$ rpki-client -vvf rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5SEH9MHeBkU-vW5ptL-CRHMWqh0.mft File: 5SEH9MHeBkU-vW5ptL-CRHMWqh0.mft (raw, json) Hash identifier: myFrxPHmHLx2Rtyba0k9/h16Eyjup0hAEvigDXxKy88= Subject key identifier: 06:3B:41:F4:F2:0E:C1:A2:9D:29:82:6A:37:32:76:92:64:E8:68:C2 Authority key identifier: E5:21:07:F4:C1:DE:06:45:3E:BD:6E:69:B4:BF:82:44:73:16:AA:1D Certificate issuer: /CN=A9177C3F/serialNumber=E52107F4C1DE06453EBD6E69B4BF82447316AA1D Certificate serial: 11 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5SEH9MHeBkU-vW5ptL-CRHMWqh0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5SEH9MHeBkU-vW5ptL-CRHMWqh0.mft Manifest number: 0D Signing time: Sat 23 Aug 2025 08:21:43 +0000 Manifest this update: Sat 23 Aug 2025 08:21:42 +0000 Manifest next update: Sat 30 Aug 2025 08:21:42 +0000 Files and hashes: 1: 5SEH9MHeBkU-vW5ptL-CRHMWqh0.crl (hash: ZaN+64tuC8bKKq31G7VJpxCYzmxOxT3gpnAZdXjz53M=) 2: 707ABBBE73F811F0B8A9582CC4F9AE02.roa (hash: J1DqxnoENL3lRHLKjDYZRI0kV9ABA98ydy0Zc/t3Fg8=) 3: 7013EE7A73F811F0B8A9582CC4F9AE02.roa (hash: ckP5BxcHxNFbdmi2/GsSqI6AzRvAVZrOdnnQHyfARKM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5SEH9MHeBkU-vW5ptL-CRHMWqh0.crl rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5SEH9MHeBkU-vW5ptL-CRHMWqh0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5SEH9MHeBkU-vW5ptL-CRHMWqh0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:21:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9177C3F, serialNumber=E52107F4C1DE06453EBD6E69B4BF82447316AA1D Validity Not Before: Aug 23 08:21:42 2025 GMT Not After : Aug 30 08:21:42 2025 GMT Subject: CN=68a97a16-ead9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:6f:92:26:59:c6:de:99:44:56:d3:35:45:94: aa:8d:69:69:2a:77:ac:2d:3b:b0:5a:bc:e5:13:ff: 3e:fc:55:5d:7e:e2:7e:bb:65:17:69:fc:44:07:01: fa:a5:7b:f9:e3:b8:09:ad:82:19:00:e3:72:f8:85: db:95:44:4f:db:78:3b:0c:42:65:8b:cf:e6:d6:17: 90:65:7c:90:d8:be:b0:1c:f0:cc:15:d1:f3:46:7b: bb:ca:57:18:c1:b2:0b:b5:70:db:2c:f9:b3:34:e1: fc:92:9f:a5:34:f8:4d:f8:a3:92:9b:a2:b4:c4:40: 98:8a:af:a0:73:f3:cd:1f:8b:d7:69:3c:24:05:ad: 90:02:a0:2d:43:b2:c4:32:36:db:f8:45:ae:9e:fb: 1f:fc:8c:3b:3d:7d:b4:75:f0:93:49:69:35:37:62: f8:76:1f:47:69:8d:1f:5d:63:89:4e:2c:f6:b4:60: c2:d4:42:f9:a5:e0:33:85:ff:f8:c3:0c:48:cd:2f: 2c:e4:d6:af:17:30:a8:e0:34:e5:13:61:1f:5d:43: f9:2f:d3:10:6b:02:6e:86:80:7d:59:df:38:db:9d: 9d:66:16:5a:f9:e5:1f:d3:f6:33:a2:b9:36:95:af: 7d:64:58:1d:60:4f:63:e0:ac:98:40:11:45:46:dd: dc:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:3B:41:F4:F2:0E:C1:A2:9D:29:82:6A:37:32:76:92:64:E8:68:C2 X509v3 Authority Key Identifier: