$ rpki-client -vvf rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.mft File: 5DyCH7uc7qZ-unouUFzF3X92YFU.mft (raw, json) Hash identifier: LcH/QWoA9RDhv6LJVPh/Ad6jUoxeAINziSJ6lT/SiuU= Subject key identifier: 04:54:ED:9E:1B:D6:8A:5E:42:2F:D8:A0:DE:F7:47:04:DF:4A:78:AE Authority key identifier: E4:3C:82:1F:BB:9C:EE:A6:7E:BA:7A:2E:50:5C:C5:DD:7F:76:60:55 Certificate issuer: /CN=A9114D2E/serialNumber=E43C821FBB9CEEA67EBA7A2E505CC5DD7F766055 Certificate serial: 0AFB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DyCH7uc7qZ-unouUFzF3X92YFU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.mft Manifest number: 0AE9 Signing time: Sun 10 Aug 2025 19:25:25 +0000 Manifest this update: Sun 10 Aug 2025 19:25:24 +0000 Manifest next update: Sun 17 Aug 2025 19:25:24 +0000 Files and hashes: 1: 5DyCH7uc7qZ-unouUFzF3X92YFU.crl (hash: mdByoocr4mTecdRirdo5mWShU1zFzFsD15hXisfkbyk=) 2: 8ABED0585F0911ECA629B815C4F9AE02.roa (hash: lHB3EjiVIRGj7eZK04nTZOWleSjetiCEVc7tdPvMiiA=) 3: 823433125F0C11EC8C2C2820C4F9AE02.roa (hash: iND3Lx5ArlZCn+bmlp3Mm/3K9nvCqz4EFEYZ5pfFFhc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.crl rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DyCH7uc7qZ-unouUFzF3X92YFU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2811 (0xafb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114D2E, serialNumber=E43C821FBB9CEEA67EBA7A2E505CC5DD7F766055 Validity Not Before: Aug 10 19:25:24 2025 GMT Not After : Aug 17 19:25:24 2025 GMT Subject: CN=6898f224-d908 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f3:ae:36:ad:29:61:74:2b:b9:7e:d2:ab:b9: 86:d0:21:a8:26:cd:c3:5c:16:59:63:5a:c0:d0:f2: 13:b7:1e:fd:ca:0a:44:be:18:eb:58:ae:7d:be:78: 95:20:49:06:bd:b5:ce:17:df:87:b2:d0:30:1a:d7: be:c0:76:2d:36:a3:7a:fb:20:dc:d4:91:2c:b6:69: 02:e8:33:47:f4:cb:b6:55:5a:cf:64:4d:a7:8c:89: 06:9a:6c:58:5c:40:65:b3:68:28:0a:72:c3:70:ca: d5:fa:5c:ee:25:b2:ad:20:cf:7c:62:f6:a8:01:92: 05:f6:a4:0f:0f:7e:c2:9c:09:3c:6d:08:88:75:64: a7:c8:b8:cc:3d:4e:82:45:c3:16:b9:ff:73:79:15: ee:10:8c:f0:e3:6f:fe:96:0f:2b:28:fc:ba:12:8c: f1:45:82:f1:15:d1:fe:5f:25:87:d7:64:64:f9:95: e1:c9:f1:63:5d:9d:ca:88:7e:8b:1c:57:46:11:f6: f7:69:ee:00:18:1e:83:0e:ba:f0:7d:1c:b7:72:63: f1:8f:fa:54:9e:97:6a:18:02:47:33:ef:71:fd:dd: 32:52:2b:b1:8b:aa:fb:2b:1d:7e:db:64:52:5c:23: 2e:62:a7:df:87:f8:e7:3b:a1:dd:23:cb:51:d9:d8: 58:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:54:ED:9E:1B:D6:8A:5E:42:2F:D8:A0:DE:F7:47:04:DF:4A:78:AE X509v3 Authority Key Identifier: