$ rpki-client -vvf rpki.apnic.net/member_repository/A9185413/759AD24CAB9E11EE963D317DC4F9AE02/D5mx_s-lcAT2Q9gr9RHN1HR4baA.mft File: D5mx_s-lcAT2Q9gr9RHN1HR4baA.mft (raw, json) Hash identifier: e667NaaLab9FqD7NH4PkVIyX86r2fFZPQzO8KNSTjyo= Subject key identifier: 7B:E4:D9:FF:A1:AD:FE:33:1D:5C:C0:BC:6B:BD:7D:8B:02:B3:53:43 Authority key identifier: 0F:99:B1:FE:CF:A5:70:04:F6:43:D8:2B:F5:11:CD:D4:74:78:6D:A0 Certificate issuer: /CN=A9185413/serialNumber=0F99B1FECFA57004F643D82BF511CDD474786DA0 Certificate serial: 013C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5mx_s-lcAT2Q9gr9RHN1HR4baA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185413/759AD24CAB9E11EE963D317DC4F9AE02/D5mx_s-lcAT2Q9gr9RHN1HR4baA.mft Manifest number: 0138 Signing time: Sat 23 Aug 2025 04:40:11 +0000 Manifest this update: Sat 23 Aug 2025 04:40:11 +0000 Manifest next update: Sat 30 Aug 2025 04:40:11 +0000 Files and hashes: 1: D5mx_s-lcAT2Q9gr9RHN1HR4baA.crl (hash: rZo0yFFFbhiuXsJuNn/zllSBf/i70cC+N7DBmykWp/o=) 2: C1D49C12AEDF11EE96155C68C4F9AE02.roa (hash: EH9Ecs3l16GCiHR30STE9VxjfuPqLau85IhtMpZldhM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185413/759AD24CAB9E11EE963D317DC4F9AE02/D5mx_s-lcAT2Q9gr9RHN1HR4baA.crl rsync://rpki.apnic.net/member_repository/A9185413/759AD24CAB9E11EE963D317DC4F9AE02/D5mx_s-lcAT2Q9gr9RHN1HR4baA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5mx_s-lcAT2Q9gr9RHN1HR4baA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 316 (0x13c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185413, serialNumber=0F99B1FECFA57004F643D82BF511CDD474786DA0 Validity Not Before: Aug 23 04:40:11 2025 GMT Not After : Aug 30 04:40:11 2025 GMT Subject: CN=68a9462b-57d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:66:20:b5:e9:d2:b9:62:ce:c2:91:c3:4c:12: 8d:43:97:ce:7a:0b:5f:22:d6:22:71:49:21:c5:47: 18:73:ed:1a:c7:e3:98:57:39:d6:e6:07:ac:3a:ea: a9:82:b2:4b:d4:7b:67:4b:91:c2:f1:15:70:92:c7: 42:77:96:4d:12:3a:fb:bd:2e:17:56:e2:aa:a5:91: 36:77:bf:17:84:b3:21:5a:a6:c7:cc:3c:b9:13:f4: 71:ae:00:d1:74:90:12:91:dc:f8:96:13:b1:58:93: ab:06:85:77:d2:8a:37:bb:fd:d1:11:24:5b:f4:76: c3:9b:4e:fd:ff:99:57:e5:72:ac:e6:af:33:8f:38: 33:f7:8f:e0:cb:9e:75:e2:4b:90:02:59:b0:5d:34: ee:0f:b6:42:81:97:9b:fa:aa:3c:6b:bd:4a:9d:65: 7c:23:f5:03:80:35:8e:66:d6:80:f9:ac:53:b7:4e: dd:d1:85:da:9b:65:6f:77:b0:3e:1c:7e:66:14:f4: 3b:e4:32:7e:7e:47:50:42:6c:5a:bc:fc:6a:e9:8d: 3d:c7:cb:9f:52:35:ba:49:e1:df:9b:7d:6e:92:78: 8c:d5:01:eb:c3:3c:45:64:06:4d:dd:fc:39:21:a1: db:1c:e0:1d:e5:40:de:76:0c:c0:57:38:7e:c0:c0: c7:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:E4:D9:FF:A1:AD:FE:33:1D:5C:C0:BC:6B:BD:7D:8B:02:B3:53:43 X509v3 Authority Key Identifier: keyid:0F:99:B1:FE:CF:A5:70:04:F6:43:D8:2B:F5:11:CD:D4:74:78:6D:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185413/759AD24CAB9E11EE963D317DC4F9AE02/D5mx_s-lcAT2Q9gr9RHN1HR4baA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5mx_s-lcAT2Q9gr9RHN1HR4baA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185413/759AD24CAB9E11EE963D317DC4F9AE02/D5mx_s-lcAT2Q9gr9RHN1HR4baA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:fd:ba:59:71:8b:bb:61:b3:56:e7:52:05:39:09:c3:92:8c: 12:6a:37:8d:fc:e4:4e:fd:5c:f8:df:e5:f2:67:c7:98:44:55: b3:41:2f:4d:7a:05:f4:7d:fc:7d:15:09:81:ee:80:34:26:15: f7:4b:66:0e:7a:cb:2a:bf:08:6f:6b:16:64:6d:30:4c:0f:65: be:12:e7:78:a2:ce:24:60:62:55:5a:a3:d4:f0:8e:f0:c4:0e: 0f:8a:90:25:b8:ed:eb:14:30:37:e3:c5:96:14:1e:5b:33:a9: 7b:1f:a9:23:82:9c:90:6f:c9:a7:fe:e1:8e:64:a0:4e:32:72: 34:d8:86:5c:f9:1b:52:30:15:1e:c9:69:70:3f:d1:1b:f7:db: 28:c6:26:a1:40:04:fa:61:4c:18:30:78:62:af:ba:4f:72:27: 49:d9:0e:62:7f:d9:2f:4f:3a:f5:e6:9c:84:de:4d:85:13:ba: 4f:42:6a:f4:03:50:d6:5d:d3:b0:dd:ab:91:af:f8:09:76:67: 1b:a8:32:ad:42:af:a8:4a:4b:12:74:58:5c:48:45:e1:43:a1: 81:f0:c4:e2:b1:04:8a:be:00:81:d8:36:a3:e0:9b:84:aa:16: 45:39:9a:bf:65:be:27:f2:a8:6a:c4:8e:f1:d1:6a:4b:eb:c8: d8:39:83:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU0MTMxMTAvBgNVBAUTKDBGOTlCMUZFQ0ZBNTcwMDRGNjQzRDgyQkY1MTFDREQ0 NzQ3ODZEQTAwHhcNMjUwODIzMDQ0MDExWhcNMjUwODMwMDQ0MDExWjAYMRYwFAYD VQQDEw02OGE5NDYyYi01N2Q1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnGYgtenSuWLOwpHDTBKNQ5fOegtfItYicUkhxUcYc+0ax+OYVznW5gesOuqp grJL1HtnS5HC8RVwksdCd5ZNEjr7vS4XVuKqpZE2d78XhLMhWqbHzDy5E/RxrgDR dJASkdz4lhOxWJOrBoV30oo3u/3RESRb9HbDm079/5lX5XKs5q8zjzgz94/gy551 4kuQAlmwXTTuD7ZCgZeb+qo8a71KnWV8I/UDgDWOZtaA+axTt07d0YXam2Vvd7A+ HH5mFPQ75DJ+fkdQQmxavPxq6Y09x8ufUjW6SeHfm31ukniM1QHrwzxFZAZN3fw5 IaHbHOAd5UDedgzAVzh+wMDHBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHvk2f+h rf4zHVzAvGu9fYsCs1NDMB8GA1UdIwQYMBaAFA+Zsf7PpXAE9kPYK/URzdR0eG2g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTQxMy83NTlBRDI0Q0FC OUUxMUVFOTYzRDMxN0RDNEY5QUUwMi9ENW14X3MtbGNBVDJROWdyOVJITjFIUjRi YUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q1bXhfcy1sY0FUMlE5Z3I5UkhOMUhSNGJhQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTQxMy83NTlBRDI0Q0FCOUUxMUVFOTYzRDMxN0RDNEY5QUUwMi9ENW14X3MtbGNB VDJROWdyOVJITjFIUjRiYUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBn/bpZcYu7YbNW51IFOQnDkowSajeN/ORO/Vz43+XyZ8eYRFWzQS9N egX0ffx9FQmB7oA0JhX3S2YOessqvwhvaxZkbTBMD2W+Eud4os4kYGJVWqPU8I7w xA4PipAluO3rFDA348WWFB5bM6l7H6kjgpyQb8mn/uGOZKBOMnI02IZc+RtSMBUe yWlwP9Eb99soxiahQAT6YUwYMHhir7pPcidJ2Q5if9kvTzr15pyE3k2FE7pPQmr0 A1DWXdOw3auRr/gJdmcbqDKtQq+oSksSdFhcSEXhQ6GB8MTisQSKvgCB2Daj4JuE qhZFOZq/Zb4n8qhqxI7x0WpL68jYOYOn -----END CERTIFICATE-----Generated at Sat Aug 23 21:27:29 2025 by rpki-client