$ rpki-client -vvf rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.mft File: l_m5BihHZTCOwmiFXVY9q5GGMFs.mft (raw, json) Hash identifier: hVN/96YLlEZ0fQ+RNNK+quGlhmScLlBzTDHDxpL/2tE= Subject key identifier: 80:71:2F:CE:FA:2F:1A:C7:92:84:C2:29:60:72:EA:3C:6C:35:EF:05 Authority key identifier: 97:F9:B9:06:28:47:65:30:8E:C2:68:85:5D:56:3D:AB:91:86:30:5B Certificate issuer: /CN=A918E4E6/serialNumber=97F9B906284765308EC268855D563DAB9186305B Certificate serial: 0C9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_m5BihHZTCOwmiFXVY9q5GGMFs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.mft Manifest number: 0C99 Signing time: Fri 22 Aug 2025 18:19:45 +0000 Manifest this update: Fri 22 Aug 2025 18:19:44 +0000 Manifest next update: Fri 29 Aug 2025 18:19:44 +0000 Files and hashes: 1: l_m5BihHZTCOwmiFXVY9q5GGMFs.crl (hash: O6D9fo1fHShgHzbNAckGEnsdNA8grUZFigSvJ3TxdWU=) 2: 9C9660D4FC6E11E9BC6D4822C4F9AE02.roa (hash: xyYlJncaSUNWmGDmUFY6Ptm1YpyAyeIUKxqpTgZgQ8c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.crl rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_m5BihHZTCOwmiFXVY9q5GGMFs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:19:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3231 (0xc9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E4E6, serialNumber=97F9B906284765308EC268855D563DAB9186305B Validity Not Before: Aug 22 18:19:44 2025 GMT Not After : Aug 29 18:19:44 2025 GMT Subject: CN=68a8b4c0-4c1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ef:06:4d:2d:df:5f:3b:49:fe:ed:77:c3:9d: 57:6a:9b:c8:f2:b0:35:0e:a5:9b:2f:64:1e:8c:e4: 6e:3d:4e:f1:ac:d3:80:f7:fd:f5:9d:72:ed:84:5f: 0b:4f:2f:14:2e:01:10:35:2b:ca:56:72:4c:4d:41: a4:4d:b5:37:53:ac:d8:ff:65:59:76:f5:0e:69:fa: a8:65:25:ff:eb:ee:9b:da:be:73:a0:13:b4:c5:5e: f1:76:aa:5d:de:37:47:df:21:23:e9:33:91:3b:c8: ce:90:fc:e4:e2:42:a7:68:9e:65:c2:d5:d8:87:d9: 50:32:3a:a9:4d:cd:16:55:fe:5b:b4:9a:7f:b8:bf: b4:f1:07:a5:c2:b8:f3:c0:9e:50:3c:79:6d:e0:d7: bb:46:ca:31:68:9e:70:09:75:ed:e0:00:fb:ea:f8: 1c:c6:9b:29:e3:73:3b:90:ad:65:cf:d8:b0:f9:cc: b5:35:bb:fc:84:67:26:cc:8f:34:00:94:be:f5:e0: 10:a0:e8:03:5a:be:79:f0:07:e5:df:04:4e:75:10: 69:fe:58:53:7a:ae:4b:bc:a9:eb:2b:c8:16:e0:ba: 48:30:1c:ff:77:0d:23:9a:85:7a:13:14:24:0e:9f: 3a:c0:65:a8:bf:01:f1:bd:57:1d:94:39:6b:61:cf: 2f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:71:2F:CE:FA:2F:1A:C7:92:84:C2:29:60:72:EA:3C:6C:35:EF:05 X509v3 Authority Key Identifier: keyid:97:F9:B9:06:28:47:65:30:8E:C2:68:85:5D:56:3D:AB:91:86:30:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_m5BihHZTCOwmiFXVY9q5GGMFs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:75:61:15:22:de:82:fb:25:ac:b7:43:0d:6d:ef:e5:56:1f: 8c:f7:0f:4a:ce:96:76:38:06:44:4b:34:04:be:98:ba:99:75: 62:75:ee:14:ca:15:4d:fa:b1:19:9c:8f:32:4b:0e:df:b9:61: df:c8:0e:78:45:27:0a:7c:bc:74:11:bc:d8:bd:3d:f2:fe:d1: 83:a4:14:a0:d9:64:20:3f:65:6e:e6:27:fa:8c:11:84:3a:59: 91:7f:56:b3:13:93:69:1a:92:38:69:71:e6:1d:5f:54:6c:3e: db:ce:40:b6:e6:e7:11:08:ed:08:1c:45:d2:aa:3b:c0:37:d9: 63:30:c9:0c:7f:d6:ed:12:06:fd:97:43:eb:44:6c:15:a1:c4: 02:e3:72:fd:82:d7:c4:2d:48:bf:d1:31:b9:0e:8c:40:ca:54: 02:bb:dd:a4:2b:54:0e:14:ec:00:55:00:24:36:bb:28:c0:3f: 11:e9:13:79:ec:7a:b2:11:fe:8b:49:01:5c:ad:0f:c7:1b:2e: 2c:ac:d8:12:22:6d:36:6f:40:8b:29:33:7f:bb:4c:ec:05:b2: 6a:06:36:ad:4d:93:9a:f1:41:d7:98:52:36:c1:33:ca:97:fd: 5e:9b:ed:01:43:05:45:83:a1:8b:52:02:f3:7f:74:dc:ea:4a: b8:b4:79:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU0RTYxMTAvBgNVBAUTKDk3RjlCOTA2Mjg0NzY1MzA4RUMyNjg4NTVENTYzREFC OTE4NjMwNUIwHhcNMjUwODIyMTgxOTQ0WhcNMjUwODI5MTgxOTQ0WjAYMRYwFAYD VQQDEw02OGE4YjRjMC00YzFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm+8GTS3fXztJ/u13w51XapvI8rA1DqWbL2QejORuPU7xrNOA9/31nXLthF8L Ty8ULgEQNSvKVnJMTUGkTbU3U6zY/2VZdvUOafqoZSX/6+6b2r5zoBO0xV7xdqpd 3jdH3yEj6TORO8jOkPzk4kKnaJ5lwtXYh9lQMjqpTc0WVf5btJp/uL+08Qelwrjz wJ5QPHlt4Ne7RsoxaJ5wCXXt4AD76vgcxpsp43M7kK1lz9iw+cy1Nbv8hGcmzI80 AJS+9eAQoOgDWr558Afl3wROdRBp/lhTeq5LvKnrK8gW4LpIMBz/dw0jmoV6ExQk Dp86wGWovwHxvVcdlDlrYc8vqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIBxL876 LxrHkoTCKWBy6jxsNe8FMB8GA1UdIwQYMBaAFJf5uQYoR2UwjsJohV1WPauRhjBb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTRFNi8yQjNCMkZDRUZD NkQxMUU5OEZDMkM5MUNDNEY5QUUwMi9sX201QmloSFpUQ093bWlGWFZZOXE1R0dN RnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xfbTVCaWhIWlRDT3dtaUZYVlk5cTVHR01Gcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTRFNi8yQjNCMkZDRUZDNkQxMUU5OEZDMkM5MUNDNEY5QUUwMi9sX201QmloSFpU Q093bWlGWFZZOXE1R0dNRnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArdWEVIt6C+yWst0MNbe/lVh+M9w9KzpZ2OAZESzQEvpi6mXVide4U yhVN+rEZnI8ySw7fuWHfyA54RScKfLx0EbzYvT3y/tGDpBSg2WQgP2Vu5if6jBGE OlmRf1azE5NpGpI4aXHmHV9UbD7bzkC25ucRCO0IHEXSqjvAN9ljMMkMf9btEgb9 l0PrRGwVocQC43L9gtfELUi/0TG5DoxAylQCu92kK1QOFOwAVQAkNrsowD8R6RN5 7HqyEf6LSQFcrQ/HGy4srNgSIm02b0CLKTN/u0zsBbJqBjatTZOa8UHXmFI2wTPK l/1em+0BQwVFg6GLUgLzf3Tc6kq4tHmA -----END CERTIFICATE-----Generated at Sat Aug 23 14:21:21 2025 by rpki-client