$ rpki-client -vvf rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.mft File: PMd5DiA3Zl70liuB2tL9B-1G-LI.mft (raw, json) Hash identifier: cPcr5nx571pedNHQWA8ZF62tzR0Chm9BGdmV9tvbe9Q= Subject key identifier: 31:DE:D5:D0:F9:A1:B6:77:66:9F:43:14:C8:CA:A1:11:C0:4E:2E:23 Authority key identifier: 3C:C7:79:0E:20:37:66:5E:F4:96:2B:81:DA:D2:FD:07:ED:46:F8:B2 Certificate issuer: /CN=A9163EB9/serialNumber=3CC7790E2037665EF4962B81DAD2FD07ED46F8B2 Certificate serial: C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PMd5DiA3Zl70liuB2tL9B-1G-LI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.mft Manifest number: C5 Signing time: Sat 23 Aug 2025 05:55:49 +0000 Manifest this update: Sat 23 Aug 2025 05:55:49 +0000 Manifest next update: Sat 30 Aug 2025 05:55:49 +0000 Files and hashes: 1: PMd5DiA3Zl70liuB2tL9B-1G-LI.crl (hash: T4we2g9a/5ezsEjc93DjIEAlulyW94hdygA2pE9/t9w=) 2: A6449CBA54A011EFB35AED26C4F9AE02.roa (hash: TlHlbn6q/SJJmLaIdFeAVpNRm4YQAAsTE8XrQ+CUo9Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.crl rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PMd5DiA3Zl70liuB2tL9B-1G-LI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:55:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 199 (0xc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163EB9, serialNumber=3CC7790E2037665EF4962B81DAD2FD07ED46F8B2 Validity Not Before: Aug 23 05:55:49 2025 GMT Not After : Aug 30 05:55:49 2025 GMT Subject: CN=68a957e5-5e8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c2:21:84:c0:8f:1e:c6:25:55:5f:26:6c:56: 35:43:a5:fa:30:9a:29:91:01:c0:48:3b:cf:93:19: 10:c6:32:e8:ba:66:0f:bc:40:cc:54:27:54:4d:e4: 00:3d:26:70:e3:28:63:70:33:2e:c3:77:06:2e:2a: b5:2b:20:1d:c9:14:b7:22:2f:36:2e:31:33:db:11: d0:49:12:04:9c:47:fa:7b:8d:45:80:67:79:bc:10: da:f6:f7:97:07:88:74:50:12:44:d2:90:18:c3:ea: b4:7a:05:64:28:c8:52:5e:3f:22:47:74:bf:4d:6e: 7e:55:fe:40:59:73:f2:93:c7:98:bb:4f:60:ee:03: dd:c9:d7:59:a6:88:af:81:13:da:df:af:77:ec:10: 40:5c:6b:21:33:e8:ea:70:1e:c0:a9:0e:72:60:da: 5f:95:6f:06:2c:55:a6:67:a1:e0:43:7f:a7:2e:fc: ae:41:d3:44:9a:2c:6f:28:6f:85:ae:5c:aa:41:56: ef:76:36:4e:50:02:7b:51:02:a1:60:66:ed:26:27: f8:ff:f5:d0:b0:b5:a5:6e:de:bb:34:10:3a:1b:b6: 6c:c8:49:a2:ff:99:f0:90:c0:49:62:73:fc:ee:a7: 98:4a:72:51:4e:81:f4:b6:fb:5c:a4:a6:1c:78:b6: 55:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:DE:D5:D0:F9:A1:B6:77:66:9F:43:14:C8:CA:A1:11:C0:4E:2E:23 X509v3 Authority Key Identifier: