$ rpki-client -vvf rpki.apnic.net/member_repository/A914530B/9E75DDB6B79A11EFA0D6975DC4F9AE02/53p5hBmz84yLAlkKKUx7NffDREw.mft File: 53p5hBmz84yLAlkKKUx7NffDREw.mft (raw, json) Hash identifier: pI6v+umyym0hQRAqnIQUXNphRQsAOdejjz+U1RbBY+I= Subject key identifier: 7F:24:4E:3B:22:9A:E2:02:D0:CB:FB:6D:D2:5A:EE:8F:7F:F4:FA:BD Authority key identifier: E7:7A:79:84:19:B3:F3:8C:8B:02:59:0A:29:4C:7B:35:F7:C3:44:4C Certificate issuer: /CN=A914530B/serialNumber=E77A798419B3F38C8B02590A294C7B35F7C3444C Certificate serial: 87 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/53p5hBmz84yLAlkKKUx7NffDREw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914530B/9E75DDB6B79A11EFA0D6975DC4F9AE02/53p5hBmz84yLAlkKKUx7NffDREw.mft Manifest number: 85 Signing time: Sat 23 Aug 2025 06:54:28 +0000 Manifest this update: Sat 23 Aug 2025 06:54:27 +0000 Manifest next update: Sat 30 Aug 2025 06:54:27 +0000 Files and hashes: 1: 53p5hBmz84yLAlkKKUx7NffDREw.crl (hash: 5SS/alGDAVA78pbunB605v8hPmkPH0g1NVzrdz4FHxg=) 2: 87A33C66B79D11EF9A384C65C4F9AE02.roa (hash: PmWdGEFbgxUM5JARv+3955i+yLCgnSi8KLnrb7A4Hd0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914530B/9E75DDB6B79A11EFA0D6975DC4F9AE02/53p5hBmz84yLAlkKKUx7NffDREw.crl rsync://rpki.apnic.net/member_repository/A914530B/9E75DDB6B79A11EFA0D6975DC4F9AE02/53p5hBmz84yLAlkKKUx7NffDREw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/53p5hBmz84yLAlkKKUx7NffDREw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:54:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 135 (0x87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914530B, serialNumber=E77A798419B3F38C8B02590A294C7B35F7C3444C Validity Not Before: Aug 23 06:54:27 2025 GMT Not After : Aug 30 06:54:27 2025 GMT Subject: CN=68a965a3-656c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:77:14:9d:11:a4:ce:8f:88:97:09:5c:ea:81: 5f:95:1c:9a:c1:a2:55:05:f7:e4:53:e3:41:c1:39: 07:4e:74:24:6d:d6:7a:18:85:f4:f8:f7:12:7c:6f: 83:4d:77:36:d6:fa:6f:a8:c2:45:25:e5:60:24:e2: 3f:56:8e:68:89:a9:7c:01:99:95:ee:f1:a1:d6:c7: d9:ef:38:ea:f6:4f:2a:9c:88:c7:f2:49:87:d8:77: b5:ac:b0:c7:4f:4f:85:0c:e5:a7:bb:41:56:47:a0: 5d:9d:a8:e7:eb:26:18:c4:54:2a:36:8d:6f:e6:91: 69:ef:b9:36:b6:76:31:24:f3:df:80:cd:c8:17:5c: 82:d6:15:f0:06:26:d5:94:7a:e9:5a:99:13:fb:be: 1b:55:e0:d5:bf:11:bb:bf:9c:62:d1:37:c3:93:c3: d0:56:ff:92:65:44:44:72:c4:89:56:e8:7e:52:42: 6e:7a:f7:1f:97:e8:c6:a6:71:ba:50:84:3f:e0:67: 6b:3a:08:5e:85:d8:06:c1:4c:99:71:22:52:78:dc: 7a:b1:81:9a:5c:60:5f:2c:6b:d9:16:f6:c9:d2:bc: ad:8c:85:67:98:7b:d6:27:b2:96:8a:6d:cc:a5:34: dd:87:e0:60:46:39:5e:a2:1a:41:1d:bf:a9:1b:42: be:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:24:4E:3B:22:9A:E2:02:D0:CB:FB:6D:D2:5A:EE:8F:7F:F4:FA:BD X509v3 Authority Key Identifier: