$ rpki-client -vvf rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft File: 5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft (raw, json) Hash identifier: 689xueIwG52b2y+inQb1wP04bd2k1lM5RPBzjHmZ6OI= Subject key identifier: 9A:E3:AD:C0:C9:39:D3:00:20:06:89:2C:17:F9:FF:C4:FE:2D:C7:FC Authority key identifier: E4:21:42:E3:E5:84:57:62:D0:E8:D6:8B:02:FB:10:E8:75:BC:6B:F2 Certificate issuer: /CN=A912DA1D/serialNumber=E42142E3E5845762D0E8D68B02FB10E875BC6BF2 Certificate serial: 038D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft Manifest number: 037D Signing time: Sat 23 Aug 2025 01:08:08 +0000 Manifest this update: Sat 23 Aug 2025 01:08:08 +0000 Manifest next update: Sat 30 Aug 2025 01:08:08 +0000 Files and hashes: 1: 5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl (hash: OSqPxkYpylbdf50x+WNpU3bAfYeMM3OC8yufhYUTNbA=) 2: 44B90434DFA011ED8C895F7CC4F9AE02.roa (hash: OB3c0FOnO7U7Cy2O3WKkzCkZvRGF4Swy8zD33qNbalg=) 3: 0589A4B8DF9511EDAAA7E22AC4F9AE02.roa (hash: PCa5nWLR+HuKgmwdVX9BOmG2ZZvLJrtIyJd8CbPbXng=) 4: 36B1CD340A6D11ED89FD3F13C4F9AE02.roa (hash: JCVj+AscF7hWsvaIqNJTPDabzygkqnGZEfVjCkrIsro=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:08:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 909 (0x38d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DA1D, serialNumber=E42142E3E5845762D0E8D68B02FB10E875BC6BF2 Validity Not Before: Aug 23 01:08:08 2025 GMT Not After : Aug 30 01:08:08 2025 GMT Subject: CN=68a91478-b231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:54:d0:04:b0:76:ee:e8:65:4c:e4:4c:73:71: 67:b4:d9:6a:79:2c:d3:c9:18:b0:bb:c0:a9:8a:d8: 75:61:5a:d5:e6:6a:f3:03:b6:b1:7b:d8:15:fa:1b: 2b:0b:2d:51:1d:6d:ef:50:be:28:0a:11:18:15:be: f6:cc:5c:1a:3b:09:56:a4:05:47:0a:39:c8:6d:ed: 3e:d6:7a:dd:db:ec:05:d7:ca:1e:d7:2b:62:7e:56: 83:13:13:28:9e:56:df:bc:9b:d5:33:32:7e:61:5c: e8:28:8b:bd:96:86:2b:6f:09:cf:8a:ba:8b:0c:f4: d9:35:45:95:7c:b2:e4:eb:6a:19:3d:04:e6:05:1e: 1a:af:01:3e:16:ab:fd:f6:69:9f:b9:15:52:85:06: e1:5c:c1:8f:3c:51:ad:35:e8:b1:8b:ca:d6:f5:54: e8:3d:8c:16:ab:c2:0a:df:74:c3:be:a0:e8:7f:0f: f4:2e:a8:20:db:81:a7:6b:33:41:61:b9:66:59:fc: c6:02:45:84:af:00:c7:07:a1:a4:7e:48:8f:a7:04: ce:af:48:dd:09:0b:14:60:bb:e0:0e:ae:1f:ec:f1: b3:37:02:f6:88:cf:ab:d2:69:6b:64:65:fe:83:b4: 2f:90:85:4f:2d:08:ce:f1:1f:4b:4b:bc:a2:15:c1: 5d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:E3:AD:C0:C9:39:D3:00:20:06:89:2C:17:F9:FF:C4:FE:2D:C7:FC X509v3 Authority Key Identifier: