$ rpki-client -vvf rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/_5I0f11UaIEf0lOki_xp_lcKpFA.mft File: _5I0f11UaIEf0lOki_xp_lcKpFA.mft (raw, json) Hash identifier: hte08UrM3kx6zHAYZyV1Wo46hX0s7t0R8QTzfeRCtTc= Subject key identifier: D8:4A:D5:36:91:A6:61:52:FD:41:66:7B:DE:B5:EE:D5:82:FD:34:B9 Authority key identifier: FF:92:34:7F:5D:54:68:81:1F:D2:53:A4:8B:FC:69:FE:57:0A:A4:50 Certificate issuer: /CN=A9191769/serialNumber=FF92347F5D5468811FD253A48BFC69FE570AA450 Certificate serial: B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5I0f11UaIEf0lOki_xp_lcKpFA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/_5I0f11UaIEf0lOki_xp_lcKpFA.mft Manifest number: AF Signing time: Sat 23 Aug 2025 06:19:13 +0000 Manifest this update: Sat 23 Aug 2025 06:19:12 +0000 Manifest next update: Sat 30 Aug 2025 06:19:12 +0000 Files and hashes: 1: _5I0f11UaIEf0lOki_xp_lcKpFA.crl (hash: RoPYMJs7Eb8GQFm0TjUm2w+GmaRSHFk4TC0Jw5f6a1U=) 2: 4D36C07677C311EF84D38A3BC4F9AE02.roa (hash: JXSolNPYFIreOexnYnb4A7e51oAbg28HPMtSTeakZI4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/_5I0f11UaIEf0lOki_xp_lcKpFA.crl rsync://rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/_5I0f11UaIEf0lOki_xp_lcKpFA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5I0f11UaIEf0lOki_xp_lcKpFA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:19:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 177 (0xb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191769, serialNumber=FF92347F5D5468811FD253A48BFC69FE570AA450 Validity Not Before: Aug 23 06:19:12 2025 GMT Not After : Aug 30 06:19:12 2025 GMT Subject: CN=68a95d60-0aba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1a:fb:b1:ee:60:a4:4b:bf:f7:a4:06:16:48: d1:fe:08:bc:4a:3b:8d:41:c2:10:d1:bc:35:cf:a1: 01:36:c1:20:62:50:e9:ae:5c:e0:2a:9f:27:c9:06: 8b:1f:0d:f2:7d:e0:56:e2:94:36:f6:0a:e2:aa:85: 77:e8:40:37:3e:ed:83:f3:27:d5:4e:f2:e9:d5:26: 60:36:97:22:39:11:98:80:a4:72:79:60:bb:6a:59: f0:d8:82:0b:11:d3:e3:59:d2:85:57:e8:f7:11:f4: 3a:a9:5d:e3:e1:e0:73:b6:37:23:03:b7:36:e4:a8: e4:07:cf:c5:98:6d:13:0e:28:19:36:21:63:23:68: 4c:ec:15:46:f9:6f:8e:f2:f4:2a:63:28:b2:5e:16: fa:35:81:30:08:a3:d4:7f:e9:d4:b7:64:80:b2:4c: a1:c0:48:7e:ff:48:17:ba:f7:38:fd:34:bc:ba:59: 26:27:14:c1:5a:35:b4:b5:2f:fb:82:fd:28:ee:63: 2e:d6:26:89:bf:45:d6:3b:de:30:77:2f:bf:17:b6: e5:43:14:b4:cc:13:e0:73:e0:05:95:cb:f7:a4:b5: 1b:6e:de:6c:b8:7b:a5:b4:1e:e8:b4:48:38:1e:36: bc:4c:31:7a:75:be:f4:e8:90:47:90:41:34:82:c5: 8b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:4A:D5:36:91:A6:61:52:FD:41:66:7B:DE:B5:EE:D5:82:FD:34:B9 X509v3 Authority Key Identifier: keyid:FF:92:34:7F:5D:54:68:81:1F:D2:53:A4:8B:FC:69:FE:57:0A:A4:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/_5I0f11UaIEf0lOki_xp_lcKpFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5I0f11UaIEf0lOki_xp_lcKpFA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/_5I0f11UaIEf0lOki_xp_lcKpFA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:00:95:fe:64:16:3b:d2:46:a6:57:dd:ab:3c:40:4f:4e:98: 35:3c:a1:59:7c:4a:dc:9c:9c:71:37:62:73:00:31:1f:f2:4d: 7f:09:85:d2:db:7a:62:a1:ea:38:46:68:0a:e4:33:d9:36:da: 50:1e:7f:7b:6c:af:d4:a8:85:84:a8:bd:d2:c0:14:be:9a:7b: 88:aa:d3:d2:54:38:ae:c0:fc:dc:29:9e:ea:99:00:28:c4:67: 37:e9:e2:05:f8:82:a0:ae:48:b6:14:8e:0b:50:ce:58:33:d5: 57:cd:dc:25:93:50:a0:e9:07:3f:e1:c1:8c:0d:50:ca:81:4e: 92:df:68:70:03:9f:d1:3a:e6:fa:10:8c:a6:a9:46:ba:b7:ed: 5e:1e:1f:dc:26:b8:9c:b5:58:6c:49:65:e9:32:f7:31:e9:00: 42:07:05:ed:5e:97:f1:fc:2d:78:5e:32:35:ca:d1:b3:54:54: 71:13:a9:3f:d9:e7:c8:34:60:0a:0d:db:6b:9e:b5:b2:94:3d: dd:e5:0f:0d:6f:b4:97:bf:9e:18:73:a0:1b:a4:3c:87:ed:63: f5:da:84:53:61:45:88:c9:f7:32:4f:1c:cb:72:b0:c7:1d:39: 1b:65:7e:35:ca:f8:50:9a:3a:9f:e5:3d:3f:32:de:6b:f0:b3: 2f:62:c9:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTE3NjkxMTAvBgNVBAUTKEZGOTIzNDdGNUQ1NDY4ODExRkQyNTNBNDhCRkM2OUZF NTcwQUE0NTAwHhcNMjUwODIzMDYxOTEyWhcNMjUwODMwMDYxOTEyWjAYMRYwFAYD VQQDEw02OGE5NWQ2MC0wYWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwxr7se5gpEu/96QGFkjR/gi8SjuNQcIQ0bw1z6EBNsEgYlDprlzgKp8nyQaL Hw3yfeBW4pQ29griqoV36EA3Pu2D8yfVTvLp1SZgNpciORGYgKRyeWC7alnw2IIL EdPjWdKFV+j3EfQ6qV3j4eBztjcjA7c25KjkB8/FmG0TDigZNiFjI2hM7BVG+W+O 8vQqYyiyXhb6NYEwCKPUf+nUt2SAskyhwEh+/0gXuvc4/TS8ulkmJxTBWjW0tS/7 gv0o7mMu1iaJv0XWO94wdy+/F7blQxS0zBPgc+AFlcv3pLUbbt5suHultB7otEg4 Hja8TDF6db706JBHkEE0gsWLhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNhK1TaR pmFS/UFme9617tWC/TS5MB8GA1UdIwQYMBaAFP+SNH9dVGiBH9JTpIv8af5XCqRQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTc2OS9EMjZERERCMDc3 QkUxMUVGOUYyQTQ1NDdDNEY5QUUwMi9fNUkwZjExVWFJRWYwbE9raV94cF9sY0tw RkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL181STBmMTFVYUlFZjBsT2tpX3hwX2xjS3BGQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTc2OS9EMjZERERCMDc3QkUxMUVGOUYyQTQ1NDdDNEY5QUUwMi9fNUkwZjExVWFJ RWYwbE9raV94cF9sY0twRkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgAJX+ZBY70kamV92rPEBPTpg1PKFZfErcnJxxN2JzADEf8k1/CYXS 23pioeo4RmgK5DPZNtpQHn97bK/UqIWEqL3SwBS+mnuIqtPSVDiuwPzcKZ7qmQAo xGc36eIF+IKgrki2FI4LUM5YM9VXzdwlk1Cg6Qc/4cGMDVDKgU6S32hwA5/ROub6 EIymqUa6t+1eHh/cJrictVhsSWXpMvcx6QBCBwXtXpfx/C14XjI1ytGzVFRxE6k/ 2efINGAKDdtrnrWylD3d5Q8Nb7SXv54Yc6AbpDyH7WP12oRTYUWIyfcyTxzLcrDH HTkbZX41yvhQmjqf5T0/Mt5r8LMvYsml -----END CERTIFICATE-----Generated at Sat Aug 23 17:16:29 2025 by rpki-client