$ rpki-client -vvf rpki.apnic.net/member_repository/A9185413/759AD24CAB9E11EE963D317DC4F9AE02/D5mx_s-lcAT2Q9gr9RHN1HR4baA.mft File: D5mx_s-lcAT2Q9gr9RHN1HR4baA.mft (raw, json) Hash identifier: oAiWzEUe5sdBAbQ8UZYBp0G9Gdmdc12HC8SGmi4s9MM= Subject key identifier: 26:42:3A:FA:58:3A:65:F3:C8:22:22:FE:D4:2C:96:81:B7:AE:00:71 Authority key identifier: 0F:99:B1:FE:CF:A5:70:04:F6:43:D8:2B:F5:11:CD:D4:74:78:6D:A0 Certificate issuer: /CN=A9185413/serialNumber=0F99B1FECFA57004F643D82BF511CDD474786DA0 Certificate serial: 011D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5mx_s-lcAT2Q9gr9RHN1HR4baA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185413/759AD24CAB9E11EE963D317DC4F9AE02/D5mx_s-lcAT2Q9gr9RHN1HR4baA.mft Manifest number: 011A Signing time: Thu 03 Jul 2025 04:59:13 +0000 Manifest this update: Thu 03 Jul 2025 04:59:12 +0000 Manifest next update: Thu 10 Jul 2025 04:59:12 +0000 Files and hashes: 1: D5mx_s-lcAT2Q9gr9RHN1HR4baA.crl (hash: JsUJGNfZpXSQsLdLFBwMNqoikSyi4dqI3Q7E/LJvDI8=) 2: C1D49C12AEDF11EE96155C68C4F9AE02.roa (hash: g1jIfsO6mvnPQ5u6rCHd1+bi2Eyo0F5psuhhGonMZAg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185413/759AD24CAB9E11EE963D317DC4F9AE02/D5mx_s-lcAT2Q9gr9RHN1HR4baA.crl rsync://rpki.apnic.net/member_repository/A9185413/759AD24CAB9E11EE963D317DC4F9AE02/D5mx_s-lcAT2Q9gr9RHN1HR4baA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5mx_s-lcAT2Q9gr9RHN1HR4baA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 285 (0x11d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185413, serialNumber=0F99B1FECFA57004F643D82BF511CDD474786DA0 Validity Not Before: Jul 3 04:59:12 2025 GMT Not After : Jul 10 04:59:12 2025 GMT Subject: CN=68660e20-42ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7f:6d:dc:b8:02:eb:f5:a4:07:c1:bc:75:2f: 88:b6:2b:77:4d:6f:96:00:87:59:ef:78:7b:37:41: f9:b0:f3:97:4c:b5:d9:30:11:7b:3f:f0:2a:e4:c1: 81:a6:f1:93:85:c8:a1:57:0d:92:56:fa:aa:8a:bc: 24:ac:12:92:19:90:0a:71:52:a1:02:cb:f5:01:c6: 22:19:ef:96:e3:02:ed:4a:10:81:25:8e:f1:8c:f4: 80:05:b2:3e:85:2c:3a:6f:71:08:51:2c:ff:0f:19: 4c:62:6b:25:4b:5e:5c:3e:7c:cb:1e:6d:d0:5b:a9: 00:c4:bc:ad:f8:63:af:43:07:d1:7c:da:b2:76:a3: 18:9a:07:1c:75:2d:05:28:55:07:20:50:20:0a:a6: b4:b0:f5:ae:27:b0:84:bc:c5:96:6f:b7:d7:00:01: f9:ed:62:05:ab:a9:5a:ab:ce:92:a6:02:07:83:ec: d1:9d:54:3f:e3:91:e8:a2:02:35:e1:57:10:66:df: 18:06:5f:56:16:b3:c7:c8:30:a4:bb:d3:d3:73:45: 03:fe:ae:ec:86:cd:43:c8:27:79:1d:27:44:96:63: 5a:da:6a:0a:7f:1f:b1:d3:2b:97:a4:14:d2:8f:5d: f6:1e:fb:11:f7:a6:55:d1:4c:5d:4b:4c:22:d3:aa: ce:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:42:3A:FA:58:3A:65:F3:C8:22:22:FE:D4:2C:96:81:B7:AE:00:71 X509v3 Authority Key Identifier: keyid:0F:99:B1:FE:CF:A5:70:04:F6:43:D8:2B:F5:11:CD:D4:74:78:6D:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185413/759AD24CAB9E11EE963D317DC4F9AE02/D5mx_s-lcAT2Q9gr9RHN1HR4baA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5mx_s-lcAT2Q9gr9RHN1HR4baA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185413/759AD24CAB9E11EE963D317DC4F9AE02/D5mx_s-lcAT2Q9gr9RHN1HR4baA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:4c:97:be:c2:6e:33:fa:e2:c1:d3:ee:a4:29:a2:03:66:af: be:88:cb:7d:89:30:f4:f1:2a:ab:71:67:0a:45:25:ae:43:2e: d1:0d:27:eb:b4:f5:1c:f5:96:e5:f2:05:31:96:4e:75:08:f9: 71:ea:9d:9f:d1:fb:cb:d8:68:86:a2:26:ac:d5:6b:1f:a9:63: 1d:3b:ac:75:54:b3:89:ff:85:00:f2:1d:9a:e6:b8:28:c7:c0: 68:de:e6:b8:9a:b0:30:8f:1d:dc:99:d6:dc:42:30:5f:82:2f: 72:68:80:43:32:db:5f:ca:56:00:54:fd:78:ab:3e:d5:a2:28: 02:b4:5c:15:d6:22:45:d6:bf:64:66:9e:f5:82:f5:61:f4:29: 90:a7:d4:03:2e:b1:1f:d1:88:30:87:21:e4:61:60:08:01:d0: 9d:04:9d:d1:06:c0:cd:24:87:2b:57:d2:ee:51:e5:f4:fc:4b: ad:73:17:93:5a:e9:ea:30:40:74:74:c1:dd:2a:2e:8d:be:dc: 92:cb:fc:87:39:a0:d0:8b:84:53:a5:4c:e3:38:a9:b9:e6:7c: 68:c7:bd:ef:15:2a:f5:41:55:79:09:30:a7:bd:5e:54:5e:9a: 48:a9:ee:70:f5:88:1a:ff:e7:17:12:bb:6c:1a:d1:28:01:d4: 0f:a5:28:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU0MTMxMTAvBgNVBAUTKDBGOTlCMUZFQ0ZBNTcwMDRGNjQzRDgyQkY1MTFDREQ0 NzQ3ODZEQTAwHhcNMjUwNzAzMDQ1OTEyWhcNMjUwNzEwMDQ1OTEyWjAYMRYwFAYD VQQDEw02ODY2MGUyMC00MmNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvX9t3LgC6/WkB8G8dS+Itit3TW+WAIdZ73h7N0H5sPOXTLXZMBF7P/Aq5MGB pvGThcihVw2SVvqqirwkrBKSGZAKcVKhAsv1AcYiGe+W4wLtShCBJY7xjPSABbI+ hSw6b3EIUSz/DxlMYmslS15cPnzLHm3QW6kAxLyt+GOvQwfRfNqydqMYmgccdS0F KFUHIFAgCqa0sPWuJ7CEvMWWb7fXAAH57WIFq6laq86SpgIHg+zRnVQ/45HoogI1 4VcQZt8YBl9WFrPHyDCku9PTc0UD/q7shs1DyCd5HSdElmNa2moKfx+x0yuXpBTS j132HvsR96ZV0UxdS0wi06rOOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCZCOvpY OmXzyCIi/tQsloG3rgBxMB8GA1UdIwQYMBaAFA+Zsf7PpXAE9kPYK/URzdR0eG2g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTQxMy83NTlBRDI0Q0FC OUUxMUVFOTYzRDMxN0RDNEY5QUUwMi9ENW14X3MtbGNBVDJROWdyOVJITjFIUjRi YUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q1bXhfcy1sY0FUMlE5Z3I5UkhOMUhSNGJhQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTQxMy83NTlBRDI0Q0FCOUUxMUVFOTYzRDMxN0RDNEY5QUUwMi9ENW14X3MtbGNB VDJROWdyOVJITjFIUjRiYUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBTJe+wm4z+uLB0+6kKaIDZq++iMt9iTD08SqrcWcKRSWuQy7RDSfr tPUc9Zbl8gUxlk51CPlx6p2f0fvL2GiGoias1WsfqWMdO6x1VLOJ/4UA8h2a5rgo x8Bo3ua4mrAwjx3cmdbcQjBfgi9yaIBDMttfylYAVP14qz7VoigCtFwV1iJF1r9k Zp71gvVh9CmQp9QDLrEf0YgwhyHkYWAIAdCdBJ3RBsDNJIcrV9LuUeX0/EutcxeT WunqMEB0dMHdKi6NvtySy/yHOaDQi4RTpUzjOKm55nxox73vFSr1QVV5CTCnvV5U XppIqe5w9Yga/+cXErtsGtEoAdQPpSjw -----END CERTIFICATE-----Generated at Fri Jul 4 02:53:47 2025 by rpki-client