keyid:E4:21:42:E3:E5:84:57:62:D0:E8:D6:8B:02:FB:10:E8:75:BC:6B:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:84:37:59:79:c5:4b:d6:a1:ae:43:4b:eb:f0:cc:e2:20:af: 27:85:9a:74:89:fd:03:45:52:c2:3d:a2:5d:6e:45:1b:03:8e: 79:f0:07:4c:57:b1:7f:e3:b7:21:4b:e4:38:f5:30:10:ca:42: 16:4d:cb:1d:b1:87:04:a3:8e:d0:0a:08:26:d8:a5:2a:9f:46: 62:16:35:12:d9:cc:07:c6:0a:bc:a2:bc:a4:63:ea:93:9b:c2: b2:0c:16:a7:da:da:41:54:44:bf:08:9c:f2:21:fc:16:26:7c: fa:75:d8:d2:9e:2c:37:ae:26:8f:87:1a:f1:45:cb:f1:5d:16: 5f:57:95:12:79:0f:ef:84:d8:af:c2:12:8c:f7:b4:3c:da:d7: b6:d3:4d:de:8f:46:39:e9:8d:e6:67:97:94:43:df:e3:78:ab: 0c:c5:f9:ee:ea:9c:27:eb:a3:3e:e8:80:82:7c:7a:e3:71:36: 7e:b8:ee:ce:34:b5:d1:35:6e:63:37:2b:04:d9:9d:30:4a:b1: 96:d0:10:e5:93:ef:73:d9:f0:34:8e:97:71:57:f6:bd:ab:98: d0:d2:59:2d:c9:91:a3:38:c0:05:8a:17:19:8e:e3:17:ea:ec: bf:00:05:7a:d8:1c:4f:3e:15:f0:92:ea:64:b6:69:7f:34:e3: 91:6d:1f:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA40wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRBMUQxMTAvBgNVBAUTKEU0MjE0MkUzRTU4NDU3NjJEMEU4RDY4QjAyRkIxMEU4 NzVCQzZCRjIwHhcNMjUwODIzMDEwODA4WhcNMjUwODMwMDEwODA4WjAYMRYwFAYD VQQDEw02OGE5MTQ3OC1iMjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv1TQBLB27uhlTORMc3FntNlqeSzTyRiwu8Cpith1YVrV5mrzA7axe9gV+hsr Cy1RHW3vUL4oChEYFb72zFwaOwlWpAVHCjnIbe0+1nrd2+wF18oe1ytiflaDExMo nlbfvJvVMzJ+YVzoKIu9loYrbwnPirqLDPTZNUWVfLLk62oZPQTmBR4arwE+Fqv9 9mmfuRVShQbhXMGPPFGtNeixi8rW9VToPYwWq8IK33TDvqDofw/0Lqgg24GnazNB YblmWfzGAkWErwDHB6GkfkiPpwTOr0jdCQsUYLvgDq4f7PGzNwL2iM+r0mlrZGX+ g7QvkIVPLQjO8R9LS7yiFcFdowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJrjrcDJ OdMAIAaJLBf5/8T+Lcf8MB8GA1UdIwQYMBaAFOQhQuPlhFdi0OjWiwL7EOh1vGvy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREExRC9CNDZFNDJEQUJC MUIxMUVDQjBBQzBGMTRDNEY5QUUwMi81Q0ZDNC1XRVYyTFE2TmFMQXZzUTZIVzhh X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVDRkM0LVdFVjJMUTZOYUxBdnNRNkhXOGFfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REExRC9CNDZFNDJEQUJCMUIxMUVDQjBBQzBGMTRDNEY5QUUwMi81Q0ZDNC1XRVYy TFE2TmFMQXZzUTZIVzhhX0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlhDdZecVL1qGuQ0vr8MziIK8nhZp0if0DRVLCPaJdbkUbA4558AdM V7F/47chS+Q49TAQykIWTcsdsYcEo47QCggm2KUqn0ZiFjUS2cwHxgq8orykY+qT m8KyDBan2tpBVES/CJzyIfwWJnz6ddjSniw3riaPhxrxRcvxXRZfV5USeQ/vhNiv whKM97Q82te2003ej0Y56Y3mZ5eUQ9/jeKsMxfnu6pwn66M+6ICCfHrjcTZ+uO7O NLXRNW5jNysE2Z0wSrGW0BDlk+9z2fA0jpdxV/a9q5jQ0lktyZGjOMAFihcZjuMX 6uy/AAV62BxPPhXwkupktml/NOORbR98 -----END CERTIFICATE-----Generated at Sat Aug 23 16:35:15 2025 by rpki-client