$ rpki-client -vvf rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft File: keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft (raw, json) Hash identifier: SimrW37YzCK7u5DgstRODoAUjUHad1F8Av8dgsZyIMI= Subject key identifier: EA:08:1B:15:41:ED:57:B2:2B:50:36:D6:1C:14:18:B9:9A:F0:AF:CA Authority key identifier: 91:E6:79:72:1E:D1:E0:92:7E:BB:7E:46:1C:80:58:0D:23:93:59:2A Certificate issuer: /CN=A911ACAC/serialNumber=91E679721ED1E0927EBB7E461C80580D2393592A Certificate serial: 04E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZ5ch7R4JJ-u35GHIBYDSOTWSo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft Manifest number: 04D5 Signing time: Sat 09 Aug 2025 00:19:05 +0000 Manifest this update: Sat 09 Aug 2025 00:19:05 +0000 Manifest next update: Sat 16 Aug 2025 00:19:05 +0000 Files and hashes: 1: keZ5ch7R4JJ-u35GHIBYDSOTWSo.crl (hash: ub2p63A7nlxeOiTL58jgZ6PXMRCatRnvUEkUrHQ84Uc=) 2: C52B4E0A3FE011EF88794913C4F9AE02.roa (hash: BHc0YO4uerOV3pChxVjG7O544zd2LrVw+gOJhxCdrB0=) 3: 1295B5943FA611EF94664041C4F9AE02.roa (hash: FuWrvkmDIg3mxhyAWWbi/ukBRQacmBTwsE71FX0nX8M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.crl rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZ5ch7R4JJ-u35GHIBYDSOTWSo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1249 (0x4e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911ACAC, serialNumber=91E679721ED1E0927EBB7E461C80580D2393592A Validity Not Before: Aug 9 00:19:05 2025 GMT Not After : Aug 16 00:19:05 2025 GMT Subject: CN=689693f9-e470 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a2:9d:d0:71:68:ec:be:82:1c:21:5a:e5:e8: 4f:45:37:63:20:a1:fb:13:b1:ff:15:c6:ea:18:ab: cf:f7:ef:f2:39:ab:d6:b6:1b:64:32:9a:8b:1b:79: 9c:22:d9:a5:50:54:0c:f9:cb:80:ee:c6:90:5a:69: 1e:02:06:7c:08:08:de:43:8b:6e:89:62:43:9c:ef: d1:3e:ff:80:00:bd:56:f7:a0:5c:98:08:ff:7b:e9: cf:d3:2e:ff:0c:b9:b9:d2:58:2d:66:5c:44:ef:96: f5:63:3d:36:c7:1f:4e:d0:ac:93:6d:20:9e:af:2e: f5:e6:80:b6:57:be:7c:e7:05:31:94:74:a2:76:6e: 1d:78:ba:c7:66:99:fd:e5:78:a4:51:65:45:65:bc: 25:50:fa:5b:54:f9:16:d7:5f:a3:7d:a8:cd:bc:dd: 54:6e:5f:89:70:1f:55:32:e2:9a:ab:eb:76:ad:84: 32:3e:5a:d5:be:11:a6:df:c1:ba:18:9c:7a:66:54: de:c6:af:7a:ad:74:c4:d4:f9:01:dd:d0:6b:46:72: d5:d9:67:5a:90:4e:a0:1e:c5:b7:8a:f6:8e:3e:2c: 7f:49:19:2e:9f:0f:f2:71:ad:77:8f:3c:6a:75:84: 6d:64:d6:f6:95:28:12:00:40:9e:f8:9c:c4:c2:6b: 2a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:08:1B:15:41:ED:57:B2:2B:50:36:D6:1C:14:18:B9:9A:F0:AF:CA X509v3 Authority Key Identifier: keyid:91:E6:79:72:1E:D1:E0:92:7E:BB:7E:46:1C:80:58:0D:23:93:59:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZ5ch7R4JJ-u35GHIBYDSOTWSo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:23:e6:07:83:15:f7:7d:d9:71:23:ae:78:ee:69:49:8c:56: e0:c1:4c:10:80:08:87:7e:2c:a3:11:4c:4f:59:c8:a7:25:19: 10:d7:bd:4f:6d:87:c1:3e:26:87:18:37:18:12:f1:74:ce:77: 19:7e:b5:5a:4e:18:c1:16:5e:f1:27:42:34:73:ef:10:2d:5c: 49:7b:41:b9:5f:0b:e5:2c:bc:c2:21:73:bf:39:b4:d0:b4:e5: 76:7d:26:c0:60:2d:3c:86:4e:90:74:5b:6d:c9:1f:77:06:9f: 5c:04:73:d4:30:ba:70:39:40:35:ef:8e:2e:07:0b:a1:c6:9f: cd:77:76:97:81:98:41:33:7b:21:76:5c:83:08:de:f0:8c:0f: 12:84:0d:9a:49:e7:43:58:b7:0f:44:da:36:06:96:4d:e9:8d: 8b:8c:f5:f9:a6:1c:1b:8c:34:05:5c:fe:3b:83:cb:ce:98:9f: 9c:76:24:76:5d:b2:0b:95:13:32:21:7d:2a:df:fe:bd:3f:21: 59:8f:b0:4e:52:b1:15:0a:11:7b:17:b7:3f:45:8d:12:12:2b: f1:23:7a:d5:1b:b6:35:d6:01:ae:b3:09:13:55:f8:53:6e:c6: 2a:f1:f2:8c:fc:89:d3:a7:d0:0a:f9:6f:41:df:e7:97:75:35: 85:d0:7f:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFDQUMxMTAvBgNVBAUTKDkxRTY3OTcyMUVEMUUwOTI3RUJCN0U0NjFDODA1ODBE MjM5MzU5MkEwHhcNMjUwODA5MDAxOTA1WhcNMjUwODE2MDAxOTA1WjAYMRYwFAYD VQQDEw02ODk2OTNmOS1lNDcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvaKd0HFo7L6CHCFa5ehPRTdjIKH7E7H/FcbqGKvP9+/yOavWthtkMpqLG3mc ItmlUFQM+cuA7saQWmkeAgZ8CAjeQ4tuiWJDnO/RPv+AAL1W96BcmAj/e+nP0y7/ DLm50lgtZlxE75b1Yz02xx9O0KyTbSCery715oC2V7585wUxlHSidm4deLrHZpn9 5XikUWVFZbwlUPpbVPkW11+jfajNvN1Ubl+JcB9VMuKaq+t2rYQyPlrVvhGm38G6 GJx6ZlTexq96rXTE1PkB3dBrRnLV2WdakE6gHsW3ivaOPix/SRkunw/yca13jzxq dYRtZNb2lSgSAECe+JzEwmsqUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOoIGxVB 7VeyK1A21hwUGLma8K/KMB8GA1UdIwQYMBaAFJHmeXIe0eCSfrt+RhyAWA0jk1kq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUNBQy9CM0JEQTU2NDMx RDMxMUVDOEQzQkJGMzBDNEY5QUUwMi9rZVo1Y2g3UjRKSi11MzVHSElCWURTT1RX U28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tlWjVjaDdSNEpKLXUzNUdISUJZRFNPVFdTby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUNBQy9CM0JEQTU2NDMxRDMxMUVDOEQzQkJGMzBDNEY5QUUwMi9rZVo1Y2g3UjRK Si11MzVHSElCWURTT1RXU28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgI+YHgxX3fdlxI6547mlJjFbgwUwQgAiHfiyjEUxPWcinJRkQ171P bYfBPiaHGDcYEvF0zncZfrVaThjBFl7xJ0I0c+8QLVxJe0G5XwvlLLzCIXO/ObTQ tOV2fSbAYC08hk6QdFttyR93Bp9cBHPUMLpwOUA1744uBwuhxp/Nd3aXgZhBM3sh dlyDCN7wjA8ShA2aSedDWLcPRNo2BpZN6Y2LjPX5phwbjDQFXP47g8vOmJ+cdiR2 XbILlRMyIX0q3/69PyFZj7BOUrEVChF7F7c/RY0SEivxI3rVG7Y11gGuswkTVfhT bsYq8fKM/InTp9AK+W9B3+eXdTWF0H+X -----END CERTIFICATE-----Generated at Sun Aug 10 18:15:40 2025 by rpki-client