$ rpki-client -vvf rpki.apnic.net/member_repository/A915393C/6D04315E640E11EFB5446458C4F9AE02/S5R0cysQASlff10ywBNpOhk3aBM.mft File: S5R0cysQASlff10ywBNpOhk3aBM.mft (raw, json) Hash identifier: WMc8myRcw4nGC/wGWyB7Dr60PiL0sTT7TLED3rtK97c= Subject key identifier: 9B:B1:71:30:45:F3:91:7D:18:1C:15:D1:4C:D9:EE:6A:6C:C4:75:22 Authority key identifier: 4B:94:74:73:2B:10:01:29:5F:7F:5D:32:C0:13:69:3A:19:37:68:13 Certificate issuer: /CN=A915393C/serialNumber=4B9474732B1001295F7F5D32C013693A19376813 Certificate serial: BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5R0cysQASlff10ywBNpOhk3aBM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915393C/6D04315E640E11EFB5446458C4F9AE02/S5R0cysQASlff10ywBNpOhk3aBM.mft Manifest number: BB Signing time: Sat 23 Aug 2025 06:07:44 +0000 Manifest this update: Sat 23 Aug 2025 06:07:43 +0000 Manifest next update: Sat 30 Aug 2025 06:07:43 +0000 Files and hashes: 1: S5R0cysQASlff10ywBNpOhk3aBM.crl (hash: LcWTtFl+oNwpNp/0mO5K6sCZiTp8D6kFbJ0g+zSnNMc=) 2: D970354A640E11EF93D18659C4F9AE02.roa (hash: etNLN0xdcIQbsfAOgbyJVGgcDaVOQsDMFkI6IBI01Ws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915393C/6D04315E640E11EFB5446458C4F9AE02/S5R0cysQASlff10ywBNpOhk3aBM.crl rsync://rpki.apnic.net/member_repository/A915393C/6D04315E640E11EFB5446458C4F9AE02/S5R0cysQASlff10ywBNpOhk3aBM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5R0cysQASlff10ywBNpOhk3aBM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:07:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 189 (0xbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915393C, serialNumber=4B9474732B1001295F7F5D32C013693A19376813 Validity Not Before: Aug 23 06:07:43 2025 GMT Not After : Aug 30 06:07:43 2025 GMT Subject: CN=68a95aaf-835a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:1c:cb:97:ce:f1:15:0a:c7:7a:62:7d:3a:b3: 3d:a2:66:1b:86:93:01:e1:f9:c2:a6:8d:e9:b9:4c: 5e:23:0b:c1:3f:ed:ca:95:83:5f:3c:d2:62:67:bd: c5:c7:6e:d7:4e:e0:09:72:e2:73:c3:1d:4e:e1:9d: 35:27:c4:40:f6:8c:2a:de:a4:0a:c4:fd:f7:70:08: af:da:d4:6d:9d:30:8e:92:97:e7:fb:01:49:c2:83: 62:e1:4b:22:9a:64:08:2b:6b:ef:fb:54:d8:39:e9: d7:01:a0:57:36:11:ae:0b:50:a2:e0:ec:7a:15:58: ea:bc:7e:9f:99:aa:6c:4b:71:dc:ec:95:4c:f8:90: 65:6d:b8:e1:ca:ae:b8:d5:2d:14:2d:e1:a1:77:ed: 66:1a:cb:9e:fe:78:95:66:b9:e7:66:07:83:12:91: 2a:32:30:20:d9:b9:1c:f2:a1:96:0e:47:85:1f:85: 37:82:df:5d:e7:ef:88:e4:c7:de:2a:71:b2:07:7b: 05:8c:d5:1d:a9:99:8b:81:32:ed:cc:43:f6:45:1c: 40:4c:71:d6:48:d5:9a:b2:05:c8:0a:f0:fa:0a:80: 20:1a:cc:98:31:61:01:dd:9e:79:81:f0:fe:e3:4c: 73:0b:d6:a9:0c:d7:c3:7b:bb:e6:43:4f:bd:db:02: ba:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:B1:71:30:45:F3:91:7D:18:1C:15:D1:4C:D9:EE:6A:6C:C4:75:22 X509v3 Authority Key Identifier: keyid:4B:94:74:73:2B:10:01:29:5F:7F:5D:32:C0:13:69:3A:19:37:68:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915393C/6D04315E640E11EFB5446458C4F9AE02/S5R0cysQASlff10ywBNpOhk3aBM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5R0cysQASlff10ywBNpOhk3aBM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915393C/6D04315E640E11EFB5446458C4F9AE02/S5R0cysQASlff10ywBNpOhk3aBM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:a7:a4:49:bd:a4:02:67:d7:8f:2a:64:d2:16:6d:13:0c:29: 1f:60:86:4b:c7:d2:9d:1c:14:05:f6:d2:12:eb:10:17:bd:a2: 38:23:2a:e9:21:9b:47:6d:2b:9d:1d:a3:12:92:8e:4e:fc:c5: a9:92:0d:f0:8b:97:31:33:df:0d:46:74:36:90:85:67:c1:f8: 2b:89:17:79:41:91:b3:28:20:1a:8e:d1:bd:cd:b8:84:46:0e: b6:e3:0d:ab:16:92:f8:a6:76:dd:17:99:1b:ec:7d:26:21:21: f0:46:5b:94:bd:d9:10:00:ff:74:67:2f:ba:a0:3a:68:43:8b: 0e:23:05:29:e8:1e:5e:ad:bb:1c:4a:62:f0:4c:0a:c1:d2:0d: d6:05:38:78:52:89:da:dd:c0:5e:b3:02:d5:53:ff:a2:5c:c9: 25:b8:79:2b:d8:66:9d:c8:5a:83:43:d8:a3:04:43:5c:75:46: 3d:8d:98:9d:8e:7e:71:17:ab:01:23:8a:c6:89:56:b1:5d:2f: 8b:b8:63:bc:9b:19:ae:f2:a2:26:78:88:49:f9:44:ad:6e:55: a6:ae:9e:5e:2f:69:c8:6a:ab:50:45:86:a2:1a:79:d3:6e:e4: de:85:65:7f:5b:de:60:0d:9a:f7:9a:86:e8:32:8d:f4:6f:c5: 0b:c6:f8:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM5M0MxMTAvBgNVBAUTKDRCOTQ3NDczMkIxMDAxMjk1RjdGNUQzMkMwMTM2OTNB MTkzNzY4MTMwHhcNMjUwODIzMDYwNzQzWhcNMjUwODMwMDYwNzQzWjAYMRYwFAYD VQQDEw02OGE5NWFhZi04MzVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzRzLl87xFQrHemJ9OrM9omYbhpMB4fnCpo3puUxeIwvBP+3KlYNfPNJiZ73F x27XTuAJcuJzwx1O4Z01J8RA9owq3qQKxP33cAiv2tRtnTCOkpfn+wFJwoNi4Usi mmQIK2vv+1TYOenXAaBXNhGuC1Ci4Ox6FVjqvH6fmapsS3Hc7JVM+JBlbbjhyq64 1S0ULeGhd+1mGsue/niVZrnnZgeDEpEqMjAg2bkc8qGWDkeFH4U3gt9d5++I5Mfe KnGyB3sFjNUdqZmLgTLtzEP2RRxATHHWSNWasgXICvD6CoAgGsyYMWEB3Z55gfD+ 40xzC9apDNfDe7vmQ0+92wK6wQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJuxcTBF 85F9GBwV0UzZ7mpsxHUiMB8GA1UdIwQYMBaAFEuUdHMrEAEpX39dMsATaToZN2gT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzkzQy82RDA0MzE1RTY0 MEUxMUVGQjU0NDY0NThDNEY5QUUwMi9TNVIwY3lzUUFTbGZmMTB5d0JOcE9oazNh Qk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1M1UjBjeXNRQVNsZmYxMHl3Qk5wT2hrM2FCTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzkzQy82RDA0MzE1RTY0MEUxMUVGQjU0NDY0NThDNEY5QUUwMi9TNVIwY3lzUUFT bGZmMTB5d0JOcE9oazNhQk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANp6RJvaQCZ9ePKmTSFm0TDCkfYIZLx9KdHBQF9tIS6xAXvaI4Iyrp IZtHbSudHaMSko5O/MWpkg3wi5cxM98NRnQ2kIVnwfgriRd5QZGzKCAajtG9zbiE Rg624w2rFpL4pnbdF5kb7H0mISHwRluUvdkQAP90Zy+6oDpoQ4sOIwUp6B5erbsc SmLwTArB0g3WBTh4Uona3cBeswLVU/+iXMkluHkr2GadyFqDQ9ijBENcdUY9jZid jn5xF6sBI4rGiVaxXS+LuGO8mxmu8qImeIhJ+UStblWmrp5eL2nIaqtQRYaiGnnT buTehWV/W95gDZr3moboMo30b8ULxvid -----END CERTIFICATE-----Generated at Sat Aug 23 15:15:36 2025 by rpki-client