$ rpki-client -vvf rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.mft File: 5Qlj1wRocnNWt4t_xDgJdEKbZOE.mft (raw, json) Hash identifier: 9AyqsStU5lWavNlVzBW58O44UEEtZXxe7/p9+3ozk/E= Subject key identifier: D1:37:D2:C6:C0:20:BC:C0:6F:66:5E:8F:22:46:53:D5:9C:8B:59:56 Authority key identifier: E5:09:63:D7:04:68:72:73:56:B7:8B:7F:C4:38:09:74:42:9B:64:E1 Certificate issuer: /CN=A914C7F8/serialNumber=E50963D70468727356B78B7FC4380974429B64E1 Certificate serial: 018B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qlj1wRocnNWt4t_xDgJdEKbZOE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.mft Manifest number: 0185 Signing time: Thu 03 Jul 2025 03:46:50 +0000 Manifest this update: Thu 03 Jul 2025 03:46:50 +0000 Manifest next update: Thu 10 Jul 2025 03:46:50 +0000 Files and hashes: 1: 5Qlj1wRocnNWt4t_xDgJdEKbZOE.crl (hash: MpwvOsVTEpi6NwOjtdLFEv/kyRjC9AqStCv6lhj1eAc=) 2: 47862E7E129C11EEA43CFD46C4F9AE02.roa (hash: M9MqZsVmz62prCxeOcSq9CpUw3/czHK+Un3uXWoG0WQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.crl rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qlj1wRocnNWt4t_xDgJdEKbZOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 395 (0x18b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C7F8, serialNumber=E50963D70468727356B78B7FC4380974429B64E1 Validity Not Before: Jul 3 03:46:50 2025 GMT Not After : Jul 10 03:46:50 2025 GMT Subject: CN=6865fd2a-5681 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c7:7e:52:11:00:52:6c:33:fe:33:cd:d4:b0: 11:cc:48:40:a1:9d:a4:97:c5:b0:d3:5e:ed:7b:fe: c4:42:b1:c5:5a:b7:94:92:2e:58:a2:4a:b8:f7:48: 5f:8a:5c:61:04:2e:c9:dd:bc:be:bb:ca:86:d1:bc: d6:04:b8:68:83:c0:ac:8b:f3:c8:2e:4e:63:a2:0e: 22:3d:ef:f3:e8:87:18:a3:ea:7f:93:d6:d3:cf:78: 08:5a:92:e2:e3:9d:d4:6e:c0:d8:0e:55:cb:6c:86: 7a:a2:8d:54:92:ec:90:a0:8d:04:6f:b1:14:45:d2: 13:c4:57:c5:8f:f7:62:f8:cf:ce:ea:f4:ec:77:e0: a0:d6:9d:8c:a1:de:6b:88:f1:5f:35:0b:1a:d5:2f: b3:fe:f7:de:b9:4f:4e:39:90:e2:fc:5f:2c:1d:9f: cb:56:d7:ce:6b:6b:24:d7:6c:bd:cd:1b:31:ba:6c: 79:ce:3d:b8:81:2b:09:fe:89:a1:93:31:92:35:10: de:5e:27:d1:b5:0c:a0:ac:9a:eb:03:33:40:d3:6d: dd:ff:7b:06:cd:4b:b1:ec:3b:dd:5e:f2:7c:c9:7b: bb:71:e6:e2:06:a2:f9:1e:a8:cc:9c:60:54:07:4c: b2:06:97:5d:9b:99:c0:82:f0:fd:60:b0:2d:24:ce: 0c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:37:D2:C6:C0:20:BC:C0:6F:66:5E:8F:22:46:53:D5:9C:8B:59:56 X509v3 Authority Key Identifier: keyid:E5:09:63:D7:04:68:72:73:56:B7:8B:7F:C4:38:09:74:42:9B:64:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qlj1wRocnNWt4t_xDgJdEKbZOE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:f6:e5:54:27:38:83:27:be:78:93:77:57:c6:1f:d5:10:15: 37:47:3e:64:95:5a:d5:4b:da:70:5e:72:13:70:df:85:b5:fd: 21:4b:5a:2a:05:4b:68:d3:39:53:f2:3f:1a:a7:b1:02:17:de: cb:64:81:58:d5:19:f4:b1:33:0e:88:35:5f:49:cd:3f:80:3c: 7b:42:16:48:24:aa:16:13:2c:85:71:7f:d1:d6:a9:02:0a:88: b2:22:f0:b6:a2:82:46:8a:96:b3:eb:06:d5:f5:2d:85:96:36: e7:c2:de:c9:2b:01:68:fc:73:28:66:c4:b8:3e:d7:03:6e:25: e9:42:3a:56:c0:7a:17:5f:2e:03:6a:41:68:5a:7c:cc:fb:30: b3:79:53:64:dc:7b:23:83:ec:2e:4f:5b:1c:4f:da:15:05:52: e6:bc:5d:c3:ba:07:fb:57:51:1b:1d:55:ed:2d:15:7c:50:a1: 58:63:5e:01:f1:a1:a5:09:dd:82:d4:a0:13:9b:73:b6:cb:c5: 02:b4:1c:ad:bd:e1:58:c6:10:7d:d7:64:f8:ae:5f:98:25:24: 23:35:1c:64:c9:87:ab:23:71:05:db:68:6c:83:be:d5:2c:cb: 21:62:8f:48:3b:de:b9:99:65:12:eb:db:f4:32:f1:b6:37:6c: 9f:2b:19:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM3RjgxMTAvBgNVBAUTKEU1MDk2M0Q3MDQ2ODcyNzM1NkI3OEI3RkM0MzgwOTc0 NDI5QjY0RTEwHhcNMjUwNzAzMDM0NjUwWhcNMjUwNzEwMDM0NjUwWjAYMRYwFAYD VQQDEw02ODY1ZmQyYS01NjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtsd+UhEAUmwz/jPN1LARzEhAoZ2kl8Ww017te/7EQrHFWreUki5Yokq490hf ilxhBC7J3by+u8qG0bzWBLhog8Csi/PILk5jog4iPe/z6IcYo+p/k9bTz3gIWpLi 453UbsDYDlXLbIZ6oo1UkuyQoI0Eb7EURdITxFfFj/di+M/O6vTsd+Cg1p2Mod5r iPFfNQsa1S+z/vfeuU9OOZDi/F8sHZ/LVtfOa2sk12y9zRsxumx5zj24gSsJ/omh kzGSNRDeXifRtQygrJrrAzNA023d/3sGzUux7DvdXvJ8yXu7cebiBqL5HqjMnGBU B0yyBpddm5nAgvD9YLAtJM4M5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNE30sbA ILzAb2ZejyJGU9Wci1lWMB8GA1UdIwQYMBaAFOUJY9cEaHJzVreLf8Q4CXRCm2Th MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzdGOC9FMjUxMEUxQzEy OTUxMUVFODRCQUQ3NDZDNEY5QUUwMi81UWxqMXdSb2NuTld0NHRfeERnSmRFS2Ja T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVRbGoxd1JvY25OV3Q0dF94RGdKZEVLYlpPRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzdGOC9FMjUxMEUxQzEyOTUxMUVFODRCQUQ3NDZDNEY5QUUwMi81UWxqMXdSb2Nu Tld0NHRfeERnSmRFS2JaT0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCG9uVUJziDJ754k3dXxh/VEBU3Rz5klVrVS9pwXnITcN+Ftf0hS1oq BUto0zlT8j8ap7ECF97LZIFY1Rn0sTMOiDVfSc0/gDx7QhZIJKoWEyyFcX/R1qkC CoiyIvC2ooJGipaz6wbV9S2Fljbnwt7JKwFo/HMoZsS4PtcDbiXpQjpWwHoXXy4D akFoWnzM+zCzeVNk3Hsjg+wuT1scT9oVBVLmvF3Dugf7V1EbHVXtLRV8UKFYY14B 8aGlCd2C1KATm3O2y8UCtBytveFYxhB912T4rl+YJSQjNRxkyYerI3EF22hsg77V LMshYo9IO965mWUS69v0MvG2N2yfKxk3 -----END CERTIFICATE-----Generated at Thu Jul 3 18:46:43 2025 by rpki-client