$ rpki-client -vvf rpki.apnic.net/member_repository/A919136B/F7C87E843A7B11E9ACBC6A18C4F9AE02/5IPa-2wrg71IK24pCn5AU1W1Ltk.mft File: 5IPa-2wrg71IK24pCn5AU1W1Ltk.mft (raw, json) Hash identifier: Nvz1VQIH4DgxCa6XxiMy/haqraixGEw4ZNbSQaS073k= Subject key identifier: F2:32:7D:92:AA:87:BB:88:48:02:E2:E0:73:E1:F5:E1:F2:8E:91:3A Authority key identifier: E4:83:DA:FB:6C:2B:83:BD:48:2B:6E:29:0A:7E:40:53:55:B5:2E:D9 Certificate issuer: /CN=A919136B/serialNumber=E483DAFB6C2B83BD482B6E290A7E405355B52ED9 Certificate serial: 106C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5IPa-2wrg71IK24pCn5AU1W1Ltk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919136B/F7C87E843A7B11E9ACBC6A18C4F9AE02/5IPa-2wrg71IK24pCn5AU1W1Ltk.mft Manifest number: 1060 Signing time: Fri 04 Jul 2025 17:40:53 +0000 Manifest this update: Fri 04 Jul 2025 17:40:53 +0000 Manifest next update: Fri 11 Jul 2025 17:40:53 +0000 Files and hashes: 1: 5IPa-2wrg71IK24pCn5AU1W1Ltk.crl (hash: LfgrKmideRYsvLItzrLmo8/ajorPfdIk3lPDWy9rLgQ=) 2: 99B6039C215311EA86E1E020C4F9AE02.roa (hash: GBYQ/lKi3z5roPUPwktfDVMLitw965pomXZAG5jfako=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919136B/F7C87E843A7B11E9ACBC6A18C4F9AE02/5IPa-2wrg71IK24pCn5AU1W1Ltk.crl rsync://rpki.apnic.net/member_repository/A919136B/F7C87E843A7B11E9ACBC6A18C4F9AE02/5IPa-2wrg71IK24pCn5AU1W1Ltk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5IPa-2wrg71IK24pCn5AU1W1Ltk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4204 (0x106c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919136B, serialNumber=E483DAFB6C2B83BD482B6E290A7E405355B52ED9 Validity Not Before: Jul 4 17:40:53 2025 GMT Not After : Jul 11 17:40:53 2025 GMT Subject: CN=68681225-1d8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d3:d7:86:2f:a0:39:25:52:40:4c:10:d5:bc: 0d:37:2d:bf:6d:cc:c4:f3:ec:d2:c3:f0:15:f7:88: 5b:36:48:55:9a:31:66:b7:c5:32:cb:13:0b:df:b4: fa:0d:bf:80:fc:fb:6e:e1:15:f3:93:41:31:62:db: 89:7c:1b:75:52:3d:77:ce:60:97:41:08:50:04:1f: 73:25:4b:87:74:db:3b:d9:58:db:8f:8a:ec:cb:5e: 3a:b7:66:66:94:12:91:63:c8:19:5a:3a:01:3f:d8: a9:e4:7c:fe:bf:d5:f3:8a:66:29:55:6d:2f:aa:9c: 33:7b:5e:ef:01:a8:1d:a8:bf:6d:53:b9:a0:69:b9: cb:0f:f4:00:f9:70:01:de:45:75:fb:50:bf:56:d7: 9f:2c:51:1c:b4:12:d4:80:80:24:d3:b5:f9:d7:f4: f8:b8:bb:e0:14:72:93:6b:0f:74:9c:8f:32:ea:16: f6:9a:d2:5b:db:82:b3:3a:87:0f:76:f8:a8:74:92: 09:6c:62:c4:c7:d0:76:b4:b0:c9:09:21:d1:d3:f8: e2:87:84:0b:fa:7a:e5:e3:48:af:62:93:35:da:f0: d5:1c:99:32:b8:f6:e5:21:a9:b8:43:af:e4:84:9d: d7:1a:80:d4:76:50:ae:66:1e:8c:a9:9c:1c:ba:b8: 81:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:32:7D:92:AA:87:BB:88:48:02:E2:E0:73:E1:F5:E1:F2:8E:91:3A X509v3 Authority Key Identifier: keyid:E4:83:DA:FB:6C:2B:83:BD:48:2B:6E:29:0A:7E:40:53:55:B5:2E:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919136B/F7C87E843A7B11E9ACBC6A18C4F9AE02/5IPa-2wrg71IK24pCn5AU1W1Ltk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5IPa-2wrg71IK24pCn5AU1W1Ltk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919136B/F7C87E843A7B11E9ACBC6A18C4F9AE02/5IPa-2wrg71IK24pCn5AU1W1Ltk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:ec:86:60:34:de:3c:a9:ea:18:27:82:cd:04:49:9d:24:55: 96:24:a7:77:5d:86:70:94:75:da:fb:5e:c4:c1:ec:cf:3c:57: 0a:e1:f3:18:b7:42:3e:cd:7d:71:a3:95:3d:5d:32:ae:19:e5: a6:f9:e1:e6:d2:ef:88:6a:7e:52:99:4a:8f:ee:5a:e9:18:a3: 37:55:b2:36:f8:66:86:e6:34:4a:84:b7:da:3f:3f:19:65:ef: bb:c3:44:2b:0b:41:74:9c:99:4f:8f:36:35:33:80:94:1f:0e: bf:33:a2:0f:46:fd:0c:09:9a:9e:59:5c:4f:60:1e:5c:c5:0b: 0c:7b:dd:98:50:89:fa:8b:32:66:d2:b2:65:a5:4c:db:6e:85: 47:26:fe:0d:2a:ea:c2:f1:3d:c7:1e:af:d7:00:5d:b2:bb:67: ee:be:3a:39:94:f1:2b:4d:6a:e7:4f:ce:4f:6a:a4:e8:0b:6d: f3:74:a8:2c:50:ce:21:17:2f:57:c0:96:cd:58:61:42:d2:40: 0e:dd:ee:61:66:b2:b1:51:28:0f:f0:2b:39:67:19:7e:42:6a: 18:79:a0:68:b4:57:d2:8f:83:fd:9a:33:0a:43:ff:be:03:f6: 8b:e7:b6:b3:6b:0e:8f:28:51:73:9c:2f:2a:24:f6:0f:39:80: 46:b0:49:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEGwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTEzNkIxMTAvBgNVBAUTKEU0ODNEQUZCNkMyQjgzQkQ0ODJCNkUyOTBBN0U0MDUz NTVCNTJFRDkwHhcNMjUwNzA0MTc0MDUzWhcNMjUwNzExMTc0MDUzWjAYMRYwFAYD VQQDEw02ODY4MTIyNS0xZDhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArdPXhi+gOSVSQEwQ1bwNNy2/bczE8+zSw/AV94hbNkhVmjFmt8UyyxML37T6 Db+A/Ptu4RXzk0ExYtuJfBt1Uj13zmCXQQhQBB9zJUuHdNs72Vjbj4rsy146t2Zm lBKRY8gZWjoBP9ip5Hz+v9XzimYpVW0vqpwze17vAagdqL9tU7mgabnLD/QA+XAB 3kV1+1C/VtefLFEctBLUgIAk07X51/T4uLvgFHKTaw90nI8y6hb2mtJb24KzOocP dviodJIJbGLEx9B2tLDJCSHR0/jih4QL+nrl40ivYpM12vDVHJkyuPblIam4Q6/k hJ3XGoDUdlCuZh6MqZwcuriB2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPIyfZKq h7uISALi4HPh9eHyjpE6MB8GA1UdIwQYMBaAFOSD2vtsK4O9SCtuKQp+QFNVtS7Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTM2Qi9GN0M4N0U4NDNB N0IxMUU5QUNCQzZBMThDNEY5QUUwMi81SVBhLTJ3cmc3MUlLMjRwQ241QVUxVzFM dGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVJUGEtMndyZzcxSUsyNHBDbjVBVTFXMUx0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTM2Qi9GN0M4N0U4NDNBN0IxMUU5QUNCQzZBMThDNEY5QUUwMi81SVBhLTJ3cmc3 MUlLMjRwQ241QVUxVzFMdGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAE7IZgNN48qeoYJ4LNBEmdJFWWJKd3XYZwlHXa+17EwezPPFcK4fMY t0I+zX1xo5U9XTKuGeWm+eHm0u+Ian5SmUqP7lrpGKM3VbI2+GaG5jRKhLfaPz8Z Ze+7w0QrC0F0nJlPjzY1M4CUHw6/M6IPRv0MCZqeWVxPYB5cxQsMe92YUIn6izJm 0rJlpUzbboVHJv4NKurC8T3HHq/XAF2yu2fuvjo5lPErTWrnT85PaqToC23zdKgs UM4hFy9XwJbNWGFC0kAO3e5hZrKxUSgP8Cs5Zxl+QmoYeaBotFfSj4P9mjMKQ/++ A/aL57azaw6PKFFznC8qJPYPOYBGsEl5 -----END CERTIFICATE-----Generated at Fri Jul 4 19:09:34 2025 by rpki-client