$ rpki-client -vvf rpki.apnic.net/member_repository/A9118EDB/309BE6BE1DDD11EC883B4423C4F9AE02/5tdlUVTja2lxFXTiB5a2gCxDtxU.mft File: 5tdlUVTja2lxFXTiB5a2gCxDtxU.mft (raw, json) Hash identifier: O0pgx3sqWEONbuJKGaVKyMEXXLdBb7wlwAurV13mH6g= Subject key identifier: 42:7F:91:DC:02:68:68:3B:82:EF:FA:45:EE:F2:6E:44:6E:98:97:85 Authority key identifier: E6:D7:65:51:54:E3:6B:69:71:15:74:E2:07:96:B6:80:2C:43:B7:15 Certificate issuer: /CN=A9118EDB/serialNumber=E6D7655154E36B69711574E20796B6802C43B715 Certificate serial: 050D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5tdlUVTja2lxFXTiB5a2gCxDtxU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118EDB/309BE6BE1DDD11EC883B4423C4F9AE02/5tdlUVTja2lxFXTiB5a2gCxDtxU.mft Manifest number: 0507 Signing time: Fri 22 Aug 2025 23:50:33 +0000 Manifest this update: Fri 22 Aug 2025 23:50:33 +0000 Manifest next update: Fri 29 Aug 2025 23:50:33 +0000 Files and hashes: 1: 5tdlUVTja2lxFXTiB5a2gCxDtxU.crl (hash: qCSqJArzLgFmY22ymQp6bZ7RRG3lD5nZSQXzrr3b6Bc=) 2: BA4D01561DE011ECB872BC27C4F9AE02.roa (hash: wf1/Eq3D00+NNmg7EFhhzne2/Whu9vsX8s0Y7UfB8bU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118EDB/309BE6BE1DDD11EC883B4423C4F9AE02/5tdlUVTja2lxFXTiB5a2gCxDtxU.crl rsync://rpki.apnic.net/member_repository/A9118EDB/309BE6BE1DDD11EC883B4423C4F9AE02/5tdlUVTja2lxFXTiB5a2gCxDtxU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5tdlUVTja2lxFXTiB5a2gCxDtxU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:50:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1293 (0x50d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118EDB, serialNumber=E6D7655154E36B69711574E20796B6802C43B715 Validity Not Before: Aug 22 23:50:33 2025 GMT Not After : Aug 29 23:50:33 2025 GMT Subject: CN=68a90249-3813 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:30:38:75:08:92:eb:6f:d2:b5:23:38:f2:1f: 52:31:35:45:4b:b2:b8:1f:42:ef:39:3d:d9:d3:ea: af:30:a4:be:90:48:24:0a:ad:9d:70:99:43:87:d0: d3:64:81:ee:af:e2:77:1a:51:80:d5:88:44:81:18: fa:ea:ea:dc:ec:4f:ac:89:a6:ba:02:e0:75:a0:bb: aa:24:3f:40:66:5b:5a:d7:ac:a7:9c:b2:1f:f7:01: f2:7d:c6:da:ad:bf:c1:ed:79:bf:bc:b4:ce:43:c9: 7e:f1:5a:e3:3e:77:89:cb:9f:cf:53:06:d9:43:1e: 0f:4e:90:5e:64:4e:8a:17:63:cc:a8:eb:09:56:23: 90:30:04:90:7a:cd:4b:a9:09:aa:de:0f:1e:f8:ef: 41:62:8c:b1:e2:5b:54:99:47:95:02:da:06:07:48: 8e:31:11:0c:1e:41:af:ba:44:8d:4f:c9:7e:43:1e: cf:dd:7f:8a:92:5a:60:80:d8:5d:f0:80:2b:aa:86: 35:41:1b:02:d3:3d:41:80:f2:68:16:50:08:71:4f: c0:ef:c8:4f:9c:c2:31:22:c6:27:79:e0:6c:35:38: d6:9d:88:e8:81:dd:5f:50:4f:b4:e9:a0:b4:81:8a: 1d:85:94:6c:cb:07:07:15:b6:c7:32:7f:42:09:30: 38:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:7F:91:DC:02:68:68:3B:82:EF:FA:45:EE:F2:6E:44:6E:98:97:85 X509v3 Authority Key Identifier: keyid:E6:D7:65:51:54:E3:6B:69:71:15:74:E2:07:96:B6:80:2C:43:B7:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118EDB/309BE6BE1DDD11EC883B4423C4F9AE02/5tdlUVTja2lxFXTiB5a2gCxDtxU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5tdlUVTja2lxFXTiB5a2gCxDtxU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118EDB/309BE6BE1DDD11EC883B4423C4F9AE02/5tdlUVTja2lxFXTiB5a2gCxDtxU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:14:c8:9f:b3:ae:0c:72:94:95:3c:ed:40:19:19:b9:24:32: c3:09:02:0b:b8:d6:a0:4c:23:a9:3f:ee:9e:4b:94:f1:12:b3: 02:c7:aa:c1:d2:35:24:6a:65:80:5d:8e:44:62:67:c2:4a:c7: f2:b8:15:aa:fd:21:ab:36:a0:30:5b:84:54:59:8e:40:eb:aa: 3d:42:07:75:fb:cf:d0:ec:57:82:ba:09:41:22:92:81:0d:af: d9:84:71:56:43:cf:b1:43:70:ec:40:21:18:e5:ce:2f:c5:30: 68:f5:8b:23:0b:84:83:c3:f0:c9:20:dc:1e:ee:6c:ac:aa:2f: 10:7c:39:7d:45:fe:a2:a0:16:97:67:1b:b2:d3:db:11:db:1f: 81:46:76:e7:40:82:ec:66:2d:d6:ed:a0:93:23:b6:66:17:73: 58:82:d0:0a:1d:5a:7e:29:19:51:79:78:12:9d:8d:0c:d0:51: 45:4c:77:d7:3f:0c:7c:50:52:7b:c4:aa:d4:af:33:29:8d:c4: 5d:0f:04:2d:76:ed:34:bd:d3:34:c8:fd:66:c7:de:53:d2:8e: e8:dc:b4:6c:4f:32:10:29:43:6d:6c:53:38:c5:a6:df:dc:42: 95:d4:f7:9e:69:14:26:cf:b4:20:fe:8a:e3:8d:24:92:0b:5b: 6b:4a:b0:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThFREIxMTAvBgNVBAUTKEU2RDc2NTUxNTRFMzZCNjk3MTE1NzRFMjA3OTZCNjgw MkM0M0I3MTUwHhcNMjUwODIyMjM1MDMzWhcNMjUwODI5MjM1MDMzWjAYMRYwFAYD VQQDEw02OGE5MDI0OS0zODEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqzA4dQiS62/StSM48h9SMTVFS7K4H0LvOT3Z0+qvMKS+kEgkCq2dcJlDh9DT ZIHur+J3GlGA1YhEgRj66urc7E+siaa6AuB1oLuqJD9AZlta16ynnLIf9wHyfcba rb/B7Xm/vLTOQ8l+8VrjPneJy5/PUwbZQx4PTpBeZE6KF2PMqOsJViOQMASQes1L qQmq3g8e+O9BYoyx4ltUmUeVAtoGB0iOMREMHkGvukSNT8l+Qx7P3X+KklpggNhd 8IArqoY1QRsC0z1BgPJoFlAIcU/A78hPnMIxIsYneeBsNTjWnYjogd1fUE+06aC0 gYodhZRsywcHFbbHMn9CCTA4SQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEJ/kdwC aGg7gu/6Re7ybkRumJeFMB8GA1UdIwQYMBaAFObXZVFU42tpcRV04geWtoAsQ7cV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEVEQi8zMDlCRTZCRTFE REQxMUVDODgzQjQ0MjNDNEY5QUUwMi81dGRsVVZUamEybHhGWFRpQjVhMmdDeER0 eFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV0ZGxVVlRqYTJseEZYVGlCNWEyZ0N4RHR4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OEVEQi8zMDlCRTZCRTFEREQxMUVDODgzQjQ0MjNDNEY5QUUwMi81dGRsVVZUamEy bHhGWFRpQjVhMmdDeER0eFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqFMifs64McpSVPO1AGRm5JDLDCQILuNagTCOpP+6eS5TxErMCx6rB 0jUkamWAXY5EYmfCSsfyuBWq/SGrNqAwW4RUWY5A66o9Qgd1+8/Q7FeCuglBIpKB Da/ZhHFWQ8+xQ3DsQCEY5c4vxTBo9YsjC4SDw/DJINwe7mysqi8QfDl9Rf6ioBaX Zxuy09sR2x+BRnbnQILsZi3W7aCTI7ZmF3NYgtAKHVp+KRlReXgSnY0M0FFFTHfX Pwx8UFJ7xKrUrzMpjcRdDwQtdu00vdM0yP1mx95T0o7o3LRsTzIQKUNtbFM4xabf 3EKV1PeeaRQmz7Qg/orjjSSSC1trSrDa -----END CERTIFICATE-----Generated at Sat Aug 23 18:25:50 2025 by rpki-client