$ rpki-client -vvf rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.mft File: 5jLTjFoywhfG7nHVLe-fOMoWbFE.mft (raw, json) Hash identifier: Yg2RCp3FNjolyL3qKn8412/B65OShR/1k6K15Vv9Gwg= Subject key identifier: 67:22:97:95:C5:5B:3F:BE:EF:63:2A:E4:B6:68:A0:3C:29:8F:C9:6B Authority key identifier: E6:32:D3:8C:5A:32:C2:17:C6:EE:71:D5:2D:EF:9F:38:CA:16:6C:51 Certificate issuer: /CN=A911486F/serialNumber=E632D38C5A32C217C6EE71D52DEF9F38CA166C51 Certificate serial: 0212 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jLTjFoywhfG7nHVLe-fOMoWbFE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.mft Manifest number: 0202 Signing time: Sat 23 Aug 2025 02:37:48 +0000 Manifest this update: Sat 23 Aug 2025 02:37:48 +0000 Manifest next update: Sat 30 Aug 2025 02:37:48 +0000 Files and hashes: 1: 5jLTjFoywhfG7nHVLe-fOMoWbFE.crl (hash: rPFW3afcXfmS3lJNQtBc9X5BlpoRN6LIiG225fTnj28=) 2: 32D8E190D0CB11EEAB1CAF34C4F9AE02.roa (hash: I6cFYaTwrscj9Do0u5LBBtA5etRJeCEnBRWA8YbVDTo=) 3: 4D554D70D0CA11EE9DCDFA83C4F9AE02.roa (hash: 6yZMYTHYRpP2MH6PChCYijNkjUxZFdtlKAJWlJtdpuc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.crl rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jLTjFoywhfG7nHVLe-fOMoWbFE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:37:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 530 (0x212) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911486F, serialNumber=E632D38C5A32C217C6EE71D52DEF9F38CA166C51 Validity Not Before: Aug 23 02:37:48 2025 GMT Not After : Aug 30 02:37:48 2025 GMT Subject: CN=68a9297c-1f86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ab:74:b1:03:1a:d9:35:4b:39:4c:1e:8c:91: 86:fc:86:6d:a5:c6:45:12:fc:09:c8:6a:0c:8d:ff: d7:a9:f5:bc:42:8c:62:b9:da:38:2e:ad:43:02:12: ed:b4:ec:f2:3d:e4:6b:6b:73:f1:53:26:c0:45:71: 41:79:2c:ed:c8:94:03:7e:2a:3b:c3:0e:b3:2d:dc: de:10:0e:80:94:48:70:36:bd:9d:c5:c5:81:fa:10: af:ae:b5:e3:24:6a:33:aa:94:e7:f8:6e:63:cb:45: 45:f5:1d:5e:83:9b:b7:ea:a1:3e:ac:34:b8:16:80: 48:49:d1:cd:81:8b:6c:e7:ac:9b:05:34:df:44:60: 8c:b9:5e:ab:1e:c0:5c:65:0c:d2:d2:5e:7e:82:3a: 2e:02:fd:cd:e6:f9:ab:49:cc:91:cc:49:6b:1f:ae: 11:8f:4e:fc:01:d7:3c:9c:2c:6c:02:ab:d1:35:33: 67:ec:20:a3:a4:43:a7:c8:a0:aa:12:2b:74:14:be: 75:96:2b:5e:b1:f9:72:91:c2:ab:af:fa:31:f2:f9: 00:b5:9d:fc:65:00:9d:73:49:5a:d2:7e:8a:03:6e: 56:c4:9e:7c:a7:64:31:0f:2f:62:3f:8f:3b:d9:09: 0a:2a:66:17:5e:6f:9b:99:57:4f:aa:d7:16:02:a9: 53:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:22:97:95:C5:5B:3F:BE:EF:63:2A:E4:B6:68:A0:3C:29:8F:C9:6B X509v3 Authority Key Identifier: keyid:E6:32:D3:8C:5A:32:C2:17:C6:EE:71:D5:2D:EF:9F:38:CA:16:6C:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jLTjFoywhfG7nHVLe-fOMoWbFE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:82:db:ef:dd:23:eb:38:02:cb:86:ba:dd:e1:3f:b4:97:44: 2a:2c:09:e6:70:f5:e7:17:e7:56:c7:21:86:00:73:ba:8d:81: 22:ef:56:4e:ad:6d:34:fb:61:c8:93:58:57:7e:6b:10:0f:f0: d1:f8:bf:c8:ed:21:90:8f:88:7d:f7:eb:57:d3:48:3a:d2:c8: e2:87:a7:a2:b6:f6:0c:87:48:64:a4:a1:85:a4:ad:5f:d1:4b: 95:a2:b1:99:b7:f5:97:1c:a1:c6:e1:49:7d:76:d5:18:28:1b: 33:b4:89:c9:a8:cf:e8:f7:10:8d:54:0d:7c:8f:00:28:29:19: e2:4f:b6:44:91:ef:00:47:9c:fb:ab:62:ba:d5:79:0c:5c:b0: 85:41:41:6b:2a:a9:11:cf:65:53:d8:7f:dd:82:54:29:56:f6: f2:2b:e2:07:16:2a:b3:1d:e4:4e:e5:1a:34:4c:f5:e0:f7:09: 28:fe:72:8a:fc:c6:c6:32:b3:60:52:a3:8e:36:45:20:a0:ae: 26:e0:19:23:1e:4a:04:75:bc:a7:a6:7b:83:91:aa:00:6c:01: c2:b8:60:c5:84:e1:7a:8a:f1:e3:2b:5d:45:2d:d4:8b:5c:8d: 26:ac:20:78:e5:a4:bb:64:a5:a1:7a:e4:39:a7:d4:c8:6a:4c: 73:e9:1d:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ4NkYxMTAvBgNVBAUTKEU2MzJEMzhDNUEzMkMyMTdDNkVFNzFENTJERUY5RjM4 Q0ExNjZDNTEwHhcNMjUwODIzMDIzNzQ4WhcNMjUwODMwMDIzNzQ4WjAYMRYwFAYD VQQDEw02OGE5Mjk3Yy0xZjg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzqt0sQMa2TVLOUwejJGG/IZtpcZFEvwJyGoMjf/XqfW8Qoxiudo4Lq1DAhLt tOzyPeRra3PxUybARXFBeSztyJQDfio7ww6zLdzeEA6AlEhwNr2dxcWB+hCvrrXj JGozqpTn+G5jy0VF9R1eg5u36qE+rDS4FoBISdHNgYts56ybBTTfRGCMuV6rHsBc ZQzS0l5+gjouAv3N5vmrScyRzElrH64Rj078Adc8nCxsAqvRNTNn7CCjpEOnyKCq Eit0FL51litesflykcKrr/ox8vkAtZ38ZQCdc0la0n6KA25WxJ58p2QxDy9iP487 2QkKKmYXXm+bmVdPqtcWAqlTZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGcil5XF Wz++72Mq5LZooDwpj8lrMB8GA1UdIwQYMBaAFOYy04xaMsIXxu5x1S3vnzjKFmxR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDg2Ri8yMkNGMzQ0ODg2 NkMxMUVEQUZBNUE0NzFDNEY5QUUwMi81akxUakZveXdoZkc3bkhWTGUtZk9Nb1di RkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVqTFRqRm95d2hmRzduSFZMZS1mT01vV2JGRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDg2Ri8yMkNGMzQ0ODg2NkMxMUVEQUZBNUE0NzFDNEY5QUUwMi81akxUakZveXdo Zkc3bkhWTGUtZk9Nb1diRkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQgtvv3SPrOALLhrrd4T+0l0QqLAnmcPXnF+dWxyGGAHO6jYEi71ZO rW00+2HIk1hXfmsQD/DR+L/I7SGQj4h99+tX00g60sjih6eitvYMh0hkpKGFpK1f 0UuVorGZt/WXHKHG4Ul9dtUYKBsztInJqM/o9xCNVA18jwAoKRniT7ZEke8AR5z7 q2K61XkMXLCFQUFrKqkRz2VT2H/dglQpVvbyK+IHFiqzHeRO5Ro0TPXg9wko/nKK /MbGMrNgUqOONkUgoK4m4BkjHkoEdbynpnuDkaoAbAHCuGDFhOF6ivHjK11FLdSL XI0mrCB45aS7ZKWheuQ5p9TIakxz6R3n -----END CERTIFICATE-----Generated at Sun Aug 24 00:20:09 2025 by rpki-client