$ rpki-client -vvf rpki.apnic.net/member_repository/A917F8F2/022D571CD65E11EAB60CA36BC4F9AE02/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.mft File: t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.mft (raw, json) Hash identifier: B4iDTY62paDiD0/jzDNZfWmmXOnz/xF63lbOvNN6lTs= Subject key identifier: F0:84:36:93:3D:0A:9A:9D:E8:B1:E8:96:5C:20:94:B6:B7:4C:A0:F2 Authority key identifier: B7:91:BD:1C:9E:20:81:AA:84:F8:07:80:66:C0:C7:F6:0A:63:79:0E Certificate issuer: /CN=A917F8F2/serialNumber=B791BD1C9E2081AA84F8078066C0C7F60A63790E Certificate serial: 085E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F8F2/022D571CD65E11EAB60CA36BC4F9AE02/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.mft Manifest number: 084F Signing time: Fri 22 Aug 2025 20:50:47 +0000 Manifest this update: Fri 22 Aug 2025 20:50:47 +0000 Manifest next update: Fri 29 Aug 2025 20:50:47 +0000 Files and hashes: 1: t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.crl (hash: L+pKc00m8WGx9PI6VuheA5K7fAnJFH5p1yFJwps/Zi0=) 2: B78B5CB6D65F11EA8B30486EC4F9AE02.roa (hash: MyNq7pYsfXRPiYwbL0q3/Dn2sx3QYfe2KkNfFn5PXS8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F8F2/022D571CD65E11EAB60CA36BC4F9AE02/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.crl rsync://rpki.apnic.net/member_repository/A917F8F2/022D571CD65E11EAB60CA36BC4F9AE02/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:50:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2142 (0x85e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F8F2, serialNumber=B791BD1C9E2081AA84F8078066C0C7F60A63790E Validity Not Before: Aug 22 20:50:47 2025 GMT Not After : Aug 29 20:50:47 2025 GMT Subject: CN=68a8d827-f407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ee:4c:2d:b6:3c:c7:e8:3c:e6:7b:56:64:dd: 05:f7:d0:72:a9:9e:9e:1f:44:51:8f:b0:2a:5d:b3: 5e:44:e2:67:09:d7:30:a2:b1:01:f9:2b:92:c8:9f: 18:67:76:8b:5a:55:d6:67:8e:a9:e7:e4:59:02:b9: 84:cf:81:36:a6:44:c5:2e:30:92:19:79:7c:35:ad: ab:26:70:2c:ef:d0:a6:22:ae:01:7d:a2:e7:70:01: f3:74:f6:32:61:52:78:5c:f9:fd:fb:5a:34:a2:63: 7a:1e:88:c6:7d:43:d2:d7:59:02:2c:81:ed:5d:5a: 9e:f9:46:d0:82:0b:b2:50:1b:7c:b3:12:6b:92:19: c2:d1:c8:65:33:c7:9e:88:c7:c4:62:a3:d1:54:d7: d8:17:4d:2b:c0:14:73:e8:7b:36:8d:f5:a9:ab:62: 45:98:d8:3d:83:43:68:aa:0b:e6:8c:ac:93:df:bb: d2:8b:1e:47:55:f7:49:ad:44:29:6a:46:a3:d7:9a: 01:d3:bb:36:7b:4a:7e:e4:e3:51:90:c5:0b:b4:04: 08:b0:c5:cd:8f:e6:7e:bd:fb:b1:32:99:51:e2:90: 71:7a:db:c9:46:5b:80:c9:f8:88:f4:bf:56:e5:11: 83:7a:d7:61:89:78:9a:06:47:32:54:42:9d:41:1a: a6:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:84:36:93:3D:0A:9A:9D:E8:B1:E8:96:5C:20:94:B6:B7:4C:A0:F2 X509v3 Authority Key Identifier: keyid:B7:91:BD:1C:9E:20:81:AA:84:F8:07:80:66:C0:C7:F6:0A:63:79:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F8F2/022D571CD65E11EAB60CA36BC4F9AE02/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F8F2/022D571CD65E11EAB60CA36BC4F9AE02/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:42:66:d3:fa:19:08:4b:f0:fa:a3:0c:51:14:3b:4f:d6:e4: 22:44:27:ea:31:7a:eb:dc:5e:86:01:41:83:72:32:37:94:7a: 61:42:21:d1:6a:bd:8c:66:3a:46:c1:f9:66:b9:de:a6:43:a0: 9a:bf:2a:b8:a8:ac:c1:0b:64:55:62:5a:3f:f6:c3:d5:12:8d: a7:b3:8c:9c:68:d9:96:a0:4f:4f:73:09:4f:94:1e:c3:df:35: da:61:19:85:3f:1c:c7:c0:a7:1d:28:ea:d4:d8:2d:75:f1:f2: 44:b0:87:59:27:02:b9:2c:4b:69:b0:ad:88:27:1c:a4:9b:3b: dc:da:2b:fe:4f:12:23:34:19:91:80:81:6a:c3:d6:7a:87:4a: 48:27:1e:b8:78:57:6f:73:93:6d:06:1b:95:c8:ed:43:e0:3a: a9:0b:e3:65:f2:ea:7e:93:e6:4a:2a:59:3a:b8:e4:3c:df:fa: 51:9c:96:51:33:d2:6d:e6:99:1c:2b:77:1a:a4:c2:be:3f:a5: b4:29:84:13:b4:07:26:44:60:f2:6c:bb:8b:25:2d:09:92:fa: 89:c8:7d:53:ac:3a:88:9a:80:36:33:16:b0:2d:fb:62:8a:f3: 33:86:0b:64:fc:d9:85:b0:18:f5:e6:73:b2:3e:a0:96:6d:5b: 18:ba:af:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCF4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Y4RjIxMTAvBgNVBAUTKEI3OTFCRDFDOUUyMDgxQUE4NEY4MDc4MDY2QzBDN0Y2 MEE2Mzc5MEUwHhcNMjUwODIyMjA1MDQ3WhcNMjUwODI5MjA1MDQ3WjAYMRYwFAYD VQQDEw02OGE4ZDgyNy1mNDA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzu5MLbY8x+g85ntWZN0F99ByqZ6eH0RRj7AqXbNeROJnCdcworEB+SuSyJ8Y Z3aLWlXWZ46p5+RZArmEz4E2pkTFLjCSGXl8Na2rJnAs79CmIq4BfaLncAHzdPYy YVJ4XPn9+1o0omN6HojGfUPS11kCLIHtXVqe+UbQgguyUBt8sxJrkhnC0chlM8ee iMfEYqPRVNfYF00rwBRz6Hs2jfWpq2JFmNg9g0NoqgvmjKyT37vSix5HVfdJrUQp akaj15oB07s2e0p+5ONRkMULtAQIsMXNj+Z+vfuxMplR4pBxetvJRluAyfiI9L9W 5RGDetdhiXiaBkcyVEKdQRqmSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPCENpM9 Cpqd6LHollwglLa3TKDyMB8GA1UdIwQYMBaAFLeRvRyeIIGqhPgHgGbAx/YKY3kO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjhGMi8wMjJENTcxQ0Q2 NUUxMUVBQjYwQ0EzNkJDNEY5QUUwMi90NUc5SEo0Z2dhcUUtQWVBWnNESDlncGpl UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q1RzlISjRnZ2FxRS1BZUFac0RIOWdwamVRNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjhGMi8wMjJENTcxQ0Q2NUUxMUVBQjYwQ0EzNkJDNEY5QUUwMi90NUc5SEo0Z2dh cUUtQWVBWnNESDlncGplUTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZQmbT+hkIS/D6owxRFDtP1uQiRCfqMXrr3F6GAUGDcjI3lHphQiHR ar2MZjpGwflmud6mQ6Cavyq4qKzBC2RVYlo/9sPVEo2ns4ycaNmWoE9PcwlPlB7D 3zXaYRmFPxzHwKcdKOrU2C118fJEsIdZJwK5LEtpsK2IJxykmzvc2iv+TxIjNBmR gIFqw9Z6h0pIJx64eFdvc5NtBhuVyO1D4DqpC+Nl8up+k+ZKKlk6uOQ83/pRnJZR M9Jt5pkcK3capMK+P6W0KYQTtAcmRGDybLuLJS0JkvqJyH1TrDqImoA2MxawLfti ivMzhgtk/NmFsBj15nOyPqCWbVsYuq+Q -----END CERTIFICATE-----Generated at Sat Aug 23 21:17:49 2025 by rpki-client