$ rpki-client -vvf rpki.apnic.net/member_repository/A918FF9D/CF86D58A9FE511EABB863A80C4F9AE02/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.mft File: pf5RKdSB7RoA5V6ZzjDgCLY9bO4.mft (raw, json) Hash identifier: iUDw+zB8i/kx69OPkLWbBV4HnqFYusmlqH7BU0dvyM0= Subject key identifier: 3D:CF:B8:17:A2:E4:5F:0A:2E:A7:19:92:19:FC:44:65:9B:27:3D:F4 Authority key identifier: A5:FE:51:29:D4:81:ED:1A:00:E5:5E:99:CE:30:E0:08:B6:3D:6C:EE Certificate issuer: /CN=A918FF9D/serialNumber=A5FE5129D481ED1A00E55E99CE30E008B63D6CEE Certificate serial: 0959 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FF9D/CF86D58A9FE511EABB863A80C4F9AE02/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.mft Manifest number: 0953 Signing time: Fri 22 Aug 2025 20:18:38 +0000 Manifest this update: Fri 22 Aug 2025 20:18:38 +0000 Manifest next update: Fri 29 Aug 2025 20:18:38 +0000 Files and hashes: 1: pf5RKdSB7RoA5V6ZzjDgCLY9bO4.crl (hash: ++LCHZaFwLX4G8+vqFxQRhLIRxAA4aPO7R7VscSvXtc=) 2: 2A1AD3BA9FE711EAAFA97B81C4F9AE02.roa (hash: McDtUaMk7e01xsshJ/22xBrdGiD8USZ0rSk/8TzyXxM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FF9D/CF86D58A9FE511EABB863A80C4F9AE02/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.crl rsync://rpki.apnic.net/member_repository/A918FF9D/CF86D58A9FE511EABB863A80C4F9AE02/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:18:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2393 (0x959) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FF9D, serialNumber=A5FE5129D481ED1A00E55E99CE30E008B63D6CEE Validity Not Before: Aug 22 20:18:38 2025 GMT Not After : Aug 29 20:18:38 2025 GMT Subject: CN=68a8d09e-4878 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c7:6f:42:11:fe:f7:94:aa:ff:be:9b:26:0f: 43:2b:7e:a3:a0:ab:68:89:7e:d6:fa:ad:c1:ca:0f: eb:11:c1:ee:af:a4:23:2a:0b:9d:5c:5d:e4:6e:33: 30:29:4a:1e:31:67:50:d7:6a:00:0a:a0:ac:b8:bd: 85:0b:f3:03:e2:2c:92:c1:3d:16:ff:2a:96:2b:24: 71:58:71:c3:05:63:65:03:50:a4:55:a9:73:3e:da: 49:ea:56:22:98:76:e9:ca:95:75:37:6a:f9:ba:a0: 6c:11:38:0e:7b:72:19:41:0b:ef:20:c3:a9:63:0d: c0:70:90:3e:53:b4:5e:78:cb:69:59:ae:b4:b1:b9: 67:f7:29:41:ea:ad:55:d1:94:95:9f:fc:dc:a3:49: 3a:65:94:a1:85:90:ae:e2:63:6f:7c:47:3c:26:3a: a2:7a:44:22:82:29:0a:3b:09:00:38:60:5c:67:db: 78:01:e0:70:c4:6f:f3:52:f3:11:fd:02:a5:d2:51: 92:41:45:fd:0a:3a:69:73:b2:e5:21:ae:3b:e7:84: f9:24:c8:53:45:74:59:41:3a:9d:5f:33:5e:ba:95: ad:d4:98:c4:ee:eb:5d:ae:bf:a7:e7:6a:3f:13:96: 35:dc:62:86:4a:ab:44:31:94:1f:94:7b:9b:77:c6: d7:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:CF:B8:17:A2:E4:5F:0A:2E:A7:19:92:19:FC:44:65:9B:27:3D:F4 X509v3 Authority Key Identifier: