$ rpki-client -vvf rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.mft File: 5Qlj1wRocnNWt4t_xDgJdEKbZOE.mft (raw, json) Hash identifier: 2Bk+ibeJQEPwoIYhIZfIa6IQb0Jm5VKwu5K9Epz1XaI= Subject key identifier: 32:93:B7:22:44:95:31:1F:3D:8B:AF:FC:37:B5:F2:61:5F:77:38:ED Authority key identifier: E5:09:63:D7:04:68:72:73:56:B7:8B:7F:C4:38:09:74:42:9B:64:E1 Certificate issuer: /CN=A914C7F8/serialNumber=E50963D70468727356B78B7FC4380974429B64E1 Certificate serial: 01A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qlj1wRocnNWt4t_xDgJdEKbZOE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.mft Manifest number: 01A1 Signing time: Sat 23 Aug 2025 03:31:37 +0000 Manifest this update: Sat 23 Aug 2025 03:31:37 +0000 Manifest next update: Sat 30 Aug 2025 03:31:37 +0000 Files and hashes: 1: 5Qlj1wRocnNWt4t_xDgJdEKbZOE.crl (hash: O7KwmbCEaUIYpw6u0xgnNHEiXWX11X7uJ53ZY5Lp8Ys=) 2: 47862E7E129C11EEA43CFD46C4F9AE02.roa (hash: aY3skSp/jdiXbJIQ5t5v3SVRkkPdKbP7qDrCfdERMMo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.crl rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qlj1wRocnNWt4t_xDgJdEKbZOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:31:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 424 (0x1a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C7F8, serialNumber=E50963D70468727356B78B7FC4380974429B64E1 Validity Not Before: Aug 23 03:31:37 2025 GMT Not After : Aug 30 03:31:37 2025 GMT Subject: CN=68a93619-03fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:86:93:a2:9b:bd:af:a3:e5:e6:0f:40:01:92: 28:7b:68:e9:b7:a6:84:b0:52:1e:cc:f2:f3:19:41: 72:f2:e7:d2:e3:dc:8a:59:e2:70:64:4d:47:5d:4e: b9:35:22:48:6c:8e:f8:c4:bf:02:34:ca:09:fe:62: ed:bc:43:4b:df:cb:43:94:56:c1:50:95:c2:8d:e2: 79:3a:ed:ee:b4:f7:3b:e5:25:57:0f:4c:2e:05:f8: 3d:8e:7f:1b:19:2c:fe:17:df:0e:da:df:dc:f0:3d: 6f:65:f6:ea:aa:08:b2:0f:57:1d:3f:ca:67:11:2c: 5a:e8:97:af:09:3f:6f:d0:a0:ec:37:dd:b2:c4:04: cb:2f:e4:5e:20:c9:7d:53:f9:24:0f:8c:ca:d0:71: 8e:88:9c:35:e0:63:2b:89:58:73:3a:d7:cc:d4:a4: a7:2e:de:50:93:ef:c3:c1:66:e7:53:90:2d:33:c2: 41:c1:58:81:f0:7b:f0:2d:bd:39:ae:d5:3f:d7:c3: 0e:25:7d:dc:b5:13:36:cc:7e:6d:29:4f:93:4f:fb: ac:4d:4a:5e:f5:ec:62:ac:48:d7:71:4a:2a:31:19: 97:e1:42:fd:a8:86:57:37:4e:3d:de:d3:74:46:e7: b8:bd:a6:bb:2f:38:52:57:9f:97:e8:1e:3d:f0:66: d6:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:93:B7:22:44:95:31:1F:3D:8B:AF:FC:37:B5:F2:61:5F:77:38:ED X509v3 Authority Key Identifier: