$ rpki-client -vvf rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.mft File: N5vU53MvGo0cOyItt3c8HBVBn0I.mft (raw, json) Hash identifier: Kbj0H9ctNaOAVF6TlSUfgEeIf5E4q+4BC+BArRlXkHs= Subject key identifier: 0D:86:9A:D6:19:8E:A8:8B:D3:3F:3F:98:50:1A:95:F4:72:0E:BC:24 Authority key identifier: 37:9B:D4:E7:73:2F:1A:8D:1C:3B:22:2D:B7:77:3C:1C:15:41:9F:42 Certificate issuer: /CN=A912527F/serialNumber=379BD4E7732F1A8D1C3B222DB7773C1C15419F42 Certificate serial: 029D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5vU53MvGo0cOyItt3c8HBVBn0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.mft Manifest number: 0299 Signing time: Sat 23 Aug 2025 01:50:16 +0000 Manifest this update: Sat 23 Aug 2025 01:50:16 +0000 Manifest next update: Sat 30 Aug 2025 01:50:16 +0000 Files and hashes: 1: N5vU53MvGo0cOyItt3c8HBVBn0I.crl (hash: vfTLJi9hkHC2bpkgyVGD3vm0adu6+63Hu1j2F4aacQw=) 2: BE0481A4EFA111ED87AD1F0BC4F9AE02.roa (hash: NQf56Uj9m/23kHcMdcevpS6JxvdYxcKJxC0qqxSbed4=) 3: 2C257150DBCA11EF920CC12BC4F9AE02.roa (hash: bsnKJQWxF5UUZ+STFoaUleWe8G1krXm9q3cPKIQEWa4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.crl rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5vU53MvGo0cOyItt3c8HBVBn0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 669 (0x29d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912527F, serialNumber=379BD4E7732F1A8D1C3B222DB7773C1C15419F42 Validity Not Before: Aug 23 01:50:16 2025 GMT Not After : Aug 30 01:50:16 2025 GMT Subject: CN=68a91e58-932a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:04:fd:6c:f8:2f:2f:84:16:af:09:39:e2:a7: 7d:93:6c:26:05:3c:69:49:87:c9:fe:5b:74:f8:1d: 60:95:dc:ae:7c:3b:e8:2a:95:90:8b:c1:8d:7a:64: fe:e4:07:f4:12:84:62:b9:49:fa:9d:f0:f7:4f:48: ae:71:57:b8:a7:50:50:f1:b6:62:99:f5:09:da:c5: 87:f7:f5:7f:c6:2e:89:e0:3e:0a:fb:26:08:1f:5d: 6c:04:ce:26:44:d4:9b:74:f7:ed:0a:8c:a2:98:5d: a1:df:f1:76:61:a9:88:f0:fa:d4:18:a3:e0:ca:74: a8:e6:48:2c:1d:6b:3a:70:52:59:54:f8:16:19:16: 84:9f:8d:ff:e7:10:a2:c9:32:18:3c:24:0e:70:20: f8:28:91:a9:ff:f2:8c:dd:d5:fe:40:23:6f:2a:62: 31:20:06:b4:2a:23:7f:0c:5f:fb:ca:a8:13:8f:01: 64:98:4a:8a:a0:3d:a1:3f:2a:d2:72:be:56:c6:44: 1b:f6:32:c5:ca:2f:02:4a:82:a2:38:e6:1e:3f:26: 05:9d:59:54:79:59:51:41:6b:14:44:65:97:ff:6a: a0:7d:b8:2d:33:7c:dc:35:ec:07:63:d1:32:0b:94: 3f:14:be:10:75:be:d1:1e:7b:dd:5e:8b:50:1e:0a: 3d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:86:9A:D6:19:8E:A8:8B:D3:3F:3F:98:50:1A:95:F4:72:0E:BC:24 X509v3 Authority Key Identifier: keyid:37:9B:D4:E7:73:2F:1A:8D:1C:3B:22:2D:B7:77:3C:1C:15:41:9F:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5vU53MvGo0cOyItt3c8HBVBn0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:9f:52:c6:9c:42:08:99:ed:82:39:cb:11:f3:5d:64:ec:09: 10:af:98:37:59:82:5a:31:07:49:b4:fd:1c:f5:c3:f9:1e:67: 61:a8:e1:d9:96:ca:54:a2:24:ce:54:63:33:db:91:3f:ec:e7: 21:ea:39:4d:8c:b2:46:c7:d9:1a:5e:51:b9:a6:e8:92:a2:76: bf:a9:10:60:21:f2:e6:8a:c3:84:fa:4b:e6:e0:60:70:98:ea: 03:7a:5a:68:3a:92:2d:76:51:db:9f:c8:73:b8:b2:cd:68:b7: 1e:98:92:73:53:47:de:e7:8f:e7:b2:f6:b2:29:4e:9e:c1:f0: f5:31:1d:98:a8:4e:cc:f1:91:03:76:52:1d:c2:3f:77:3e:b9: 10:20:a9:f2:68:51:d7:35:2b:81:a0:f3:48:3d:5f:b1:1e:3d: fb:ed:5a:9a:2f:c2:da:4c:ff:e2:13:be:85:b8:13:dc:67:b6: 09:f6:91:f9:28:62:f4:0f:36:a5:bb:21:50:2f:89:0d:1d:d1: 35:fa:70:8a:d7:8e:a8:1f:3f:ab:17:7b:92:a6:fa:d8:88:c2: cc:bc:0e:3f:9f:38:31:70:7d:97:30:87:f7:99:70:78:f2:c3: ad:21:c7:6c:99:37:ff:e7:ab:cf:57:4b:a0:b8:19:26:0a:6d: 63:1b:1f:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAp0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjUyN0YxMTAvBgNVBAUTKDM3OUJENEU3NzMyRjFBOEQxQzNCMjIyREI3NzczQzFD MTU0MTlGNDIwHhcNMjUwODIzMDE1MDE2WhcNMjUwODMwMDE1MDE2WjAYMRYwFAYD VQQDEw02OGE5MWU1OC05MzJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6wT9bPgvL4QWrwk54qd9k2wmBTxpSYfJ/lt0+B1gldyufDvoKpWQi8GNemT+ 5Af0EoRiuUn6nfD3T0iucVe4p1BQ8bZimfUJ2sWH9/V/xi6J4D4K+yYIH11sBM4m RNSbdPftCoyimF2h3/F2YamI8PrUGKPgynSo5kgsHWs6cFJZVPgWGRaEn43/5xCi yTIYPCQOcCD4KJGp//KM3dX+QCNvKmIxIAa0KiN/DF/7yqgTjwFkmEqKoD2hPyrS cr5WxkQb9jLFyi8CSoKiOOYePyYFnVlUeVlRQWsURGWX/2qgfbgtM3zcNewHY9Ey C5Q/FL4Qdb7RHnvdXotQHgo98QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA2GmtYZ jqiL0z8/mFAalfRyDrwkMB8GA1UdIwQYMBaAFDeb1OdzLxqNHDsiLbd3PBwVQZ9C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTI3Ri9CQ0ZEQUZDQzEw REQxMUVEODBBQTI0ODVDNEY5QUUwMi9ONXZVNTNNdkdvMGNPeUl0dDNjOEhCVkJu MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL041dlU1M012R28wY095SXR0M2M4SEJWQm4wSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTI3Ri9CQ0ZEQUZDQzEwREQxMUVEODBBQTI0ODVDNEY5QUUwMi9ONXZVNTNNdkdv MGNPeUl0dDNjOEhCVkJuMEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyn1LGnEIIme2COcsR811k7AkQr5g3WYJaMQdJtP0c9cP5HmdhqOHZ lspUoiTOVGMz25E/7Och6jlNjLJGx9kaXlG5puiSona/qRBgIfLmisOE+kvm4GBw mOoDelpoOpItdlHbn8hzuLLNaLcemJJzU0fe54/nsvayKU6ewfD1MR2YqE7M8ZED dlIdwj93PrkQIKnyaFHXNSuBoPNIPV+xHj377VqaL8LaTP/iE76FuBPcZ7YJ9pH5 KGL0DzaluyFQL4kNHdE1+nCK146oHz+rF3uSpvrYiMLMvA4/nzgxcH2XMIf3mXB4 8sOtIcdsmTf/56vPV0uguBkmCm1jGx/U -----END CERTIFICATE-----Generated at Sat Aug 23 21:17:29 2025 by rpki-client