$ rpki-client -vvf rpki.apnic.net/member_repository/A914DF56/BD7FA038152311ECB74F2080C4F9AE02/E5bqlAlF_CBf8uPRsr4bkNcsxek.mft File: E5bqlAlF_CBf8uPRsr4bkNcsxek.mft (raw, json) Hash identifier: yttxq3fEIYgc3+Y9Ca2JZ0NKKFWzOFl1uat4n2NoKGM= Subject key identifier: 14:CF:46:70:EE:4A:4D:37:86:DB:F5:0D:0F:94:D3:3B:90:0C:02:3A Authority key identifier: 13:96:EA:94:09:45:FC:20:5F:F2:E3:D1:B2:BE:1B:90:D7:2C:C5:E9 Certificate issuer: /CN=A914DF56/serialNumber=1396EA940945FC205FF2E3D1B2BE1B90D72CC5E9 Certificate serial: 052D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E5bqlAlF_CBf8uPRsr4bkNcsxek.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DF56/BD7FA038152311ECB74F2080C4F9AE02/E5bqlAlF_CBf8uPRsr4bkNcsxek.mft Manifest number: 0525 Signing time: Fri 22 Aug 2025 23:47:05 +0000 Manifest this update: Fri 22 Aug 2025 23:47:04 +0000 Manifest next update: Fri 29 Aug 2025 23:47:04 +0000 Files and hashes: 1: E5bqlAlF_CBf8uPRsr4bkNcsxek.crl (hash: S6bjq64CkWUZltmng0xwQOUoWomithx0EEAEqDlGO7I=) 2: EB17A8C2152511ECAD055780C4F9AE02.roa (hash: 3Who1qUDm6eD8QDguJD4EaJb2KgGViSYhJ9baOpktjo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DF56/BD7FA038152311ECB74F2080C4F9AE02/E5bqlAlF_CBf8uPRsr4bkNcsxek.crl rsync://rpki.apnic.net/member_repository/A914DF56/BD7FA038152311ECB74F2080C4F9AE02/E5bqlAlF_CBf8uPRsr4bkNcsxek.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E5bqlAlF_CBf8uPRsr4bkNcsxek.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:47:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1325 (0x52d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DF56, serialNumber=1396EA940945FC205FF2E3D1B2BE1B90D72CC5E9 Validity Not Before: Aug 22 23:47:04 2025 GMT Not After : Aug 29 23:47:04 2025 GMT Subject: CN=68a90179-0017 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0e:5f:fd:73:79:e1:be:76:93:48:e3:0c:3c: 21:5a:56:e3:9e:b9:80:97:6e:99:12:24:a2:9c:61: 3b:74:47:fb:8e:8b:e9:5e:cd:45:49:9d:31:8a:52: fd:d6:13:8e:7c:fb:34:f1:7c:75:10:b5:4e:2b:5f: 78:5c:e2:d3:81:08:b5:9d:d5:07:ad:e0:ca:a8:4a: 6c:42:6d:5e:e1:5f:32:30:a0:3f:59:4f:73:58:1e: 9f:3b:e0:2a:9e:43:d2:ef:aa:a8:00:f5:1e:5e:c0: 14:45:f2:a4:e4:a7:9e:bb:ef:6a:eb:db:1a:86:e9: 5a:4b:82:4b:66:1f:6a:39:51:07:1d:25:1b:bc:63: 1d:e6:d4:6e:78:09:77:0d:0a:2d:94:80:f5:d3:cf: db:d3:9a:b9:c1:be:88:68:0c:70:f6:28:dd:62:54: c2:f9:88:d0:6b:ed:85:f5:ba:aa:df:3e:47:38:8c: a9:0b:c6:99:b3:d4:62:6d:6c:ae:fa:4f:36:32:bb: 5d:d1:6d:50:4a:b1:d5:e8:62:8a:a8:18:f7:8e:7b: d7:39:d8:01:97:ae:32:47:e4:0c:ef:70:ce:e7:5b: f6:98:64:58:35:f3:44:3d:7f:14:b3:af:e3:ed:b1: 8b:79:23:03:87:ec:11:70:e6:e5:0f:9f:13:05:70: 98:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:CF:46:70:EE:4A:4D:37:86:DB:F5:0D:0F:94:D3:3B:90:0C:02:3A X509v3 Authority Key Identifier: keyid:13:96:EA:94:09:45:FC:20:5F:F2:E3:D1:B2:BE:1B:90:D7:2C:C5:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DF56/BD7FA038152311ECB74F2080C4F9AE02/E5bqlAlF_CBf8uPRsr4bkNcsxek.