$ rpki-client -vvf rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.mft File: 5S1_f7qsH3Wv-nYu2z8oFgvPvSU.mft (raw, json) Hash identifier: OplYjzWHC7vwpsaxvLge4rP8tR60lk3/z2nYY5q/kic= Subject key identifier: 1A:4D:0D:75:BC:20:AB:86:8F:73:04:6B:BF:BE:AC:C3:31:8D:D0:06 Authority key identifier: E5:2D:7F:7F:BA:AC:1F:75:AF:FA:76:2E:DB:3F:28:16:0B:CF:BD:25 Certificate issuer: /CN=A914A47A/serialNumber=E52D7F7FBAAC1F75AFFA762EDB3F28160BCFBD25 Certificate serial: 34B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.mft Manifest number: 34B3 Signing time: Fri 22 Aug 2025 14:54:17 +0000 Manifest this update: Fri 22 Aug 2025 14:54:17 +0000 Manifest next update: Fri 29 Aug 2025 14:54:17 +0000 Files and hashes: 1: 5S1_f7qsH3Wv-nYu2z8oFgvPvSU.crl (hash: SwUWH5MVqdEJdw8RpABtcvHyAbkxuCnLuPDI9X16bBw=) 2: A5C01D6ED15511EA904EF30BC4F9AE02.roa (hash: tieWSzu8lKOoBqQ293X6Mhk+ox3CzZ2+KgEe+KsaI+8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.crl rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:54:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13497 (0x34b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A47A, serialNumber=E52D7F7FBAAC1F75AFFA762EDB3F28160BCFBD25 Validity Not Before: Aug 22 14:54:17 2025 GMT Not After : Aug 29 14:54:17 2025 GMT Subject: CN=68a88499-8599 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ed:57:01:a1:64:06:b8:97:16:c9:ce:9e:52: f5:d7:e2:cd:eb:c8:ee:8c:13:0c:39:4a:83:fc:dc: 6f:8e:ba:5d:9f:af:9d:d8:51:15:73:1f:2b:15:3c: 85:0c:db:02:57:e3:05:f3:71:ef:79:bb:4b:34:4f: 66:7f:8a:a5:31:aa:0d:88:0d:60:08:b6:9e:cb:b5: 49:a1:f5:2d:8c:5b:e7:06:17:69:56:f2:95:c5:3f: b2:49:ef:ce:61:bf:d0:f4:bd:61:bd:9d:74:15:62: c0:c4:8f:0b:4a:e8:d9:e3:41:e3:27:13:ba:b2:52: 9f:d8:d9:eb:2c:de:ca:87:53:43:a2:79:2e:e4:99: e0:85:4d:35:30:21:53:a6:df:1b:35:f9:b4:bb:82: 27:d0:93:51:3f:d5:f7:d3:2b:aa:b3:63:7b:21:4a: 09:57:15:70:39:22:02:78:11:5b:7e:c6:e6:db:47: 13:04:9c:a2:5e:85:dd:e8:fd:35:00:69:a3:3f:79: fe:e1:b6:79:0a:cd:9b:f4:cd:51:cd:09:01:1f:f5: e1:25:62:79:73:4f:32:9a:68:54:47:1d:5b:1d:72: d2:17:23:7c:3a:88:e8:70:b8:c3:ed:38:86:17:5e: 37:31:0c:ed:07:df:55:ff:45:8e:8a:3c:2d:16:41: 19:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:4D:0D:75:BC:20:AB:86:8F:73:04:6B:BF:BE:AC:C3:31:8D:D0:06 X509v3 Authority Key Identifier: keyid:E5:2D:7F:7F:BA:AC:1F:75:AF:FA:76:2E:DB:3F:28:16:0B:CF:BD:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:d0:b8:4b:b8:4f:bc:80:1d:5c:bc:a1:72:68:09:83:ae:b2: b1:e2:0a:25:17:93:01:4e:b9:a5:e8:fb:f4:03:d7:c3:4f:ae: 49:03:75:3a:46:10:cc:ea:ee:39:c5:d4:ef:3b:4b:bd:6c:64: ce:61:cc:9e:22:f8:7b:1d:29:4a:18:6f:ac:13:cc:18:0a:0e: 27:39:bc:96:98:53:e2:f1:53:de:c5:84:16:e5:55:45:a2:b5: a9:88:56:25:d1:c6:bd:c8:8f:98:50:cf:bb:f8:aa:5f:e1:5d: 06:59:8a:9e:14:c4:24:65:52:9d:a1:0f:1f:32:7a:8c:81:5b: 67:b0:3d:a3:a4:5f:08:2b:4d:f4:5a:9d:ab:bd:f9:be:4c:a5: 43:10:84:80:9c:49:3a:be:03:ba:43:58:32:83:1a:6e:31:43: 45:3e:d0:50:07:9c:f6:a8:6b:6e:91:bb:04:45:ee:8d:92:8c: 01:7f:13:56:9b:f5:4d:81:eb:91:14:2d:21:28:18:63:0a:69: fa:60:c0:f9:25:88:be:47:73:6c:43:6a:a4:cd:f1:b6:73:44: b3:f0:76:e1:ef:f7:b1:43:21:9f:a0:73:7a:5c:67:54:66:1c: 41:ef:de:0d:13:65:e8:bb:23:ea:d1:e8:a8:5b:c9:54:37:c7: f2:5a:be:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE0N0ExMTAvBgNVBAUTKEU1MkQ3RjdGQkFBQzFGNzVBRkZBNzYyRURCM0YyODE2 MEJDRkJEMjUwHhcNMjUwODIyMTQ1NDE3WhcNMjUwODI5MTQ1NDE3WjAYMRYwFAYD VQQDEw02OGE4ODQ5OS04NTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1e1XAaFkBriXFsnOnlL11+LN68jujBMMOUqD/Nxvjrpdn6+d2FEVcx8rFTyF DNsCV+MF83HvebtLNE9mf4qlMaoNiA1gCLaey7VJofUtjFvnBhdpVvKVxT+ySe/O Yb/Q9L1hvZ10FWLAxI8LSujZ40HjJxO6slKf2NnrLN7Kh1NDonku5JnghU01MCFT pt8bNfm0u4In0JNRP9X30yuqs2N7IUoJVxVwOSICeBFbfsbm20cTBJyiXoXd6P01 AGmjP3n+4bZ5Cs2b9M1RzQkBH/XhJWJ5c08ymmhURx1bHXLSFyN8OojocLjD7TiG F143MQztB99V/0WOijwtFkEZ+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBpNDXW8 IKuGj3MEa7++rMMxjdAGMB8GA1UdIwQYMBaAFOUtf3+6rB91r/p2Lts/KBYLz70l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTQ3QS80QUYyMjFEQTFE OTgxMUUyQUQyQjM5ODIwOEIwMkNEMi81UzFfZjdxc0gzV3Ytbll1Mno4b0ZndlB2 U1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVTMV9mN3FzSDNXdi1uWXUyejhvRmd2UHZTVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTQ3QS80QUYyMjFEQTFEOTgxMUUyQUQyQjM5ODIwOEIwMkNEMi81UzFfZjdxc0gz V3Ytbll1Mno4b0ZndlB2U1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB80LhLuE+8gB1cvKFyaAmDrrKx4golF5MBTrml6Pv0A9fDT65JA3U6 RhDM6u45xdTvO0u9bGTOYcyeIvh7HSlKGG+sE8wYCg4nObyWmFPi8VPexYQW5VVF orWpiFYl0ca9yI+YUM+7+Kpf4V0GWYqeFMQkZVKdoQ8fMnqMgVtnsD2jpF8IK030 Wp2rvfm+TKVDEISAnEk6vgO6Q1gygxpuMUNFPtBQB5z2qGtukbsERe6NkowBfxNW m/VNgeuRFC0hKBhjCmn6YMD5JYi+R3NsQ2qkzfG2c0Sz8Hbh7/exQyGfoHN6XGdU ZhxB794NE2XouyPq0eioW8lUN8fyWr6E -----END CERTIFICATE-----Generated at Sat Aug 23 16:27:07 2025 by rpki-client