$ rpki-client -vvf rpki.apnic.net/member_repository/A9111F9E/006CE99C500611EC9056CD45C4F9AE02/5nV74dIYmt6NdyyclIZDEL45LXA.mft File: 5nV74dIYmt6NdyyclIZDEL45LXA.mft (raw, json) Hash identifier: fhceWIO77durFt/HFaAkuF+4pCXyNZCbakT+rjm/ZWY= Subject key identifier: 62:D7:78:CA:63:0A:64:1F:FE:DB:EE:63:40:6C:72:7C:2A:01:39:A8 Authority key identifier: E6:75:7B:E1:D2:18:9A:DE:8D:77:2C:9C:94:86:43:10:BE:39:2D:70 Certificate issuer: /CN=A9111F9E/serialNumber=E6757BE1D2189ADE8D772C9C94864310BE392D70 Certificate serial: 048F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nV74dIYmt6NdyyclIZDEL45LXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111F9E/006CE99C500611EC9056CD45C4F9AE02/5nV74dIYmt6NdyyclIZDEL45LXA.mft Manifest number: 0489 Signing time: Sat 23 Aug 2025 00:15:37 +0000 Manifest this update: Sat 23 Aug 2025 00:15:36 +0000 Manifest next update: Sat 30 Aug 2025 00:15:36 +0000 Files and hashes: 1: 5nV74dIYmt6NdyyclIZDEL45LXA.crl (hash: YOsS0McyoaWVSj0s7rWmFqM/8ntn/lA3Lf4g/ZPQEnw=) 2: 2B70BBE889E111EEB5E86A0EC4F9AE02.roa (hash: ii2gJPxNc38H3aArS7srunxvBmsm9HkEFksE6I5LOY0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111F9E/006CE99C500611EC9056CD45C4F9AE02/5nV74dIYmt6NdyyclIZDEL45LXA.crl rsync://rpki.apnic.net/member_repository/A9111F9E/006CE99C500611EC9056CD45C4F9AE02/5nV74dIYmt6NdyyclIZDEL45LXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nV74dIYmt6NdyyclIZDEL45LXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:15:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1167 (0x48f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111F9E, serialNumber=E6757BE1D2189ADE8D772C9C94864310BE392D70 Validity Not Before: Aug 23 00:15:36 2025 GMT Not After : Aug 30 00:15:36 2025 GMT Subject: CN=68a90829-7aff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:00:00:82:91:55:fb:0f:74:1c:bc:e2:dc:61: f7:f4:c2:1d:1e:4a:1b:6e:52:56:7e:b4:d3:8a:50: 88:9a:36:30:83:3e:1f:72:e5:ea:03:4a:98:7e:a9: 60:6c:de:7d:e3:c0:6a:38:4c:63:45:8e:d4:f8:1f: ee:b3:d5:6a:0c:9d:ea:d8:2b:79:4c:ba:0f:51:50: aa:1b:be:2e:2b:b5:34:77:71:62:27:fd:d7:b3:8e: 58:9c:c3:8a:a0:bc:89:0e:0c:26:f1:a2:21:e4:0b: 6d:8b:2b:f7:b5:1c:d6:ed:c1:89:80:34:09:eb:89: 4e:ba:18:ec:1a:db:27:bc:5e:da:2c:37:71:dc:54: f2:38:e9:d8:93:09:80:d9:a4:96:3b:3b:44:c3:d3: d5:91:5c:a8:f7:f1:12:c5:75:ce:92:bb:67:0c:08: 37:5b:d2:ad:13:5d:b7:e3:71:01:06:a6:d9:d5:86: f3:db:c0:3c:80:f9:b5:12:e8:77:5a:66:25:d5:69: 39:dc:41:23:fc:e4:c7:4b:61:07:74:4f:19:de:bb: 4f:5b:a7:f3:f1:3e:41:3c:70:5f:9a:ea:ab:93:e4: 0c:59:c6:98:1d:c5:fe:da:75:db:15:dc:d6:75:bc: f4:5c:17:85:36:ad:94:10:fa:07:d0:7b:af:a9:6d: b3:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:D7:78:CA:63:0A:64:1F:FE:DB:EE:63:40:6C:72:7C:2A:01:39:A8 X509v3 Authority Key Identifier: