$ rpki-client -vvf rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft File: 5pLFtgs-8cIERDn8OQrVbcPLzWM.mft (raw, json) Hash identifier: +MQzbxbFEC++vb7/1Dcjz2C38p8GFfXxlVaxtUScgN8= Subject key identifier: F1:1D:5A:C7:AF:9C:5A:03:FB:19:A0:3B:30:58:6A:DE:03:D9:8A:23 Authority key identifier: E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63 Certificate issuer: /CN=A913D1EA/serialNumber=E692C5B60B3EF1C2044439FC390AD56DC3CBCD63 Certificate serial: 0848 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft Manifest number: 07FB Signing time: Fri 22 Aug 2025 21:31:07 +0000 Manifest this update: Fri 22 Aug 2025 21:31:07 +0000 Manifest next update: Fri 29 Aug 2025 21:31:07 +0000 Files and hashes: 1: 5pLFtgs-8cIERDn8OQrVbcPLzWM.crl (hash: LqR6CheokP8ZKnP3zD/bNujsHJZNfR36aHklIgwLn64=) 2: 9D00ABAC089C11F09075A534C4F9AE02.roa (hash: HmTougKy3rF1ntb28J+0HCxyJCj3J7caTv76b+CnSpw=) 3: 244B9D1874CB11EEB3C0267DC4F9AE02.roa (hash: 58z0sDsYRtdYBAtwDhNvP7kyEQJboZJS4GpwJLh2ing=) 4: 9765FB988A5D11EE9E6AA223C4F9AE02.roa (hash: gdVUdTDJS2HzCLE0SH5abxwvNMrpuz9i+05KM/O5dKM=) 5: F3643AD6089C11F09BB44535C4F9AE02.roa (hash: d4eF712UMcuWBXICMHSbDq1rVUXEx57Lk10/0qmDX9M=) 6: 06166DF4DC6D11EFBD34F40EC4F9AE02.roa (hash: zAVhFCx+Y0sm2rtgFn1OnJdCE1tYjDSThjKJO14bltw=) 7: 79986EE8FE3D11EFB763F62EC4F9AE02.roa (hash: oPWHOSVVHxMTlEOgiAm0tO2SzI3zA9mMs78DXNw+B34=) 8: 215A8FDE4B9E11EEBF766C7FC4F9AE02.roa (hash: ewzgLIZLx9Y5nPTQhL+AITVEb8oh3TwTplFpZhdDOMo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.crl rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:31:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2120 (0x848) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D1EA, serialNumber=E692C5B60B3EF1C2044439FC390AD56DC3CBCD63 Validity Not Before: Aug 22 21:31:07 2025 GMT Not After : Aug 29 21:31:07 2025 GMT Subject: CN=68a8e19b-9912 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:7d:95:2b:64:da:44:59:45:c6:07:d8:fa:f2: 6b:70:36:f7:b9:32:89:2d:35:7c:4d:48:9b:12:56: f0:11:e4:83:fb:9a:dd:db:58:d7:92:f7:d9:5a:30: 73:92:65:34:17:59:f0:84:70:65:43:c3:cf:72:53: b9:48:c5:be:2c:da:d9:f1:b2:34:a4:4c:6b:bd:24: eb:58:b4:2d:f8:cd:0c:32:e6:86:a3:d8:b3:89:ae: 24:1a:b7:4c:a1:2e:e0:d8:f5:54:b3:fb:25:1c:64: 80:e1:a7:76:50:08:48:79:ad:a2:98:f9:bb:b7:c8: 58:e0:2f:05:c7:6f:33:f3:9d:e4:8a:74:3c:9a:db: 28:c5:36:8b:46:0b:34:54:f5:58:e7:24:c8:70:fb: d2:34:fc:f3:d4:96:0f:df:c1:c1:27:c9:3c:3f:8c: 96:6c:13:12:0c:c1:d4:ff:19:c9:18:f6:7f:0e:ba: f9:d1:59:f4:05:8f:65:52:70:4d:41:91:23:a6:88: af:32:50:d5:b6:81:ac:56:cb:e5:83:dd:42:ac:ff: f3:92:64:08:d9:cb:16:ba:66:48:3a:7a:c1:57:71: d0:0c:9d:ac:fe:55:7a:e4:6d:2e:e8:3a:f5:5d:09: c3:70:04:08:55:0c:d2:82:0c:bf:37:c3:6b:c8:4f: e1:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:1D:5A:C7:AF:9C:5A:03:FB:19:A0:3B:30:58:6A:DE:03:D9:8A:23 X509v3 Authority Key Identifier: keyid:E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:a8:45:d9:4c:64:62:ad:9f:48:ec:76:c8:d9:8d:f5:01:6c: d8:78:53:50:b2:f3:19:fa:42:c0:57:ab:5b:37:a4:68:68:9d: 41:a4:f3:5a:19:ca:3d:05:52:e1:6f:32:19:35:b2:db:37:61: 37:f9:34:43:f4:a3:c3:ca:75:e7:8e:fa:47:e9:82:89:e9:5b: 55:a6:87:6e:11:7d:de:9b:25:5d:1a:11:e9:27:40:74:a0:33: 49:47:b2:30:aa:52:b5:7e:e9:b9:c6:08:53:ae:0b:39:40:7b: f2:31:d1:5a:ae:3a:c2:ee:d4:ee:49:45:27:22:67:c6:af:9f: 40:42:71:0d:60:1e:39:75:69:07:2f:3d:83:4c:6c:da:a1:97: cc:e7:9b:96:f2:f8:9e:19:f2:09:f7:4f:9c:75:a7:b3:d0:57: 4c:c3:d1:58:ed:76:24:ef:d3:97:be:b8:d7:8e:1a:d9:93:af: 4c:29:09:ed:c7:cc:da:51:9e:c1:13:08:33:b9:dd:90:6f:69: bc:75:ff:5c:02:14:1e:cf:c7:2a:86:98:c6:e5:47:46:70:99: 4f:96:f7:b9:f3:69:07:cc:b2:30:04:03:ff:18:98:90:8a:60: 24:18:48:e8:f6:73:29:15:87:53:b1:a1:b2:22:f1:54:f8:bf: c1:2f:cf:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCEgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0QxRUExMTAvBgNVBAUTKEU2OTJDNUI2MEIzRUYxQzIwNDQ0MzlGQzM5MEFENTZE QzNDQkNENjMwHhcNMjUwODIyMjEzMTA3WhcNMjUwODI5MjEzMTA3WjAYMRYwFAYD VQQDEw02OGE4ZTE5Yi05OTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8X2VK2TaRFlFxgfY+vJrcDb3uTKJLTV8TUibElbwEeSD+5rd21jXkvfZWjBz kmU0F1nwhHBlQ8PPclO5SMW+LNrZ8bI0pExrvSTrWLQt+M0MMuaGo9izia4kGrdM oS7g2PVUs/slHGSA4ad2UAhIea2imPm7t8hY4C8Fx28z853kinQ8mtsoxTaLRgs0 VPVY5yTIcPvSNPzz1JYP38HBJ8k8P4yWbBMSDMHU/xnJGPZ/Drr50Vn0BY9lUnBN QZEjpoivMlDVtoGsVsvlg91CrP/zkmQI2csWumZIOnrBV3HQDJ2s/lV65G0u6Dr1 XQnDcAQIVQzSggy/N8NryE/h+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPEdWsev nFoD+xmgOzBYat4D2YojMB8GA1UdIwQYMBaAFOaSxbYLPvHCBEQ5/DkK1W3Dy81j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDFFQS85QzkzMkI0ODE3 M0ExMUVCQTNCOTdFN0ZDNEY5QUUwMi81cExGdGdzLThjSUVSRG44T1FyVmJjUEx6 V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVwTEZ0Z3MtOGNJRVJEbjhPUXJWYmNQTHpXTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDFFQS85QzkzMkI0ODE3M0ExMUVCQTNCOTdFN0ZDNEY5QUUwMi81cExGdGdzLThj SUVSRG44T1FyVmJjUEx6V00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcqEXZTGRirZ9I7HbI2Y31AWzYeFNQsvMZ+kLAV6tbN6RoaJ1BpPNa Gco9BVLhbzIZNbLbN2E3+TRD9KPDynXnjvpH6YKJ6VtVpoduEX3emyVdGhHpJ0B0 oDNJR7IwqlK1fum5xghTrgs5QHvyMdFarjrC7tTuSUUnImfGr59AQnENYB45dWkH Lz2DTGzaoZfM55uW8vieGfIJ90+cdaez0FdMw9FY7XYk79OXvrjXjhrZk69MKQnt x8zaUZ7BEwgzud2Qb2m8df9cAhQez8cqhpjG5UdGcJlPlve582kHzLIwBAP/GJiQ imAkGEjo9nMpFYdTsaGyIvFU+L/BL88o -----END CERTIFICATE-----Generated at Sun Aug 24 00:14:52 2025 by rpki-client