$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4ED1/5FDD78B20B6411EA90923066C4F9AE02/5F9h77yy57HkFLLL3DRQ9_hGGJ0.mft File: 5F9h77yy57HkFLLL3DRQ9_hGGJ0.mft (raw, json) Hash identifier: cd5RNauEfx3gzxVJhn+F0n1NTw6rj1gC8omh9gYuxCI= Subject key identifier: C9:7E:8F:07:A2:CE:32:3E:D2:8C:6B:E7:1E:0D:D0:08:3D:7A:B5:1A Authority key identifier: E4:5F:61:EF:BC:B2:E7:B1:E4:14:B2:CB:DC:34:50:F7:F8:46:18:9D Certificate issuer: /CN=A91E4ED1/serialNumber=E45F61EFBCB2E7B1E414B2CBDC3450F7F846189D Certificate serial: 0C45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5F9h77yy57HkFLLL3DRQ9_hGGJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4ED1/5FDD78B20B6411EA90923066C4F9AE02/5F9h77yy57HkFLLL3DRQ9_hGGJ0.mft Manifest number: 0C43 Signing time: Fri 08 Aug 2025 18:46:54 +0000 Manifest this update: Fri 08 Aug 2025 18:46:53 +0000 Manifest next update: Fri 15 Aug 2025 18:46:53 +0000 Files and hashes: 1: 5F9h77yy57HkFLLL3DRQ9_hGGJ0.crl (hash: lfSMvbrLUdDsUrRnRmg4ohyLlLqKrMRx8UJeBF5v99s=) 2: D77C5AC003E611F0A9F5535FC4F9AE02.roa (hash: C3dI3f47oUkTpODJD7lPzsLlPec49Cck1X3kjiuVXDM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4ED1/5FDD78B20B6411EA90923066C4F9AE02/5F9h77yy57HkFLLL3DRQ9_hGGJ0.crl rsync://rpki.apnic.net/member_repository/A91E4ED1/5FDD78B20B6411EA90923066C4F9AE02/5F9h77yy57HkFLLL3DRQ9_hGGJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5F9h77yy57HkFLLL3DRQ9_hGGJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3141 (0xc45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4ED1, serialNumber=E45F61EFBCB2E7B1E414B2CBDC3450F7F846189D Validity Not Before: Aug 8 18:46:53 2025 GMT Not After : Aug 15 18:46:53 2025 GMT Subject: CN=6896461d-a8d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5a:b1:2f:cf:0c:3d:34:8b:dc:67:70:d7:36: 3e:a3:cf:c4:1a:66:42:ec:1a:bb:80:35:09:70:37: 53:0e:74:85:8b:f3:e5:b8:c3:8a:7b:7f:4f:a2:74: 77:78:06:8b:99:a8:22:82:1c:1f:f0:72:62:b9:b5: c5:f6:02:10:c5:4d:ad:5f:ae:4d:cd:be:e9:68:27: fe:31:1b:fd:5a:79:1b:d6:84:e7:98:00:51:f3:fa: ff:04:2a:5c:d2:3e:e7:ca:5a:ee:91:a2:c0:77:f8: 09:82:48:e2:ca:21:bc:82:d0:73:7b:67:63:f9:c9: c5:c0:6d:c3:fa:6d:91:0a:9b:eb:f4:ae:9a:b1:68: a1:44:b2:17:32:ea:65:ef:b0:e4:10:cd:ed:7e:ad: c9:4c:80:3b:a1:fc:d4:da:51:c3:64:cc:fd:29:5e: 2d:ca:58:21:32:0f:ae:fc:68:6b:b5:10:04:20:b5: 95:b0:52:c9:32:88:14:72:86:42:55:20:a2:1a:fe: 68:c7:86:c6:30:22:c4:c4:fa:3f:55:77:79:52:cc: c4:2a:c6:ba:70:cb:2f:52:65:7b:4b:1b:5f:c6:bf: e0:1f:01:27:d9:22:7c:05:3e:7f:0b:72:b2:03:12: e2:61:2a:31:7f:7d:8c:b7:57:a6:21:37:b7:c8:bc: f6:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:7E:8F:07:A2:CE:32:3E:D2:8C:6B:E7:1E:0D:D0:08:3D:7A:B5:1A X509v3 Authority Key Identifier: keyid:E4:5F:61:EF:BC:B2:E7:B1:E4:14:B2:CB:DC:34:50:F7:F8:46:18:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4ED1/5FDD78B20B6411EA90923066C4F9AE02/5F9h77yy57HkFLLL3DRQ9_hGGJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5F9h77yy57HkFLLL3DRQ9_hGGJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4ED1/5FDD78B20B6411EA90923066C4F9AE02/5F9h77yy57HkFLLL3DRQ9_hGGJ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:37:9a:d9:54:9a:7f:5f:35:93:95:38:91:69:77:cb:15:ab: 2c:0e:26:a9:ac:5e:89:82:64:38:37:b9:1d:19:51:78:29:f2: e2:45:60:22:59:8c:0d:d6:ba:f9:df:96:41:50:17:1a:4c:5e: 51:26:25:9d:fa:61:da:fc:1a:89:d3:a2:d1:71:2a:56:6c:ef: 00:a3:02:6b:78:86:df:80:dc:1f:81:ca:b8:cd:e0:d0:44:a2: 46:b0:89:c3:59:99:c9:35:c1:95:72:3b:5b:0c:1d:88:a9:15: 0c:dd:2b:1e:e8:a6:46:00:85:b8:61:87:75:ad:84:01:4d:26: cc:31:01:ca:46:42:b9:7a:eb:e0:5d:49:81:d9:8e:7e:e4:f9: 64:c6:0d:42:24:76:78:32:4e:c5:b0:31:5c:8c:40:b8:81:e4: 1f:c6:fe:a5:88:d3:2d:84:24:b3:99:38:9d:a0:cf:96:f7:54: de:6d:19:3a:bc:8b:8e:a2:f6:c4:a7:64:d9:ad:ec:ca:7e:f6: bf:f1:e4:9a:00:30:7c:2b:cd:49:e4:95:eb:4e:29:e7:98:e6: 22:f9:f0:75:bc:2e:91:47:7e:ab:8b:35:d3:e9:23:ba:d0:46: c1:f0:9b:45:cc:fe:89:a4:58:ac:65:7b:0a:ef:d3:d4:dd:ad: 0f:61:6d:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRFRDExMTAvBgNVBAUTKEU0NUY2MUVGQkNCMkU3QjFFNDE0QjJDQkRDMzQ1MEY3 Rjg0NjE4OUQwHhcNMjUwODA4MTg0NjUzWhcNMjUwODE1MTg0NjUzWjAYMRYwFAYD VQQDEw02ODk2NDYxZC1hOGQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvVqxL88MPTSL3Gdw1zY+o8/EGmZC7Bq7gDUJcDdTDnSFi/PluMOKe39PonR3 eAaLmagighwf8HJiubXF9gIQxU2tX65Nzb7paCf+MRv9Wnkb1oTnmABR8/r/BCpc 0j7nylrukaLAd/gJgkjiyiG8gtBze2dj+cnFwG3D+m2RCpvr9K6asWihRLIXMupl 77DkEM3tfq3JTIA7ofzU2lHDZMz9KV4tylghMg+u/GhrtRAEILWVsFLJMogUcoZC VSCiGv5ox4bGMCLExPo/VXd5UszEKsa6cMsvUmV7Sxtfxr/gHwEn2SJ8BT5/C3Ky AxLiYSoxf32Mt1emITe3yLz2swIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMl+jwei zjI+0oxr5x4N0Ag9erUaMB8GA1UdIwQYMBaAFORfYe+8suex5BSyy9w0UPf4Rhid MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEVEMS81RkRENzhCMjBC NjQxMUVBOTA5MjMwNjZDNEY5QUUwMi81RjloNzd5eTU3SGtGTExMM0RSUTlfaEdH SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVGOWg3N3l5NTdIa0ZMTEwzRFJROV9oR0dKMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEVEMS81RkRENzhCMjBCNjQxMUVBOTA5MjMwNjZDNEY5QUUwMi81RjloNzd5eTU3 SGtGTExMM0RSUTlfaEdHSjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcN5rZVJp/XzWTlTiRaXfLFassDiaprF6JgmQ4N7kdGVF4KfLiRWAi WYwN1rr535ZBUBcaTF5RJiWd+mHa/BqJ06LRcSpWbO8AowJreIbfgNwfgcq4zeDQ RKJGsInDWZnJNcGVcjtbDB2IqRUM3Sse6KZGAIW4YYd1rYQBTSbMMQHKRkK5euvg XUmB2Y5+5Plkxg1CJHZ4Mk7FsDFcjEC4geQfxv6liNMthCSzmTidoM+W91TebRk6 vIuOovbEp2TZrezKfva/8eSaADB8K81J5JXrTinnmOYi+fB1vC6RR36rizXT6SO6 0EbB8JtFzP6JpFisZXsK79PU3a0PYW1f -----END CERTIFICATE-----Generated at Sat Aug 9 23:21:06 2025 by rpki-client