$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.mft File: 5bHOHUU5GBlb61zZD22Hnv6ZEKI.mft (raw, json) Hash identifier: nnbIplxNPY7l3ubxpyKuUHfAAFImpH7SfNsFIB+hBHw= Subject key identifier: D7:C7:07:CD:26:7C:F7:89:41:D4:C2:29:06:7C:D4:10:CA:D0:17:41 Authority key identifier: E5:B1:CE:1D:45:39:18:19:5B:EB:5C:D9:0F:6D:87:9E:FE:99:10:A2 Certificate issuer: /CN=A91DE5E8/serialNumber=E5B1CE1D453918195BEB5CD90F6D879EFE9910A2 Certificate serial: 01E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5bHOHUU5GBlb61zZD22Hnv6ZEKI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.mft Manifest number: 01DE Signing time: Sat 23 Aug 2025 02:48:07 +0000 Manifest this update: Sat 23 Aug 2025 02:48:07 +0000 Manifest next update: Sat 30 Aug 2025 02:48:07 +0000 Files and hashes: 1: 5bHOHUU5GBlb61zZD22Hnv6ZEKI.crl (hash: LC7TeeN3RyyWFLaqlZRI3yIkpmwppjPB/f90rqSAWEs=) 2: 785B44D6F2AF11EF97443030C4F9AE02.roa (hash: 3X8JQRJ56NXF/A25OQxe1Q8xkJiOt4/FMaPtZ+BwKik=) 3: B264EB66A30911ED99A82087C4F9AE02.roa (hash: tZEzhiKfHDteKh17cCbwci/tZYnVymPaW90yd5ZJ1q4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.crl rsync://rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5bHOHUU5GBlb61zZD22Hnv6ZEKI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:48:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 484 (0x1e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE5E8, serialNumber=E5B1CE1D453918195BEB5CD90F6D879EFE9910A2 Validity Not Before: Aug 23 02:48:07 2025 GMT Not After : Aug 30 02:48:07 2025 GMT Subject: CN=68a92be7-57ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9a:ea:de:5c:bb:03:01:24:9a:31:e6:5b:d1: 66:95:e5:a3:76:f2:89:36:27:aa:24:4e:5d:92:2e: 68:cd:b6:b5:9b:7c:4f:64:ea:5d:f7:11:38:6d:b1: ac:fc:3f:92:31:1d:3c:bd:d0:d9:ef:df:a2:f7:bc: f2:81:55:e5:39:ae:60:18:4c:5f:00:a2:eb:4a:43: 86:30:d3:89:b6:5d:06:dc:f4:53:69:f7:98:bf:42: 61:32:cb:cb:3d:c3:5a:03:d1:22:ce:51:c3:6a:23: e7:f0:dd:56:4a:b8:b9:82:fc:4e:d1:b6:c9:f2:e8: 3a:a2:b0:9c:66:68:d6:c3:42:ff:eb:86:de:61:d5: e4:f9:f5:f1:bf:ae:f4:64:e9:05:c0:3a:47:58:e4: 7a:b8:94:43:6c:2a:83:db:09:36:66:40:52:4a:3b: 18:d6:92:f5:f5:ef:0f:69:08:20:c3:61:a9:d8:19: 54:02:50:be:ed:7b:29:8e:01:bb:b1:80:a9:78:e8: b9:b4:e4:4c:c4:a1:f2:4e:64:8c:70:21:88:b6:91: 4e:68:3f:1c:1d:27:d4:f2:b4:ef:57:6b:25:ce:ca: 76:27:06:1c:d8:fd:3f:c2:d9:24:eb:bd:b9:e3:d9: 09:ba:26:2a:4d:3d:95:53:ea:9a:22:4b:de:9b:f5: 47:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:C7:07:CD:26:7C:F7:89:41:D4:C2:29:06:7C:D4:10:CA:D0:17:41 X509v3 Authority Key Identifier: keyid:E5:B1:CE:1D:45:39:18:19:5B:EB:5C:D9:0F:6D:87:9E:FE:99:10:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5bHOHUU5GBlb61zZD22Hnv6ZEKI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:eb:8b:49:42:33:84:4a:94:ab:e0:63:99:68:ea:b7:74:cc: 72:73:b4:71:17:93:c8:38:9d:24:46:9e:0a:7c:78:fd:d7:98: 72:03:df:b7:4a:7e:5b:df:80:2a:b1:52:18:21:31:9e:ee:7e: 7c:04:28:62:04:a6:88:82:b0:5c:8e:69:ae:04:79:b0:cc:48: 01:6a:d2:4d:dc:57:17:39:b5:a3:01:64:c1:9b:c0:ba:67:3a: 60:ea:65:6f:1f:91:74:21:1f:2b:0b:98:c0:c7:72:03:ef:03: a0:01:4e:ac:f0:5b:79:57:29:a5:d4:1e:ea:af:fe:38:25:81: 4e:1d:2a:75:46:d8:e5:93:3f:d2:34:91:e1:c9:dd:f5:3f:ec: 9b:28:17:bc:01:99:b1:1d:8a:30:31:15:6b:7a:fb:ca:2e:cd: 21:d6:02:dd:6f:7b:05:7c:c2:f9:da:fa:ba:70:1f:c0:ae:ac: 1b:dd:c8:4e:ec:06:87:0c:a1:bb:c4:5c:ec:30:36:46:50:f0: dd:37:68:35:26:eb:a5:d8:a1:66:e2:67:4b:99:d7:e1:07:17: fe:19:2f:38:22:62:fd:aa:91:c8:02:15:a8:14:50:b4:cc:da: f4:b0:6f:1e:57:85:25:1d:80:78:cc:fa:49:02:bb:5f:74:29: d8:a9:fc:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU1RTgxMTAvBgNVBAUTKEU1QjFDRTFENDUzOTE4MTk1QkVCNUNEOTBGNkQ4NzlF RkU5OTEwQTIwHhcNMjUwODIzMDI0ODA3WhcNMjUwODMwMDI0ODA3WjAYMRYwFAYD VQQDEw02OGE5MmJlNy01N2VkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzprq3ly7AwEkmjHmW9FmleWjdvKJNieqJE5dki5ozba1m3xPZOpd9xE4bbGs /D+SMR08vdDZ79+i97zygVXlOa5gGExfAKLrSkOGMNOJtl0G3PRTafeYv0JhMsvL PcNaA9EizlHDaiPn8N1WSri5gvxO0bbJ8ug6orCcZmjWw0L/64beYdXk+fXxv670 ZOkFwDpHWOR6uJRDbCqD2wk2ZkBSSjsY1pL19e8PaQggw2Gp2BlUAlC+7XspjgG7 sYCpeOi5tORMxKHyTmSMcCGItpFOaD8cHSfU8rTvV2slzsp2JwYc2P0/wtkk6725 49kJuiYqTT2VU+qaIkvem/VHYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNfHB80m fPeJQdTCKQZ81BDK0BdBMB8GA1UdIwQYMBaAFOWxzh1FORgZW+tc2Q9th57+mRCi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTVFOC9FOUUxQkYyOEEz MDUxMUVEQUMxNEVFNkNDNEY5QUUwMi81YkhPSFVVNUdCbGI2MXpaRDIySG52NlpF S0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzViSE9IVVU1R0JsYjYxelpEMjJIbnY2WkVLSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTVFOC9FOUUxQkYyOEEzMDUxMUVEQUMxNEVFNkNDNEY5QUUwMi81YkhPSFVVNUdC bGI2MXpaRDIySG52NlpFS0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAa64tJQjOESpSr4GOZaOq3dMxyc7RxF5PIOJ0kRp4KfHj915hyA9+3 Sn5b34AqsVIYITGe7n58BChiBKaIgrBcjmmuBHmwzEgBatJN3FcXObWjAWTBm8C6 Zzpg6mVvH5F0IR8rC5jAx3ID7wOgAU6s8Ft5Vyml1B7qr/44JYFOHSp1Rtjlkz/S NJHhyd31P+ybKBe8AZmxHYowMRVrevvKLs0h1gLdb3sFfML52vq6cB/Arqwb3chO 7AaHDKG7xFzsMDZGUPDdN2g1Juul2KFm4mdLmdfhBxf+GS84ImL9qpHIAhWoFFC0 zNr0sG8eV4UlHYB4zPpJArtfdCnYqfyi -----END CERTIFICATE-----Generated at Sat Aug 23 19:14:52 2025 by rpki-client