$ rpki-client -vvf rpki.apnic.net/member_repository/A9153AA6/9C3D87E6F52411E79644B009C4F9AE02/5cOmhsg97m0zv-xUHqy0pKCJknk.mft File: 5cOmhsg97m0zv-xUHqy0pKCJknk.mft (raw, json) Hash identifier: 64PtqNipAPr6si6dznWOwbyjxK/2rZTC3LXBWl9/JiM= Subject key identifier: F6:05:EA:D9:22:70:C0:B1:94:BF:79:9A:05:86:CA:86:72:AB:6C:F7 Authority key identifier: E5:C3:A6:86:C8:3D:EE:6D:33:BF:EC:54:1E:AC:B4:A4:A0:89:92:79 Certificate issuer: /CN=A9153AA6/serialNumber=E5C3A686C83DEE6D33BFEC541EACB4A4A0899279 Certificate serial: 16FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5cOmhsg97m0zv-xUHqy0pKCJknk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153AA6/9C3D87E6F52411E79644B009C4F9AE02/5cOmhsg97m0zv-xUHqy0pKCJknk.mft Manifest number: 16F1 Signing time: Fri 22 Aug 2025 16:45:15 +0000 Manifest this update: Fri 22 Aug 2025 16:45:15 +0000 Manifest next update: Fri 29 Aug 2025 16:45:15 +0000 Files and hashes: 1: 5cOmhsg97m0zv-xUHqy0pKCJknk.crl (hash: 9Q6rGuROUYGqgXF9NaSgJ6QoMbZEfXMmGSOVwP2KI6c=) 2: 99C6F94CF52511E7948D5A0BC4F9AE02.roa (hash: aM0yH97r/h3xu615cUuk5zwsCFMLHVQ8whXpoG1e1kM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153AA6/9C3D87E6F52411E79644B009C4F9AE02/5cOmhsg97m0zv-xUHqy0pKCJknk.crl rsync://rpki.apnic.net/member_repository/A9153AA6/9C3D87E6F52411E79644B009C4F9AE02/5cOmhsg97m0zv-xUHqy0pKCJknk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5cOmhsg97m0zv-xUHqy0pKCJknk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:45:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5883 (0x16fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153AA6, serialNumber=E5C3A686C83DEE6D33BFEC541EACB4A4A0899279 Validity Not Before: Aug 22 16:45:15 2025 GMT Not After : Aug 29 16:45:15 2025 GMT Subject: CN=68a89e9b-21af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7a:e6:65:bb:43:97:47:e5:8d:0e:04:23:14: f1:13:55:ee:8f:25:f2:ff:11:37:ba:14:21:5e:89: 1a:20:26:4d:19:9d:6e:b8:f4:18:4a:23:dd:81:94: c4:e0:f2:76:9d:4f:be:a9:0f:e1:12:3b:b4:3a:db: ef:6e:1d:a9:38:cc:3d:72:2a:a4:61:68:68:90:aa: 06:c6:93:b8:3f:7d:16:0f:26:4c:1b:e5:2f:0e:49: 9d:df:6f:e1:c3:f0:7f:38:17:71:76:9b:29:24:30: 96:d5:8a:a5:b5:83:66:a4:4c:c7:78:8d:f9:85:3a: 0a:0d:1e:46:dd:71:db:ea:8f:8a:74:e3:e5:c7:02: d2:f0:1f:7b:7c:6e:24:d8:60:27:56:3c:22:eb:6d: ad:74:c1:90:b9:7b:49:94:dd:4d:69:9a:40:d6:9f: 56:bd:1c:dc:5b:b8:f8:e9:36:ea:59:dd:25:9b:5c: c2:9c:60:e2:f3:ba:73:89:fd:70:ca:49:97:7f:d3: b1:5e:77:db:6c:a3:6a:c2:14:36:58:eb:5e:69:80: 03:35:c2:87:8c:3b:81:91:3d:bb:3d:9b:78:b3:1a: bf:3d:9d:ba:b5:78:10:4f:ec:d1:ba:93:7c:ce:c9: f4:95:f7:ed:71:40:44:57:30:7c:de:9b:2a:87:1b: 86:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:05:EA:D9:22:70:C0:B1:94:BF:79:9A:05:86:CA:86:72:AB:6C:F7 X509v3 Authority Key Identifier: