$ rpki-client -vvf rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.mft File: sB58Ht4QIlHuYHQeLhnwYDA9cck.mft (raw, json) Hash identifier: /IAra+pbFcpQUWGIFJObyTN5tGg2eiCou3daDdnvOrg= Subject key identifier: 83:1D:50:1B:B4:8D:12:AD:CE:BE:88:60:FE:C5:C6:6F:1B:4D:43:FA Authority key identifier: B0:1E:7C:1E:DE:10:22:51:EE:60:74:1E:2E:19:F0:60:30:3D:71:C9 Certificate issuer: /CN=A914BF04/serialNumber=B01E7C1EDE102251EE60741E2E19F060303D71C9 Certificate serial: 05E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sB58Ht4QIlHuYHQeLhnwYDA9cck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.mft Manifest number: 05BA Signing time: Fri 22 Aug 2025 23:26:16 +0000 Manifest this update: Fri 22 Aug 2025 23:26:15 +0000 Manifest next update: Fri 29 Aug 2025 23:26:15 +0000 Files and hashes: 1: sB58Ht4QIlHuYHQeLhnwYDA9cck.crl (hash: bHHZsclAiadYD7qJ0Rec8nin1wg7nIez8e2sTu+oNHE=) 2: 1E143AA26E7D11EFBB48F63EC4F9AE02.roa (hash: PVnENrYeIS4iiFtrLcFEnNW4yBRsfLOD9D/GbgEuWKc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.crl rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sB58Ht4QIlHuYHQeLhnwYDA9cck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:26:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1508 (0x5e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BF04, serialNumber=B01E7C1EDE102251EE60741E2E19F060303D71C9 Validity Not Before: Aug 22 23:26:15 2025 GMT Not After : Aug 29 23:26:15 2025 GMT Subject: CN=68a8fc97-dfbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f6:14:ec:f5:3c:08:59:df:cd:e8:2a:49:6f: 3d:e9:b1:4d:f6:07:6a:3d:f7:6f:f8:10:c5:da:02: f5:7c:3b:e5:89:4d:d6:dc:49:8b:b1:e0:c6:5c:7a: aa:00:85:2c:32:22:ed:36:44:e3:2c:05:cb:27:fd: 05:60:ab:2b:c2:bd:9d:2e:64:d7:40:a6:8d:f4:f6: ed:e9:73:f2:61:86:d1:c7:40:1f:6b:f9:43:ae:e0: c8:da:9a:65:be:68:ca:85:dd:7f:57:d7:73:af:9e: 49:22:34:6b:59:4c:e3:ef:21:56:c9:3d:7e:91:7f: d6:dc:6d:43:1a:63:d7:43:5b:41:36:e4:6b:f3:10: 7f:d4:7b:54:0f:82:f7:90:23:c2:48:32:d0:45:41: de:2e:56:2d:a1:63:46:9c:58:ef:97:db:2c:32:cc: da:f9:ce:0b:e0:0c:2f:d0:56:a7:b1:5d:e4:a3:45: a8:9a:0e:70:f7:bc:aa:61:a8:a0:48:bc:2c:24:3b: 47:4f:57:0d:fc:9e:92:e9:ca:bb:03:42:44:90:c2: 04:10:e0:1a:bc:9f:0e:6b:3e:0b:9e:3f:49:c6:41: 99:ca:4e:86:05:a2:2b:2a:51:f0:39:35:c6:60:b8: b7:8f:8b:d9:70:d3:84:1f:8f:d2:c3:9e:c9:a4:00: e3:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:1D:50:1B:B4:8D:12:AD:CE:BE:88:60:FE:C5:C6:6F:1B:4D:43:FA X509v3 Authority Key Identifier: keyid:B0:1E:7C:1E:DE:10:22:51:EE:60:74:1E:2E:19:F0:60:30:3D:71:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sB58Ht4QIlHuYHQeLhnwYDA9cck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption f5:bb:0c:73:b7:44:96:3a:ee:e3:3d:01:92:17:97:78:64:72: 94:a4:53:a9:ae:4c:3a:a4:69:f5:e9:04:b7:57:66:75:a6:c1: 27:e3:20:8f:50:99:85:7e:a6:b5:a1:7b:dc:79:03:6a:3a:e1: e5:a8:40:5a:36:97:b2:49:7b:b4:0d:82:1e:0f:ac:71:12:4c: 51:6b:96:86:d4:17:7d:5b:fe:84:fe:90:d1:26:6f:bd:3a:49: 75:9d:5a:83:c5:42:25:9d:38:6c:e6:75:0e:1f:bc:16:46:1e: 12:f3:4c:f2:fb:00:5d:f4:11:27:31:72:18:bd:ed:af:6a:b3: 76:81:15:2a:99:0b:1e:05:17:a0:cb:f1:e5:a2:f4:eb:6e:ae: 70:ba:98:73:9d:69:4a:2f:fc:85:b5:2c:6c:f5:6c:ff:ef:af: cc:f2:a9:b8:43:d8:33:d5:22:46:d5:dc:8f:88:cc:ce:86:f4: b6:54:dd:56:1d:0a:64:d4:63:10:2b:e4:36:ea:01:b7:cc:9d: 08:0a:79:41:f7:b0:a1:34:c3:32:33:d0:c1:cd:20:17:d8:c4: 6f:57:36:b9:4b:8e:cd:c0:57:61:07:75:02:d7:8b:5b:d4:80: 1a:d0:89:fb:c6:ae:92:dd:27:f4:8c:20:68:4b:97:67:95:3c: f0:3f:6b:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBeQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEJGMDQxMTAvBgNVBAUTKEIwMUU3QzFFREUxMDIyNTFFRTYwNzQxRTJFMTlGMDYw MzAzRDcxQzkwHhcNMjUwODIyMjMyNjE1WhcNMjUwODI5MjMyNjE1WjAYMRYwFAYD VQQDEw02OGE4ZmM5Ny1kZmJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArPYU7PU8CFnfzegqSW896bFN9gdqPfdv+BDF2gL1fDvliU3W3EmLseDGXHqq AIUsMiLtNkTjLAXLJ/0FYKsrwr2dLmTXQKaN9Pbt6XPyYYbRx0Afa/lDruDI2ppl vmjKhd1/V9dzr55JIjRrWUzj7yFWyT1+kX/W3G1DGmPXQ1tBNuRr8xB/1HtUD4L3 kCPCSDLQRUHeLlYtoWNGnFjvl9ssMsza+c4L4Awv0FansV3ko0Womg5w97yqYaig SLwsJDtHT1cN/J6S6cq7A0JEkMIEEOAavJ8Oaz4Lnj9JxkGZyk6GBaIrKlHwOTXG YLi3j4vZcNOEH4/Sw57JpADjTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIMdUBu0 jRKtzr6IYP7Fxm8bTUP6MB8GA1UdIwQYMBaAFLAefB7eECJR7mB0Hi4Z8GAwPXHJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkYwNC9EQTUzOEE1NkVB MjgxMUVCOUFFNjBCNzRDNEY5QUUwMi9zQjU4SHQ0UUlsSHVZSFFlTGhud1lEQTlj Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NCNThIdDRRSWxIdVlIUWVMaG53WURBOWNjay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QkYwNC9EQTUzOEE1NkVBMjgxMUVCOUFFNjBCNzRDNEY5QUUwMi9zQjU4SHQ0UUls SHVZSFFlTGhud1lEQTljY2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQD1uwxzt0SWOu7jPQGSF5d4ZHKUpFOprkw6pGn16QS3V2Z1psEn4yCP UJmFfqa1oXvceQNqOuHlqEBaNpeySXu0DYIeD6xxEkxRa5aG1Bd9W/6E/pDRJm+9 Okl1nVqDxUIlnThs5nUOH7wWRh4S80zy+wBd9BEnMXIYve2varN2gRUqmQseBReg y/HlovTrbq5wuphznWlKL/yFtSxs9Wz/76/M8qm4Q9gz1SJG1dyPiMzOhvS2VN1W HQpk1GMQK+Q26gG3zJ0ICnlB97ChNMMyM9DBzSAX2MRvVza5S47NwFdhB3UC14tb 1IAa0In7xq6S3Sf0jCBoS5dnlTzwP2vy -----END CERTIFICATE-----Generated at Sun Aug 24 03:34:43 2025 by rpki-client