keyid:E4:3C:82:1F:BB:9C:EE:A6:7E:BA:7A:2E:50:5C:C5:DD:7F:76:60:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DyCH7uc7qZ-unouUFzF3X92YFU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:a9:0a:db:19:d8:d1:9d:82:e8:78:c9:e8:b7:65:cc:50:e6: 39:17:b8:64:90:85:06:71:c7:33:bb:ea:88:ac:4e:32:34:7a: 76:7c:ad:99:dc:bd:4d:b5:41:a7:09:93:97:89:cb:f8:7e:9e: 0d:2f:64:75:b5:65:b2:39:8e:dd:85:79:ad:90:73:39:20:a4: 31:65:9e:c7:3e:78:ab:23:24:9d:19:3e:63:20:b9:bc:f0:83: fc:1a:17:0b:19:41:87:8c:ad:0c:62:ad:da:44:01:e1:a9:81: 45:ed:5a:dd:89:4e:ad:cb:e8:81:2e:60:2b:e7:8c:29:34:a7: 9d:7d:09:1f:32:03:51:22:a0:b9:02:f7:b4:29:db:c6:bf:56: 20:b0:dc:33:ad:43:15:26:39:4f:d1:b8:fb:91:21:5a:53:4a: 7f:6d:96:5f:27:b6:af:06:26:d3:5d:13:8e:a8:0d:42:b1:ad: 4b:b5:a1:8e:ca:78:a2:aa:44:bd:a0:78:cb:30:28:96:08:5d: bf:96:ab:c1:15:1e:ef:57:d9:35:51:40:22:14:ec:28:6b:79: 47:d4:a1:ca:51:1b:76:b6:58:97:c4:07:eb:9d:31:34:a7:2f: ce:90:4a:c5:57:d4:9e:d6:cf:91:cf:07:8f:1c:8b:7b:cd:10: 3d:28:02:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCvswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTREMkUxMTAvBgNVBAUTKEU0M0M4MjFGQkI5Q0VFQTY3RUJBN0EyRTUwNUNDNURE N0Y3NjYwNTUwHhcNMjUwODEwMTkyNTI0WhcNMjUwODE3MTkyNTI0WjAYMRYwFAYD VQQDEw02ODk4ZjIyNC1kOTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvfOuNq0pYXQruX7Sq7mG0CGoJs3DXBZZY1rA0PITtx79ygpEvhjrWK59vniV IEkGvbXOF9+HstAwGte+wHYtNqN6+yDc1JEstmkC6DNH9Mu2VVrPZE2njIkGmmxY XEBls2goCnLDcMrV+lzuJbKtIM98YvaoAZIF9qQPD37CnAk8bQiIdWSnyLjMPU6C RcMWuf9zeRXuEIzw42/+lg8rKPy6EozxRYLxFdH+XyWH12Rk+ZXhyfFjXZ3KiH6L HFdGEfb3ae4AGB6DDrrwfRy3cmPxj/pUnpdqGAJHM+9x/d0yUiuxi6r7Kx1+22RS XCMuYqffh/jnO6HdI8tR2dhYYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFARU7Z4b 1opeQi/YoN73RwTfSniuMB8GA1UdIwQYMBaAFOQ8gh+7nO6mfrp6LlBcxd1/dmBV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNEQyRS8wRkUxOUM2QzUx MUUxMUVBQjgxODI1ODBDNEY5QUUwMi81RHlDSDd1YzdxWi11bm91VUZ6RjNYOTJZ RlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVEeUNIN3VjN3FaLXVub3VVRnpGM1g5MllGVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NEQyRS8wRkUxOUM2QzUxMUUxMUVBQjgxODI1ODBDNEY5QUUwMi81RHlDSDd1Yzdx Wi11bm91VUZ6RjNYOTJZRlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6qQrbGdjRnYLoeMnot2XMUOY5F7hkkIUGccczu+qIrE4yNHp2fK2Z 3L1NtUGnCZOXicv4fp4NL2R1tWWyOY7dhXmtkHM5IKQxZZ7HPnirIySdGT5jILm8 8IP8GhcLGUGHjK0MYq3aRAHhqYFF7VrdiU6ty+iBLmAr54wpNKedfQkfMgNRIqC5 Ave0KdvGv1YgsNwzrUMVJjlP0bj7kSFaU0p/bZZfJ7avBibTXROOqA1Csa1LtaGO yniiqkS9oHjLMCiWCF2/lqvBFR7vV9k1UUAiFOwoa3lH1KHKURt2tliXxAfrnTE0 py/OkErFV9Se1s+RzwePHIt7zRA9KAJu -----END CERTIFICATE-----Generated at Mon Aug 11 04:27:31 2025 by rpki-client