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E5bqlAlF_CBf8uPRsr4bkNcsxek.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DF56/BD7FA038152311ECB74F2080C4F9AE02/E5bqlAlF_CBf8uPRsr4bkNcsxek.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:2b:33:d0:c1:bc:a3:f9:44:40:63:d0:e9:52:73:95:66:87: 55:f4:a4:28:de:a1:f9:50:44:0b:ef:94:23:0d:f3:4f:b8:20: f8:8d:ad:a1:dc:3b:57:f7:de:1e:5b:1a:0f:6b:81:95:7e:19: 46:82:0d:6f:e0:e3:1c:eb:23:ae:3f:39:43:fd:da:3f:92:2b: f8:fb:9d:91:3e:8a:74:13:fe:42:bc:ed:3c:ad:32:9f:79:a6: 8f:2d:1c:db:96:85:d5:69:92:22:6d:06:3e:c8:64:9e:11:fe: 44:c1:f7:f7:3a:4d:f1:84:eb:26:87:d7:11:6e:8a:03:99:13: 48:1d:84:9f:67:5c:5c:25:6a:de:26:da:f8:07:69:72:b3:e3: 33:76:c1:9e:a7:6d:80:26:07:8d:2b:a7:3f:4d:7a:8d:81:fc: 81:cd:9e:99:7b:0e:f3:57:bd:73:68:95:d2:78:cc:6f:ed:40: b1:38:ce:29:e6:91:b7:b3:81:61:a1:e1:33:1f:1d:24:c1:89: 6f:e2:86:32:8f:50:70:44:85:97:c3:08:e1:ec:07:dd:7c:29: 3a:0f:07:9e:f4:1c:ff:2a:51:c7:df:50:91:21:2f:35:6d:a9: 63:87:90:d3:87:1c:8e:cf:85:ce:51:d7:88:e8:25:79:47:48: 08:93:65:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NERGNTYxMTAvBgNVBAUTKDEzOTZFQTk0MDk0NUZDMjA1RkYyRTNEMUIyQkUxQjkw RDcyQ0M1RTkwHhcNMjUwODIyMjM0NzA0WhcNMjUwODI5MjM0NzA0WjAYMRYwFAYD VQQDEw02OGE5MDE3OS0wMDE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzQ5f/XN54b52k0jjDDwhWlbjnrmAl26ZEiSinGE7dEf7jovpXs1FSZ0xilL9 1hOOfPs08Xx1ELVOK194XOLTgQi1ndUHreDKqEpsQm1e4V8yMKA/WU9zWB6fO+Aq nkPS76qoAPUeXsAURfKk5Keeu+9q69sahulaS4JLZh9qOVEHHSUbvGMd5tRueAl3 DQotlID108/b05q5wb6IaAxw9ijdYlTC+YjQa+2F9bqq3z5HOIypC8aZs9RibWyu +k82Mrtd0W1QSrHV6GKKqBj3jnvXOdgBl64yR+QM73DO51v2mGRYNfNEPX8Us6/j 7bGLeSMDh+wRcOblD58TBXCYfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBTPRnDu Sk03htv1DQ+U0zuQDAI6MB8GA1UdIwQYMBaAFBOW6pQJRfwgX/Lj0bK+G5DXLMXp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REY1Ni9CRDdGQTAzODE1 MjMxMUVDQjc0RjIwODBDNEY5QUUwMi9FNWJxbEFsRl9DQmY4dVBSc3I0YmtOY3N4 ZWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U1YnFsQWxGX0NCZjh1UFJzcjRia05jc3hlay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 REY1Ni9CRDdGQTAzODE1MjMxMUVDQjc0RjIwODBDNEY5QUUwMi9FNWJxbEFsRl9D QmY4dVBSc3I0YmtOY3N4ZWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzKzPQwbyj+URAY9DpUnOVZodV9KQo3qH5UEQL75QjDfNPuCD4ja2h 3DtX994eWxoPa4GVfhlGgg1v4OMc6yOuPzlD/do/kiv4+52RPop0E/5CvO08rTKf eaaPLRzbloXVaZIibQY+yGSeEf5Ewff3Ok3xhOsmh9cRbooDmRNIHYSfZ1xcJWre Jtr4B2lys+MzdsGep22AJgeNK6c/TXqNgfyBzZ6Zew7zV71zaJXSeMxv7UCxOM4p 5pG3s4FhoeEzHx0kwYlv4oYyj1BwRIWXwwjh7AfdfCk6Dwee9Bz/KlHH31CRIS81 baljh5DThxyOz4XOUdeI6CV5R0gIk2Ui -----END CERTIFICATE-----Generated at Sat Aug 23 16:42:41 2025 by rpki-client