b1:46:f7:05:38: dd:01:65:a2:ab:de:16:d7:be:86:aa:b5:aa:ae:2d: aa:ac:0b:3b:cc:9e:c0:8d:d1:06:eb:2b:e2:51:3d: a9:23:ae:a4:9c:e4:82:97:99:87:61:31:67:ab:d1: f0:46:7d:09:b2:09:18:b2:6e:e8:8f:e5:63:ef:5c: d0:90:07:92:d6:87:aa:cd:8a:da:e0:30:bb:92:40: f8:3e:b4:a1:8a:15:34:2c:67:ac:34:6e:42:18:33: c5:b9:a3:31:17:4a:7a:5b:8f:a9:a7:08:af:01:42: 8a:c6:3d:05:27:7e:3a:53:43:9d:c2:35:28:b8:bf: d1:b0:b0:f1:b3:2d:cc:c7:4c:b6:8e:bf:94:be:6c: 7c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:37:3F:31:5C:7A:8D:89:E6:31:BC:FB:03:46:10:8E:A0:F9:B9:89 X509v3 Authority Key Identifier: keyid:FB:9C:3A:90:D0:CD:6B:92:BE:31:60:32:5D:A7:C2:6C:7F:4E:59:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-5w6kNDNa5K-MWAyXafCbH9OWQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:22:90:2c:b4:97:c5:d0:02:33:60:99:56:78:3e:10:56:f9: fd:1d:45:d1:5d:96:9d:8b:a5:54:94:cf:e0:95:1c:76:8c:19: ab:6a:b6:1c:8d:eb:ea:80:ef:94:c1:57:1f:fa:62:d8:ef:16: fa:98:63:00:58:72:4c:a8:68:0b:83:63:53:18:6f:06:d7:51: da:79:d5:71:d7:7a:84:2a:84:d5:57:31:d4:ce:fd:e9:6b:c8: 6e:bf:6e:81:45:8d:c5:f2:96:f9:2f:36:a2:34:88:ce:e0:5a: 66:cf:55:51:09:2e:31:d1:f9:8b:69:1a:73:3c:30:81:b4:e0: b2:d0:43:90:ba:20:47:96:a2:27:a3:13:d0:5c:8a:8e:c0:1c: a0:e4:ef:aa:16:b8:e3:80:87:a1:8f:df:fa:b6:10:bf:29:e0: 68:35:cb:90:1a:47:fb:72:29:72:c2:5e:ff:ad:e8:60:ee:19: 82:1d:49:fb:4e:b6:03:ec:ba:b2:d8:2c:25:ae:2b:bf:f7:ae: 05:86:00:c8:c1:f6:a4:db:f6:f7:fc:8c:83:bb:63:ff:84:2e: 5d:64:e6:7a:11:d6:05:99:de:13:18:c7:36:40:f6:0f:2a:13: 46:3b:2a:f0:b1:5e:b1:dc:4b:ae:02:07:f6:af:e1:e5:fe:65: 05:ca:15:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REUxQTMxMTAvBgNVBAUTKEZCOUMzQTkwRDBDRDZCOTJCRTMxNjAzMjVEQTdDMjZD N0Y0RTU5MDAwHhcNMjUwODExMDIyNzI2WhcNMjUwODE4MDIyNzI2WjAYMRYwFAYD VQQDEw02ODk5NTUwZi1hZjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvbK9rneUqcfzLj+kTo4QZUjweRAqRjNYGZVoDV7v+t9YjsGWTNQbjmJYNWyP CyXsZrjY3mYjCy2u4W/97bxZt/Z1Al8AkYHcGG+PlZFDNv5yUwM0jYBAETUUhjmq k5LWQKVEmv+yMVNv4LGk++gGUYt/sUb3BTjdAWWiq94W176GqrWqri2qrAs7zJ7A jdEG6yviUT2pI66knOSCl5mHYTFnq9HwRn0JsgkYsm7oj+Vj71zQkAeS1oeqzYra 4DC7kkD4PrShihU0LGesNG5CGDPFuaMxF0p6W4+ppwivAUKKxj0FJ346U0OdwjUo uL/RsLDxsy3Mx0y2jr+Uvmx8GQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCA3PzFc eo2J5jG8+wNGEI6g+bmJMB8GA1UdIwQYMBaAFPucOpDQzWuSvjFgMl2nwmx/TlkA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTFBMy84QjlEQkJDRTY4 OUYxMUVEQUQxNzc2NjdDNEY5QUUwMi8tNXc2a05ETmE1Sy1NV0F5WGFmQ2JIOU9X UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy01dzZrTkROYTVLLU1XQXlYYWZDYkg5T1dRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTFBMy84QjlEQkJDRTY4OUYxMUVEQUQxNzc2NjdDNEY5QUUwMi8tNXc2a05ETmE1 Sy1NV0F5WGFmQ2JIOU9XUUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6IpAstJfF0AIzYJlWeD4QVvn9HUXRXZadi6VUlM/glRx2jBmrarYc jevqgO+UwVcf+mLY7xb6mGMAWHJMqGgLg2NTGG8G11HaedVx13qEKoTVVzHUzv3p a8huv26BRY3F8pb5LzaiNIjO4Fpmz1VRCS4x0fmLaRpzPDCBtOCy0EOQuiBHlqIn oxPQXIqOwByg5O+qFrjjgIehj9/6thC/KeBoNcuQGkf7cilywl7/rehg7hmCHUn7 TrYD7Lqy2Cwlriu/964FhgDIwfak2/b3/IyDu2P/hC5dZOZ6EdYFmd4TGMc2QPYP KhNGOyrwsV6x3EuuAgf2r+Hl/mUFyhWJ -----END CERTIFICATE-----Generated at Wed Aug 13 02:51:38 2025 by rpki-client