$ rpki-client -vvf rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.mft File: 5DyCH7uc7qZ-unouUFzF3X92YFU.mft (raw, json) Hash identifier: NlPpFluIqXvBqmRsV0xNOV3kgjFk/zX8jgjZmIIz7+I= Subject key identifier: 95:72:E8:D6:04:6C:32:80:92:45:AC:F1:1F:11:8B:9E:B3:BA:0E:92 Authority key identifier: E4:3C:82:1F:BB:9C:EE:A6:7E:BA:7A:2E:50:5C:C5:DD:7F:76:60:55 Certificate issuer: /CN=A9114D2E/serialNumber=E43C821FBB9CEEA67EBA7A2E505CC5DD7F766055 Certificate serial: 0AE7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DyCH7uc7qZ-unouUFzF3X92YFU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.mft Manifest number: 0AD5 Signing time: Wed 02 Jul 2025 19:39:58 +0000 Manifest this update: Wed 02 Jul 2025 19:39:57 +0000 Manifest next update: Wed 09 Jul 2025 19:39:57 +0000 Files and hashes: 1: 5DyCH7uc7qZ-unouUFzF3X92YFU.crl (hash: oPmYw4yqPDMH+3DW0zGc5707LTAuHv4dTNQV4hBN+t0=) 2: 8ABED0585F0911ECA629B815C4F9AE02.roa (hash: lHB3EjiVIRGj7eZK04nTZOWleSjetiCEVc7tdPvMiiA=) 3: 823433125F0C11EC8C2C2820C4F9AE02.roa (hash: iND3Lx5ArlZCn+bmlp3Mm/3K9nvCqz4EFEYZ5pfFFhc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.crl rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DyCH7uc7qZ-unouUFzF3X92YFU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:39:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2791 (0xae7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114D2E, serialNumber=E43C821FBB9CEEA67EBA7A2E505CC5DD7F766055 Validity Not Before: Jul 2 19:39:57 2025 GMT Not After : Jul 9 19:39:57 2025 GMT Subject: CN=68658b0e-6ca3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:de:df:73:fc:b9:e7:76:b9:f4:08:a9:15:64: df:c3:ff:06:08:b5:1d:d9:1e:25:00:06:0e:8d:24: b2:0b:6d:60:07:0a:ca:5f:e9:07:25:34:28:e0:57: d6:1b:ac:14:79:f1:ef:3b:a4:c8:96:af:00:34:4e: 0a:b6:5f:5c:1e:41:44:c8:9b:81:3a:43:71:ec:04: 7e:f0:ec:c5:0c:a1:a5:c9:3d:7d:b1:8d:8d:e8:06: 53:0a:b3:b7:71:15:ca:80:e9:1c:32:97:3f:30:cc: 1b:bf:ad:61:ba:4e:da:c5:4e:b0:a3:59:06:a8:f9: 42:06:cc:2f:e2:42:a0:22:a7:a1:09:53:ed:38:04: 3b:7b:ef:a9:3b:63:cc:05:78:04:21:df:02:e5:d9: 42:94:7f:6a:19:71:f9:46:3d:2d:f6:27:ca:00:31: ad:d3:d9:cf:b4:3d:58:ab:a6:1a:ab:1a:c8:bb:00: b3:25:3f:23:90:40:f8:93:46:d3:b9:76:c2:c5:6c: 8c:5c:b5:2f:2c:b4:df:7e:6d:fb:be:12:87:ca:f8: 6a:42:b7:28:92:cf:88:ec:5d:13:81:65:df:bd:f3: 98:e4:48:5c:4f:c8:ac:b6:30:d0:1a:25:7d:c6:b1: 95:7c:f0:d1:c6:cd:91:77:fd:af:28:9f:30:b5:65: 38:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:72:E8:D6:04:6C:32:80:92:45:AC:F1:1F:11:8B:9E:B3:BA:0E:92 X509v3 Authority Key Identifier: keyid:E4:3C:82:1F:BB:9C:EE:A6:7E:BA:7A:2E:50:5C:C5:DD:7F:76:60:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DyCH7uc7qZ-unouUFzF3X92YFU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:fc:49:c2:93:ee:55:17:fc:6d:ea:80:17:81:a0:93:e9:78: cd:fd:a8:b9:cc:7a:fe:8f:b0:ec:2b:c9:2d:99:24:a9:bf:cc: d4:cc:ce:4d:77:e4:09:89:c0:00:c5:31:50:a9:30:fa:01:b6: 24:da:4f:97:0c:7e:14:1b:45:a3:d8:22:8e:ee:c6:7b:61:66: c2:36:0e:2e:ad:84:b3:d5:40:ad:4e:3b:68:8d:84:33:af:2f: 84:87:c8:c2:2a:69:af:0a:10:fc:d6:4d:36:29:f2:94:b0:00: a6:20:16:64:e7:91:19:8b:6a:c7:3d:ab:38:32:02:bd:b0:77: cf:75:c5:3f:bd:70:4f:b1:d2:1c:a8:8c:24:5b:3a:71:60:96: fa:31:f6:c2:05:ec:04:68:94:0a:61:29:4a:55:80:1c:c3:ef: 97:30:99:b6:b6:44:bd:62:ce:6e:f6:6a:e3:28:3c:9e:f2:13: 98:a9:e3:22:42:7b:93:19:ac:e5:35:61:47:99:a3:31:51:4a: 81:89:46:fb:bb:be:7d:a0:d8:f2:c9:1e:31:19:9f:cf:cb:0c: 63:47:22:f1:14:48:7b:7a:cc:47:e3:49:22:7d:b1:b0:71:e0: 26:5a:a6:96:72:40:31:cd:58:a2:41:60:82:cb:4e:d6:d7:70: 6e:42:3b:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCucwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTREMkUxMTAvBgNVBAUTKEU0M0M4MjFGQkI5Q0VFQTY3RUJBN0EyRTUwNUNDNURE N0Y3NjYwNTUwHhcNMjUwNzAyMTkzOTU3WhcNMjUwNzA5MTkzOTU3WjAYMRYwFAYD VQQDEw02ODY1OGIwZS02Y2EzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqN7fc/y553a59AipFWTfw/8GCLUd2R4lAAYOjSSyC21gBwrKX+kHJTQo4FfW G6wUefHvO6TIlq8ANE4Ktl9cHkFEyJuBOkNx7AR+8OzFDKGlyT19sY2N6AZTCrO3 cRXKgOkcMpc/MMwbv61huk7axU6wo1kGqPlCBswv4kKgIqehCVPtOAQ7e++pO2PM BXgEId8C5dlClH9qGXH5Rj0t9ifKADGt09nPtD1Yq6YaqxrIuwCzJT8jkED4k0bT uXbCxWyMXLUvLLTffm37vhKHyvhqQrcoks+I7F0TgWXfvfOY5EhcT8istjDQGiV9 xrGVfPDRxs2Rd/2vKJ8wtWU4OwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJVy6NYE bDKAkkWs8R8Ri56zug6SMB8GA1UdIwQYMBaAFOQ8gh+7nO6mfrp6LlBcxd1/dmBV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNEQyRS8wRkUxOUM2QzUx MUUxMUVBQjgxODI1ODBDNEY5QUUwMi81RHlDSDd1YzdxWi11bm91VUZ6RjNYOTJZ RlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVEeUNIN3VjN3FaLXVub3VVRnpGM1g5MllGVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NEQyRS8wRkUxOUM2QzUxMUUxMUVBQjgxODI1ODBDNEY5QUUwMi81RHlDSDd1Yzdx Wi11bm91VUZ6RjNYOTJZRlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCG/EnCk+5VF/xt6oAXgaCT6XjN/ai5zHr+j7DsK8ktmSSpv8zUzM5N d+QJicAAxTFQqTD6AbYk2k+XDH4UG0Wj2CKO7sZ7YWbCNg4urYSz1UCtTjtojYQz ry+Eh8jCKmmvChD81k02KfKUsACmIBZk55EZi2rHPas4MgK9sHfPdcU/vXBPsdIc qIwkWzpxYJb6MfbCBewEaJQKYSlKVYAcw++XMJm2tkS9Ys5u9mrjKDye8hOYqeMi QnuTGazlNWFHmaMxUUqBiUb7u759oNjyyR4xGZ/PywxjRyLxFEh7esxH40kifbGw ceAmWqaWckAxzViiQWCCy07W13BuQjsn -----END CERTIFICATE-----Generated at Fri Jul 4 04:02:04 2025 by rpki-client