keyid:E7:7A:79:84:19:B3:F3:8C:8B:02:59:0A:29:4C:7B:35:F7:C3:44:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914530B/9E75DDB6B79A11EFA0D6975DC4F9AE02/53p5hBmz84yLAlkKKUx7NffDREw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/53p5hBmz84yLAlkKKUx7NffDREw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914530B/9E75DDB6B79A11EFA0D6975DC4F9AE02/53p5hBmz84yLAlkKKUx7NffDREw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:9b:9a:82:e5:ef:74:12:62:33:e7:af:91:ed:73:cd:1f:66: 9c:b7:f2:41:6f:8d:bc:b8:46:b1:39:45:f4:9b:1f:90:21:25: b7:0d:f8:05:3a:74:b6:e4:a1:62:6d:06:2d:eb:ae:67:21:04: a3:ce:ae:66:39:8a:c3:93:d5:22:ba:e8:ad:e1:de:6c:4e:b1: 15:9a:9f:f0:87:d9:f1:be:15:83:70:64:70:72:91:7e:cc:5c: 32:b7:1d:84:bf:2e:ca:61:70:bd:e1:b4:1b:2f:c4:cd:72:ab: 6e:23:16:29:e2:5d:25:60:8a:bb:b1:76:33:6b:a1:f8:b8:90: d1:0f:11:8d:2f:c9:51:8e:ab:74:b6:fb:39:41:3c:35:71:c9: 57:56:3e:1a:0e:8e:6e:cc:96:2b:81:63:f2:eb:53:ab:7e:37: ab:c1:ab:04:07:fb:d2:6b:77:c9:8d:68:18:0e:9f:21:99:0e: c5:37:ac:b0:38:38:69:5a:10:b7:f6:9e:13:94:be:a3:0a:13: 63:5f:66:81:06:5f:da:29:dd:e3:a1:01:84:ee:da:8b:ba:48: 0a:b5:81:10:a8:cc:b2:aa:12:62:9e:09:e5:09:e5:49:49:49: ba:db:1f:78:93:f3:2f:9b:8f:70:f1:37:fd:bd:a6:98:d1:14: fe:02:f6:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDUzMEIxMTAvBgNVBAUTKEU3N0E3OTg0MTlCM0YzOEM4QjAyNTkwQTI5NEM3QjM1 RjdDMzQ0NEMwHhcNMjUwODIzMDY1NDI3WhcNMjUwODMwMDY1NDI3WjAYMRYwFAYD VQQDEw02OGE5NjVhMy02NTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxHcUnRGkzo+Ilwlc6oFflRyawaJVBffkU+NBwTkHTnQkbdZ6GIX0+PcSfG+D TXc21vpvqMJFJeVgJOI/Vo5oial8AZmV7vGh1sfZ7zjq9k8qnIjH8kmH2He1rLDH T0+FDOWnu0FWR6Bdnajn6yYYxFQqNo1v5pFp77k2tnYxJPPfgM3IF1yC1hXwBibV lHrpWpkT+74bVeDVvxG7v5xi0TfDk8PQVv+SZUREcsSJVuh+UkJuevcfl+jGpnG6 UIQ/4GdrOghehdgGwUyZcSJSeNx6sYGaXGBfLGvZFvbJ0rytjIVnmHvWJ7KWim3M pTTdh+BgRjleohpBHb+pG0K+9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH8kTjsi muIC0Mv7bdJa7o9/9Pq9MB8GA1UdIwQYMBaAFOd6eYQZs/OMiwJZCilMezX3w0RM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTMwQi85RTc1RERCNkI3 OUExMUVGQTBENjk3NURDNEY5QUUwMi81M3A1aEJtejg0eUxBbGtLS1V4N05mZkRS RXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzUzcDVoQm16ODR5TEFsa0tLVXg3TmZmRFJFdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTMwQi85RTc1RERCNkI3OUExMUVGQTBENjk3NURDNEY5QUUwMi81M3A1aEJtejg0 eUxBbGtLS1V4N05mZkRSRXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzm5qC5e90EmIz56+R7XPNH2act/JBb428uEaxOUX0mx+QISW3DfgF OnS25KFibQYt665nIQSjzq5mOYrDk9Uiuuit4d5sTrEVmp/wh9nxvhWDcGRwcpF+ zFwytx2Evy7KYXC94bQbL8TNcqtuIxYp4l0lYIq7sXYza6H4uJDRDxGNL8lRjqt0 tvs5QTw1cclXVj4aDo5uzJYrgWPy61OrfjerwasEB/vSa3fJjWgYDp8hmQ7FN6yw ODhpWhC39p4TlL6jChNjX2aBBl/aKd3joQGE7tqLukgKtYEQqMyyqhJingnlCeVJ SUm62x94k/Mvm49w8Tf9vaaY0RT+AvZJ -----END CERTIFICATE-----Generated at Sat Aug 23 12:15:10 2025 by rpki-client