$ rpki-client -vvf rpki.apnic.net/member_repository/A918FF9D/CF86D58A9FE511EABB863A80C4F9AE02/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.mft File: pf5RKdSB7RoA5V6ZzjDgCLY9bO4.mft (raw, json) Hash identifier: aAElfdW++/Uboep56qxQxapBs6iW/m1GTSrVCISkmKA= Subject key identifier: A6:97:DD:FB:64:36:54:90:22:A6:A6:70:74:53:09:25:56:3B:37:51 Authority key identifier: A5:FE:51:29:D4:81:ED:1A:00:E5:5E:99:CE:30:E0:08:B6:3D:6C:EE Certificate issuer: /CN=A918FF9D/serialNumber=A5FE5129D481ED1A00E55E99CE30E008B63D6CEE Certificate serial: 093F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FF9D/CF86D58A9FE511EABB863A80C4F9AE02/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.mft Manifest number: 0939 Signing time: Wed 02 Jul 2025 20:29:00 +0000 Manifest this update: Wed 02 Jul 2025 20:28:59 +0000 Manifest next update: Wed 09 Jul 2025 20:28:59 +0000 Files and hashes: 1: pf5RKdSB7RoA5V6ZzjDgCLY9bO4.crl (hash: LcweAnDfiH+BVHTIMxirkQxhBDYmnTurz6XNuel88Yg=) 2: 2A1AD3BA9FE711EAAFA97B81C4F9AE02.roa (hash: McDtUaMk7e01xsshJ/22xBrdGiD8USZ0rSk/8TzyXxM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FF9D/CF86D58A9FE511EABB863A80C4F9AE02/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.crl rsync://rpki.apnic.net/member_repository/A918FF9D/CF86D58A9FE511EABB863A80C4F9AE02/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:28:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2367 (0x93f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FF9D, serialNumber=A5FE5129D481ED1A00E55E99CE30E008B63D6CEE Validity Not Before: Jul 2 20:28:59 2025 GMT Not After : Jul 9 20:28:59 2025 GMT Subject: CN=6865968c-ae5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:84:dc:41:e5:4f:b7:1e:77:fe:c3:05:14:19: 9c:ef:ed:05:6b:fa:12:b0:d2:ec:b6:8b:7a:dc:7c: c8:4f:7b:64:66:01:3a:af:f9:22:21:81:7c:58:75: a8:f6:09:da:0a:ca:0f:1e:bb:08:a2:21:4c:25:a3: 06:77:85:40:b6:0a:51:a9:90:40:73:1b:1e:4b:36: 11:67:cc:93:b9:b1:0f:1c:5d:04:f2:78:df:83:d7: 56:77:00:a7:27:63:b2:e2:6f:4b:60:7d:08:11:ae: 26:7e:6e:d4:05:93:5f:d3:6c:59:47:73:ec:2e:b9: 49:a4:1b:f9:d2:d5:00:80:e2:67:7a:a7:fc:09:c2: ff:f0:0d:de:55:f6:2e:df:0f:15:90:76:93:95:f9: 0c:e8:a9:42:39:2c:1c:6d:5c:a4:1d:5b:2f:49:54: 0b:ee:e0:ee:64:4b:38:cf:1e:c8:e5:c1:42:e1:5a: ae:3d:7d:d7:ba:e8:a8:50:cf:87:16:dd:33:2f:d5: eb:97:5a:a3:6d:98:d7:dc:6b:5c:ad:a9:72:22:b5: d6:41:7d:c4:af:d7:e6:8a:fd:ef:47:a7:f4:09:fd: 68:38:8d:bb:63:d4:20:c7:a0:50:a0:e3:5f:de:46: 57:bb:7c:fd:af:97:5a:41:67:c3:48:c1:7d:81:ff: 7e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:97:DD:FB:64:36:54:90:22:A6:A6:70:74:53:09:25:56:3B:37:51 X509v3 Authority Key Identifier: keyid:A5:FE:51:29:D4:81:ED:1A:00:E5:5E:99:CE:30:E0:08:B6:3D:6C:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FF9D/CF86D58A9FE511EABB863A80C4F9AE02/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FF9D/CF86D58A9FE511EABB863A80C4F9AE02/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:9f:fd:ce:85:c3:da:53:26:1d:c6:6e:92:3c:ec:5d:6d:45: cd:49:5c:00:d5:6d:df:78:1f:ff:21:1a:d0:31:8d:38:d8:9a: 52:b8:99:66:79:70:96:80:35:b0:81:ab:23:cd:15:26:5d:a0: 96:fd:6e:e2:b2:2a:fd:25:2b:7c:6f:d9:39:93:bb:70:95:1e: 8f:57:d2:e9:38:79:14:2f:b6:1c:35:71:e4:3c:58:68:3b:30: 03:30:80:40:de:a9:5a:37:ac:a9:55:54:52:06:41:23:ee:3c: 30:f5:51:63:ae:84:be:92:3d:2d:13:09:00:ad:a0:4e:fe:87: 04:28:35:62:0f:ff:35:91:dc:e3:3e:08:51:d5:e3:52:41:c9: 03:1d:c4:8d:8d:71:c7:21:d9:6a:b3:53:cb:de:b5:2a:6d:32: b8:d6:ee:81:b4:5d:3c:20:dc:fc:a0:58:e2:cb:52:ae:21:f3: 34:2a:0e:be:ce:d4:f2:80:20:fb:c7:cc:fa:1e:f2:80:72:be: 44:a4:25:8f:cb:80:aa:a5:3b:22:5c:85:44:39:ef:79:4e:6b: 9b:65:d6:cb:aa:74:9c:ee:e9:77:17:6a:a8:fa:2b:33:45:d0: fd:ce:76:e7:64:55:8c:4d:db:ab:81:2c:4d:a0:61:a5:06:79: 3c:23:b7:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZGOUQxMTAvBgNVBAUTKEE1RkU1MTI5RDQ4MUVEMUEwMEU1NUU5OUNFMzBFMDA4 QjYzRDZDRUUwHhcNMjUwNzAyMjAyODU5WhcNMjUwNzA5MjAyODU5WjAYMRYwFAYD VQQDEw02ODY1OTY4Yy1hZTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApYTcQeVPtx53/sMFFBmc7+0Fa/oSsNLstot63HzIT3tkZgE6r/kiIYF8WHWo 9gnaCsoPHrsIoiFMJaMGd4VAtgpRqZBAcxseSzYRZ8yTubEPHF0E8njfg9dWdwCn J2Oy4m9LYH0IEa4mfm7UBZNf02xZR3PsLrlJpBv50tUAgOJneqf8CcL/8A3eVfYu 3w8VkHaTlfkM6KlCOSwcbVykHVsvSVQL7uDuZEs4zx7I5cFC4VquPX3XuuioUM+H Ft0zL9Xrl1qjbZjX3GtcralyIrXWQX3Er9fmiv3vR6f0Cf1oOI27Y9Qgx6BQoONf 3kZXu3z9r5daQWfDSMF9gf9+IQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKaX3ftk NlSQIqamcHRTCSVWOzdRMB8GA1UdIwQYMBaAFKX+USnUge0aAOVemc4w4Ai2PWzu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkY5RC9DRjg2RDU4QTlG RTUxMUVBQkI4NjNBODBDNEY5QUUwMi9wZjVSS2RTQjdSb0E1VjZaempEZ0NMWTli TzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BmNVJLZFNCN1JvQTVWNlp6akRnQ0xZOWJPNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RkY5RC9DRjg2RDU4QTlGRTUxMUVBQkI4NjNBODBDNEY5QUUwMi9wZjVSS2RTQjdS b0E1VjZaempEZ0NMWTliTzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1n/3OhcPaUyYdxm6SPOxdbUXNSVwA1W3feB//IRrQMY042JpSuJlm eXCWgDWwgasjzRUmXaCW/W7isir9JSt8b9k5k7twlR6PV9LpOHkUL7YcNXHkPFho OzADMIBA3qlaN6ypVVRSBkEj7jww9VFjroS+kj0tEwkAraBO/ocEKDViD/81kdzj PghR1eNSQckDHcSNjXHHIdlqs1PL3rUqbTK41u6BtF08INz8oFjiy1KuIfM0Kg6+ ztTygCD7x8z6HvKAcr5EpCWPy4CqpTsiXIVEOe95TmubZdbLqnSc7ul3F2qo+isz RdD9znbnZFWMTdurgSxNoGGlBnk8I7dx -----END CERTIFICATE-----Generated at Fri Jul 4 17:58:26 2025 by rpki-client