keyid:E5:C3:A6:86:C8:3D:EE:6D:33:BF:EC:54:1E:AC:B4:A4:A0:89:92:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153AA6/9C3D87E6F52411E79644B009C4F9AE02/5cOmhsg97m0zv-xUHqy0pKCJknk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5cOmhsg97m0zv-xUHqy0pKCJknk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153AA6/9C3D87E6F52411E79644B009C4F9AE02/5cOmhsg97m0zv-xUHqy0pKCJknk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:a3:44:9a:19:76:58:3e:b2:89:5b:15:48:99:91:cf:26:66: 44:17:8d:4e:b2:bd:3d:ae:78:2c:bd:c3:3b:f7:80:b2:9d:36: 13:ed:18:91:55:0a:ba:74:e8:86:96:54:af:a6:eb:1b:1f:4e: 38:94:15:54:3e:ef:84:3b:f4:a2:05:9b:37:f2:bc:2a:fd:51: bc:62:5c:6f:f0:63:01:50:c6:31:93:17:7f:e9:e6:13:f0:03: 7b:ad:ec:94:42:ff:04:94:89:38:d6:99:ad:aa:dd:ac:f1:93: f6:c9:c6:ea:d8:98:ae:54:7e:15:8f:73:e3:aa:88:19:5a:58: 3d:30:cb:65:eb:3d:23:10:8e:bd:1d:65:e7:b4:0c:71:54:85: fc:6f:9e:dd:9b:d6:eb:d1:91:b5:f3:e3:e5:4b:3c:c1:98:c8: d2:56:79:4c:c6:c5:f1:ee:98:db:d7:6d:be:19:0d:ba:61:d7: f6:04:fc:53:3f:36:65:cf:0d:9c:ca:55:da:12:c2:85:cc:16: fe:02:a4:33:57:dc:f4:66:e2:04:68:5c:bf:67:14:9d:1e:ec: 18:b3:8b:31:e3:b4:7e:67:69:39:a8:21:b5:18:71:04:fc:e5: 9d:1d:b3:c7:65:32:23:35:83:b1:69:41:bd:5d:7f:9b:f5:34: 86:c0:bc:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFvswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTNBQTYxMTAvBgNVBAUTKEU1QzNBNjg2QzgzREVFNkQzM0JGRUM1NDFFQUNCNEE0 QTA4OTkyNzkwHhcNMjUwODIyMTY0NTE1WhcNMjUwODI5MTY0NTE1WjAYMRYwFAYD VQQDEw02OGE4OWU5Yi0yMWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv3rmZbtDl0fljQ4EIxTxE1XujyXy/xE3uhQhXokaICZNGZ1uuPQYSiPdgZTE 4PJ2nU++qQ/hEju0Otvvbh2pOMw9ciqkYWhokKoGxpO4P30WDyZMG+UvDkmd32/h w/B/OBdxdpspJDCW1YqltYNmpEzHeI35hToKDR5G3XHb6o+KdOPlxwLS8B97fG4k 2GAnVjwi622tdMGQuXtJlN1NaZpA1p9WvRzcW7j46TbqWd0lm1zCnGDi87pzif1w ykmXf9OxXnfbbKNqwhQ2WOteaYADNcKHjDuBkT27PZt4sxq/PZ26tXgQT+zRupN8 zsn0lfftcUBEVzB83psqhxuGnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPYF6tki cMCxlL95mgWGyoZyq2z3MB8GA1UdIwQYMBaAFOXDpobIPe5tM7/sVB6stKSgiZJ5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0FBNi85QzNEODdFNkY1 MjQxMUU3OTY0NEIwMDlDNEY5QUUwMi81Y09taHNnOTdtMHp2LXhVSHF5MHBLQ0pr bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVjT21oc2c5N20wenYteFVIcXkwcEtDSmtuay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 M0FBNi85QzNEODdFNkY1MjQxMUU3OTY0NEIwMDlDNEY5QUUwMi81Y09taHNnOTdt MHp2LXhVSHF5MHBLQ0prbmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANo0SaGXZYPrKJWxVImZHPJmZEF41Osr09rngsvcM794CynTYT7RiR VQq6dOiGllSvpusbH044lBVUPu+EO/SiBZs38rwq/VG8Ylxv8GMBUMYxkxd/6eYT 8AN7reyUQv8ElIk41pmtqt2s8ZP2ycbq2JiuVH4Vj3PjqogZWlg9MMtl6z0jEI69 HWXntAxxVIX8b57dm9br0ZG18+PlSzzBmMjSVnlMxsXx7pjb122+GQ26Ydf2BPxT PzZlzw2cylXaEsKFzBb+AqQzV9z0ZuIEaFy/ZxSdHuwYs4sx47R+Z2k5qCG1GHEE /OWdHbPHZTIjNYOxaUG9XX+b9TSGwLwt -----END CERTIFICATE-----Generated at Sat Aug 23 20:29:01 2025 by rpki-client