$ rpki-client -vvf rpki.apnic.net/member_repository/A914450B/F7B9E30A13F111EBB8123950C4F9AE02/5LMs8qYR9wLf0JE-PqULT9YexXU.mft File: 5LMs8qYR9wLf0JE-PqULT9YexXU.mft (raw, json) Hash identifier: oxXg/LEJe76TZRH/WWsUzjYBbfXeAe83kKUyU8lvMe0= Subject key identifier: 2C:5C:7C:3A:A5:2B:83:6C:8F:E8:7C:E1:71:7B:91:C7:43:E2:DE:4C Authority key identifier: E4:B3:2C:F2:A6:11:F7:02:DF:D0:91:3E:3E:A5:0B:4F:D6:1E:C5:75 Certificate issuer: /CN=A914450B/serialNumber=E4B32CF2A611F702DFD0913E3EA50B4FD61EC575 Certificate serial: 07AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LMs8qYR9wLf0JE-PqULT9YexXU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914450B/F7B9E30A13F111EBB8123950C4F9AE02/5LMs8qYR9wLf0JE-PqULT9YexXU.mft Manifest number: 07A5 Signing time: Fri 22 Aug 2025 21:28:59 +0000 Manifest this update: Fri 22 Aug 2025 21:28:59 +0000 Manifest next update: Fri 29 Aug 2025 21:28:59 +0000 Files and hashes: 1: 5LMs8qYR9wLf0JE-PqULT9YexXU.crl (hash: gwuTG4zRT0tHLjxdscc8XkEMKbuLkW85+oYTMW7v1Qo=) 2: 5B9B8A1213F311EBA7343351C4F9AE02.roa (hash: 2BrCNtIG6V0aTeNF5hAlLJ5D7nd2opyw1DNok89bW0k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914450B/F7B9E30A13F111EBB8123950C4F9AE02/5LMs8qYR9wLf0JE-PqULT9YexXU.crl rsync://rpki.apnic.net/member_repository/A914450B/F7B9E30A13F111EBB8123950C4F9AE02/5LMs8qYR9wLf0JE-PqULT9YexXU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LMs8qYR9wLf0JE-PqULT9YexXU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:28:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1963 (0x7ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914450B, serialNumber=E4B32CF2A611F702DFD0913E3EA50B4FD61EC575 Validity Not Before: Aug 22 21:28:59 2025 GMT Not After : Aug 29 21:28:59 2025 GMT Subject: CN=68a8e11b-3359 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:16:2e:5d:d3:33:7f:61:f2:26:54:52:2c:45: c9:29:17:1a:e4:7a:32:c3:de:4d:58:b6:8b:18:b4: 1f:57:bf:6e:28:13:3b:78:78:8d:13:7c:64:18:b2: 55:90:61:fb:df:00:36:af:41:86:cc:26:85:73:9a: b4:8a:78:17:e4:aa:28:f0:bc:6b:e1:cd:e9:69:bc: 34:04:cd:d8:5f:f9:8f:ce:2e:d6:0d:b4:00:39:a5: 98:8a:d0:18:d0:97:ca:c4:de:bd:9e:0c:30:20:7e: 9f:cf:67:0b:77:e5:cb:e9:c5:96:0f:a3:56:fa:e3: b1:a0:2e:00:dc:6b:7e:99:0e:2e:c3:41:08:32:41: df:31:4c:b0:29:aa:54:28:32:39:98:6b:a3:ed:cf: 61:68:53:2c:05:9a:81:50:c9:cf:3c:5c:80:37:44: 88:c4:05:c9:e2:21:47:0c:55:0b:8d:aa:b8:e0:a0: 22:03:78:7a:a0:85:ab:a4:de:46:7f:55:71:ed:8e: fa:f2:34:a3:78:95:bc:4f:9d:4f:81:20:bb:91:2e: c9:42:f7:f6:88:d5:72:86:2d:88:42:ab:3d:ab:b4: e7:ee:da:00:06:0b:43:f2:95:26:59:c6:ae:30:6d: a4:99:bb:43:fa:f5:5e:83:cc:dc:53:78:3f:18:d1: 18:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:5C:7C:3A:A5:2B:83:6C:8F:E8:7C:E1:71:7B:91:C7:43:E2:DE:4C X509v3 Authority Key Identifier: keyid:E4:B3:2C:F2:A6:11:F7:02:DF:D0:91:3E:3E:A5:0B:4F:D6:1E:C5:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914450B/F7B9E30A13F111EBB8123950C4F9AE02/5LMs8qYR9wLf0JE-PqULT9YexXU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LMs8qYR9wLf0JE-PqULT9YexXU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914450B/F7B9E30A13F111EBB8123950C4F9AE02/5LMs8qYR9wLf0JE-PqULT9YexXU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:fe:e1:76:63:4b:d6:b4:4f:a9:e1:e6:b4:b9:e4:0d:e5:b6: 57:41:21:a3:e8:48:60:cc:e5:9e:86:32:17:11:18:2a:b0:af: d2:34:9a:69:72:f4:de:71:35:3a:87:4b:e4:43:ca:b6:97:d0: a1:f4:30:ac:96:58:c7:f6:74:07:ec:5b:82:4e:58:8b:6f:87: 56:8b:a7:14:8e:18:ff:d9:ae:7d:07:d7:94:3a:95:f0:3c:7b: 9e:12:1e:69:4a:23:87:a5:42:df:b7:89:d6:d7:12:78:e1:f1: 84:aa:1f:e6:bb:63:6e:f6:da:43:c2:76:30:8e:3f:19:83:c2: 07:79:d3:30:b5:74:9f:eb:fa:81:df:82:e6:32:ed:bc:57:12: e9:03:95:ae:c1:c3:fa:68:42:a4:09:4b:b7:9b:81:15:d1:95: 87:f9:23:22:93:58:b8:75:12:83:59:d5:09:68:c4:88:43:b7: 39:2e:c8:38:1b:08:96:61:be:99:20:1a:d3:ea:a0:eb:2d:9e: 44:c4:67:32:f5:ec:a3:2f:66:49:19:38:6a:c1:52:45:95:9b: 35:51:ba:45:42:31:c0:db:a4:a3:df:86:fd:31:b4:74:73:2c: 54:e8:c2:a4:94:cd:5c:ec:79:9d:3a:e1:ec:97:35:5b:6c:33: 53:57:96:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ1MEIxMTAvBgNVBAUTKEU0QjMyQ0YyQTYxMUY3MDJERkQwOTEzRTNFQTUwQjRG RDYxRUM1NzUwHhcNMjUwODIyMjEyODU5WhcNMjUwODI5MjEyODU5WjAYMRYwFAYD VQQDEw02OGE4ZTExYi0zMzU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3hYuXdMzf2HyJlRSLEXJKRca5Hoyw95NWLaLGLQfV79uKBM7eHiNE3xkGLJV kGH73wA2r0GGzCaFc5q0ingX5Koo8Lxr4c3pabw0BM3YX/mPzi7WDbQAOaWYitAY 0JfKxN69ngwwIH6fz2cLd+XL6cWWD6NW+uOxoC4A3Gt+mQ4uw0EIMkHfMUywKapU KDI5mGuj7c9haFMsBZqBUMnPPFyAN0SIxAXJ4iFHDFULjaq44KAiA3h6oIWrpN5G f1Vx7Y768jSjeJW8T51PgSC7kS7JQvf2iNVyhi2IQqs9q7Tn7toABgtD8pUmWcau MG2kmbtD+vVeg8zcU3g/GNEYTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCxcfDql K4Nsj+h84XF7kcdD4t5MMB8GA1UdIwQYMBaAFOSzLPKmEfcC39CRPj6lC0/WHsV1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDUwQi9GN0I5RTMwQTEz RjExMUVCQjgxMjM5NTBDNEY5QUUwMi81TE1zOHFZUjl3TGYwSkUtUHFVTFQ5WWV4 WFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVMTXM4cVlSOXdMZjBKRS1QcVVMVDlZZXhYVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDUwQi9GN0I5RTMwQTEzRjExMUVCQjgxMjM5NTBDNEY5QUUwMi81TE1zOHFZUjl3 TGYwSkUtUHFVTFQ5WWV4WFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCO/uF2Y0vWtE+p4ea0ueQN5bZXQSGj6EhgzOWehjIXERgqsK/SNJpp cvTecTU6h0vkQ8q2l9Ch9DCslljH9nQH7FuCTliLb4dWi6cUjhj/2a59B9eUOpXw PHueEh5pSiOHpULft4nW1xJ44fGEqh/mu2Nu9tpDwnYwjj8Zg8IHedMwtXSf6/qB 34LmMu28VxLpA5WuwcP6aEKkCUu3m4EV0ZWH+SMik1i4dRKDWdUJaMSIQ7c5Lsg4 GwiWYb6ZIBrT6qDrLZ5ExGcy9eyjL2ZJGThqwVJFlZs1UbpFQjHA26Sj34b9MbR0 cyxU6MKklM1c7HmdOuHslzVbbDNTV5Yc -----END CERTIFICATE-----Generated at Sun Aug 24 05:01:23 2025 by rpki-client