$ rpki-client -vvf rpki.apnic.net/member_repository/A9139661/0F43EC3C58E411F08726A57AC4F9AE02/D5FKHclPW-QuiDwq3VQwvN9t8zQ.mft File: D5FKHclPW-QuiDwq3VQwvN9t8zQ.mft (raw, json) Hash identifier: QsP6WTMMBHunrj2AukeMx+qsDMtDH3dFcH+Fl65fs18= Subject key identifier: 07:44:13:EF:FE:12:E5:F3:54:DF:C8:65:07:69:DF:B0:94:1E:0C:CE Authority key identifier: 0F:91:4A:1D:C9:4F:5B:E4:2E:88:3C:2A:DD:54:30:BC:DF:6D:F3:34 Certificate issuer: /CN=A9139661/serialNumber=0F914A1DC94F5BE42E883C2ADD5430BCDF6DF334 Certificate serial: 2D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D5FKHclPW-QuiDwq3VQwvN9t8zQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139661/0F43EC3C58E411F08726A57AC4F9AE02/D5FKHclPW-QuiDwq3VQwvN9t8zQ.mft Manifest number: 26 Signing time: Sat 23 Aug 2025 08:09:02 +0000 Manifest this update: Sat 23 Aug 2025 08:09:01 +0000 Manifest next update: Sat 30 Aug 2025 08:09:01 +0000 Files and hashes: 1: D5FKHclPW-QuiDwq3VQwvN9t8zQ.crl (hash: EXY4bWv76nltbtABT6m2ITqTDOHqhAVdaYyGypvZqhA=) 2: C4C4028A5B4C11F0807A3A60C4F9AE02.roa (hash: PluL4u9/W0M7wPOfAaOa3JDqqwKeth4r4yq9LLQTP5Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139661/0F43EC3C58E411F08726A57AC4F9AE02/D5FKHclPW-QuiDwq3VQwvN9t8zQ.crl rsync://rpki.apnic.net/member_repository/A9139661/0F43EC3C58E411F08726A57AC4F9AE02/D5FKHclPW-QuiDwq3VQwvN9t8zQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D5FKHclPW-QuiDwq3VQwvN9t8zQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:10:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139661, serialNumber=0F914A1DC94F5BE42E883C2ADD5430BCDF6DF334 Validity Not Before: Aug 23 08:09:01 2025 GMT Not After : Aug 30 08:09:01 2025 GMT Subject: CN=68a9771e-1672 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:06:9f:98:23:98:ba:cf:31:e7:19:be:f1:6b: 9a:66:a2:94:19:d4:b5:f8:31:c8:76:82:21:21:56: 47:ff:af:5c:4d:a6:8e:ad:2e:e4:6b:dd:05:9d:a2: 17:ff:51:fe:fa:20:75:84:83:ec:f2:08:2b:b7:71: 27:05:fb:7c:31:d5:68:30:76:02:89:b5:2f:26:b2: 4c:0b:8e:80:60:69:d7:7e:ab:46:8b:5a:d3:4c:87: 23:30:fe:62:57:be:a9:fd:42:bb:25:5e:ba:db:fa: b9:7e:52:bf:c1:ee:8c:cb:4b:49:0b:bd:1f:45:4e: c4:08:bb:a8:f4:e8:5f:28:f3:0c:10:37:2a:f7:4f: 35:33:2c:50:cf:62:b4:d0:da:96:fb:2c:84:88:36: 56:ad:33:90:4d:df:c0:1a:9e:51:90:b9:5e:5a:12: 18:a0:d1:67:aa:bc:38:f8:70:c8:92:2e:b0:ff:94: 8b:37:7c:d4:da:77:47:e1:29:9e:96:5c:cb:5b:f0: 86:ab:bd:3f:cb:72:cc:b0:6b:42:fd:dc:8e:66:71: cc:5d:fa:06:f0:d7:2f:b5:ec:1b:44:0c:55:f3:05: eb:bd:8f:bb:b2:4a:ac:fb:8d:8f:54:0f:8a:7d:2d: 4c:93:ad:e0:6b:04:47:17:c5:98:8a:d7:71:c8:34: 19:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:44:13:EF:FE:12:E5:F3:54:DF:C8:65:07:69:DF:B0:94:1E:0C:CE X509v3 Authority Key Identifier: keyid:0F:91:4A:1D:C9:4F:5B:E4:2E:88:3C:2A:DD:54:30:BC:DF:6D:F3:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139661/0F43EC3C58E411F08726A57AC4F9AE02/D5FKHclPW-QuiDwq3VQwvN9t8zQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D5FKHclPW-QuiDwq3VQwvN9t8zQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139661/0F43EC3C58E411F08726A57AC4F9AE02/D5FKHclPW-QuiDwq3VQwvN9t8zQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:b5:90:36:ab:4c:8b:2c:a5:00:28:55:4c:4f:0d:7f:e5:c2: e1:29:d7:ff:b3:77:f5:27:7f:0f:94:a5:18:1e:06:da:c3:3c: f0:7a:49:81:01:68:b5:2b:47:25:68:36:2d:a5:9f:7f:c6:ef: f2:9f:cf:f3:01:fa:96:f8:c3:5a:8f:91:0a:a8:dc:0d:ad:41: 0f:2d:35:cc:11:2c:fb:54:1c:d6:8d:de:d0:42:d0:fb:4a:de: bb:23:ae:ad:46:e8:97:57:aa:35:14:6a:48:9e:0d:98:d9:a6: 34:bb:d9:27:7f:40:b9:af:18:06:79:52:cb:f9:78:5f:48:7b: 8d:71:83:62:25:b9:eb:ba:f0:d1:ba:4e:23:2e:4c:89:5c:62: 30:a3:23:09:f7:48:2c:09:21:bf:f5:f2:93:7f:9a:25:57:01: 04:52:e1:3a:19:50:2d:e8:c0:9e:41:37:a9:53:e4:6d:cc:3e: 9c:b4:65:a0:20:49:1f:df:f7:aa:b3:73:e2:87:9b:1d:4a:d0: 12:59:79:a2:c9:f9:46:15:be:da:70:58:9a:1e:c9:9d:ae:15: 25:ec:d6:0c:5a:dc:ea:6b:17:fb:f0:84:34:74:f6:a9:88:45: c3:49:1a:55:94:12:d1:41:fa:05:9f:f4:b5:25:26:6c:0e:cc: 33:07:89:ca -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz OTY2MTExMC8GA1UEBRMoMEY5MTRBMURDOTRGNUJFNDJFODgzQzJBREQ1NDMwQkNE RjZERjMzNDAeFw0yNTA4MjMwODA5MDFaFw0yNTA4MzAwODA5MDFaMBgxFjAUBgNV BAMTDTY4YTk3NzFlLTE2NzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMBp+YI5i6zzHnGb7xa5pmopQZ1LX4Mch2giEhVkf/r1xNpo6tLuRr3QWdohf/ Uf76IHWEg+zyCCu3cScF+3wx1WgwdgKJtS8mskwLjoBgadd+q0aLWtNMhyMw/mJX vqn9QrslXrrb+rl+Ur/B7ozLS0kLvR9FTsQIu6j06F8o8wwQNyr3TzUzLFDPYrTQ 2pb7LISINlatM5BN38AanlGQuV5aEhig0WeqvDj4cMiSLrD/lIs3fNTad0fhKZ6W XMtb8IarvT/Lcsywa0L93I5mccxd+gbw1y+17BtEDFXzBeu9j7uySqz7jY9UD4p9 LUyTreBrBEcXxZiK13HINBlpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUB0QT7/4S 5fNU38hlB2nfsJQeDM4wHwYDVR0jBBgwFoAUD5FKHclPW+QuiDwq3VQwvN9t8zQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM5NjYxLzBGNDNFQzNDNThF NDExRjA4NzI2QTU3QUM0RjlBRTAyL0Q1RktIY2xQVy1RdWlEd3EzVlF3dk45dDh6 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRDVGS0hjbFBXLVF1aUR3cTNWUXd2Tjl0OHpRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM5 NjYxLzBGNDNFQzNDNThFNDExRjA4NzI2QTU3QUM0RjlBRTAyL0Q1RktIY2xQVy1R dWlEd3EzVlF3dk45dDh6US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADO1kDarTIsspQAoVUxPDX/lwuEp1/+zd/Unfw+UpRgeBtrDPPB6SYEB aLUrRyVoNi2ln3/G7/Kfz/MB+pb4w1qPkQqo3A2tQQ8tNcwRLPtUHNaN3tBC0PtK 3rsjrq1G6JdXqjUUakieDZjZpjS72Sd/QLmvGAZ5Usv5eF9Ie41xg2Ilueu68NG6 TiMuTIlcYjCjIwn3SCwJIb/18pN/miVXAQRS4ToZUC3owJ5BN6lT5G3MPpy0ZaAg SR/f96qzc+KHmx1K0BJZeaLJ+UYVvtpwWJoeyZ2uFSXs1gxa3OprF/vwhDR09qmI RcNJGlWUEtFB+gWf9LUlJmwOzDMHico= -----END CERTIFICATE-----Generated at Sat Aug 23 10:54:36 2025 by rpki-client