$ rpki-client -vvf rpki.apnic.net/member_repository/A9111F9E/006CE99C500611EC9056CD45C4F9AE02/5nV74dIYmt6NdyyclIZDEL45LXA.mft File: 5nV74dIYmt6NdyyclIZDEL45LXA.mft (raw, json) Hash identifier: LP64ikw6mf3IJbQgvM/sMOxFSSpTYn0/QiYKDRZnu/Q= Subject key identifier: 7B:4C:CD:E2:21:3E:D7:9E:0B:0D:17:E4:2C:4E:D6:18:13:92:A2:6A Authority key identifier: E6:75:7B:E1:D2:18:9A:DE:8D:77:2C:9C:94:86:43:10:BE:39:2D:70 Certificate issuer: /CN=A9111F9E/serialNumber=E6757BE1D2189ADE8D772C9C94864310BE392D70 Certificate serial: 0489 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nV74dIYmt6NdyyclIZDEL45LXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111F9E/006CE99C500611EC9056CD45C4F9AE02/5nV74dIYmt6NdyyclIZDEL45LXA.mft Manifest number: 0483 Signing time: Mon 11 Aug 2025 00:12:30 +0000 Manifest this update: Mon 11 Aug 2025 00:12:29 +0000 Manifest next update: Mon 18 Aug 2025 00:12:29 +0000 Files and hashes: 1: 5nV74dIYmt6NdyyclIZDEL45LXA.crl (hash: AlrHdV9JCGpjgFHLFfjEqO74Og30cNaIl2GGJKXyb7c=) 2: 2B70BBE889E111EEB5E86A0EC4F9AE02.roa (hash: ii2gJPxNc38H3aArS7srunxvBmsm9HkEFksE6I5LOY0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111F9E/006CE99C500611EC9056CD45C4F9AE02/5nV74dIYmt6NdyyclIZDEL45LXA.crl rsync://rpki.apnic.net/member_repository/A9111F9E/006CE99C500611EC9056CD45C4F9AE02/5nV74dIYmt6NdyyclIZDEL45LXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nV74dIYmt6NdyyclIZDEL45LXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 00:12:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1161 (0x489) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111F9E, serialNumber=E6757BE1D2189ADE8D772C9C94864310BE392D70 Validity Not Before: Aug 11 00:12:29 2025 GMT Not After : Aug 18 00:12:29 2025 GMT Subject: CN=6899356e-0b8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:5f:8e:ee:ff:0f:81:38:57:ee:18:25:95:ef: f9:18:fd:cf:af:a3:89:9f:14:f0:9f:ad:ed:23:00: 32:a7:30:72:ff:84:94:fa:65:f6:56:65:ef:6e:20: d9:b0:2c:12:3f:63:19:1f:56:e6:b9:3f:47:e4:a4: c1:d4:35:ee:ee:c9:47:44:09:f8:9e:b6:15:63:a0: cc:1d:ff:f8:6d:e7:80:8e:70:f4:0b:c0:43:6f:7b: cc:08:c4:46:7a:70:1e:f4:d8:81:99:53:58:4b:95: 67:46:b0:f3:c1:bb:85:dd:97:c4:23:da:cd:8f:45: aa:16:36:48:9c:78:46:d5:c7:c4:c2:2c:00:e2:9b: 29:0a:b2:6f:f8:2b:f0:69:95:e3:69:8b:ee:9d:92: 97:e0:a2:04:39:18:0c:b6:20:6e:d2:4b:d9:55:b2: 16:bc:8d:83:b0:44:36:16:98:94:5f:40:b5:9a:15: ca:b6:65:33:b0:58:c0:38:03:22:03:4e:ec:ed:ae: 42:f8:e3:3f:3d:8f:ca:82:53:4d:c1:47:cc:66:7a: f9:61:f9:e0:b9:90:be:a4:7e:29:f1:e1:5d:7b:9d: 85:14:1f:ce:c7:08:2e:b0:9b:1f:c5:a2:1d:85:80: a0:35:9d:c8:76:41:16:10:dd:61:b9:3e:2a:73:ad: 7d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:4C:CD:E2:21:3E:D7:9E:0B:0D:17:E4:2C:4E:D6:18:13:92:A2:6A X509v3 Authority Key Identifier: