$ rpki-client -vvf rpki.apnic.net/member_repository/A917EFA9/ED68B5F031A511EEBEF8BD2AC4F9AE02/e5GosBHWGcQnHUUgOg4z2Rhe94E.mft File: e5GosBHWGcQnHUUgOg4z2Rhe94E.mft (raw, json) Hash identifier: 3ahHmy0tCW+/NUYrHrTLewJOk4bFBF4k8B+qZ2VTfVk= Subject key identifier: 0F:E5:14:DB:9C:B3:2E:8C:73:5A:B3:4E:A2:9E:FF:86:DD:98:CB:CD Authority key identifier: 7B:91:A8:B0:11:D6:19:C4:27:1D:45:20:3A:0E:33:D9:18:5E:F7:81 Certificate issuer: /CN=A917EFA9/serialNumber=7B91A8B011D619C4271D45203A0E33D9185EF781 Certificate serial: 0199 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5GosBHWGcQnHUUgOg4z2Rhe94E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917EFA9/ED68B5F031A511EEBEF8BD2AC4F9AE02/e5GosBHWGcQnHUUgOg4z2Rhe94E.mft Manifest number: 018C Signing time: Sat 23 Aug 2025 03:44:18 +0000 Manifest this update: Sat 23 Aug 2025 03:44:17 +0000 Manifest next update: Sat 30 Aug 2025 03:44:17 +0000 Files and hashes: 1: e5GosBHWGcQnHUUgOg4z2Rhe94E.crl (hash: 0EL5dXYQ8um8s92j1iIzJOL3kpJF8TTnPhHIuXIAnQA=) 2: 1468305C31A811EE939F1D33C4F9AE02.roa (hash: A0nJe/MkW8TSZdk/E2Vu0knizTlyVLUt37DSyW+bHLE=) 3: 113D35904DD611EE8F798349C4F9AE02.roa (hash: /egOGavRQgmetbzvLfczJLgMzHXL9RZQguM8QCgkO14=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917EFA9/ED68B5F031A511EEBEF8BD2AC4F9AE02/e5GosBHWGcQnHUUgOg4z2Rhe94E.crl rsync://rpki.apnic.net/member_repository/A917EFA9/ED68B5F031A511EEBEF8BD2AC4F9AE02/e5GosBHWGcQnHUUgOg4z2Rhe94E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5GosBHWGcQnHUUgOg4z2Rhe94E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:44:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 409 (0x199) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917EFA9, serialNumber=7B91A8B011D619C4271D45203A0E33D9185EF781 Validity Not Before: Aug 23 03:44:17 2025 GMT Not After : Aug 30 03:44:17 2025 GMT Subject: CN=68a93911-07a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:36:be:fd:aa:c4:6c:58:be:2f:65:8d:e7:49: b8:2b:9a:e2:42:fb:09:da:27:e6:54:b9:01:02:6c: 4f:80:dc:47:d5:45:ae:2a:91:6a:b6:0b:d5:b7:33: 7b:a4:be:da:a8:e0:6e:9c:9a:9b:ea:76:a5:59:c7: 37:2e:4f:8e:2a:ae:52:cd:19:39:4a:28:90:8c:29: 68:98:e9:cc:1d:14:ae:b8:f7:86:ac:89:b0:27:87: 32:5d:3a:2b:7f:39:67:01:28:63:8e:80:10:3a:78: fe:47:30:b9:de:e0:78:4b:51:8c:a2:6e:db:43:b6: b5:f6:ac:ac:39:50:9c:48:2b:dd:49:71:9f:27:28: eb:d4:64:3f:a6:80:68:7f:ad:31:3c:1e:9d:11:da: c8:d5:03:0b:55:6c:22:3f:56:16:b3:e7:3b:ae:87: 17:16:df:f2:c1:b9:6d:b2:86:d2:f5:d3:57:4e:87: f7:9d:81:e7:e3:32:90:92:30:e4:7a:85:17:1a:7f: cb:1c:9a:6b:88:e4:12:21:50:4b:1e:86:58:75:9c: 65:ee:65:78:6e:ce:ec:8f:ce:0d:25:06:49:fa:fe: c9:08:dd:34:c5:bf:e5:1b:80:75:a4:5c:c6:11:14: a5:6e:31:7b:7c:ac:fa:f3:a3:14:0d:8e:4b:d4:9a: 64:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:E5:14:DB:9C:B3:2E:8C:73:5A:B3:4E:A2:9E:FF:86:DD:98:CB:CD X509v3 