$ rpki-client -vvf rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.mft File: l5f3hScG7hxCxopeRQtXL47lCBg.mft (raw, json) Hash identifier: QemWlHCtu8DqswSqhMImmJbrJdX0YC3dm7/gjuCLEhE= Subject key identifier: 59:A9:75:DD:7A:A9:62:84:76:4C:92:34:A1:E4:14:0A:33:F0:A5:06 Authority key identifier: 97:97:F7:85:27:06:EE:1C:42:C6:8A:5E:45:0B:57:2F:8E:E5:08:18 Certificate issuer: /CN=A9149063/serialNumber=9797F7852706EE1C42C68A5E450B572F8EE50818 Certificate serial: 0A39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5f3hScG7hxCxopeRQtXL47lCBg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.mft Manifest number: 0A32 Signing time: Fri 22 Aug 2025 19:53:16 +0000 Manifest this update: Fri 22 Aug 2025 19:53:15 +0000 Manifest next update: Fri 29 Aug 2025 19:53:15 +0000 Files and hashes: 1: l5f3hScG7hxCxopeRQtXL47lCBg.crl (hash: P1dmzCi4v93SpjV5KpxyrxTpYU29i8xCpFyQyprzdbk=) 2: 1EDD32B274BE11EA97202132C4F9AE02.roa (hash: v31hx7pnoT1x1labmZhnEXrmOdmMDEQ40w+RQf8muiA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.crl rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5f3hScG7hxCxopeRQtXL47lCBg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:53:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2617 (0xa39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149063, serialNumber=9797F7852706EE1C42C68A5E450B572F8EE50818 Validity Not Before: Aug 22 19:53:15 2025 GMT Not After : Aug 29 19:53:15 2025 GMT Subject: CN=68a8caac-3730 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:0f:99:07:bf:2a:2b:4b:ee:53:5b:46:1f:f2: ba:96:2f:cb:60:f7:c6:72:93:45:35:ee:a4:3f:79: a9:13:4e:64:6f:47:77:1f:fa:e3:07:3f:77:f8:26: 0c:5e:e6:a5:79:4f:cc:1f:e3:94:8a:d6:6d:7a:8b: 8f:76:88:b4:74:3e:75:24:b9:f7:a8:a5:87:0a:41: 24:65:b9:8c:02:ac:c9:28:8e:a2:34:6f:00:fd:31: 12:4d:d9:da:bc:16:87:c8:35:16:03:92:58:ec:20: 1c:95:b0:04:92:04:72:eb:3d:f5:0e:e9:12:3e:51: 96:af:fa:fc:2d:d6:87:48:54:4e:c7:ce:c7:9f:3c: b4:a0:b3:c9:ac:56:a6:bd:43:d6:25:24:90:2a:7f: 8f:20:e1:ab:f2:42:ba:00:09:d0:68:b4:b0:5f:7f: 7b:4f:c7:cb:ef:50:ff:6d:06:06:f8:70:eb:a6:9c: fe:90:ed:7f:5c:3d:5f:7a:8f:a0:7e:2a:bd:e1:2e: f0:84:f5:e7:02:8b:e8:ee:a7:0d:95:a9:68:28:ea: 28:70:f4:64:e2:88:83:0e:53:ac:a3:d9:db:0f:e3: 75:aa:7d:be:ac:75:90:51:2c:92:17:47:ee:1a:69: 65:8c:0e:5a:78:d8:2f:aa:54:d6:92:3c:96:00:df: 00:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:A9:75:DD:7A:A9:62:84:76:4C:92:34:A1:E4:14:0A:33:F0:A5:06 X509v3 Authority Key Identifier: keyid:97:97:F7:85:27:06:EE:1C:42:C6:8A:5E:45:0B:57:2F:8E:E5:08:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5f3hScG7hxCxopeRQtXL47lCBg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:c9:57:22:91:07:49:ed:0d:2f:ca:af:8b:4e:55:d8:6f:ff: 77:18:b5:ad:1e:e4:db:2e:1a:71:39:25:ee:88:15:e3:9c:a3: 96:f5:11:f9:34:93:c2:4a:84:6f:cb:6a:3a:c6:61:39:5c:c8: 31:15:3a:11:c2:3b:4e:ee:dc:82:68:c4:f8:b9:75:f0:2b:ac: 58:61:a7:3d:37:bd:f0:30:2f:92:bb:75:72:66:02:74:a2:56: 72:89:e4:73:74:2a:d3:c1:ad:7a:36:8a:a1:03:fb:a9:dc:04: 50:31:9c:f1:23:55:cf:1c:b8:04:88:71:f2:b9:25:34:6d:c2: e9:92:29:23:12:e3:b8:8b:c0:3f:16:46:58:44:3e:39:6f:d5: 3f:54:a5:af:4e:d8:e0:93:50:7d:db:33:f4:b7:6b:f6:3c:d2: fc:97:1c:bb:14:ed:02:83:f0:f3:7f:95:88:ae:76:b8:e8:ab: 73:94:8f:f2:e8:9b:fa:84:d7:41:94:7d:be:ec:0a:74:4a:d9: 6d:d5:6d:16:fd:f5:ac:27:71:47:01:cd:70:c9:6a:ef:00:af: 01:e2:38:f2:1f:96:74:13:87:12:72:20:1b:bc:ce:4f:8c:e5: cb:d2:1d:9f:eb:9e:34:d9:4d:51:66:30:46:29:68:77:5a:06: 7f:df:f2:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCjkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDkwNjMxMTAvBgNVBAUTKDk3OTdGNzg1MjcwNkVFMUM0MkM2OEE1RTQ1MEI1NzJG OEVFNTA4MTgwHhcNMjUwODIyMTk1MzE1WhcNMjUwODI5MTk1MzE1WjAYMRYwFAYD VQQDEw02OGE4Y2FhYy0zNzMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3A+ZB78qK0vuU1tGH/K6li/LYPfGcpNFNe6kP3mpE05kb0d3H/rjBz93+CYM XualeU/MH+OUitZteouPdoi0dD51JLn3qKWHCkEkZbmMAqzJKI6iNG8A/TESTdna vBaHyDUWA5JY7CAclbAEkgRy6z31DukSPlGWr/r8LdaHSFROx87Hnzy0oLPJrFam vUPWJSSQKn+PIOGr8kK6AAnQaLSwX397T8fL71D/bQYG+HDrppz+kO1/XD1feo+g fiq94S7whPXnAovo7qcNlaloKOoocPRk4oiDDlOso9nbD+N1qn2+rHWQUSySF0fu GmlljA5aeNgvqlTWkjyWAN8ASwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFmpdd16 qWKEdkySNKHkFAoz8KUGMB8GA1UdIwQYMBaAFJeX94UnBu4cQsaKXkULVy+O5QgY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTA2My82ODg5QURGMjc0 QkMxMUVBOTUwOTlEMkJDNEY5QUUwMi9sNWYzaFNjRzdoeEN4b3BlUlF0WEw0N2xD QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w1ZjNoU2NHN2h4Q3hvcGVSUXRYTDQ3bENCZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTA2My82ODg5QURGMjc0QkMxMUVBOTUwOTlEMkJDNEY5QUUwMi9sNWYzaFNjRzdo eEN4b3BlUlF0WEw0N2xDQmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYyVcikQdJ7Q0vyq+LTlXYb/93GLWtHuTbLhpxOSXuiBXjnKOW9RH5 NJPCSoRvy2o6xmE5XMgxFToRwjtO7tyCaMT4uXXwK6xYYac9N73wMC+Su3VyZgJ0 olZyieRzdCrTwa16NoqhA/up3ARQMZzxI1XPHLgEiHHyuSU0bcLpkikjEuO4i8A/ FkZYRD45b9U/VKWvTtjgk1B92zP0t2v2PNL8lxy7FO0Cg/Dzf5WIrna46KtzlI/y 6Jv6hNdBlH2+7Ap0Stlt1W0W/fWsJ3FHAc1wyWrvAK8B4jjyH5Z0E4cSciAbvM5P jOXL0h2f65402U1RZjBGKWh3WgZ/3/Ir -----END CERTIFICATE-----Generated at Sat Aug 23 21:35:11 2025 by rpki-client