$ rpki-client -vvf rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.mft File: 5jLTjFoywhfG7nHVLe-fOMoWbFE.mft (raw, json) Hash identifier: +zaiE+31jyAbIGYbw1oCM2L6yX5Ne1GXLxya+yKKr0o= Subject key identifier: 24:D2:3C:0E:45:F6:9C:97:64:BC:E6:20:98:2F:87:FF:16:AA:49:50 Authority key identifier: E6:32:D3:8C:5A:32:C2:17:C6:EE:71:D5:2D:EF:9F:38:CA:16:6C:51 Certificate issuer: /CN=A911486F/serialNumber=E632D38C5A32C217C6EE71D52DEF9F38CA166C51 Certificate serial: 020B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jLTjFoywhfG7nHVLe-fOMoWbFE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.mft Manifest number: 01FB Signing time: Sat 09 Aug 2025 02:57:07 +0000 Manifest this update: Sat 09 Aug 2025 02:57:06 +0000 Manifest next update: Sat 16 Aug 2025 02:57:06 +0000 Files and hashes: 1: 5jLTjFoywhfG7nHVLe-fOMoWbFE.crl (hash: GqpBWNTTTdUIA3DEIewLlwd2OGzBZhzXCXkfgjlK0QQ=) 2: 32D8E190D0CB11EEAB1CAF34C4F9AE02.roa (hash: I6cFYaTwrscj9Do0u5LBBtA5etRJeCEnBRWA8YbVDTo=) 3: 4D554D70D0CA11EE9DCDFA83C4F9AE02.roa (hash: 6yZMYTHYRpP2MH6PChCYijNkjUxZFdtlKAJWlJtdpuc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.crl rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jLTjFoywhfG7nHVLe-fOMoWbFE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 523 (0x20b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911486F, serialNumber=E632D38C5A32C217C6EE71D52DEF9F38CA166C51 Validity Not Before: Aug 9 02:57:06 2025 GMT Not After : Aug 16 02:57:06 2025 GMT Subject: CN=6896b903-e234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1b:2b:fc:80:13:73:9b:21:cc:2c:26:f4:9c: 18:cd:b1:f7:b2:41:7c:5c:71:51:a4:9a:29:98:2d: 21:63:cc:62:39:65:86:37:e2:8f:1b:d8:06:89:95: 07:fd:d8:cf:51:e5:84:12:07:a9:01:80:f5:22:b0: 1d:13:51:d1:3b:4c:e6:1a:c1:04:a7:33:f1:3e:5d: 47:51:fd:16:f5:81:38:30:6f:c0:84:ca:1e:5d:7a: 42:23:21:1f:26:ee:0a:22:82:ea:d9:3a:fe:97:f7: ed:c6:4b:cf:d1:fe:0d:a9:f3:b3:d5:b2:c5:86:ba: 52:a3:cc:1a:eb:9e:5b:55:2f:4c:f4:ac:fa:48:a8: 8b:98:83:3d:c3:6a:51:13:65:17:fe:ad:ec:7c:0e: 0b:40:66:d3:4a:89:06:bc:a6:52:5d:d1:ae:8f:06: 25:67:b4:cc:10:a8:81:6e:28:07:e9:5f:6d:f0:95: e6:33:ed:c4:57:58:eb:9a:01:2a:a5:44:83:82:84: 38:0e:11:c3:c0:ff:36:5d:41:2e:48:d0:2e:0e:f4: 24:cc:6a:60:cd:94:d4:12:b3:28:9d:08:26:4f:a4: 23:d4:af:b5:9a:93:72:b1:0d:f7:28:57:f7:4f:79: f2:cb:4f:60:f6:5e:5e:60:ee:e6:e2:45:18:30:79: f0:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:D2:3C:0E:45:F6:9C:97:64:BC:E6:20:98:2F:87:FF:16:AA:49:50 X509v3 Authority Key Identifier: keyid:E6:32:D3:8C:5A:32:C2:17:C6:EE:71:D5:2D:EF:9F:38:CA:16:6C:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jLTjFoywhfG7nHVLe-fOMoWbFE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:38:48:b2:08:62:7c:ce:7f:7b:7a:79:67:b1:22:ab:48:59: e2:b3:cb:6f:64:1e:22:d8:44:2a:26:d0:fb:2d:4d:e2:5a:b3: e9:e1:db:ce:2b:c8:27:76:de:59:17:9e:4b:94:b0:7d:fe:dc: b1:b0:36:02:ce:66:a0:73:08:0f:ac:97:1f:1c:f0:58:3b:79: e0:1c:48:30:f6:59:2f:53:7b:78:55:95:80:6f:9a:4e:7c:b9: ce:cb:f2:c8:df:75:5b:f9:e3:7d:c8:d1:a2:1e:07:13:c1:0c: 44:5d:62:cd:c8:bf:e7:23:fb:d1:42:52:ee:f5:00:c7:1d:58: de:f3:5a:b0:95:56:f8:1d:28:6d:a4:9f:d6:40:24:94:04:d2: f6:b6:89:eb:b2:d3:11:5f:0f:59:3b:29:de:24:36:f7:de:fa: 5d:e0:0e:c3:a1:bd:16:3a:98:64:ca:6d:f7:ec:5c:55:5f:b8: f2:16:e2:a2:c2:cc:cc:64:c9:67:f0:06:27:31:f2:3e:4f:bc: b4:e4:08:a5:83:8d:ac:54:1b:da:2e:8f:e8:04:21:1a:1f:e9: 40:86:d2:1d:14:39:17:a4:79:74:ba:ee:70:cb:61:9f:da:f4: 04:73:ef:f0:89:79:3f:fc:a8:e6:1a:08:71:62:5f:67:35:09: 18:c0:08:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ4NkYxMTAvBgNVBAUTKEU2MzJEMzhDNUEzMkMyMTdDNkVFNzFENTJERUY5RjM4 Q0ExNjZDNTEwHhcNMjUwODA5MDI1NzA2WhcNMjUwODE2MDI1NzA2WjAYMRYwFAYD VQQDEw02ODk2YjkwMy1lMjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtxsr/IATc5shzCwm9JwYzbH3skF8XHFRpJopmC0hY8xiOWWGN+KPG9gGiZUH /djPUeWEEgepAYD1IrAdE1HRO0zmGsEEpzPxPl1HUf0W9YE4MG/AhMoeXXpCIyEf Ju4KIoLq2Tr+l/ftxkvP0f4NqfOz1bLFhrpSo8wa655bVS9M9Kz6SKiLmIM9w2pR E2UX/q3sfA4LQGbTSokGvKZSXdGujwYlZ7TMEKiBbigH6V9t8JXmM+3EV1jrmgEq pUSDgoQ4DhHDwP82XUEuSNAuDvQkzGpgzZTUErMonQgmT6Qj1K+1mpNysQ33KFf3 T3nyy09g9l5eYO7m4kUYMHnwbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCTSPA5F 9pyXZLzmIJgvh/8WqklQMB8GA1UdIwQYMBaAFOYy04xaMsIXxu5x1S3vnzjKFmxR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDg2Ri8yMkNGMzQ0ODg2 NkMxMUVEQUZBNUE0NzFDNEY5QUUwMi81akxUakZveXdoZkc3bkhWTGUtZk9Nb1di RkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVqTFRqRm95d2hmRzduSFZMZS1mT01vV2JGRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDg2Ri8yMkNGMzQ0ODg2NkMxMUVEQUZBNUE0NzFDNEY5QUUwMi81akxUakZveXdo Zkc3bkhWTGUtZk9Nb1diRkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzOEiyCGJ8zn97enlnsSKrSFnis8tvZB4i2EQqJtD7LU3iWrPp4dvO K8gndt5ZF55LlLB9/tyxsDYCzmagcwgPrJcfHPBYO3ngHEgw9lkvU3t4VZWAb5pO fLnOy/LI33Vb+eN9yNGiHgcTwQxEXWLNyL/nI/vRQlLu9QDHHVje81qwlVb4HSht pJ/WQCSUBNL2tonrstMRXw9ZOyneJDb33vpd4A7Dob0WOphkym337FxVX7jyFuKi wszMZMln8AYnMfI+T7y05Ailg42sVBvaLo/oBCEaH+lAhtIdFDkXpHl0uu5wy2Gf 2vQEc+/wiXk//KjmGghxYl9nNQkYwAiv -----END CERTIFICATE-----Generated at Sun Aug 10 16:05:00 2025 by rpki-client