keyid:E6:75:7B:E1:D2:18:9A:DE:8D:77:2C:9C:94:86:43:10:BE:39:2D:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111F9E/006CE99C500611EC9056CD45C4F9AE02/5nV74dIYmt6NdyyclIZDEL45LXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nV74dIYmt6NdyyclIZDEL45LXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111F9E/006CE99C500611EC9056CD45C4F9AE02/5nV74dIYmt6NdyyclIZDEL45LXA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:65:68:b8:12:15:b7:97:bb:03:63:54:c8:51:45:02:10:ae: b5:73:bc:7f:c4:1a:bc:1c:0c:bf:5f:68:59:a5:66:b9:9a:fe: 64:04:7d:0f:cd:ff:16:76:c2:12:e8:9f:cd:33:ba:b3:be:7a: d1:ea:02:57:56:f5:a3:91:93:92:ae:36:ba:16:6c:6d:35:92: ef:9a:e1:e4:6b:5d:c1:2f:58:b6:bf:da:95:46:d7:34:9c:78: 34:c8:97:38:b2:f1:31:cb:b6:b9:d6:79:98:e1:a9:6b:8a:6d: 5d:00:bb:30:0a:fb:29:05:cd:65:ad:32:57:f9:3b:89:9f:f1: f7:51:7b:77:30:c7:b2:6c:93:9c:a5:11:20:31:f3:30:e2:23: 6a:63:c4:ec:bb:58:80:21:0f:dd:55:c1:49:e3:a2:3c:c1:10: 59:08:af:40:2a:75:6b:88:3d:de:f3:7e:53:fa:2b:78:c0:d8: c3:aa:4b:7c:79:52:91:f6:7e:ee:16:44:7a:9c:a4:37:56:bc: 02:52:57:c1:63:eb:1a:f7:21:78:df:8d:a0:81:b4:0b:2b:a6: f1:a4:37:fd:84:96:1d:29:6e:0f:78:c2:97:6e:d7:b9:f2:55: 16:f3:85:2c:52:de:7c:de:7d:81:de:d3:ef:66:3c:ad:81:82: 23:33:4e:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTFGOUUxMTAvBgNVBAUTKEU2NzU3QkUxRDIxODlBREU4RDc3MkM5Qzk0ODY0MzEw QkUzOTJENzAwHhcNMjUwODExMDAxMjI5WhcNMjUwODE4MDAxMjI5WjAYMRYwFAYD VQQDEw02ODk5MzU2ZS0wYjhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5V+O7v8PgThX7hglle/5GP3Pr6OJnxTwn63tIwAypzBy/4SU+mX2VmXvbiDZ sCwSP2MZH1bmuT9H5KTB1DXu7slHRAn4nrYVY6DMHf/4beeAjnD0C8BDb3vMCMRG enAe9NiBmVNYS5VnRrDzwbuF3ZfEI9rNj0WqFjZInHhG1cfEwiwA4pspCrJv+Cvw aZXjaYvunZKX4KIEORgMtiBu0kvZVbIWvI2DsEQ2FpiUX0C1mhXKtmUzsFjAOAMi A07s7a5C+OM/PY/KglNNwUfMZnr5YfnguZC+pH4p8eFde52FFB/OxwgusJsfxaId hYCgNZ3IdkEWEN1huT4qc619XwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHtMzeIh PteeCw0X5CxO1hgTkqJqMB8GA1UdIwQYMBaAFOZ1e+HSGJrejXcsnJSGQxC+OS1w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUY5RS8wMDZDRTk5QzUw MDYxMUVDOTA1NkNENDVDNEY5QUUwMi81blY3NGRJWW10Nk5keXljbElaREVMNDVM WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVuVjc0ZElZbXQ2TmR5eWNsSVpERUw0NUxYQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MUY5RS8wMDZDRTk5QzUwMDYxMUVDOTA1NkNENDVDNEY5QUUwMi81blY3NGRJWW10 Nk5keXljbElaREVMNDVMWEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIZWi4EhW3l7sDY1TIUUUCEK61c7x/xBq8HAy/X2hZpWa5mv5kBH0P zf8WdsIS6J/NM7qzvnrR6gJXVvWjkZOSrja6FmxtNZLvmuHka13BL1i2v9qVRtc0 nHg0yJc4svExy7a51nmY4alrim1dALswCvspBc1lrTJX+TuJn/H3UXt3MMeybJOc pREgMfMw4iNqY8Tsu1iAIQ/dVcFJ46I8wRBZCK9AKnVriD3e835T+it4wNjDqkt8 eVKR9n7uFkR6nKQ3VrwCUlfBY+sa9yF4342ggbQLK6bxpDf9hJYdKW4PeMKXbte5 8lUW84UsUt583n2B3tPvZjytgYIjM07D -----END CERTIFICATE-----Generated at Tue Aug 12 18:55:38 2025 by rpki-client