$ rpki-client -vvf rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft File: 5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft (raw, json) Hash identifier: FWb9nlVB1jvYm2kh3Ksd6XJXj8SoUsfXa5SriHMJESA= Subject key identifier: 08:0E:78:AE:39:76:15:F2:0F:D4:E2:A7:48:51:9C:5C:AB:6E:E6:CC Authority key identifier: E6:75:8B:9A:37:59:82:C2:C4:D1:C7:64:9A:31:E4:CF:27:D5:A6:80 Certificate issuer: /CN=A91E554A/serialNumber=E6758B9A375982C2C4D1C7649A31E4CF27D5A680 Certificate serial: 97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nWLmjdZgsLE0cdkmjHkzyfVpoA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft Manifest number: 96 Signing time: Sat 09 Aug 2025 06:52:30 +0000 Manifest this update: Sat 09 Aug 2025 06:52:30 +0000 Manifest next update: Sat 16 Aug 2025 06:52:30 +0000 Files and hashes: 1: 5nWLmjdZgsLE0cdkmjHkzyfVpoA.crl (hash: Xyfj9HmaMh2eTby6LU4ebxcF2xIOaBD92T0Y+Doyj1o=) 2: 388A91E0985A11EFA6912B0EC4F9AE02.roa (hash: JjgqoANmsusAqQnFWaBmauCJuNgw+HQl/ZcBjvaDkfs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.crl rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nWLmjdZgsLE0cdkmjHkzyfVpoA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 151 (0x97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E554A, serialNumber=E6758B9A375982C2C4D1C7649A31E4CF27D5A680 Validity Not Before: Aug 9 06:52:30 2025 GMT Not After : Aug 16 06:52:30 2025 GMT Subject: CN=6896f02e-422e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:73:c8:8b:de:3c:9b:af:b0:dc:e6:73:ca:24: 30:d7:eb:8f:11:2c:de:27:6c:5a:5b:5a:04:b9:40: 77:e1:98:fe:51:32:b6:f0:4e:5d:54:68:b4:0e:d5: ad:92:6e:bb:60:f5:4c:80:fd:9b:e0:cd:3e:a5:49: 51:64:3b:f2:8a:8d:70:11:74:a5:8e:e7:30:9e:f1: 67:e2:82:24:6c:f2:36:05:94:2a:49:7f:12:ef:20: 78:3f:55:62:26:cd:04:bc:86:69:80:14:b3:10:e3: 7a:59:15:fe:c5:c6:d2:57:e9:35:2a:9d:99:cc:ed: 14:1c:1e:43:f1:64:f0:72:8b:3a:0e:74:d8:fa:dd: aa:9e:2b:d8:d5:28:e8:85:f1:53:e2:88:ba:6e:95: c6:24:89:43:61:89:13:d2:4f:c0:89:80:c8:2f:63: ed:dc:2a:a0:fa:eb:ad:f5:1d:6d:57:e3:90:5a:ca: d3:82:1c:97:91:35:1c:d2:f4:d3:bc:6a:37:52:f3: 29:32:ef:7c:4b:f7:f5:37:2a:29:a8:f6:c5:d6:59: a4:68:62:98:e2:ea:12:2e:e0:3d:46:72:0f:4c:7d: 86:fc:f2:a2:43:e0:9c:96:c2:e1:40:50:57:2d:a8: 14:ff:6d:a2:5d:2e:7e:14:2f:cd:fb:67:75:90:22: 03:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:0E:78:AE:39:76:15:F2:0F:D4:E2:A7:48:51:9C:5C:AB:6E:E6:CC X509v3 Authority Key Identifier: keyid:E6:75:8B:9A:37:59:82:C2:C4:D1:C7:64:9A:31:E4:CF:27:D5:A6:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nWLmjdZgsLE0cdkmjHkzyfVpoA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:a4:31:6d:ec:5e:df:ca:8a:af:30:08:e6:d7:f0:78:33:dd: 4b:b7:12:fc:c7:6d:80:6f:1a:45:ba:73:5a:bf:99:d5:71:b6: 7a:74:c7:a4:f9:28:0b:e2:52:f3:7e:af:d6:ec:6e:03:0c:88: fa:97:cb:55:59:c8:a2:0d:6b:df:9a:77:11:2f:79:93:02:2c: 31:0a:f8:34:83:56:ae:4d:01:ef:e5:58:1c:92:1b:f0:88:36: cc:b1:57:2a:f9:5d:4a:63:b4:bd:d6:59:f8:de:4c:6e:4c:ca: ff:16:99:d7:bc:2e:1e:3a:27:b0:2b:64:f8:5f:e4:87:05:a7: db:c9:0f:3f:93:a1:5f:8e:27:4f:88:7b:26:86:ab:96:3a:19: ef:e7:0d:3b:cf:c6:70:09:19:cb:44:eb:4e:b0:84:02:e4:f7: 9b:bf:a5:0b:88:5e:0b:5e:f2:cb:71:a0:da:b2:a3:1b:dd:84: f4:06:ed:e1:64:c3:25:80:bf:5b:ed:fb:32:47:75:81:e0:33: 2c:01:ac:98:35:d2:f0:ef:b1:a4:4e:f9:c8:a3:f1:2e:23:fc: 8c:13:ea:be:bb:63:39:b5:79:8c:e2:fa:9d:a7:06:80:8f:b8: 0e:08:db:84:e8:e5:0f:17:6d:5a:0d:2f:58:c2:8d:b8:88:cb: 38:75:ae:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU1NEExMTAvBgNVBAUTKEU2NzU4QjlBMzc1OTgyQzJDNEQxQzc2NDlBMzFFNENG MjdENUE2ODAwHhcNMjUwODA5MDY1MjMwWhcNMjUwODE2MDY1MjMwWjAYMRYwFAYD VQQDEw02ODk2ZjAyZS00MjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyXPIi948m6+w3OZzyiQw1+uPESzeJ2xaW1oEuUB34Zj+UTK28E5dVGi0DtWt km67YPVMgP2b4M0+pUlRZDvyio1wEXSljucwnvFn4oIkbPI2BZQqSX8S7yB4P1Vi Js0EvIZpgBSzEON6WRX+xcbSV+k1Kp2ZzO0UHB5D8WTwcos6DnTY+t2qnivY1Sjo hfFT4oi6bpXGJIlDYYkT0k/AiYDIL2Pt3Cqg+uut9R1tV+OQWsrTghyXkTUc0vTT vGo3UvMpMu98S/f1NyopqPbF1lmkaGKY4uoSLuA9RnIPTH2G/PKiQ+CclsLhQFBX LagU/22iXS5+FC/N+2d1kCID2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAgOeK45 dhXyD9Tip0hRnFyrbubMMB8GA1UdIwQYMBaAFOZ1i5o3WYLCxNHHZJox5M8n1aaA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTU0QS84MjJGQzIyMDkx RjcxMUVGQURFMTEyNjZDNEY5QUUwMi81bldMbWpkWmdzTEUwY2RrbWpIa3p5ZlZw b0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVuV0xtamRaZ3NMRTBjZGttakhrenlmVnBvQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTU0QS84MjJGQzIyMDkxRjcxMUVGQURFMTEyNjZDNEY5QUUwMi81bldMbWpkWmdz TEUwY2RrbWpIa3p5ZlZwb0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDGpDFt7F7fyoqvMAjm1/B4M91LtxL8x22AbxpFunNav5nVcbZ6dMek +SgL4lLzfq/W7G4DDIj6l8tVWciiDWvfmncRL3mTAiwxCvg0g1auTQHv5Vgckhvw iDbMsVcq+V1KY7S91ln43kxuTMr/FpnXvC4eOiewK2T4X+SHBafbyQ8/k6FfjidP iHsmhquWOhnv5w07z8ZwCRnLROtOsIQC5Pebv6ULiF4LXvLLcaDasqMb3YT0Bu3h ZMMlgL9b7fsyR3WB4DMsAayYNdLw77GkTvnIo/EuI/yME+q+u2M5tXmM4vqdpwaA j7gOCNuE6OUPF21aDS9Ywo24iMs4da4A -----END CERTIFICATE-----Generated at Sun Aug 10 13:53:01 2025 by rpki-client