$ rpki-client -vvf rpki.apnic.net/member_repository/A9124926/B38578C482D911EAB9FCD285C4F9AE02/5nG8sr6VpsiFJxIdiBXovPGKoeI.mft File: 5nG8sr6VpsiFJxIdiBXovPGKoeI.mft (raw, json) Hash identifier: oopdx+GzmQx3gjyD9tAwOr4Rl84AtQfS9gt+HtxpL5A= Subject key identifier: A1:CA:8D:34:84:D9:95:36:95:CA:34:3A:B5:7D:88:70:15:0A:7A:B5 Authority key identifier: E6:71:BC:B2:BE:95:A6:C8:85:27:12:1D:88:15:E8:BC:F1:8A:A1:E2 Certificate issuer: /CN=A9124926/serialNumber=E671BCB2BE95A6C88527121D8815E8BCF18AA1E2 Certificate serial: 09F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nG8sr6VpsiFJxIdiBXovPGKoeI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9124926/B38578C482D911EAB9FCD285C4F9AE02/5nG8sr6VpsiFJxIdiBXovPGKoeI.mft Manifest number: 09ED Signing time: Fri 22 Aug 2025 20:01:26 +0000 Manifest this update: Fri 22 Aug 2025 20:01:25 +0000 Manifest next update: Fri 29 Aug 2025 20:01:25 +0000 Files and hashes: 1: 5nG8sr6VpsiFJxIdiBXovPGKoeI.crl (hash: DLqJCo2OUM9D6nyu/en8h4+Qmdg8ZA/HaWJyecmWvCA=) 2: 209BA8B682DF11EAABBC5018C4F9AE02.roa (hash: BPcITeixSaXAriwkv0vsDzYrlqCAlvQdRZ4cRFHy1EA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9124926/B38578C482D911EAB9FCD285C4F9AE02/5nG8sr6VpsiFJxIdiBXovPGKoeI.crl rsync://rpki.apnic.net/member_repository/A9124926/B38578C482D911EAB9FCD285C4F9AE02/5nG8sr6VpsiFJxIdiBXovPGKoeI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nG8sr6VpsiFJxIdiBXovPGKoeI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2550 (0x9f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124926, serialNumber=E671BCB2BE95A6C88527121D8815E8BCF18AA1E2 Validity Not Before: Aug 22 20:01:25 2025 GMT Not After : Aug 29 20:01:25 2025 GMT Subject: CN=68a8cc96-eb5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ab:61:9e:f9:04:20:2c:11:61:c3:71:b4:b9: 04:b4:ae:0a:d8:16:06:f2:56:d3:38:92:b5:d8:ce: 4d:ff:01:4a:d4:94:ac:9d:0e:7f:c1:3e:48:4f:7f: 5b:ea:ee:d8:37:89:3f:bc:e0:6a:cc:b7:f9:92:64: 68:d1:32:7c:2c:35:0e:8d:c0:9e:00:8d:a0:eb:43: 6f:52:cd:09:17:2c:2a:98:3f:f0:9e:a2:48:65:e2: 8d:d5:da:65:6b:71:6b:7e:a0:8d:0c:0f:23:76:75: 13:ac:b6:02:a5:cf:e3:1a:c0:93:10:68:3f:a7:58: 42:d2:62:e8:c3:41:bc:92:a2:e9:0c:f3:b1:3e:18: 42:f3:ff:87:91:d6:2b:15:97:8d:8a:9c:bb:d3:ca: 64:19:ab:c5:c7:da:50:06:3b:82:a9:ab:f1:5a:c9: 9f:15:a2:7c:5e:a2:6c:fc:d4:26:eb:df:26:e2:e1: dd:46:96:3b:eb:14:cd:94:b5:0b:38:0b:ce:c9:03: a2:ed:3f:d6:a7:cd:a6:01:f0:c6:97:4e:71:65:67: 83:0a:87:d5:28:cd:13:41:46:2a:41:97:b9:66:e8: bd:d4:24:27:a0:69:a5:87:09:86:39:4c:ce:19:d1: ee:ef:4c:2d:a8:48:c5:6e:d3:b0:46:55:ef:a7:b6: f1:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:CA:8D:34:84:D9:95:36:95:CA:34:3A:B5:7D:88:70:15:0A:7A:B5 X509v3 Authority Key Identifier: keyid:E6:71:BC:B2:BE:95:A6:C8:85:27:12:1D:88:15:E8:BC:F1:8A:A1:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9124926/B38578C482D911EAB9FCD285C4F9AE02/5nG8sr6VpsiFJxIdiBXovPGKoeI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nG8sr6VpsiFJxIdiBXovPGKoeI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124926/B38578C482D911EAB9FCD285C4F9AE02/5nG8sr6VpsiFJxIdiBXovPGKoeI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:f7:9c:45:17:e4:89:43:45:89:15:dc:4d:16:e7:3a:bf:7b: 98:14:56:8c:a1:ee:b5:f1:f7:f2:99:b8:85:79:13:75:75:2d: cd:92:59:f3:dc:61:2e:2b:eb:e1:f0:ff:b6:58:0d:38:d5:76: 90:c2:04:29:a7:83:2f:1f:b3:6d:b7:fe:62:2e:18:cd:1b:98: fc:24:0d:1e:1f:e8:1f:5c:cb:98:b5:f8:22:47:22:ee:9d:80: b0:0b:4d:ab:1d:f3:c7:f0:fc:be:c6:3b:33:2e:3a:9d:c1:d2: 2a:3d:61:89:f2:93:c9:f4:9f:46:a9:bf:33:ff:80:b5:97:2d: fc:4b:b6:39:81:55:52:c0:18:e1:ae:90:f4:08:2c:ce:04:a4: b0:f9:0f:44:03:24:80:e2:c0:37:01:94:38:27:f9:7e:bd:f9: b5:d2:95:04:9b:4e:6b:54:1a:80:76:57:99:3e:ef:b0:b3:f0: 1f:a4:ff:a6:e5:cd:99:00:0a:78:f1:18:b7:f0:3d:cf:b7:98: e3:09:36:a9:4e:fd:08:02:f2:5a:72:b8:71:08:87:20:71:04: 47:4c:7b:c1:99:a8:04:54:d1:fa:1a:c7:e8:73:87:e7:50:64: d7:32:32:8a:97:38:46:5c:88:26:9b:a3:5b:ce:44:4b:52:4e: 44:e9:0c:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCfYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQ5MjYxMTAvBgNVBAUTKEU2NzFCQ0IyQkU5NUE2Qzg4NTI3MTIxRDg4MTVFOEJD RjE4QUExRTIwHhcNMjUwODIyMjAwMTI1WhcNMjUwODI5MjAwMTI1WjAYMRYwFAYD VQQDEw02OGE4Y2M5Ni1lYjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0qthnvkEICwRYcNxtLkEtK4K2BYG8lbTOJK12M5N/wFK1JSsnQ5/wT5IT39b 6u7YN4k/vOBqzLf5kmRo0TJ8LDUOjcCeAI2g60NvUs0JFywqmD/wnqJIZeKN1dpl a3FrfqCNDA8jdnUTrLYCpc/jGsCTEGg/p1hC0mLow0G8kqLpDPOxPhhC8/+HkdYr FZeNipy708pkGavFx9pQBjuCqavxWsmfFaJ8XqJs/NQm698m4uHdRpY76xTNlLUL OAvOyQOi7T/Wp82mAfDGl05xZWeDCofVKM0TQUYqQZe5Zui91CQnoGmlhwmGOUzO GdHu70wtqEjFbtOwRlXvp7bxwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKHKjTSE 2ZU2lco0OrV9iHAVCnq1MB8GA1UdIwQYMBaAFOZxvLK+labIhScSHYgV6LzxiqHi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDkyNi9CMzg1NzhDNDgy RDkxMUVBQjlGQ0QyODVDNEY5QUUwMi81bkc4c3I2VnBzaUZKeElkaUJYb3ZQR0tv ZUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVuRzhzcjZWcHNpRkp4SWRpQlhvdlBHS29lSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDkyNi9CMzg1NzhDNDgyRDkxMUVBQjlGQ0QyODVDNEY5QUUwMi81bkc4c3I2VnBz aUZKeElkaUJYb3ZQR0tvZUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAM95xFF+SJQ0WJFdxNFuc6v3uYFFaMoe618ffymbiFeRN1dS3Nklnz 3GEuK+vh8P+2WA041XaQwgQpp4MvH7Ntt/5iLhjNG5j8JA0eH+gfXMuYtfgiRyLu nYCwC02rHfPH8Py+xjszLjqdwdIqPWGJ8pPJ9J9Gqb8z/4C1ly38S7Y5gVVSwBjh rpD0CCzOBKSw+Q9EAySA4sA3AZQ4J/l+vfm10pUEm05rVBqAdleZPu+ws/AfpP+m 5c2ZAAp48Ri38D3Pt5jjCTapTv0IAvJacrhxCIcgcQRHTHvBmagEVNH6Gsfoc4fn UGTXMjKKlzhGXIgmm6NbzkRLUk5E6Qwc -----END CERTIFICATE-----Generated at Sat Aug 23 19:42:23 2025 by rpki-client