keyid:E5:21:07:F4:C1:DE:06:45:3E:BD:6E:69:B4:BF:82:44:73:16:AA:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5SEH9MHeBkU-vW5ptL-CRHMWqh0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5SEH9MHeBkU-vW5ptL-CRHMWqh0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5SEH9MHeBkU-vW5ptL-CRHMWqh0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:20:aa:42:0a:93:71:64:d1:4f:d1:e9:00:e0:c6:10:14:fd: f2:36:02:ad:bd:35:f4:ea:82:87:fb:69:b7:25:f3:5a:2e:6a: 3f:6c:8a:34:73:4c:24:74:ae:0e:11:51:35:ae:89:62:9a:78: 88:33:cb:0d:2a:a0:ff:52:be:41:bd:50:db:61:8c:2a:5b:21: 70:36:7a:58:69:d2:81:f6:52:2b:91:77:18:70:b2:ad:27:c5: d8:22:2b:13:19:21:f4:4c:2c:c8:02:c2:95:fc:6d:49:99:68: f5:51:f1:e7:e4:8c:50:7d:d3:9d:5a:88:9c:9a:91:11:5e:2e: fb:71:79:9e:f4:0c:36:ce:23:5d:d1:bb:12:91:30:1f:53:1c: d6:2e:26:07:5b:b7:6d:17:24:d4:54:ef:f7:2f:b0:6f:39:15: 44:3c:6c:a8:4d:25:6b:d2:d2:02:cc:bd:b7:0b:2b:ae:db:45: 74:fe:50:09:64:0e:ea:89:22:50:5f:22:33:c1:83:a8:fa:77: f5:9d:a2:af:27:3c:84:6f:d7:fa:23:1c:f9:e1:90:5f:5d:c7: b2:33:44:bc:18:1a:6b:7a:42:09:58:e9:5a:7d:82:dc:78:ba: 26:4a:a6:9b:e9:ac:3d:02:ae:e4:5c:10:db:67:a7:29:b5:89: 6e:ac:31:ff -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 N0MzRjExMC8GA1UEBRMoRTUyMTA3RjRDMURFMDY0NTNFQkQ2RTY5QjRCRjgyNDQ3 MzE2QUExRDAeFw0yNTA4MjMwODIxNDJaFw0yNTA4MzAwODIxNDJaMBgxFjAUBgNV BAMTDTY4YTk3YTE2LWVhZDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDeb5ImWcbemURW0zVFlKqNaWkqd6wtO7BavOUT/z78VV1+4n67ZRdp/EQHAfql e/njuAmtghkA43L4hduVRE/beDsMQmWLz+bWF5BlfJDYvrAc8MwV0fNGe7vKVxjB sgu1cNss+bM04fySn6U0+E34o5KborTEQJiKr6Bz880fi9dpPCQFrZACoC1DssQy Ntv4Ra6e+x/8jDs9fbR18JNJaTU3Yvh2H0dpjR9dY4lOLPa0YMLUQvml4DOF//jD DEjNLyzk1q8XMKjgNOUTYR9dQ/kv0xBrAm6GgH1Z3zjbnZ1mFlr55R/T9jOiuTaV r31kWB1gT2PgrJhAEUVG3dxzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBjtB9PIO waKdKYJqNzJ2kmToaMIwHwYDVR0jBBgwFoAU5SEH9MHeBkU+vW5ptL+CRHMWqh0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc3QzNGL0NEQjM2QTNBNzMz MzExRjA4MzlDREM4M0M0RjlBRTAyLzVTRUg5TUhlQmtVLXZXNXB0TC1DUkhNV3Fo MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNVNFSDlNSGVCa1Utdlc1cHRMLUNSSE1XcWgwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc3 QzNGL0NEQjM2QTNBNzMzMzExRjA4MzlDREM4M0M0RjlBRTAyLzVTRUg5TUhlQmtV LXZXNXB0TC1DUkhNV3FoMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAUgqkIKk3Fk0U/R6QDgxhAU/fI2Aq29NfTqgof7abcl81ouaj9sijRz TCR0rg4RUTWuiWKaeIgzyw0qoP9SvkG9UNthjCpbIXA2elhp0oH2UiuRdxhwsq0n xdgiKxMZIfRMLMgCwpX8bUmZaPVR8efkjFB9051aiJyakRFeLvtxeZ70DDbOI13R uxKRMB9THNYuJgdbt20XJNRU7/cvsG85FUQ8bKhNJWvS0gLMvbcLK67bRXT+UAlk DuqJIlBfIjPBg6j6d/Wdoq8nPIRv1/ojHPnhkF9dx7IzRLwYGmt6QglY6Vp9gtx4 uiZKppvprD0CruRcENtnpym1iW6sMf8= -----END CERTIFICATE-----Generated at Sat Aug 23 12:43:59 2025 by rpki-client