Authority Key Identifier: keyid:7B:91:A8:B0:11:D6:19:C4:27:1D:45:20:3A:0E:33:D9:18:5E:F7:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917EFA9/ED68B5F031A511EEBEF8BD2AC4F9AE02/e5GosBHWGcQnHUUgOg4z2Rhe94E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5GosBHWGcQnHUUgOg4z2Rhe94E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EFA9/ED68B5F031A511EEBEF8BD2AC4F9AE02/e5GosBHWGcQnHUUgOg4z2Rhe94E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:27:b7:15:9d:3b:ef:73:e7:3e:73:02:81:ce:cd:07:2e:32: cf:d3:d1:82:00:c1:38:91:d4:72:b4:c3:31:1f:7f:a1:9b:a4: 36:14:25:c5:94:03:d9:07:59:a9:b2:0d:25:a4:9e:d9:ba:8a: e1:b4:18:4f:a4:0d:a5:a4:fc:96:60:88:60:07:f9:8e:29:f1: 95:f6:d4:30:7f:ea:a1:f8:81:24:a0:11:47:00:c9:1a:d3:cf: 20:b9:f3:8e:3c:97:74:0d:8a:7e:d5:29:0e:fa:4b:bd:40:39: 0a:4a:44:7e:4c:cb:9d:f2:dc:61:fa:51:5d:fe:18:10:11:28: 26:8b:3f:ba:8a:d5:c5:69:9c:ed:97:17:4f:73:1f:c3:96:0c: e2:7f:c6:38:25:0e:2a:9c:b3:75:94:a6:13:87:27:70:9e:22: 04:e9:c2:f2:63:f3:bb:cf:b0:17:9f:00:97:ed:cb:c6:d5:09: b5:6c:a5:61:bc:c9:13:65:df:4f:c1:f7:39:6b:5d:2c:d9:18: 14:46:2d:68:f2:6c:f8:23:b9:aa:21:7d:d6:fd:08:4b:ea:96: d2:cb:b7:a3:81:f8:a7:42:59:f4:18:c1:60:52:2a:79:6a:71: 09:b8:37:b3:32:3c:85:41:e0:63:57:a4:9f:b7:de:39:bd:d8: fa:df:0f:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VGQTkxMTAvBgNVBAUTKDdCOTFBOEIwMTFENjE5QzQyNzFENDUyMDNBMEUzM0Q5 MTg1RUY3ODEwHhcNMjUwODIzMDM0NDE3WhcNMjUwODMwMDM0NDE3WjAYMRYwFAYD VQQDEw02OGE5MzkxMS0wN2E5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ja+/arEbFi+L2WN50m4K5riQvsJ2ifmVLkBAmxPgNxH1UWuKpFqtgvVtzN7 pL7aqOBunJqb6nalWcc3Lk+OKq5SzRk5SiiQjClomOnMHRSuuPeGrImwJ4cyXTor fzlnAShjjoAQOnj+RzC53uB4S1GMom7bQ7a19qysOVCcSCvdSXGfJyjr1GQ/poBo f60xPB6dEdrI1QMLVWwiP1YWs+c7rocXFt/ywbltsobS9dNXTof3nYHn4zKQkjDk eoUXGn/LHJpriOQSIVBLHoZYdZxl7mV4bs7sj84NJQZJ+v7JCN00xb/lG4B1pFzG ERSlbjF7fKz686MUDY5L1Jpk7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA/lFNuc sy6Mc1qzTqKe/4bdmMvNMB8GA1UdIwQYMBaAFHuRqLAR1hnEJx1FIDoOM9kYXveB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUZBOS9FRDY4QjVGMDMx QTUxMUVFQkVGOEJEMkFDNEY5QUUwMi9lNUdvc0JIV0djUW5IVVVnT2c0ejJSaGU5 NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2U1R29zQkhXR2NRbkhVVWdPZzR6MlJoZTk0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RUZBOS9FRDY4QjVGMDMxQTUxMUVFQkVGOEJEMkFDNEY5QUUwMi9lNUdvc0JIV0dj UW5IVVVnT2c0ejJSaGU5NEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlJ7cVnTvvc+c+cwKBzs0HLjLP09GCAME4kdRytMMxH3+hm6Q2FCXF lAPZB1mpsg0lpJ7ZuorhtBhPpA2lpPyWYIhgB/mOKfGV9tQwf+qh+IEkoBFHAMka 088gufOOPJd0DYp+1SkO+ku9QDkKSkR+TMud8txh+lFd/hgQESgmiz+6itXFaZzt lxdPcx/Dlgzif8Y4JQ4qnLN1lKYThydwniIE6cLyY/O7z7AXnwCX7cvG1Qm1bKVh vMkTZd9Pwfc5a10s2RgURi1o8mz4I7mqIX3W/QhL6pbSy7ejgfinQln0GMFgUip5 anEJuDezMjyFQeBjV6Sft945vdj63w/x -----END CERTIFICATE-----Generated at Sat Aug 23 13:41:28 2025 by rpki-client