$ rpki-client -vvf rpki.apnic.net/member_repository/A911218D/0EB6748AFFC811EA84A3667CC4F9AE02/5c15IB7rS9nw73ZW5zJfVxZffqA.mft File: 5c15IB7rS9nw73ZW5zJfVxZffqA.mft (raw, json) Hash identifier: /gWu1vhfmCF7vxr3pS3cN4y6wtUbhxFh+bILO1z8r00= Subject key identifier: 31:B7:52:04:3B:88:AE:FB:B8:BE:F3:A4:06:90:0E:BA:20:BF:80:33 Authority key identifier: E5:CD:79:20:1E:EB:4B:D9:F0:EF:76:56:E7:32:5F:57:16:5F:7E:A0 Certificate issuer: /CN=A911218D/serialNumber=E5CD79201EEB4BD9F0EF7656E7325F57165F7EA0 Certificate serial: 07F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5c15IB7rS9nw73ZW5zJfVxZffqA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911218D/0EB6748AFFC811EA84A3667CC4F9AE02/5c15IB7rS9nw73ZW5zJfVxZffqA.mft Manifest number: 07E2 Signing time: Fri 22 Aug 2025 21:12:55 +0000 Manifest this update: Fri 22 Aug 2025 21:12:55 +0000 Manifest next update: Fri 29 Aug 2025 21:12:55 +0000 Files and hashes: 1: 5c15IB7rS9nw73ZW5zJfVxZffqA.crl (hash: UJIRe/iC7Bd9H7LuzOc6gRYeFuCJZBlkwwflPMJrVkY=) 2: C14B7B728D0611EDB02E7331C4F9AE02.roa (hash: cW5d9zgypzyK0jiQh7AOhsQ2I4bzZRwKwFE4H9ImC3o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911218D/0EB6748AFFC811EA84A3667CC4F9AE02/5c15IB7rS9nw73ZW5zJfVxZffqA.crl rsync://rpki.apnic.net/member_repository/A911218D/0EB6748AFFC811EA84A3667CC4F9AE02/5c15IB7rS9nw73ZW5zJfVxZffqA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5c15IB7rS9nw73ZW5zJfVxZffqA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:12:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2033 (0x7f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911218D, serialNumber=E5CD79201EEB4BD9F0EF7656E7325F57165F7EA0 Validity Not Before: Aug 22 21:12:55 2025 GMT Not After : Aug 29 21:12:55 2025 GMT Subject: CN=68a8dd57-2629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:3f:47:86:79:42:17:52:c1:71:bf:39:f9:98: c2:2c:18:aa:c0:11:8b:1d:09:4b:48:7c:1e:88:32: ce:90:48:d4:15:f0:b6:3d:d2:9c:12:6f:1a:a4:9d: 68:c4:a2:b4:d9:2e:97:25:88:dd:83:56:ca:f6:bf: 86:6c:af:c8:8a:42:b9:58:39:44:ee:26:09:bd:14: fb:7f:3f:9d:72:9d:7e:7a:70:c8:e1:7a:78:5f:39: fa:b4:13:9f:40:fd:23:7b:8c:d7:a0:79:4c:0a:72: 31:8b:6b:36:17:8d:33:0d:b1:29:dc:24:c7:6f:d1: b5:75:50:3f:df:83:a7:a3:ac:17:de:2c:b7:b5:8c: 2b:e7:b1:24:25:96:0c:e2:db:41:4a:14:2f:ab:1b: e7:e0:47:04:aa:b9:47:03:2d:8c:ac:aa:a5:f9:4e: 2e:61:5c:bb:01:24:7e:4f:6a:e8:88:48:10:19:96: ed:13:74:74:98:e3:dc:27:28:8f:41:dd:98:6c:81: dc:e5:c8:c3:1b:3e:1f:d7:21:26:6d:3b:1e:8f:74: e5:6c:58:60:ea:5b:b2:08:c8:6b:a0:3a:ff:52:90: b0:db:ed:fe:66:e1:08:0c:0d:be:ed:25:e2:1d:b8: e1:6b:a1:86:0e:11:8f:55:4a:54:ed:2e:3c:d2:ce: a6:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:B7:52:04:3B:88:AE:FB:B8:BE:F3:A4:06:90:0E:BA:20:BF:80:33 X509v3 Authority Key Identifier: keyid:E5:CD:79:20:1E:EB:4B:D9:F0:EF:76:56:E7:32:5F:57:16:5F:7E:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911218D/0EB6748AFFC811EA84A3667CC4F9AE02/5c15IB7rS9nw73ZW5zJfVxZffqA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5c15IB7rS9nw73ZW5zJfVxZffqA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911218D/0EB6748AFFC811EA84A3667CC4F9AE02/5c15IB7rS9nw73ZW5zJfVxZffqA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:b6:33:01:2d:6a:b4:04:f1:b0:c7:bc:48:27:72:0f:72:35: 47:33:79:f4:18:0d:93:e3:b0:be:43:32:f9:a1:57:b3:be:5b: 47:1d:cb:6c:4a:c7:04:fe:04:d1:7a:62:f5:04:ec:11:bf:1e: b7:ba:55:00:50:72:78:67:58:de:8e:29:a3:be:23:0a:f6:a6: c8:08:cd:b3:fe:cd:6b:df:44:8c:1d:68:4f:c9:ce:ba:90:3b: 64:52:91:c1:85:45:b5:1e:c1:a1:fe:1b:65:e1:72:b2:ef:d3: 27:9f:21:87:da:69:b6:2f:20:1d:b5:72:69:99:1d:56:ed:8b: 3b:4d:14:35:5a:df:60:06:5b:ef:d8:2b:d0:f6:fc:96:5e:b1: 06:3b:31:1e:b7:68:9d:8d:3d:d8:25:83:cf:c6:b8:6d:d4:fa: 79:c6:f5:6e:ee:be:8a:53:b9:ea:10:bb:47:55:57:c6:98:87: 42:17:49:6b:0a:75:4d:df:c4:83:55:e9:7c:82:a6:01:7a:0c: 06:c1:cf:84:2d:16:d5:b2:4f:72:cf:b9:f2:66:b5:fe:ca:12: 2f:71:b2:25:21:fa:b7:c3:af:eb:15:98:ce:49:f5:87:b1:9d: d2:81:fe:e0:72:15:6c:85:34:0b:2c:a1:04:1c:09:1d:3e:7d: 5c:9e:5e:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTIxOEQxMTAvBgNVBAUTKEU1Q0Q3OTIwMUVFQjRCRDlGMEVGNzY1NkU3MzI1RjU3 MTY1RjdFQTAwHhcNMjUwODIyMjExMjU1WhcNMjUwODI5MjExMjU1WjAYMRYwFAYD VQQDEw02OGE4ZGQ1Ny0yNjI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1z9HhnlCF1LBcb85+ZjCLBiqwBGLHQlLSHweiDLOkEjUFfC2PdKcEm8apJ1o xKK02S6XJYjdg1bK9r+GbK/IikK5WDlE7iYJvRT7fz+dcp1+enDI4Xp4Xzn6tBOf QP0je4zXoHlMCnIxi2s2F40zDbEp3CTHb9G1dVA/34Ono6wX3iy3tYwr57EkJZYM 4ttBShQvqxvn4EcEqrlHAy2MrKql+U4uYVy7ASR+T2roiEgQGZbtE3R0mOPcJyiP Qd2YbIHc5cjDGz4f1yEmbTsej3TlbFhg6luyCMhroDr/UpCw2+3+ZuEIDA2+7SXi Hbjha6GGDhGPVUpU7S480s6mGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDG3UgQ7 iK77uL7zpAaQDrogv4AzMB8GA1UdIwQYMBaAFOXNeSAe60vZ8O92VucyX1cWX36g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjE4RC8wRUI2NzQ4QUZG QzgxMUVBODRBMzY2N0NDNEY5QUUwMi81YzE1SUI3clM5bnc3M1pXNXpKZlZ4WmZm cUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVjMTVJQjdyUzludzczWlc1ekpmVnhaZmZxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjE4RC8wRUI2NzQ4QUZGQzgxMUVBODRBMzY2N0NDNEY5QUUwMi81YzE1SUI3clM5 bnc3M1pXNXpKZlZ4WmZmcUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLtjMBLWq0BPGwx7xIJ3IPcjVHM3n0GA2T47C+QzL5oVezvltHHcts SscE/gTRemL1BOwRvx63ulUAUHJ4Z1jejimjviMK9qbICM2z/s1r30SMHWhPyc66 kDtkUpHBhUW1HsGh/htl4XKy79MnnyGH2mm2LyAdtXJpmR1W7Ys7TRQ1Wt9gBlvv 2CvQ9vyWXrEGOzEet2idjT3YJYPPxrht1Pp5xvVu7r6KU7nqELtHVVfGmIdCF0lr CnVN38SDVel8gqYBegwGwc+ELRbVsk9yz7nyZrX+yhIvcbIlIfq3w6/rFZjOSfWH sZ3Sgf7gchVshTQLLKEEHAkdPn1cnl6E -----END CERTIFICATE-----Generated at Sat Aug 23 19:41:49 2025 by rpki-client