$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft File: G5HVFg99VrcFqFFsahz0L0ln71Y.mft (raw, json) Hash identifier: M/E1V4CDmLGFfexhyN5/nAmoaHZyPk1Ftg3LXf2jPfU= Subject key identifier: B7:22:A6:21:FC:50:8E:4B:4C:F8:90:38:23:3A:06:73:05:00:EC:2D Authority key identifier: 1B:91:D5:16:0F:7D:56:B7:05:A8:51:6C:6A:1C:F4:2F:49:67:EF:56 Certificate issuer: /CN=A91EF554/serialNumber=1B91D5160F7D56B705A8516C6A1CF42F4967EF56 Certificate serial: 0964 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G5HVFg99VrcFqFFsahz0L0ln71Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft Manifest number: 095C Signing time: Fri 08 Aug 2025 20:30:27 +0000 Manifest this update: Fri 08 Aug 2025 20:30:26 +0000 Manifest next update: Fri 15 Aug 2025 20:30:26 +0000 Files and hashes: 1: G5HVFg99VrcFqFFsahz0L0ln71Y.crl (hash: VXtIBl6I1fQYwltS5SytWw5z38He/epVoBE898g+suk=) 2: 156CEB62DC6011ECB2698C14C4F9AE02.roa (hash: reuaGLtn1xD8mIcBhpyoMRgE/LzBHNExqumLX0mZnsc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.crl rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G5HVFg99VrcFqFFsahz0L0ln71Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2404 (0x964) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF554, serialNumber=1B91D5160F7D56B705A8516C6A1CF42F4967EF56 Validity Not Before: Aug 8 20:30:26 2025 GMT Not After : Aug 15 20:30:26 2025 GMT Subject: CN=68965e63-e60e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:d3:01:d1:da:42:7d:ca:d7:65:24:aa:e0:41: c6:bd:97:2c:b6:c5:ef:ab:a6:6f:72:c5:e9:cf:3f: 78:49:c6:ab:df:f5:20:42:d4:53:74:97:f7:ca:9e: 25:11:03:47:a5:55:a3:cc:f3:b9:73:d3:57:7b:cf: 34:1a:a9:6f:e6:e8:4a:6a:33:69:b2:49:51:b7:a0: 05:38:31:4f:2d:96:d8:cd:c2:c4:d4:23:0b:71:98: ff:26:3c:db:2c:33:6f:aa:c9:42:39:9a:9b:d6:ab: 86:58:1f:9f:41:cc:64:a1:f4:da:e5:26:96:2d:02: 08:15:6a:4c:62:89:19:cf:d7:2f:9d:ad:16:6a:7c: cd:25:f5:d9:d6:92:7f:a5:a6:76:ae:dc:48:a3:ba: ff:d9:63:23:cb:51:af:f1:8a:31:ff:74:2d:9f:6b: ee:82:13:d7:9f:bf:a2:6e:d5:a0:2d:f7:1e:90:8d: 28:8a:ac:21:f2:9d:d3:ab:fc:73:f1:20:7a:98:e4: 71:3a:d6:be:4b:d7:b0:bc:5f:c7:13:ea:b9:8d:bc: 96:41:47:b6:e8:46:7b:52:e8:81:a6:b7:b8:b1:33: 17:ff:b1:3f:06:8d:e9:5c:a7:5c:10:31:a9:6e:20: cf:58:95:55:fc:c4:e2:76:08:88:cb:9f:8c:31:e9: 39:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:22:A6:21:FC:50:8E:4B:4C:F8:90:38:23:3A:06:73:05:00:EC:2D X509v3 Authority Key Identifier: keyid:1B:91:D5:16:0F:7D:56:B7:05:A8:51:6C:6A:1C:F4:2F:49:67:EF:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G5HVFg99VrcFqFFsahz0L0ln71Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:8f:97:dd:ae:05:c2:45:95:96:b5:87:e2:d1:f5:2c:d2:07: 38:c9:c9:44:04:f5:43:02:c0:91:28:93:35:f3:8e:8f:6b:80: 12:16:98:60:0c:a8:85:5c:ae:d8:e3:f1:ee:40:0a:cf:c5:e1: 78:27:a2:ec:4d:b8:47:3a:4c:33:12:5a:32:ba:13:9a:8d:81: 29:d0:ab:0b:10:5a:75:53:c8:15:e7:35:a5:e8:3e:fe:0d:e4: 74:97:16:31:7f:f3:81:87:72:19:45:9b:f9:01:e7:5c:c3:63: 4f:7d:b9:96:96:e8:02:80:1c:4f:e6:3d:17:a9:e7:60:7f:e9: 75:ad:a5:b5:ed:56:71:1c:56:07:cf:fb:6a:74:a5:98:9b:6f: f0:83:cc:ab:44:ab:d2:85:7f:c1:aa:48:b9:11:62:cc:ad:13: ea:32:96:80:c0:64:2e:dc:ef:d9:cd:36:88:51:5f:4d:c3:80: 3b:5a:91:b8:d0:b5:d0:30:d1:f0:02:5f:15:bc:65:43:44:63: 99:96:37:11:3a:d6:3b:7f:cf:1c:e8:f7:5e:18:70:4b:fc:be: a9:1b:1a:73:6a:31:23:97:61:0d:74:c2:1c:65:3a:f9:d0:da: cd:62:76:5e:18:46:8c:7e:17:7b:e4:6e:d2:f1:e9:2d:19:c1: d9:c0:12:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY1NTQxMTAvBgNVBAUTKDFCOTFENTE2MEY3RDU2QjcwNUE4NTE2QzZBMUNGNDJG NDk2N0VGNTYwHhcNMjUwODA4MjAzMDI2WhcNMjUwODE1MjAzMDI2WjAYMRYwFAYD VQQDEw02ODk2NWU2My1lNjBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA79MB0dpCfcrXZSSq4EHGvZcstsXvq6ZvcsXpzz94Scar3/UgQtRTdJf3yp4l EQNHpVWjzPO5c9NXe880Gqlv5uhKajNpsklRt6AFODFPLZbYzcLE1CMLcZj/Jjzb LDNvqslCOZqb1quGWB+fQcxkofTa5SaWLQIIFWpMYokZz9cvna0WanzNJfXZ1pJ/ paZ2rtxIo7r/2WMjy1Gv8Yox/3Qtn2vughPXn7+ibtWgLfcekI0oiqwh8p3Tq/xz 8SB6mORxOta+S9ewvF/HE+q5jbyWQUe26EZ7UuiBpre4sTMX/7E/Bo3pXKdcEDGp biDPWJVV/MTidgiIy5+MMek5CwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLcipiH8 UI5LTPiQOCM6BnMFAOwtMB8GA1UdIwQYMBaAFBuR1RYPfVa3BahRbGoc9C9JZ+9W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjU1NC9FQjFDQkJFMjlF NUIxMUVBQjI0OEZDNTFDNEY5QUUwMi9HNUhWRmc5OVZyY0ZxRkZzYWh6MEwwbG43 MVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0c1SFZGZzk5VnJjRnFGRnNhaHowTDBsbjcxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjU1NC9FQjFDQkJFMjlFNUIxMUVBQjI0OEZDNTFDNEY5QUUwMi9HNUhWRmc5OVZy Y0ZxRkZzYWh6MEwwbG43MVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3j5fdrgXCRZWWtYfi0fUs0gc4yclEBPVDAsCRKJM1846Pa4ASFphg DKiFXK7Y4/HuQArPxeF4J6LsTbhHOkwzEloyuhOajYEp0KsLEFp1U8gV5zWl6D7+ DeR0lxYxf/OBh3IZRZv5Aedcw2NPfbmWlugCgBxP5j0Xqedgf+l1raW17VZxHFYH z/tqdKWYm2/wg8yrRKvShX/Bqki5EWLMrRPqMpaAwGQu3O/ZzTaIUV9Nw4A7WpG4 0LXQMNHwAl8VvGVDRGOZljcROtY7f88c6PdeGHBL/L6pGxpzajEjl2ENdMIcZTr5 0NrNYnZeGEaMfhd75G7S8ektGcHZwBKw -----END CERTIFICATE-----Generated at Sun Aug 10 21:08:19 2025 by rpki-client