$ rpki-client -vvf rpki.apnic.net/member_repository/A9125DDA/80AC0986796E11F08FC51774C4F9AE02/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.mft File: 5RAgj9OQQuM2YhMKQqj4P-7PvnQ.mft (raw, json) Hash identifier: PeAKqhcz6niCEt4Yng3QDKR+ByROEvSeW5z/QJcTKP0= Subject key identifier: 12:34:63:75:AE:27:74:A9:4A:B1:00:62:71:2B:10:AA:4C:FC:8C:0C Authority key identifier: E5:10:20:8F:D3:90:42:E3:36:62:13:0A:42:A8:F8:3F:EE:CF:BE:74 Certificate issuer: /CN=A9125DDA/serialNumber=E510208FD39042E33662130A42A8F83FEECFBE74 Certificate serial: 07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125DDA/80AC0986796E11F08FC51774C4F9AE02/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.mft Manifest number: 06 Signing time: Sat 23 Aug 2025 08:23:19 +0000 Manifest this update: Sat 23 Aug 2025 08:23:19 +0000 Manifest next update: Sat 30 Aug 2025 08:23:19 +0000 Files and hashes: 1: 5RAgj9OQQuM2YhMKQqj4P-7PvnQ.crl (hash: AvkH6wmMa04Wzf/rPOPQKwi5ZI9ge3UZcGdpfmpNF/g=) 2: F91331C4796E11F095D14275C4F9AE02.roa (hash: 6wo7WUrPZLKlQaonftVwuTXqab8pX51e733TWWNJa3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125DDA/80AC0986796E11F08FC51774C4F9AE02/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.crl rsync://rpki.apnic.net/member_repository/A9125DDA/80AC0986796E11F08FC51774C4F9AE02/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:23:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125DDA, serialNumber=E510208FD39042E33662130A42A8F83FEECFBE74 Validity Not Before: Aug 23 08:23:19 2025 GMT Not After : Aug 30 08:23:19 2025 GMT Subject: CN=68a97a77-5f1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f1:08:ba:6b:35:ef:fe:4a:1d:61:43:ba:b6: e2:3c:68:e7:68:a6:0a:4d:cd:4b:96:77:f8:c4:89: 3c:06:11:2b:62:d1:7f:81:34:b9:19:26:1a:36:72: 54:d6:cd:b8:7f:e8:9c:43:14:ad:18:01:df:37:db: 5b:28:7e:ad:28:e4:a7:a4:4c:0a:c5:af:0f:c8:3d: 52:fc:5b:8f:7e:c6:9e:36:78:76:49:f7:42:a8:b7: f9:ad:19:70:8b:b0:f5:d9:d2:5c:29:1e:95:fa:15: 28:5d:c4:96:ab:03:13:9e:a1:d5:77:e4:fc:bc:aa: 5d:94:e1:2a:93:27:2a:6d:74:2a:92:ae:f9:ca:3c: 2d:ee:5d:ae:21:e7:2b:db:56:8b:3d:6b:1f:2f:ee: 85:0c:e0:59:70:a8:73:ad:6c:c6:2d:a9:6a:57:77: fc:47:df:bb:c3:51:47:2d:fd:2b:38:f1:1f:80:4b: 12:be:fe:e8:06:d4:60:53:80:70:76:92:5e:4d:28: ed:6d:41:41:f3:39:9f:7d:3d:78:a7:bb:50:51:ea: e7:be:21:c9:92:37:d4:d1:43:ff:14:76:82:50:60: 95:84:a4:7a:68:94:ad:77:75:93:ef:05:de:f5:69: 7e:e1:e2:23:3a:af:a6:7c:2c:ae:bc:46:33:54:02: ad:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:34:63:75:AE:27:74:A9:4A:B1:00:62:71:2B:10:AA:4C:FC:8C:0C X509v3 Authority Key Identifier: keyid:E5:10:20:8F:D3:90:42:E3:36:62:13:0A:42:A8:F8:3F:EE:CF:BE:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125DDA/80AC0986796E11F08FC51774C4F9AE02/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125DDA/80AC0986796E11F08FC51774C4F9AE02/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:91:3f:0c:f9:cd:69:73:d8:2a:b4:c2:f8:89:ca:20:f7:99: 49:d8:6c:4e:aa:71:81:27:f7:49:5e:47:65:0b:d0:89:54:77: 2f:f9:10:14:be:fa:7d:1d:b4:52:1c:7c:4b:6b:80:d2:ed:02: 97:d1:d8:71:9b:c7:e6:ec:95:0f:e2:f8:a5:f6:42:38:dd:c4: 94:b6:7c:8a:fc:f3:ad:8e:40:10:d4:6a:98:1b:4e:4d:e2:82: 7d:27:bd:a2:53:9e:45:1f:09:52:b1:e6:68:35:14:ff:40:27: f9:72:9a:a5:c0:bb:81:0b:cc:c6:5f:41:af:af:85:6a:49:1e: e4:e7:df:aa:b2:96:ca:2f:fd:54:1b:d8:56:06:a5:ca:38:29: 03:81:98:a3:f2:e3:c6:59:e3:fd:3a:1e:91:03:b1:e7:4a:92: bb:1c:ca:af:de:16:9f:7a:9a:89:34:ce:c6:cc:36:07:61:f2: 5b:ea:50:27:96:5b:c6:96:b3:44:33:ff:cb:42:0d:4b:bb:fa: 17:2c:a8:2a:a2:1e:39:4d:76:e3:55:5d:2f:a1:99:db:53:f6: 47:8d:46:2b:65:3c:4d:08:66:87:07:02:85:e8:58:94:4e:c7: 20:fa:38:e4:63:c3:ea:e8:ce:18:f1:2b:84:4a:50:3e:67:ff: b8:17:4e:d2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NUREQTExMC8GA1UEBRMoRTUxMDIwOEZEMzkwNDJFMzM2NjIxMzBBNDJBOEY4M0ZF RUNGQkU3NDAeFw0yNTA4MjMwODIzMTlaFw0yNTA4MzAwODIzMTlaMBgxFjAUBgNV BAMTDTY4YTk3YTc3LTVmMWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDO8Qi6azXv/kodYUO6tuI8aOdopgpNzUuWd/jEiTwGESti0X+BNLkZJho2clTW zbh/6JxDFK0YAd8321sofq0o5KekTArFrw/IPVL8W49+xp42eHZJ90Kot/mtGXCL sPXZ0lwpHpX6FShdxJarAxOeodV35Py8ql2U4SqTJyptdCqSrvnKPC3uXa4h5yvb Vos9ax8v7oUM4FlwqHOtbMYtqWpXd/xH37vDUUct/Ss48R+ASxK+/ugG1GBTgHB2 kl5NKO1tQUHzOZ99PXinu1BR6ue+IcmSN9TRQ/8UdoJQYJWEpHpolK13dZPvBd71 aX7h4iM6r6Z8LK68RjNUAq1LAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUEjRjda4n dKlKsQBicSsQqkz8jAwwHwYDVR0jBBgwFoAU5RAgj9OQQuM2YhMKQqj4P+7PvnQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1RERBLzgwQUMwOTg2Nzk2 RTExRjA4RkM1MTc3NEM0RjlBRTAyLzVSQWdqOU9RUXVNMlloTUtRcWo0UC03UHZu US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNVJBZ2o5T1FRdU0yWWhNS1FxajRQLTdQdm5RLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1 RERBLzgwQUMwOTg2Nzk2RTExRjA4RkM1MTc3NEM0RjlBRTAyLzVSQWdqOU9RUXVN MlloTUtRcWo0UC03UHZuUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADORPwz5zWlz2Cq0wviJyiD3mUnYbE6qcYEn90leR2UL0IlUdy/5EBS+ +n0dtFIcfEtrgNLtApfR2HGbx+bslQ/i+KX2QjjdxJS2fIr8862OQBDUapgbTk3i gn0nvaJTnkUfCVKx5mg1FP9AJ/lymqXAu4ELzMZfQa+vhWpJHuTn36qylsov/VQb 2FYGpco4KQOBmKPy48ZZ4/06HpEDsedKkrscyq/eFp96mok0zsbMNgdh8lvqUCeW W8aWs0Qz/8tCDUu7+hcsqCqiHjlNduNVXS+hmdtT9keNRitlPE0IZocHAoXoWJRO xyD6OORjw+rozhjxK4RKUD5n/7gXTtI= -----END CERTIFICATE-----Generated at Sun Aug 24 07:15:23 2025 by rpki-client