keyid:E5:09:63:D7:04:68:72:73:56:B7:8B:7F:C4:38:09:74:42:9B:64:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qlj1wRocnNWt4t_xDgJdEKbZOE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:e9:c8:33:39:8b:db:c5:a2:1e:4d:73:ca:b6:c0:30:d3:56: da:5a:b8:92:74:a3:39:05:65:a8:f6:bd:0b:a2:9c:a8:7b:16: 59:74:60:f2:df:7f:94:3a:dd:df:6d:74:5e:ab:dc:af:ab:6a: b6:cf:74:b3:b5:0e:d7:0e:71:bc:8c:ff:d2:d7:29:9d:e3:4b: f8:2d:9f:45:0a:f9:33:39:9b:68:08:9d:d1:f1:f7:83:a6:58: fb:fa:d0:d8:b3:62:df:66:8e:2b:e2:33:48:9e:45:02:2c:25: 29:a7:bf:e4:42:b4:d4:31:28:f2:27:33:a0:5e:9b:57:36:4c: f0:53:7d:65:fe:b8:36:87:8d:db:4a:15:a1:9b:82:e0:fc:a1: 7c:2a:86:0b:94:63:ea:69:42:91:6a:fe:0f:0b:53:f2:30:59: 0d:64:e6:99:9e:6f:71:aa:63:f5:d2:2a:10:71:ed:88:ba:f1: 3c:0b:3c:e1:a4:94:c3:7d:41:cb:98:be:70:70:84:e0:3d:1a: 9d:e9:1c:98:7f:8f:53:eb:df:5e:a4:a9:cf:4c:a8:cc:52:41: 8f:15:1b:00:a0:8d:f1:99:f6:81:97:92:20:b8:ec:e7:df:07: 57:ca:bc:a2:cf:6b:ac:47:23:1a:c0:5f:bc:c4:b5:6b:96:16: 0b:d7:37:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM3RjgxMTAvBgNVBAUTKEU1MDk2M0Q3MDQ2ODcyNzM1NkI3OEI3RkM0MzgwOTc0 NDI5QjY0RTEwHhcNMjUwODIzMDMzMTM3WhcNMjUwODMwMDMzMTM3WjAYMRYwFAYD VQQDEw02OGE5MzYxOS0wM2ZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt4aTopu9r6Pl5g9AAZIoe2jpt6aEsFIezPLzGUFy8ufS49yKWeJwZE1HXU65 NSJIbI74xL8CNMoJ/mLtvENL38tDlFbBUJXCjeJ5Ou3utPc75SVXD0wuBfg9jn8b GSz+F98O2t/c8D1vZfbqqgiyD1cdP8pnESxa6JevCT9v0KDsN92yxATLL+ReIMl9 U/kkD4zK0HGOiJw14GMriVhzOtfM1KSnLt5Qk+/DwWbnU5AtM8JBwViB8HvwLb05 rtU/18MOJX3ctRM2zH5tKU+TT/usTUpe9exirEjXcUoqMRmX4UL9qIZXN0493tN0 Rue4vaa7LzhSV5+X6B498GbWHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDKTtyJE lTEfPYuv/De18mFfdzjtMB8GA1UdIwQYMBaAFOUJY9cEaHJzVreLf8Q4CXRCm2Th MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzdGOC9FMjUxMEUxQzEy OTUxMUVFODRCQUQ3NDZDNEY5QUUwMi81UWxqMXdSb2NuTld0NHRfeERnSmRFS2Ja T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVRbGoxd1JvY25OV3Q0dF94RGdKZEVLYlpPRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzdGOC9FMjUxMEUxQzEyOTUxMUVFODRCQUQ3NDZDNEY5QUUwMi81UWxqMXdSb2Nu Tld0NHRfeERnSmRFS2JaT0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBO6cgzOYvbxaIeTXPKtsAw01baWriSdKM5BWWo9r0LopyoexZZdGDy 33+UOt3fbXReq9yvq2q2z3SztQ7XDnG8jP/S1ymd40v4LZ9FCvkzOZtoCJ3R8feD plj7+tDYs2LfZo4r4jNInkUCLCUpp7/kQrTUMSjyJzOgXptXNkzwU31l/rg2h43b ShWhm4Lg/KF8KoYLlGPqaUKRav4PC1PyMFkNZOaZnm9xqmP10ioQce2IuvE8Czzh pJTDfUHLmL5wcITgPRqd6RyYf49T699epKnPTKjMUkGPFRsAoI3xmfaBl5IguOzn 3wdXyryiz2usRyMawF+8xLVrlhYL1zdd -----END CERTIFICATE-----Generated at Sat Aug 23 22:41:40 2025 by rpki-client