$ rpki-client -vvf rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.mft File: 5rsDqligwnDrZrPq6yQI__q6Xsc.mft (raw, json) Hash identifier: dyllE4tDlJqHD5poIwBzpIY70QpkjN3BnifJPHbWREs= Subject key identifier: F8:D4:A0:58:AA:83:AB:90:67:63:AA:3C:F8:E5:54:A7:16:C2:5A:7F Authority key identifier: E6:BB:03:AA:58:A0:C2:70:EB:66:B3:EA:EB:24:08:FF:FA:BA:5E:C7 Certificate issuer: /CN=A914D2BF/serialNumber=E6BB03AA58A0C270EB66B3EAEB2408FFFABA5EC7 Certificate serial: 01C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rsDqligwnDrZrPq6yQI__q6Xsc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.mft Manifest number: 01C5 Signing time: Sat 23 Aug 2025 03:07:58 +0000 Manifest this update: Sat 23 Aug 2025 03:07:57 +0000 Manifest next update: Sat 30 Aug 2025 03:07:57 +0000 Files and hashes: 1: 5rsDqligwnDrZrPq6yQI__q6Xsc.crl (hash: iFIQ6C4rGFVgCakyUSi4nhDBdAKjmB2+QkVE+nVrOhY=) 2: AEF266ECD34811EDAD96D95DC4F9AE02.roa (hash: KXSCbuQLHG9xWL+hihrwdJUS/R0sgZW/C4dlIANzg14=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.crl rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rsDqligwnDrZrPq6yQI__q6Xsc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:07:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 457 (0x1c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D2BF, serialNumber=E6BB03AA58A0C270EB66B3EAEB2408FFFABA5EC7 Validity Not Before: Aug 23 03:07:57 2025 GMT Not After : Aug 30 03:07:57 2025 GMT Subject: CN=68a9308e-d228 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1a:e6:b4:f7:cc:f7:f3:73:5e:a4:e8:2a:fb: 2b:03:bf:75:7a:55:82:f8:d1:2e:02:80:fe:2d:d0: 53:cc:26:e2:60:bf:ed:c6:93:19:f1:d8:22:d5:6e: 97:80:58:49:91:c2:b4:35:8c:2c:31:b1:19:5f:6a: 3b:ca:4a:7a:18:30:18:ab:57:a7:b9:bf:f7:a2:6a: 5d:d4:03:24:2d:df:f2:4e:a6:72:cb:63:97:2b:33: 69:6a:fb:1f:58:46:b4:c0:5d:f4:ab:6d:13:5f:82: d2:3a:42:fd:11:1c:b4:11:65:36:07:52:92:f2:16: 53:98:61:fd:97:50:8a:7c:9d:81:76:3a:40:72:ce: 4c:d3:bd:a7:c6:19:28:b1:97:55:9f:37:27:4b:5c: 04:29:d5:25:3f:8a:5e:36:dc:e8:33:43:3c:92:96: 2c:50:ee:b9:67:00:65:91:14:6f:ad:6f:4f:e8:12: 4c:94:de:d9:dd:10:46:cd:c6:ce:3c:4f:c1:88:11: ff:e8:5d:e8:55:1b:c3:88:0f:f2:6a:48:b2:1b:2f: e3:f3:da:09:d2:d7:9b:2c:87:50:70:24:00:98:52: 75:98:89:45:8f:02:37:7f:bc:b4:a7:a4:9e:a4:1b: 0f:87:13:c2:bf:d1:9b:2b:9a:92:0f:90:df:70:1f: 9c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:D4:A0:58:AA:83:AB:90:67:63:AA:3C:F8:E5:54:A7:16:C2:5A:7F X509v3 Authority Key Identifier: