$ rpki-client -vvf rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.mft File: 5VbchrlOkc-bLilEqF9xaS2glNI.mft (raw, json) Hash identifier: er1zdTjkQhXN+cBa3PunMczdVJx2QIcVBIV3E7VX7iI= Subject key identifier: 74:30:C5:B6:F8:3F:23:98:53:99:F8:1B:E4:9C:FA:5D:61:0D:D5:4B Authority key identifier: E5:56:DC:86:B9:4E:91:CF:9B:2E:29:44:A8:5F:71:69:2D:A0:94:D2 Certificate issuer: /CN=A919B20D/serialNumber=E556DC86B94E91CF9B2E2944A85F71692DA094D2 Certificate serial: 014B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VbchrlOkc-bLilEqF9xaS2glNI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.mft Manifest number: 0146 Signing time: Sat 23 Aug 2025 04:31:15 +0000 Manifest this update: Sat 23 Aug 2025 04:31:14 +0000 Manifest next update: Sat 30 Aug 2025 04:31:14 +0000 Files and hashes: 1: 5VbchrlOkc-bLilEqF9xaS2glNI.crl (hash: xvSTw+YLx0LiXzRpI0EYOSvx2B42xHjbP9HnvWwOEa8=) 2: 4B3E4A0693DE11EE81D1045FC4F9AE02.roa (hash: Lg11zjVs27vb2oJIfdyoCpLaTBOQjwIoy8A24z6T1mQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.crl rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VbchrlOkc-bLilEqF9xaS2glNI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 331 (0x14b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B20D, serialNumber=E556DC86B94E91CF9B2E2944A85F71692DA094D2 Validity Not Before: Aug 23 04:31:14 2025 GMT Not After : Aug 30 04:31:14 2025 GMT Subject: CN=68a94412-5664 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:cd:d6:01:15:6b:4d:7d:73:ef:d7:e8:aa:b1: e2:4a:57:e5:4c:93:34:53:5e:d0:03:b8:40:01:6f: 83:22:81:d1:fa:9e:29:e0:e3:d6:5a:9a:ea:45:65: e5:c3:2c:ce:a0:ff:e5:13:2f:81:a1:00:ba:54:cd: 4d:10:f8:be:3b:fe:1e:1e:d2:82:63:8e:23:bd:b8: 3d:c6:b8:ad:a8:58:a3:86:a4:3f:8c:fd:70:d6:0c: aa:27:25:57:6c:eb:e2:cd:45:cc:27:ea:35:2f:64: a0:e2:a6:e9:c0:74:c1:28:9a:b1:a8:63:02:94:fb: a9:29:2f:40:68:54:bd:82:a3:62:f7:70:88:66:77: 03:21:ad:3c:29:55:6f:23:dd:c4:82:f0:4e:c3:7e: bd:88:44:7a:02:33:9a:a1:d8:33:8d:4d:4a:25:a9: f1:82:dd:72:8a:60:43:9b:86:18:eb:27:89:e2:65: 9b:9d:e8:a5:4e:67:e5:10:af:be:e9:a4:ef:b0:bb: f6:8f:12:c2:99:ca:6d:59:8a:e7:76:d7:49:58:60: 8f:42:cb:8e:c0:35:44:4d:10:94:bc:b3:b6:c7:32: eb:bf:d7:c8:9a:fb:39:30:9b:1d:a4:3f:f4:12:25: c7:37:36:85:e4:5e:d5:aa:b8:b4:46:66:a3:2f:cd: 46:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:30:C5:B6:F8:3F:23:98:53:99:F8:1B:E4:9C:FA:5D:61:0D:D5:4B X509v3 Authority Key Identifier: keyid:E5:56:DC:86:B9:4E:91:CF:9B:2E:29:44:A8:5F:71:69:2D:A0:94:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VbchrlOkc-bLilEqF9xaS2glNI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:9d:c2:20:b9:71:6e:ce:78:b3:79:cd:1b:f8:13:8a:e3:1a: 3f:44:7c:c3:a8:43:74:7e:a5:ee:a1:97:e0:54:6a:1d:6c:23: 6b:f9:bf:6e:08:8c:dc:c7:16:39:af:36:b2:15:a1:7c:b6:6a: 46:5c:d2:86:ab:5d:01:41:7d:23:2a:d4:91:cc:e5:44:15:3d: 5f:ea:a1:c8:19:e2:4c:05:70:d6:03:c4:8c:ea:ba:20:d0:d3: aa:f7:da:b2:cb:9c:2b:90:83:97:1d:13:6e:06:2d:c9:ae:4d: 15:f7:7c:23:db:50:b1:96:ef:4a:81:de:36:4a:d6:88:ee:9a: 2f:9e:1e:9b:8c:f1:60:23:3c:b5:5d:c9:85:7a:a0:94:3e:70: 88:72:9a:9a:3f:35:65:47:c3:99:15:88:10:d8:d6:4d:a1:29: 52:ff:06:21:61:c2:97:a6:45:b3:ef:e5:89:26:cf:99:b1:a6: d3:ab:49:bd:47:28:a7:0b:ed:0b:55:e4:a1:5d:72:52:c3:19: f3:4b:05:51:37:d8:66:06:f4:b4:cf:3d:33:23:67:08:fa:92: 02:98:f2:11:29:af:a1:fe:7f:0c:8d:98:ae:48:24:e4:8e:85: 5e:20:e7:26:a1:34:9d:a9:f9:dc:97:f6:96:52:38:df:a7:cb: af:d3:4a:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUIyMEQxMTAvBgNVBAUTKEU1NTZEQzg2Qjk0RTkxQ0Y5QjJFMjk0NEE4NUY3MTY5 MkRBMDk0RDIwHhcNMjUwODIzMDQzMTE0WhcNMjUwODMwMDQzMTE0WjAYMRYwFAYD VQQDEw02OGE5NDQxMi01NjY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqc3WARVrTX1z79foqrHiSlflTJM0U17QA7hAAW+DIoHR+p4p4OPWWprqRWXl wyzOoP/lEy+BoQC6VM1NEPi+O/4eHtKCY44jvbg9xritqFijhqQ/jP1w1gyqJyVX bOvizUXMJ+o1L2Sg4qbpwHTBKJqxqGMClPupKS9AaFS9gqNi93CIZncDIa08KVVv I93EgvBOw369iER6AjOaodgzjU1KJanxgt1yimBDm4YY6yeJ4mWbneilTmflEK++ 6aTvsLv2jxLCmcptWYrndtdJWGCPQsuOwDVETRCUvLO2xzLrv9fImvs5MJsdpD/0 EiXHNzaF5F7Vqri0RmajL81GzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHQwxbb4 PyOYU5n4G+Sc+l1hDdVLMB8GA1UdIwQYMBaAFOVW3Ia5TpHPmy4pRKhfcWktoJTS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjIwRC82MUFDQkY0Njkz QTkxMUVFOTE0OUUzNTRDNEY5QUUwMi81VmJjaHJsT2tjLWJMaWxFcUY5eGFTMmds TkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVWYmNocmxPa2MtYkxpbEVxRjl4YVMyZ2xOSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjIwRC82MUFDQkY0NjkzQTkxMUVFOTE0OUUzNTRDNEY5QUUwMi81VmJjaHJsT2tj LWJMaWxFcUY5eGFTMmdsTkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyncIguXFuznizec0b+BOK4xo/RHzDqEN0fqXuoZfgVGodbCNr+b9u CIzcxxY5rzayFaF8tmpGXNKGq10BQX0jKtSRzOVEFT1f6qHIGeJMBXDWA8SM6rog 0NOq99qyy5wrkIOXHRNuBi3Jrk0V93wj21Cxlu9Kgd42StaI7povnh6bjPFgIzy1 XcmFeqCUPnCIcpqaPzVlR8OZFYgQ2NZNoSlS/wYhYcKXpkWz7+WJJs+ZsabTq0m9 RyinC+0LVeShXXJSwxnzSwVRN9hmBvS0zz0zI2cI+pICmPIRKa+h/n8MjZiuSCTk joVeIOcmoTSdqfncl/aWUjjfp8uv00rO -----END CERTIFICATE-----Generated at Sun Aug 24 00:15:49 2025 by rpki-client