keyid:3C:C7:79:0E:20:37:66:5E:F4:96:2B:81:DA:D2:FD:07:ED:46:F8:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PMd5DiA3Zl70liuB2tL9B-1G-LI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:92:7c:f2:f3:82:cd:71:be:b0:f6:6b:06:e1:b4:2a:28:2b: 4b:17:1f:05:71:b4:99:d6:3f:1f:57:ca:c3:c7:78:2a:60:74: 7c:e1:87:24:08:b2:ee:49:cd:ca:53:55:85:31:f3:3f:7a:4f: e0:3c:f0:66:71:01:72:e9:c3:3f:fa:48:7b:b0:79:c3:71:e7: 83:76:a6:a0:fc:1c:fb:c6:76:bc:8e:c2:c0:99:48:79:51:bf: 40:24:c7:76:eb:2f:63:ad:b7:79:10:7f:ef:08:1a:b7:d2:25: 91:be:b0:cf:98:84:17:e8:00:b8:c6:a7:f4:46:b0:46:77:d5: 46:40:99:cc:ff:ba:ee:ef:22:45:14:11:c5:bb:ca:af:13:5c: 92:53:41:0f:57:fe:f1:11:03:b4:df:70:25:68:0d:f4:c1:0c: f4:a3:6f:97:63:c8:6d:48:0f:e8:b9:53:9d:42:3a:81:1e:d0: da:f4:a6:01:63:f8:1a:80:ee:e0:8b:58:26:c0:29:05:a2:ed: 75:26:e7:a7:52:ba:4b:9a:1e:fb:b5:b5:11:a2:3d:cd:ef:bf: fc:84:68:84:24:e2:75:9b:82:96:e2:3d:e5:cf:7a:ca:da:ed: 0f:21:b9:15:c8:fb:75:8f:ab:d3:db:60:fb:29:21:1a:26:ec: 3a:a5:c9:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjNFQjkxMTAvBgNVBAUTKDNDQzc3OTBFMjAzNzY2NUVGNDk2MkI4MURBRDJGRDA3 RUQ0NkY4QjIwHhcNMjUwODIzMDU1NTQ5WhcNMjUwODMwMDU1NTQ5WjAYMRYwFAYD VQQDEw02OGE5NTdlNS01ZThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAycIhhMCPHsYlVV8mbFY1Q6X6MJopkQHASDvPkxkQxjLoumYPvEDMVCdUTeQA PSZw4yhjcDMuw3cGLiq1KyAdyRS3Ii82LjEz2xHQSRIEnEf6e41FgGd5vBDa9veX B4h0UBJE0pAYw+q0egVkKMhSXj8iR3S/TW5+Vf5AWXPyk8eYu09g7gPdyddZpoiv gRPa36937BBAXGshM+jqcB7AqQ5yYNpflW8GLFWmZ6HgQ3+nLvyuQdNEmixvKG+F rlyqQVbvdjZOUAJ7UQKhYGbtJif4//XQsLWlbt67NBA6G7ZsyEmi/5nwkMBJYnP8 7qeYSnJRToH0tvtcpKYceLZV+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDHe1dD5 obZ3Zp9DFMjKoRHATi4jMB8GA1UdIwQYMBaAFDzHeQ4gN2Ze9JYrgdrS/QftRviy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2M0VCOS8wNTFDOUU2NDU0 QTAxMUVGODZBRTU5MjJDNEY5QUUwMi9QTWQ1RGlBM1psNzBsaXVCMnRMOUItMUct TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BNZDVEaUEzWmw3MGxpdUIydEw5Qi0xRy1MSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 M0VCOS8wNTFDOUU2NDU0QTAxMUVGODZBRTU5MjJDNEY5QUUwMi9QTWQ1RGlBM1ps NzBsaXVCMnRMOUItMUctTEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQknzy84LNcb6w9msG4bQqKCtLFx8FcbSZ1j8fV8rDx3gqYHR84Yck CLLuSc3KU1WFMfM/ek/gPPBmcQFy6cM/+kh7sHnDceeDdqag/Bz7xna8jsLAmUh5 Ub9AJMd26y9jrbd5EH/vCBq30iWRvrDPmIQX6AC4xqf0RrBGd9VGQJnM/7ru7yJF FBHFu8qvE1ySU0EPV/7xEQO033AlaA30wQz0o2+XY8htSA/ouVOdQjqBHtDa9KYB Y/gagO7gi1gmwCkFou11JuenUrpLmh77tbURoj3N77/8hGiEJOJ1m4KW4j3lz3rK 2u0PIbkVyPt1j6vT22D7KSEaJuw6pcnC -----END CERTIFICATE-----Generated at Sun Aug 24 00:45:50 2025 by rpki-client