keyid:E6:BB:03:AA:58:A0:C2:70:EB:66:B3:EA:EB:24:08:FF:FA:BA:5E:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rsDqligwnDrZrPq6yQI__q6Xsc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:0e:cf:f5:98:34:52:b1:2e:a7:ca:20:6b:1e:f9:9d:ee:f3: e0:33:1e:3c:16:58:a7:89:c3:5c:4f:c2:9d:82:b6:cb:3c:5c: 19:87:78:29:b0:5e:1d:f9:ca:0d:2d:15:8e:aa:16:e5:8d:e8: 2c:af:9c:28:dd:4f:db:16:1c:51:84:39:90:26:2e:d2:b1:8d: 57:c9:ce:48:f6:ca:0e:1f:07:2b:a3:ae:0e:71:d0:56:19:d7: 01:af:2d:1c:23:2c:7f:8d:8a:40:52:b8:29:72:87:cf:2c:0a: b1:82:02:ba:e0:31:d9:2c:cc:64:05:9c:f7:c9:05:02:17:eb: c1:f7:9a:06:b2:bc:5d:f0:36:b2:2c:c5:71:d7:cb:c1:95:fd: 49:07:74:5f:4d:6a:61:6a:ba:1e:04:a7:80:e9:e6:47:da:a4: cc:5d:0e:43:56:31:a8:26:c7:b1:71:cf:46:9f:e3:56:ac:1d: a8:75:be:dc:19:61:bb:74:17:8e:c8:43:ff:eb:38:18:17:f7: 52:1a:83:8d:71:ad:63:12:33:6a:9e:04:90:4b:69:91:ab:45: cd:39:6f:28:d2:ec:88:48:2b:19:9f:7c:08:de:b1:f2:e6:cb: 9c:a0:86:85:0b:83:9d:ad:11:74:09:e1:41:06:8b:f6:e6:38: 64:40:2d:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAckwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQyQkYxMTAvBgNVBAUTKEU2QkIwM0FBNThBMEMyNzBFQjY2QjNFQUVCMjQwOEZG RkFCQTVFQzcwHhcNMjUwODIzMDMwNzU3WhcNMjUwODMwMDMwNzU3WjAYMRYwFAYD VQQDEw02OGE5MzA4ZS1kMjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApBrmtPfM9/NzXqToKvsrA791elWC+NEuAoD+LdBTzCbiYL/txpMZ8dgi1W6X gFhJkcK0NYwsMbEZX2o7ykp6GDAYq1enub/3ompd1AMkLd/yTqZyy2OXKzNpavsf WEa0wF30q20TX4LSOkL9ERy0EWU2B1KS8hZTmGH9l1CKfJ2BdjpAcs5M072nxhko sZdVnzcnS1wEKdUlP4peNtzoM0M8kpYsUO65ZwBlkRRvrW9P6BJMlN7Z3RBGzcbO PE/BiBH/6F3oVRvDiA/yakiyGy/j89oJ0tebLIdQcCQAmFJ1mIlFjwI3f7y0p6Se pBsPhxPCv9GbK5qSD5DfcB+ccwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPjUoFiq g6uQZ2OqPPjlVKcWwlp/MB8GA1UdIwQYMBaAFOa7A6pYoMJw62az6uskCP/6ul7H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDJCRi8yQTcxRTZCQ0Qz NDQxMUVEOEUyQzU0NjRDNEY5QUUwMi81cnNEcWxpZ3duRHJaclBxNnlRSV9fcTZY c2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVyc0RxbGlnd25EclpyUHE2eVFJX19xNlhzYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDJCRi8yQTcxRTZCQ0QzNDQxMUVEOEUyQzU0NjRDNEY5QUUwMi81cnNEcWxpZ3du RHJaclBxNnlRSV9fcTZYc2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdDs/1mDRSsS6nyiBrHvmd7vPgMx48FlinicNcT8KdgrbLPFwZh3gp sF4d+coNLRWOqhbljegsr5wo3U/bFhxRhDmQJi7SsY1Xyc5I9soOHwcro64OcdBW GdcBry0cIyx/jYpAUrgpcofPLAqxggK64DHZLMxkBZz3yQUCF+vB95oGsrxd8Day LMVx18vBlf1JB3RfTWpharoeBKeA6eZH2qTMXQ5DVjGoJsexcc9Gn+NWrB2odb7c GWG7dBeOyEP/6zgYF/dSGoONca1jEjNqngSQS2mRq0XNOW8o0uyISCsZn3wI3rHy 5sucoIaFC4OdrRF0CeFBBov25jhkQC0l -----END CERTIFICATE-----Generated at Sat Aug 23 21:39:52 2025 by rpki-client