keyid:A5:FE:51:29:D4:81:ED:1A:00:E5:5E:99:CE:30:E0:08:B6:3D:6C:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FF9D/CF86D58A9FE511EABB863A80C4F9AE02/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FF9D/CF86D58A9FE511EABB863A80C4F9AE02/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:33:19:97:b7:63:3d:b7:dc:d1:63:7c:b5:ee:29:64:73:47: 9c:92:3d:98:59:6e:8c:05:77:99:30:0d:e4:d1:8b:39:90:37: 39:cb:98:29:f9:87:33:7c:31:4c:35:f3:1c:8f:2b:d5:12:27: d1:70:8c:de:e9:6d:92:90:84:96:a3:93:38:81:99:49:c9:79: 17:37:46:54:99:e7:62:15:5c:8e:72:cd:47:ba:5e:94:70:5b: 48:6e:c4:80:f9:46:e3:5c:9f:08:ac:db:47:9b:58:7e:32:d7: 66:92:8e:38:d7:94:84:5e:c3:ba:1d:d6:f7:4b:cf:8b:87:07: a7:f2:07:2c:bc:be:7c:f0:25:5f:d1:39:3c:ed:37:66:bb:0d: 06:44:b3:2c:0b:94:3a:e8:1e:69:64:d4:f1:80:77:7b:d8:02: cd:d5:a9:1f:21:01:a1:c1:77:fa:6c:9b:27:95:c9:56:8e:4e: df:11:a0:87:15:6e:bf:e3:6a:dc:25:8c:c5:d7:6d:a7:1b:f4: db:3b:10:3d:41:65:fb:13:ad:42:2a:06:e7:47:8b:f6:bd:bb: c0:be:ec:b5:0f:04:42:92:23:13:44:68:56:f7:d4:e7:0c:b1: 55:a1:77:14:e9:50:0a:c7:81:e9:3b:84:7e:6a:18:27:43:7c: c2:2d:0b:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZGOUQxMTAvBgNVBAUTKEE1RkU1MTI5RDQ4MUVEMUEwMEU1NUU5OUNFMzBFMDA4 QjYzRDZDRUUwHhcNMjUwODIyMjAxODM4WhcNMjUwODI5MjAxODM4WjAYMRYwFAYD VQQDEw02OGE4ZDA5ZS00ODc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAusdvQhH+95Sq/76bJg9DK36joKtoiX7W+q3Byg/rEcHur6QjKgudXF3kbjMw KUoeMWdQ12oACqCsuL2FC/MD4iySwT0W/yqWKyRxWHHDBWNlA1CkValzPtpJ6lYi mHbpypV1N2r5uqBsETgOe3IZQQvvIMOpYw3AcJA+U7ReeMtpWa60sbln9ylB6q1V 0ZSVn/zco0k6ZZShhZCu4mNvfEc8JjqiekQigikKOwkAOGBcZ9t4AeBwxG/zUvMR /QKl0lGSQUX9Cjppc7LlIa4754T5JMhTRXRZQTqdXzNeupWt1JjE7utdrr+n52o/ E5Y13GKGSqtEMZQflHubd8bXyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD3PuBei 5F8KLqcZkhn8RGWbJz30MB8GA1UdIwQYMBaAFKX+USnUge0aAOVemc4w4Ai2PWzu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkY5RC9DRjg2RDU4QTlG RTUxMUVBQkI4NjNBODBDNEY5QUUwMi9wZjVSS2RTQjdSb0E1VjZaempEZ0NMWTli TzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BmNVJLZFNCN1JvQTVWNlp6akRnQ0xZOWJPNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RkY5RC9DRjg2RDU4QTlGRTUxMUVBQkI4NjNBODBDNEY5QUUwMi9wZjVSS2RTQjdS b0E1VjZaempEZ0NMWTliTzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbMxmXt2M9t9zRY3y17ilkc0eckj2YWW6MBXeZMA3k0Ys5kDc5y5gp +YczfDFMNfMcjyvVEifRcIze6W2SkISWo5M4gZlJyXkXN0ZUmediFVyOcs1Hul6U cFtIbsSA+UbjXJ8IrNtHm1h+Mtdmko4415SEXsO6Hdb3S8+Lhwen8gcsvL588CVf 0Tk87Tdmuw0GRLMsC5Q66B5pZNTxgHd72ALN1akfIQGhwXf6bJsnlclWjk7fEaCH FW6/42rcJYzF122nG/TbOxA9QWX7E61CKgbnR4v2vbvAvuy1DwRCkiMTRGhW99Tn DLFVoXcU6VAKx4HpO4R+ahgnQ3zCLQvj -----END CERTIFICATE-----Generated at Sat Aug 23 17:07:07 2025 by rpki-client