$ rpki-client -vvf rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.mft File: 5DyCH7uc7qZ-unouUFzF3X92YFU.mft (raw, json) Hash identifier: vuGk5Z3Yq3tVaht+0fK1sKsOecEPMB4qYuj5V/XpmoI= Subject key identifier: AB:87:AD:86:55:4E:00:82:8D:0E:2F:4C:D1:DC:36:F6:8E:6C:35:C0 Authority key identifier: E4:3C:82:1F:BB:9C:EE:A6:7E:BA:7A:2E:50:5C:C5:DD:7F:76:60:55 Certificate issuer: /CN=A9114D2E/serialNumber=E43C821FBB9CEEA67EBA7A2E505CC5DD7F766055 Certificate serial: 0B01 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DyCH7uc7qZ-unouUFzF3X92YFU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.mft Manifest number: 0AEF Signing time: Fri 22 Aug 2025 19:31:27 +0000 Manifest this update: Fri 22 Aug 2025 19:31:26 +0000 Manifest next update: Fri 29 Aug 2025 19:31:26 +0000 Files and hashes: 1: 5DyCH7uc7qZ-unouUFzF3X92YFU.crl (hash: fU3yv8SCW6IJHoA0JtTXTVllY3CNjwGFf7MHMLT+gxI=) 2: 8ABED0585F0911ECA629B815C4F9AE02.roa (hash: lHB3EjiVIRGj7eZK04nTZOWleSjetiCEVc7tdPvMiiA=) 3: 823433125F0C11EC8C2C2820C4F9AE02.roa (hash: iND3Lx5ArlZCn+bmlp3Mm/3K9nvCqz4EFEYZ5pfFFhc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.crl rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DyCH7uc7qZ-unouUFzF3X92YFU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:31:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2817 (0xb01) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114D2E, serialNumber=E43C821FBB9CEEA67EBA7A2E505CC5DD7F766055 Validity Not Before: Aug 22 19:31:26 2025 GMT Not After : Aug 29 19:31:26 2025 GMT Subject: CN=68a8c58e-e250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a5:54:d8:bb:05:64:58:b2:9c:9e:e2:c5:aa: 4b:90:ae:70:b1:0f:e2:a9:7a:16:f1:f5:7a:d7:53: e4:0f:81:79:e3:ec:a8:7d:5a:2a:a5:9c:4a:90:b4: fb:31:56:fc:75:15:ef:f6:b4:f9:f3:15:97:45:a9: 47:d6:c2:98:25:4e:dc:ef:0b:43:0c:d2:03:17:a8: 49:db:08:30:fa:cc:e1:1f:30:49:c1:3e:0e:1d:75: 1f:a7:27:cc:6c:fd:73:0d:ef:64:05:2f:91:ec:0a: ce:ca:54:9c:75:c6:a6:eb:61:fa:30:0c:59:28:62: 34:df:2e:16:12:65:0c:3d:f2:d0:c9:19:f2:01:e0: 28:dd:66:92:d7:54:f3:d1:e2:09:5d:c5:82:c1:32: 9e:72:80:b9:52:1f:03:21:e9:6f:d7:cd:83:23:f5: 25:0b:26:21:be:ef:c8:97:10:f1:2f:47:05:97:db: 5e:be:79:60:50:32:8a:ee:c2:5e:2c:8f:4e:5a:9c: 6c:9c:52:7f:53:7f:c0:e0:aa:e2:82:e4:47:c1:3d: 05:8d:a9:88:aa:2e:cd:d7:dd:c7:ff:da:b4:6a:53: 5e:07:2f:94:85:07:25:de:20:ce:27:e7:84:a2:6f: c5:bd:83:14:d3:9f:6c:bc:2c:19:d1:35:93:ea:45: 44:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:87:AD:86:55:4E:00:82:8D:0E:2F:4C:D1:DC:36:F6:8E:6C:35:C0 X509v3 Authority Key Identifier: keyid:E4:3C:82:1F:BB:9C:EE:A6:7E:BA:7A:2E:50:5C:C5:DD:7F:76:60:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DyCH7uc7qZ-unouUFzF3X92YFU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:69:8c:eb:1c:e4:c0:2e:52:6d:8e:ce:94:e8:3a:9f:9d:3d: 9a:cd:5e:9c:10:bd:2a:11:4d:5f:25:cc:4f:b0:3e:7f:52:46: e5:1c:6e:0c:14:72:88:3d:4a:64:cf:43:fe:5d:b7:80:dc:d8: e0:ad:5e:74:5d:ba:93:b6:48:6a:2e:f2:de:2d:5b:15:61:24: 4d:ad:3a:9d:0e:40:18:39:2c:cc:cd:87:a9:e4:27:77:bf:4e: 03:6e:a6:50:4b:03:9a:e2:36:f6:94:a0:29:4c:bb:b5:46:74: 0a:80:ea:b4:4d:a9:e7:79:a0:2d:31:a7:a1:22:1e:35:96:25: 83:6d:1b:f5:48:41:91:3c:6a:ba:9a:8f:88:d6:4a:e7:df:39: 87:c1:36:26:e6:2e:f1:b3:f5:64:c2:b0:34:6a:e8:d2:7f:b0: 04:a2:c9:cf:bc:b0:56:c6:30:96:a4:ce:11:c5:d9:b2:4c:1f: 21:15:3e:33:c7:38:d0:ac:c7:9f:fa:e0:a5:22:c2:2c:85:10: aa:f3:57:20:2d:a5:b4:a5:58:54:ac:97:79:70:45:0c:47:ae: 9a:a1:4b:48:cd:4c:e5:d8:41:ff:04:7a:06:c6:48:a4:d0:10: e8:58:57:54:de:8a:90:ed:5e:59:93:3e:01:ed:6f:44:c2:b5: e4:46:c8:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCwEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTREMkUxMTAvBgNVBAUTKEU0M0M4MjFGQkI5Q0VFQTY3RUJBN0EyRTUwNUNDNURE N0Y3NjYwNTUwHhcNMjUwODIyMTkzMTI2WhcNMjUwODI5MTkzMTI2WjAYMRYwFAYD VQQDEw02OGE4YzU4ZS1lMjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0KVU2LsFZFiynJ7ixapLkK5wsQ/iqXoW8fV611PkD4F54+yofVoqpZxKkLT7 MVb8dRXv9rT58xWXRalH1sKYJU7c7wtDDNIDF6hJ2wgw+szhHzBJwT4OHXUfpyfM bP1zDe9kBS+R7ArOylScdcam62H6MAxZKGI03y4WEmUMPfLQyRnyAeAo3WaS11Tz 0eIJXcWCwTKecoC5Uh8DIelv182DI/UlCyYhvu/IlxDxL0cFl9tevnlgUDKK7sJe LI9OWpxsnFJ/U3/A4KriguRHwT0FjamIqi7N193H/9q0alNeBy+UhQcl3iDOJ+eE om/FvYMU059svCwZ0TWT6kVEFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKuHrYZV TgCCjQ4vTNHcNvaObDXAMB8GA1UdIwQYMBaAFOQ8gh+7nO6mfrp6LlBcxd1/dmBV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNEQyRS8wRkUxOUM2QzUx MUUxMUVBQjgxODI1ODBDNEY5QUUwMi81RHlDSDd1YzdxWi11bm91VUZ6RjNYOTJZ RlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVEeUNIN3VjN3FaLXVub3VVRnpGM1g5MllGVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NEQyRS8wRkUxOUM2QzUxMUUxMUVBQjgxODI1ODBDNEY5QUUwMi81RHlDSDd1Yzdx Wi11bm91VUZ6RjNYOTJZRlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClaYzrHOTALlJtjs6U6DqfnT2azV6cEL0qEU1fJcxPsD5/UkblHG4M FHKIPUpkz0P+XbeA3NjgrV50XbqTtkhqLvLeLVsVYSRNrTqdDkAYOSzMzYep5Cd3 v04DbqZQSwOa4jb2lKApTLu1RnQKgOq0TanneaAtMaehIh41liWDbRv1SEGRPGq6 mo+I1krn3zmHwTYm5i7xs/VkwrA0aujSf7AEosnPvLBWxjCWpM4RxdmyTB8hFT4z xzjQrMef+uClIsIshRCq81cgLaW0pVhUrJd5cEUMR66aoUtIzUzl2EH/BHoGxkik 0BDoWFdU3oqQ7V5Zkz4B7W9EwrXkRsgk -----END CERTIFICATE-----Generated at Sat Aug 23 10:55:12 2025 by rpki-client