$ rpki-client -vvf rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.mft File: 5L99WWC2svPFIUHvK2Aq0RT0DKg.mft (raw, json) Hash identifier: mMZ3coeCVZ2yEOf/nKl+A3bJ87/pji+RyqEDo2tm+oE= Subject key identifier: B6:E1:DB:E8:3D:BD:24:43:E0:85:F0:E4:9B:74:C8:EA:FB:E6:92:2D Authority key identifier: E4:BF:7D:59:60:B6:B2:F3:C5:21:41:EF:2B:60:2A:D1:14:F4:0C:A8 Certificate issuer: /CN=A91F53A5/serialNumber=E4BF7D5960B6B2F3C52141EF2B602AD114F40CA8 Certificate serial: 0322 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5L99WWC2svPFIUHvK2Aq0RT0DKg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.mft Manifest number: 031E Signing time: Sat 09 Aug 2025 01:41:21 +0000 Manifest this update: Sat 09 Aug 2025 01:41:21 +0000 Manifest next update: Sat 16 Aug 2025 01:41:21 +0000 Files and hashes: 1: 5L99WWC2svPFIUHvK2Aq0RT0DKg.crl (hash: sQoWW1PqbHQDcFOPxcYb7XqIkUztrr6JpAp0Vf+khLU=) 2: 99C51F96DA6D11EC86CE4D59C4F9AE02.roa (hash: nd3BoBWmWncY6CXZjinblw8tRKQ0C9HJdvIgBJwhEHY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.crl rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5L99WWC2svPFIUHvK2Aq0RT0DKg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 802 (0x322) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F53A5, serialNumber=E4BF7D5960B6B2F3C52141EF2B602AD114F40CA8 Validity Not Before: Aug 9 01:41:21 2025 GMT Not After : Aug 16 01:41:21 2025 GMT Subject: CN=6896a741-760a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ae:b7:54:a4:78:bd:2c:7a:d4:c5:f4:1b:f5: 0a:b5:75:32:68:97:16:3a:ab:0a:05:67:dd:b3:3d: 6a:0d:01:ee:9f:27:47:e4:34:a2:a4:19:4f:c2:9c: dd:2a:e8:87:f4:e3:ef:14:32:fe:94:01:9c:6e:63: 07:9f:02:1d:52:18:6c:70:f7:e7:30:07:b7:85:1f: 9f:75:e0:2b:ae:75:c4:c1:ce:13:18:7d:9c:ed:4f: 0e:f4:fd:5d:33:94:fb:09:1b:70:44:29:a7:50:5f: 13:2b:8b:7d:84:a9:39:45:3f:4e:3c:42:0f:0b:21: 0a:91:de:28:5d:75:9e:5c:ea:48:8c:86:ee:58:2d: 69:41:16:7d:92:44:40:b8:3b:fa:88:fd:77:e0:f3: b4:a1:8b:d0:c0:bd:87:6c:45:53:78:73:5d:35:7a: 7d:21:86:39:76:77:2b:93:4a:37:c1:df:e8:2b:5a: 8d:17:44:18:78:2c:7e:33:19:14:15:6c:78:b0:99: 46:6b:2d:c7:f8:cd:49:00:31:5b:bd:37:64:ee:37: 5b:15:15:3e:95:05:b1:fd:05:f7:f5:fb:b9:d7:67: 58:a3:3c:4c:b8:27:75:67:76:68:6e:60:da:c4:36: 96:e3:7d:cf:72:22:15:19:2b:42:e0:e0:17:86:61: 6e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:E1:DB:E8:3D:BD:24:43:E0:85:F0:E4:9B:74:C8:EA:FB:E6:92:2D X509v3 Authority Key Identifier: keyid:E4:BF:7D:59:60:B6:B2:F3:C5:21:41:EF:2B:60:2A:D1:14:F4:0C:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5L99WWC2svPFIUHvK2Aq0RT0DKg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:4c:47:f7:96:03:ab:06:77:7f:46:71:07:0b:fe:fe:89:c3: f2:e6:fa:3f:97:87:d5:ab:1c:3a:92:2b:b4:9c:4b:be:ab:aa: 32:79:4b:7a:d5:ed:c2:46:16:06:f7:b6:d8:1e:dd:f3:6d:1a: e9:59:d1:9f:f0:bc:17:ce:e0:83:14:20:0b:49:50:3c:72:a8: ac:36:f1:78:10:7a:f4:a9:c5:1c:93:b0:ce:e7:4b:63:60:57: b1:99:1f:bc:28:60:79:fc:68:2a:f5:af:12:bd:b1:18:8a:85: d0:8a:2a:5c:68:ee:25:2e:9a:98:73:5b:93:49:cf:e0:be:9c: 68:6a:be:32:1d:2f:d9:6a:e5:9e:d7:4d:39:4d:84:3b:78:7b: 7c:5c:5f:09:ed:5f:8e:9b:a0:14:f7:34:68:04:08:d5:ee:94: 89:7a:64:5c:87:5b:f0:e8:fe:ed:1a:36:30:93:bf:49:84:4e: b8:9b:86:8a:20:ba:35:cb:18:1a:6a:cd:f0:67:33:4a:0f:e5: ac:67:32:8e:09:21:33:3b:da:6b:1c:e6:6b:e3:ee:68:1b:d4: 74:e8:62:46:8b:74:a6:70:15:42:46:76:11:ba:e5:79:6e:8c: 32:53:25:d9:0a:16:31:10:da:35:dc:5f:93:52:a1:19:e1:80: 95:d9:3c:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAyIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjUzQTUxMTAvBgNVBAUTKEU0QkY3RDU5NjBCNkIyRjNDNTIxNDFFRjJCNjAyQUQx MTRGNDBDQTgwHhcNMjUwODA5MDE0MTIxWhcNMjUwODE2MDE0MTIxWjAYMRYwFAYD VQQDEw02ODk2YTc0MS03NjBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx663VKR4vSx61MX0G/UKtXUyaJcWOqsKBWfdsz1qDQHunydH5DSipBlPwpzd KuiH9OPvFDL+lAGcbmMHnwIdUhhscPfnMAe3hR+fdeArrnXEwc4TGH2c7U8O9P1d M5T7CRtwRCmnUF8TK4t9hKk5RT9OPEIPCyEKkd4oXXWeXOpIjIbuWC1pQRZ9kkRA uDv6iP134PO0oYvQwL2HbEVTeHNdNXp9IYY5dncrk0o3wd/oK1qNF0QYeCx+MxkU FWx4sJlGay3H+M1JADFbvTdk7jdbFRU+lQWx/QX39fu512dYozxMuCd1Z3ZobmDa xDaW433PciIVGStC4OAXhmFuGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLbh2+g9 vSRD4IXw5Jt0yOr75pItMB8GA1UdIwQYMBaAFOS/fVlgtrLzxSFB7ytgKtEU9Ayo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTNBNS81MDBDRkU5OERB NjYxMUVDODBERkU3MzZDNEY5QUUwMi81TDk5V1dDMnN2UEZJVUh2SzJBcTBSVDBE S2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVMOTlXV0Myc3ZQRklVSHZLMkFxMFJUMERLZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTNBNS81MDBDRkU5OERBNjYxMUVDODBERkU3MzZDNEY5QUUwMi81TDk5V1dDMnN2 UEZJVUh2SzJBcTBSVDBES2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJTEf3lgOrBnd/RnEHC/7+icPy5vo/l4fVqxw6kiu0nEu+q6oyeUt6 1e3CRhYG97bYHt3zbRrpWdGf8LwXzuCDFCALSVA8cqisNvF4EHr0qcUck7DO50tj YFexmR+8KGB5/Ggq9a8SvbEYioXQiipcaO4lLpqYc1uTSc/gvpxoar4yHS/ZauWe 1005TYQ7eHt8XF8J7V+Om6AU9zRoBAjV7pSJemRch1vw6P7tGjYwk79JhE64m4aK ILo1yxgaas3wZzNKD+WsZzKOCSEzO9prHOZr4+5oG9R06GJGi3SmcBVCRnYRuuV5 bowyUyXZChYxENo13F+TUqEZ4YCV2Ty9 -----END CERTIFICATE-----Generated at Sun Aug 10 04:59:19 2025 by rpki-client