$ rpki-client -vvf rpki.apnic.net/member_repository/A9140BA4/47E9268668ED11E890E39549C4F9AE02/5muokllQFHlLtkUdFCgchAAgYgM.mft File: 5muokllQFHlLtkUdFCgchAAgYgM.mft (raw, json) Hash identifier: Gd8vq0uClYlVh/C/fA/cIOpxDulsKuVH4PAIRbTv1t4= Subject key identifier: 5A:1E:5E:B1:93:1C:50:34:10:68:54:25:D6:BD:AB:A5:95:17:54:52 Authority key identifier: E6:6B:A8:92:59:50:14:79:4B:B6:45:1D:14:28:1C:84:00:20:62:03 Certificate issuer: /CN=A9140BA4/serialNumber=E66BA892595014794BB6451D14281C8400206203 Certificate serial: 149B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5muokllQFHlLtkUdFCgchAAgYgM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140BA4/47E9268668ED11E890E39549C4F9AE02/5muokllQFHlLtkUdFCgchAAgYgM.mft Manifest number: 1498 Signing time: Fri 22 Aug 2025 17:00:33 +0000 Manifest this update: Fri 22 Aug 2025 17:00:32 +0000 Manifest next update: Fri 29 Aug 2025 17:00:32 +0000 Files and hashes: 1: 5muokllQFHlLtkUdFCgchAAgYgM.crl (hash: y0tPBgPl5XfoyMxhMlHfHZ8ywmYenlsbgNN9VK/0hSE=) 2: 3FF298D41AFF11EFB20C2648C4F9AE02.roa (hash: K3UhQQDhvIK9kiqYEaaLUGkHSXsQC8El8DjsvYMTmMc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140BA4/47E9268668ED11E890E39549C4F9AE02/5muokllQFHlLtkUdFCgchAAgYgM.crl rsync://rpki.apnic.net/member_repository/A9140BA4/47E9268668ED11E890E39549C4F9AE02/5muokllQFHlLtkUdFCgchAAgYgM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5muokllQFHlLtkUdFCgchAAgYgM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5275 (0x149b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140BA4, serialNumber=E66BA892595014794BB6451D14281C8400206203 Validity Not Before: Aug 22 17:00:32 2025 GMT Not After : Aug 29 17:00:32 2025 GMT Subject: CN=68a8a230-e265 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:66:c8:e8:8f:28:1d:1e:46:68:10:40:34:86: ae:ab:50:06:35:c2:86:51:28:a8:0c:fd:4e:9a:23: b4:3d:a1:01:b9:53:d6:ce:d8:ce:30:ee:a0:c0:bf: 9b:a2:14:d6:db:ab:ca:05:7a:21:fb:c8:c9:3f:eb: 8e:38:07:9d:af:fb:30:90:17:a9:15:8c:0d:4b:1f: f1:f4:ad:cb:d2:2e:67:39:e2:54:1e:93:d5:41:72: 76:58:e7:70:83:f0:2a:c7:8a:80:8c:0f:c7:32:af: 4c:1c:23:2e:46:7f:06:93:c8:fd:20:35:bb:e1:7b: ca:0f:f4:53:55:0d:e8:a8:45:c4:06:08:da:76:1c: 88:4b:01:0f:5b:b5:f6:b4:be:bd:dc:dd:77:f2:b9: 97:db:f4:e5:94:41:87:85:33:50:0d:46:ed:dd:70: 38:be:e2:68:8b:a7:dd:4c:af:ba:c0:07:95:ae:50: 37:c0:8d:9f:43:08:e3:a9:5e:c5:7e:31:fc:ee:bf: 01:5e:f0:91:04:c5:e7:84:4b:bc:38:ad:58:c3:f7: 31:ba:a0:c0:1c:70:0b:89:01:c9:16:c4:a8:04:86: 32:1e:e5:c5:1e:d3:35:8d:05:a5:cc:e0:5a:b9:17: e3:f7:31:75:e3:a3:8c:6b:48:5c:4d:0b:3b:49:62: 85:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:1E:5E:B1:93:1C:50:34:10:68:54:25:D6:BD:AB:A5:95:17:54:52 X509v3 Authority Key Identifier: keyid:E6:6B:A8:92:59:50:14:79:4B:B6:45:1D:14:28:1C:84:00:20:62:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140BA4/47E9268668ED11E890E39549C4F9AE02/5muokllQFHlLtkUdFCgchAAgYgM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5muokllQFHlLtkUdFCgchAAgYgM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140BA4/47E9268668ED11E890E39549C4F9AE02/5muokllQFHlLtkUdFCgchAAgYgM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:c0:5c:db:83:cd:d8:4e:8e:d0:4d:d4:67:e5:88:a9:a8:f2: a1:4e:58:5b:c0:fc:f3:64:f2:88:d7:ca:86:ab:2e:cc:99:9c: 94:db:25:fd:8e:d9:1f:82:14:26:a1:fc:09:cb:e7:74:49:90: 6e:e8:ff:e0:95:ca:c6:df:12:e6:16:8f:df:ab:02:66:b0:9d: e6:14:64:f3:d0:db:43:06:5f:3b:de:53:17:a1:8a:36:d5:28: 92:2c:06:50:86:32:71:41:5d:da:72:94:0c:93:84:f9:70:59: b4:6e:e8:2a:ba:70:eb:31:d0:58:70:72:91:c1:98:d3:de:bd: 73:8a:0c:2b:43:e1:a1:61:26:81:89:cd:ff:22:a4:50:bf:0d: 07:13:79:ad:df:38:6a:df:de:d4:f4:d4:c0:51:0b:02:88:62: be:7d:60:42:de:0f:ef:91:c1:50:e1:80:d7:85:59:1c:4e:d3: 7a:72:39:02:54:ca:50:45:7f:ba:d8:f9:fd:0c:aa:ee:d1:7b: 3b:89:ee:32:af:df:c3:62:19:c2:b4:d8:0b:28:ab:10:ab:8d: 7d:b9:f1:a2:91:09:26:ea:76:cb:c4:02:0d:78:57:85:33:9b: 92:dd:7c:78:d9:a4:76:5c:dd:5e:41:52:e8:2c:73:d4:40:8a: 37:c4:ee:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBCQTQxMTAvBgNVBAUTKEU2NkJBODkyNTk1MDE0Nzk0QkI2NDUxRDE0MjgxQzg0 MDAyMDYyMDMwHhcNMjUwODIyMTcwMDMyWhcNMjUwODI5MTcwMDMyWjAYMRYwFAYD VQQDEw02OGE4YTIzMC1lMjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoWbI6I8oHR5GaBBANIauq1AGNcKGUSioDP1OmiO0PaEBuVPWztjOMO6gwL+b ohTW26vKBXoh+8jJP+uOOAedr/swkBepFYwNSx/x9K3L0i5nOeJUHpPVQXJ2WOdw g/Aqx4qAjA/HMq9MHCMuRn8Gk8j9IDW74XvKD/RTVQ3oqEXEBgjadhyISwEPW7X2 tL693N138rmX2/TllEGHhTNQDUbt3XA4vuJoi6fdTK+6wAeVrlA3wI2fQwjjqV7F fjH87r8BXvCRBMXnhEu8OK1Yw/cxuqDAHHALiQHJFsSoBIYyHuXFHtM1jQWlzOBa uRfj9zF146OMa0hcTQs7SWKFVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFoeXrGT HFA0EGhUJda9q6WVF1RSMB8GA1UdIwQYMBaAFOZrqJJZUBR5S7ZFHRQoHIQAIGID MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEJBNC80N0U5MjY4NjY4 RUQxMUU4OTBFMzk1NDlDNEY5QUUwMi81bXVva2xsUUZIbEx0a1VkRkNnY2hBQWdZ Z00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVtdW9rbGxRRkhsTHRrVWRGQ2djaEFBZ1lnTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEJBNC80N0U5MjY4NjY4RUQxMUU4OTBFMzk1NDlDNEY5QUUwMi81bXVva2xsUUZI bEx0a1VkRkNnY2hBQWdZZ00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3wFzbg83YTo7QTdRn5YipqPKhTlhbwPzzZPKI18qGqy7MmZyU2yX9 jtkfghQmofwJy+d0SZBu6P/glcrG3xLmFo/fqwJmsJ3mFGTz0NtDBl873lMXoYo2 1SiSLAZQhjJxQV3acpQMk4T5cFm0bugqunDrMdBYcHKRwZjT3r1zigwrQ+GhYSaB ic3/IqRQvw0HE3mt3zhq397U9NTAUQsCiGK+fWBC3g/vkcFQ4YDXhVkcTtN6cjkC VMpQRX+62Pn9DKru0Xs7ie4yr9/DYhnCtNgLKKsQq419ufGikQkm6nbLxAINeFeF M5uS3Xx42aR2XN1eQVLoLHPUQIo3xO5C -----END CERTIFICATE-----Generated at Sun Aug 24 00:07:27 2025 by rpki-client