$ rpki-client -vvf rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft File: s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft (raw, json) Hash identifier: 8V/zAQdfoxdDUzIwYIRPE3eTQPoJUzdJLFNNuya1f7A= Subject key identifier: 22:E1:58:6D:28:18:E8:10:8F:89:B2:38:D5:79:7D:A8:48:56:D1:23 Authority key identifier: B3:99:2F:0D:49:BA:F6:A3:6F:DA:65:8E:5B:45:94:69:52:1E:5B:44 Certificate issuer: /CN=A917530D/serialNumber=B3992F0D49BAF6A36FDA658E5B459469521E5B44 Certificate serial: 0146 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s5kvDUm69qNv2mWOW0WUaVIeW0Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft Manifest number: 013A Signing time: Sat 23 Aug 2025 04:45:52 +0000 Manifest this update: Sat 23 Aug 2025 04:45:52 +0000 Manifest next update: Sat 30 Aug 2025 04:45:52 +0000 Files and hashes: 1: s5kvDUm69qNv2mWOW0WUaVIeW0Q.crl (hash: B7nzzXi2DbYx/Rg4i8ZYtegYe9Dsf16zo/AkAWmZ+ec=) 2: 762CACD0B04311EF95390327C4F9AE02.roa (hash: 7lH097TnqT2Frr0JL7F0/A/6TnFN0hBEwwqzvbNC3Tc=) 3: A97CBD42A06611EFA888B57DC4F9AE02.roa (hash: iA4PiBqhCGu6j+QREktQJZZ0YDevgINmDR162rqZIpg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.crl rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s5kvDUm69qNv2mWOW0WUaVIeW0Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:45:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 326 (0x146) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917530D, serialNumber=B3992F0D49BAF6A36FDA658E5B459469521E5B44 Validity Not Before: Aug 23 04:45:52 2025 GMT Not After : Aug 30 04:45:52 2025 GMT Subject: CN=68a94780-de56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b1:fb:cf:19:93:ec:b2:f7:9e:99:85:3b:de: a6:72:91:e2:e3:8d:12:a0:02:7f:11:a5:14:52:fa: f7:ca:ec:e2:95:8f:b7:cf:b3:34:af:64:1c:81:dd: 6a:c9:a7:a4:76:02:2e:e2:9a:76:9a:89:19:4f:3a: f4:7b:db:28:e5:c2:5e:2c:f8:11:3a:4e:e2:7f:36: bc:59:9d:29:10:26:0a:9e:03:60:6c:f7:bb:6c:68: 0a:e2:2e:52:99:09:3c:f9:58:9f:7d:0d:61:76:1f: 13:c1:fa:24:2a:40:47:c8:2c:5b:f2:93:a5:7e:34: d8:0d:a0:51:49:de:2d:63:96:e4:fc:a9:e8:fe:ad: 03:8b:82:d4:9c:55:51:a4:05:ca:99:92:f9:dc:a2: 9e:99:98:60:1e:70:37:b9:55:88:51:4f:63:f1:83: be:2f:0b:e2:e8:a8:1a:20:55:6e:48:33:ad:2f:7d: 99:16:59:ba:f9:69:6d:81:a3:d7:fd:28:a5:f9:f2: 4a:21:16:97:fc:d3:c1:d5:1a:fa:4a:fb:41:14:4c: c8:75:fa:21:5d:f8:81:dc:20:cf:ad:fc:ac:a8:a1: 4e:bb:7e:d2:35:4b:ce:72:cd:2a:66:ab:e5:18:a1: 7e:2e:11:9b:08:1d:32:34:82:d4:7f:eb:64:6a:58: af:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:E1:58:6D:28:18:E8:10:8F:89:B2:38:D5:79:7D:A8:48:56:D1:23 X509v3 Authority Key Identifier: keyid:B3:99:2F:0D:49:BA:F6:A3:6F:DA:65:8E:5B:45:94:69:52:1E:5B:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s5kvDUm69qNv2mWOW0WUaVIeW0Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:82:e0:58:c4:ac:b7:1c:2d:78:af:c7:fb:11:cf:e2:76:56: f9:4c:f8:5e:26:22:be:73:6b:6b:2f:c3:32:50:bc:62:bf:1e: 3e:5e:b6:c7:cf:1a:90:5e:d8:6c:37:6f:b5:4b:99:a8:65:46: ba:b4:6c:d3:a0:71:08:a9:aa:90:d1:ba:b5:d8:79:a1:6e:c7: 11:c9:f3:8e:d1:d4:5c:79:b6:07:52:71:af:9d:79:ca:b8:79: 99:51:83:d1:ce:8a:89:68:82:cc:5e:c2:5a:4b:60:1e:2f:b2: 38:f6:89:69:80:71:35:a6:27:79:92:bd:73:c7:30:52:c2:2e: 8a:3a:a0:fc:4b:e5:2f:74:0c:0f:ce:46:75:ea:c3:cf:85:b9: e8:d2:54:60:2d:12:d0:50:1f:02:a5:b5:1c:12:00:a4:44:b9: ca:71:1a:82:77:74:6b:29:ea:36:03:e9:45:9c:85:10:01:bd: 77:bc:c6:a6:9a:ff:0b:75:5a:53:b8:32:25:9e:11:a5:d5:5e: 4d:a0:bd:01:86:a0:26:46:e6:d0:ed:60:8a:88:2d:55:46:db: 07:b0:a8:35:28:d3:fc:aa:95:0f:91:c3:9c:95:81:84:9e:2a: d0:88:d1:79:d5:f3:64:49:0c:91:c6:2d:a5:cd:08:e4:76:9c: 94:50:97:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUzMEQxMTAvBgNVBAUTKEIzOTkyRjBENDlCQUY2QTM2RkRBNjU4RTVCNDU5NDY5 NTIxRTVCNDQwHhcNMjUwODIzMDQ0NTUyWhcNMjUwODMwMDQ0NTUyWjAYMRYwFAYD VQQDEw02OGE5NDc4MC1kZTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA07H7zxmT7LL3npmFO96mcpHi440SoAJ/EaUUUvr3yuzilY+3z7M0r2Qcgd1q yaekdgIu4pp2mokZTzr0e9so5cJeLPgROk7ifza8WZ0pECYKngNgbPe7bGgK4i5S mQk8+ViffQ1hdh8TwfokKkBHyCxb8pOlfjTYDaBRSd4tY5bk/Kno/q0Di4LUnFVR pAXKmZL53KKemZhgHnA3uVWIUU9j8YO+Lwvi6KgaIFVuSDOtL32ZFlm6+WltgaPX /Sil+fJKIRaX/NPB1Rr6SvtBFEzIdfohXfiB3CDPrfysqKFOu37SNUvOcs0qZqvl GKF+LhGbCB0yNILUf+tkalivTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCLhWG0o GOgQj4myONV5fahIVtEjMB8GA1UdIwQYMBaAFLOZLw1Juvajb9pljltFlGlSHltE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTMwRC9ERDdFMDkxQ0I2 NEIxMUVFOTE0NjM3NjBDNEY5QUUwMi9zNWt2RFVtNjlxTnYybVdPVzBXVWFWSWVX MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3M1a3ZEVW02OXFOdjJtV09XMFdVYVZJZVcwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTMwRC9ERDdFMDkxQ0I2NEIxMUVFOTE0NjM3NjBDNEY5QUUwMi9zNWt2RFVtNjlx TnYybVdPVzBXVWFWSWVXMFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuguBYxKy3HC14r8f7Ec/idlb5TPheJiK+c2trL8MyULxivx4+XrbH zxqQXthsN2+1S5moZUa6tGzToHEIqaqQ0bq12HmhbscRyfOO0dRcebYHUnGvnXnK uHmZUYPRzoqJaILMXsJaS2AeL7I49olpgHE1pid5kr1zxzBSwi6KOqD8S+UvdAwP zkZ16sPPhbno0lRgLRLQUB8CpbUcEgCkRLnKcRqCd3RrKeo2A+lFnIUQAb13vMam mv8LdVpTuDIlnhGl1V5NoL0BhqAmRubQ7WCKiC1VRtsHsKg1KNP8qpUPkcOclYGE nirQiNF51fNkSQyRxi2lzQjkdpyUUJfc -----END CERTIFICATE-----Generated at Sat Aug 23 16:44:31 2025 by rpki-client