$ rpki-client -vvf rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.mft File: 5OZ6308FfoAR2ixoJJ18JW1QB0E.mft (raw, json) Hash identifier: 8Cv1Ar3jnXMoN/NveyKpzMBDhuMc5vkCNA6uycgNx9U= Subject key identifier: B2:94:B4:91:CF:B3:13:68:36:BB:3A:45:2F:AD:44:D1:A1:2F:2A:24 Authority key identifier: E4:E6:7A:DF:4F:05:7E:80:11:DA:2C:68:24:9D:7C:25:6D:50:07:41 Certificate issuer: /CN=A913B3D6/serialNumber=E4E67ADF4F057E8011DA2C68249D7C256D500741 Certificate serial: 01C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OZ6308FfoAR2ixoJJ18JW1QB0E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.mft Manifest number: 01C5 Signing time: Sat 23 Aug 2025 03:06:06 +0000 Manifest this update: Sat 23 Aug 2025 03:06:05 +0000 Manifest next update: Sat 30 Aug 2025 03:06:05 +0000 Files and hashes: 1: 5OZ6308FfoAR2ixoJJ18JW1QB0E.crl (hash: A2UdBJJCJrouBTdFJwTNfBKEiZvz3x0D4VA07K4GenU=) 2: A6E025D4CEB111EDAE111B61C4F9AE02.roa (hash: b8ZzvlKgDQGk0f2Mf7aPG61cEDCQRJBc44944Geb3Mc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.crl rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OZ6308FfoAR2ixoJJ18JW1QB0E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:06:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 457 (0x1c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B3D6, serialNumber=E4E67ADF4F057E8011DA2C68249D7C256D500741 Validity Not Before: Aug 23 03:06:05 2025 GMT Not After : Aug 30 03:06:05 2025 GMT Subject: CN=68a9301d-fd8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:39:66:94:3b:4a:a7:4d:e2:75:0f:a0:87:d2: 2c:9a:62:b5:1b:dd:69:f8:c2:71:f3:ca:7a:4c:6e: 5c:1f:7c:2b:eb:0b:1f:88:4e:3e:5d:9d:70:14:65: 52:f5:ed:c1:9f:96:35:7b:28:4f:a2:3b:25:0d:5a: 68:f9:b4:d3:d3:43:b6:8b:60:3c:39:0b:d6:41:eb: 30:94:b8:05:00:db:1f:06:32:fd:88:7a:f4:1a:c0: 9e:70:f3:cf:84:9b:8b:22:24:be:cf:62:f0:9a:d9: 45:de:ca:c3:cf:47:09:ec:cc:2a:26:0c:e5:be:0d: f0:7b:90:85:2f:eb:35:27:14:13:be:37:8a:10:f1: 1f:f5:8c:bd:c8:56:ee:64:88:ca:ec:13:79:8b:fa: e5:c5:91:15:12:49:84:6c:94:ef:83:f3:01:fc:3b: 34:79:8d:53:fe:01:02:2a:31:50:24:44:db:aa:35: a2:82:70:9b:b8:0f:49:70:d9:1b:e7:7c:e7:ca:52: 9b:33:aa:0f:5f:a7:16:2d:4e:be:32:c3:71:1e:d2: 11:bf:8b:ec:b6:37:a4:53:e7:c9:5e:9a:47:53:c5: 29:d8:7f:ce:23:7d:56:2a:74:84:08:bb:b4:66:b2: 95:d9:ef:a9:c8:ae:24:cd:8d:47:41:39:df:f1:30: 69:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:94:B4:91:CF:B3:13:68:36:BB:3A:45:2F:AD:44:D1:A1:2F:2A:24 X509v3 Authority Key Identifier: keyid:E4:E6:7A:DF:4F:05:7E:80:11:DA:2C:68:24:9D:7C:25:6D:50:07:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OZ6308FfoAR2ixoJJ18JW1QB0E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:e0:91:b7:68:8a:7d:bb:7f:e5:48:f5:41:7f:26:23:8e:34: 02:db:bd:08:68:3d:25:57:4e:94:1e:c9:be:3e:7a:0d:82:57: 9b:0d:76:65:f2:24:8e:e5:82:64:c6:c5:fb:b0:0c:0d:42:a2: c3:05:f3:11:58:76:54:ab:c9:bd:f6:d2:35:45:35:fd:a3:d7: 82:e9:49:2b:11:8e:09:d3:b1:20:69:4d:50:50:9a:5a:96:2e: 7b:d9:63:2f:50:42:03:32:86:11:24:fa:96:e7:58:2d:7a:d4: ce:96:e5:19:d5:b4:40:ff:98:0e:2d:2e:e4:21:87:20:8e:01: d8:ee:3d:b8:7e:e2:4a:5f:ad:a2:10:ad:2c:06:5c:3d:ed:23: 18:5d:5f:e9:52:39:82:ec:3c:29:ac:37:48:b9:0b:bc:e6:2e: c5:bf:5b:bb:a1:05:fa:51:ec:54:e5:58:0f:32:91:14:46:50: 95:11:be:da:73:26:6b:00:30:1e:cc:11:3d:6e:3a:94:5b:ba: 52:61:e9:76:bf:ba:4b:a3:40:a3:af:c8:78:7e:b7:82:6c:de: aa:8f:71:6a:76:3d:e4:5c:0e:a6:98:08:c2:e0:07:f6:cf:f5: ad:68:07:5e:a6:08:41:54:b4:b3:48:60:1b:3e:62:10:07:58: d2:92:77:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAckwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0IzRDYxMTAvBgNVBAUTKEU0RTY3QURGNEYwNTdFODAxMURBMkM2ODI0OUQ3QzI1 NkQ1MDA3NDEwHhcNMjUwODIzMDMwNjA1WhcNMjUwODMwMDMwNjA1WjAYMRYwFAYD VQQDEw02OGE5MzAxZC1mZDhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArTlmlDtKp03idQ+gh9IsmmK1G91p+MJx88p6TG5cH3wr6wsfiE4+XZ1wFGVS 9e3Bn5Y1eyhPojslDVpo+bTT00O2i2A8OQvWQeswlLgFANsfBjL9iHr0GsCecPPP hJuLIiS+z2LwmtlF3srDz0cJ7MwqJgzlvg3we5CFL+s1JxQTvjeKEPEf9Yy9yFbu ZIjK7BN5i/rlxZEVEkmEbJTvg/MB/Ds0eY1T/gECKjFQJETbqjWignCbuA9JcNkb 53znylKbM6oPX6cWLU6+MsNxHtIRv4vstjekU+fJXppHU8Up2H/OI31WKnSECLu0 ZrKV2e+pyK4kzY1HQTnf8TBptQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLKUtJHP sxNoNrs6RS+tRNGhLyokMB8GA1UdIwQYMBaAFOTmet9PBX6AEdosaCSdfCVtUAdB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjNENi80NkVDMURFNENF QTMxMUVEQjMwM0Y3MzhDNEY5QUUwMi81T1o2MzA4RmZvQVIyaXhvSkoxOEpXMVFC MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVPWjYzMDhGZm9BUjJpeG9KSjE4SlcxUUIwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjNENi80NkVDMURFNENFQTMxMUVEQjMwM0Y3MzhDNEY5QUUwMi81T1o2MzA4RmZv QVIyaXhvSkoxOEpXMVFCMEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCv4JG3aIp9u3/lSPVBfyYjjjQC270IaD0lV06UHsm+PnoNglebDXZl 8iSO5YJkxsX7sAwNQqLDBfMRWHZUq8m99tI1RTX9o9eC6UkrEY4J07EgaU1QUJpa li572WMvUEIDMoYRJPqW51gtetTOluUZ1bRA/5gOLS7kIYcgjgHY7j24fuJKX62i EK0sBlw97SMYXV/pUjmC7DwprDdIuQu85i7Fv1u7oQX6UexU5VgPMpEURlCVEb7a cyZrADAezBE9bjqUW7pSYel2v7pLo0Cjr8h4freCbN6qj3Fqdj3kXA6mmAjC4Af2 z/WtaAdepghBVLSzSGAbPmIQB1jSkndd -----END CERTIFICATE-----Generated at Sat Aug 23 21:33:48 2025 by rpki-client