keyid:E6:75:7B:E1:D2:18:9A:DE:8D:77:2C:9C:94:86:43:10:BE:39:2D:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111F9E/006CE99C500611EC9056CD45C4F9AE02/5nV74dIYmt6NdyyclIZDEL45LXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nV74dIYmt6NdyyclIZDEL45LXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111F9E/006CE99C500611EC9056CD45C4F9AE02/5nV74dIYmt6NdyyclIZDEL45LXA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:9b:df:f6:6d:9a:99:4b:46:29:1f:b8:01:3e:5f:6c:59:15: 8f:39:2f:a8:f0:4b:ee:82:77:a9:74:28:7e:e1:22:fc:39:79: 72:78:18:54:65:50:91:a6:51:cf:94:40:50:fd:83:6f:06:d5: ba:36:c5:39:0c:7f:d8:7d:a2:28:4f:ae:bc:c7:a2:c3:cd:4f: d0:1d:49:33:68:db:25:4c:88:2e:e4:a1:51:c9:da:c3:09:fc: e0:3f:a7:ef:be:82:81:8d:1a:2c:7a:7e:30:37:b9:2f:81:f7: d1:65:2b:a6:69:cc:12:43:1b:51:a8:39:35:ea:10:c0:25:d7: 6c:21:b4:c0:03:18:8e:e2:97:97:7e:56:d9:a0:09:c6:09:dc: 9a:a5:d7:c4:5b:25:60:1f:f4:07:b9:60:f2:2f:c5:e6:61:5f: 59:95:7a:01:27:47:75:6a:8e:79:47:d6:21:24:3b:6b:8c:1b: ac:51:90:c8:53:ca:b6:a1:cd:a5:9c:ae:ab:0c:16:b2:9f:e1: 27:cf:66:38:88:df:aa:34:ab:da:e7:83:68:3b:cb:9d:37:ae: f4:ad:54:c3:ad:56:ae:17:41:a1:0b:05:52:fd:6d:5a:24:7d: 96:b0:61:ea:e7:16:50:8b:8a:93:3e:94:ba:1e:ac:d4:e9:6f: 37:aa:df:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTFGOUUxMTAvBgNVBAUTKEU2NzU3QkUxRDIxODlBREU4RDc3MkM5Qzk0ODY0MzEw QkUzOTJENzAwHhcNMjUwODIzMDAxNTM2WhcNMjUwODMwMDAxNTM2WjAYMRYwFAYD VQQDEw02OGE5MDgyOS03YWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArAAAgpFV+w90HLzi3GH39MIdHkobblJWfrTTilCImjYwgz4fcuXqA0qYfqlg bN5948BqOExjRY7U+B/us9VqDJ3q2Ct5TLoPUVCqG74uK7U0d3FiJ/3Xs45YnMOK oLyJDgwm8aIh5Attiyv3tRzW7cGJgDQJ64lOuhjsGtsnvF7aLDdx3FTyOOnYkwmA 2aSWOztEw9PVkVyo9/ESxXXOkrtnDAg3W9KtE12343EBBqbZ1Ybz28A8gPm1Euh3 WmYl1Wk53EEj/OTHS2EHdE8Z3rtPW6fz8T5BPHBfmuqrk+QMWcaYHcX+2nXbFdzW dbz0XBeFNq2UEPoH0HuvqW2zzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGLXeMpj CmQf/tvuY0BscnwqATmoMB8GA1UdIwQYMBaAFOZ1e+HSGJrejXcsnJSGQxC+OS1w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUY5RS8wMDZDRTk5QzUw MDYxMUVDOTA1NkNENDVDNEY5QUUwMi81blY3NGRJWW10Nk5keXljbElaREVMNDVM WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVuVjc0ZElZbXQ2TmR5eWNsSVpERUw0NUxYQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MUY5RS8wMDZDRTk5QzUwMDYxMUVDOTA1NkNENDVDNEY5QUUwMi81blY3NGRJWW10 Nk5keXljbElaREVMNDVMWEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVm9/2bZqZS0YpH7gBPl9sWRWPOS+o8EvugnepdCh+4SL8OXlyeBhU ZVCRplHPlEBQ/YNvBtW6NsU5DH/YfaIoT668x6LDzU/QHUkzaNslTIgu5KFRydrD CfzgP6fvvoKBjRosen4wN7kvgffRZSumacwSQxtRqDk16hDAJddsIbTAAxiO4peX flbZoAnGCdyapdfEWyVgH/QHuWDyL8XmYV9ZlXoBJ0d1ao55R9YhJDtrjBusUZDI U8q2oc2lnK6rDBayn+Enz2Y4iN+qNKva54NoO8udN670rVTDrVauF0GhCwVS/W1a JH2WsGHq5xZQi4qTPpS6HqzU6W83qt/3 -----END CERTIFICATE-----Generated at Sun Aug 24 04:46:13 2025 by rpki-client