$ rpki-client -vvf rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/5vCBnFn9xkHkW8wzy1DzzYVKwvU.mft File: 5vCBnFn9xkHkW8wzy1DzzYVKwvU.mft (raw, json) Hash identifier: G9o830W2IGbIRb+YFjN/G77Is7Qo5F3yMQM6XnAf9NY= Subject key identifier: E1:D6:DC:FB:60:63:57:AD:85:D6:E1:61:71:78:64:F0:9F:23:EC:89 Authority key identifier: E6:F0:81:9C:59:FD:C6:41:E4:5B:CC:33:CB:50:F3:CD:85:4A:C2:F5 Certificate issuer: /CN=A9119363/serialNumber=E6F0819C59FDC641E45BCC33CB50F3CD854AC2F5 Certificate serial: 0476 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vCBnFn9xkHkW8wzy1DzzYVKwvU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/5vCBnFn9xkHkW8wzy1DzzYVKwvU.mft Manifest number: 0653 Signing time: Wed 13 Aug 2025 00:40:45 +0000 Manifest this update: Wed 13 Aug 2025 00:40:44 +0000 Manifest next update: Wed 20 Aug 2025 00:40:44 +0000 Files and hashes: 1: 5vCBnFn9xkHkW8wzy1DzzYVKwvU.crl (hash: D4zkdPkEKrcT1RlgXxajS54lbSN5bwtUwMHbrGVVFjI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/5vCBnFn9xkHkW8wzy1DzzYVKwvU.crl rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/5vCBnFn9xkHkW8wzy1DzzYVKwvU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vCBnFn9xkHkW8wzy1DzzYVKwvU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 Aug 2025 00:40:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1142 (0x476) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119363, serialNumber=E6F0819C59FDC641E45BCC33CB50F3CD854AC2F5 Validity Not Before: Aug 13 00:40:44 2025 GMT Not After : Aug 20 00:40:44 2025 GMT Subject: CN=689bdf0d-9fa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:56:fb:f1:96:21:a5:93:3d:ac:90:15:cb:43: d5:9c:45:7c:41:5c:78:db:61:7c:87:92:dc:d0:b6: 0f:19:2e:d6:20:d6:2b:98:b4:c1:66:08:84:8a:83: 86:ff:f0:49:cf:48:65:e2:38:16:b5:5f:01:3b:a2: 1d:d0:64:18:b6:de:11:35:b9:e5:68:af:0c:6b:b7: a6:fc:e1:27:ca:14:7a:7f:4e:ce:e8:1a:16:57:9a: ca:a3:43:c3:e6:14:b7:a1:59:7c:a6:18:c1:1f:f8: 4f:ff:a7:4c:ca:34:00:7c:de:bd:95:6f:69:bf:4b: 15:82:66:91:08:48:04:b8:a4:55:ce:ec:f2:e5:a9: d4:f0:89:77:84:70:f5:8c:3d:97:1a:95:fe:0c:eb: a3:3f:07:a7:a8:07:45:77:18:cc:7f:a1:b4:d5:41: 6c:dd:ac:77:76:6f:90:e7:8a:4b:51:8e:4e:77:f6: 27:30:ed:db:d3:36:0c:c7:b8:57:ba:94:29:45:3f: 59:5b:23:e2:91:bf:95:81:ee:1e:47:a9:89:f6:96: 9a:e6:e3:75:cf:84:05:be:db:15:dc:bf:4c:da:6a: bb:ed:56:ce:9c:bf:3c:73:e8:7a:e9:1f:24:7d:5f: 58:0a:f6:5d:ea:10:47:39:f7:87:2e:1e:63:96:05: fd:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:D6:DC:FB:60:63:57:AD:85:D6:E1:61:71:78:64:F0:9F:23:EC:89 X509v3 Authority Key Identifier: keyid:E6:F0:81:9C:59:FD:C6:41:E4:5B:CC:33:CB:50:F3:CD:85:4A:C2:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/5vCBnFn9xkHkW8wzy1DzzYVKwvU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vCBnFn9xkHkW8wzy1DzzYVKwvU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/5vCBnFn9xkHkW8wzy1DzzYVKwvU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:e0:27:f3:f1:d8:38:8c:38:9d:26:9c:8d:b7:75:b5:9b:5c: 0f:4a:38:70:47:f2:48:21:7b:74:e2:e0:2d:c7:77:2f:33:fc: 3f:41:84:f8:a8:e8:56:ad:a5:4f:06:3a:fd:79:75:c6:14:78: 56:9f:80:86:74:19:cf:42:39:6c:85:39:8d:6f:32:ff:e0:0b: a6:89:57:d4:da:5f:11:fd:53:0f:64:75:d0:d2:fd:d5:6b:37: a1:56:1b:44:c8:83:35:98:49:2d:9c:f3:5a:c0:e7:99:92:82: 65:b7:b6:7b:55:62:b4:82:70:a8:3a:c6:3a:19:59:ed:40:9e: 28:04:6f:ec:9c:bc:dc:95:c4:9d:3e:8a:71:ef:79:75:60:55: 50:61:e0:ec:db:21:ba:05:68:ee:04:6e:5f:b8:cb:e4:8d:8e: e8:6c:14:db:1c:ee:63:29:e3:61:57:2c:e7:34:e5:16:e3:33: 04:83:93:12:58:77:93:52:e7:9d:11:b2:23:61:96:85:6d:9f: 4d:ce:19:13:8c:f7:a0:3d:91:5d:d6:03:25:d9:38:c9:be:bd: f6:87:e2:b9:3e:42:8e:eb:75:1c:ed:91:8e:ed:72:10:1e:2f: 88:c0:44:a5:d9:3d:f3:04:f7:bc:c8:e7:ae:e1:f0:1e:90:a9: 5d:f0:c6:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkzNjMxMTAvBgNVBAUTKEU2RjA4MTlDNTlGREM2NDFFNDVCQ0MzM0NCNTBGM0NE ODU0QUMyRjUwHhcNMjUwODEzMDA0MDQ0WhcNMjUwODIwMDA0MDQ0WjAYMRYwFAYD VQQDEw02ODliZGYwZC05ZmEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApFb78ZYhpZM9rJAVy0PVnEV8QVx422F8h5Lc0LYPGS7WINYrmLTBZgiEioOG //BJz0hl4jgWtV8BO6Id0GQYtt4RNbnlaK8Ma7em/OEnyhR6f07O6BoWV5rKo0PD 5hS3oVl8phjBH/hP/6dMyjQAfN69lW9pv0sVgmaRCEgEuKRVzuzy5anU8Il3hHD1 jD2XGpX+DOujPwenqAdFdxjMf6G01UFs3ax3dm+Q54pLUY5Od/YnMO3b0zYMx7hX upQpRT9ZWyPikb+Vge4eR6mJ9paa5uN1z4QFvtsV3L9M2mq77VbOnL88c+h66R8k fV9YCvZd6hBHOfeHLh5jlgX97QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOHW3Ptg Y1ethdbhYXF4ZPCfI+yJMB8GA1UdIwQYMBaAFObwgZxZ/cZB5FvMM8tQ882FSsL1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTM2My8zMUVBREZBNDVD QkExMUVDOEFBMTNFMjRDNEY5QUUwMi81dkNCbkZuOXhrSGtXOHd6eTFEenpZVkt3 dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV2Q0JuRm45eGtIa1c4d3p5MUR6ellWS3d2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTM2My8zMUVBREZBNDVDQkExMUVDOEFBMTNFMjRDNEY5QUUwMi81dkNCbkZuOXhr SGtXOHd6eTFEenpZVkt3dlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAc4Cfz8dg4jDidJpyNt3W1m1wPSjhwR/JIIXt04uAtx3cvM/w/QYT4 qOhWraVPBjr9eXXGFHhWn4CGdBnPQjlshTmNbzL/4AumiVfU2l8R/VMPZHXQ0v3V azehVhtEyIM1mEktnPNawOeZkoJlt7Z7VWK0gnCoOsY6GVntQJ4oBG/snLzclcSd Popx73l1YFVQYeDs2yG6BWjuBG5fuMvkjY7obBTbHO5jKeNhVyznNOUW4zMEg5MS WHeTUuedEbIjYZaFbZ9NzhkTjPegPZFd1gMl2TjJvr32h+K5PkKO63Uc7ZGO7XIQ Hi+IwESl2T3zBPe8yOeu4fAekKld8MZp -----END CERTIFICATE-----Generated at Wed Aug 13 04:28:12 2025 by rpki-client