$ rpki-client -vvf rpki.apnic.net/member_repository/A912809D/01FAC98A84F911EEA75C2F39C4F9AE02/5HXUQnchUazw-uprObkBK9Ij05M.mft File: 5HXUQnchUazw-uprObkBK9Ij05M.mft (raw, json) Hash identifier: FBx1x47qqg44WNN0d5APCaF1TcpVoDmbTbkBuOGwOWE= Subject key identifier: A9:3B:F0:BC:36:26:3F:31:C2:DD:10:E3:6D:D9:24:E1:86:B8:5C:74 Authority key identifier: E4:75:D4:42:77:21:51:AC:F0:FA:EA:6B:39:B9:01:2B:D2:23:D3:93 Certificate issuer: /CN=A912809D/serialNumber=E475D442772151ACF0FAEA6B39B9012BD223D393 Certificate serial: 0147 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5HXUQnchUazw-uprObkBK9Ij05M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912809D/01FAC98A84F911EEA75C2F39C4F9AE02/5HXUQnchUazw-uprObkBK9Ij05M.mft Manifest number: 0144 Signing time: Sat 09 Aug 2025 04:42:36 +0000 Manifest this update: Sat 09 Aug 2025 04:42:35 +0000 Manifest next update: Sat 16 Aug 2025 04:42:35 +0000 Files and hashes: 1: 5HXUQnchUazw-uprObkBK9Ij05M.crl (hash: FPNAm9212MZxv2g937QFNZJZroYrTu1zRZb2iyH4KiY=) 2: 2BBE96C284FC11EEAA5EAA5DC4F9AE02.roa (hash: KgQSXjT0/AcvVs+PHWWF/UPrCiIk9MVvntWwSCiQouc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912809D/01FAC98A84F911EEA75C2F39C4F9AE02/5HXUQnchUazw-uprObkBK9Ij05M.crl rsync://rpki.apnic.net/member_repository/A912809D/01FAC98A84F911EEA75C2F39C4F9AE02/5HXUQnchUazw-uprObkBK9Ij05M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5HXUQnchUazw-uprObkBK9Ij05M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 327 (0x147) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912809D, serialNumber=E475D442772151ACF0FAEA6B39B9012BD223D393 Validity Not Before: Aug 9 04:42:35 2025 GMT Not After : Aug 16 04:42:35 2025 GMT Subject: CN=6896d1bc-e27c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:12:9b:88:34:63:0d:ff:73:ec:8d:96:17:b2: d0:7c:18:a9:b3:c4:70:52:69:49:79:5c:32:1e:47: e6:fe:83:58:b5:70:2d:b9:8d:60:55:aa:dd:17:d5: 50:fc:fd:d8:08:91:c0:f1:ad:b9:7e:56:e4:52:f0: e1:91:50:e5:fc:b2:e5:f8:0e:5b:f4:65:c4:51:7e: 51:9f:fc:43:eb:4e:81:eb:26:99:b8:4a:3a:7b:6b: f4:bd:31:47:f8:a4:b4:4a:51:6e:99:ea:a0:21:b1: 26:91:78:05:ad:a1:d3:b9:6d:e7:43:b2:31:ca:8a: 85:4c:ec:27:f9:c9:43:11:28:e0:91:0e:bd:f0:7f: c2:15:e3:1d:7d:c1:3a:ee:50:11:57:b1:2c:0a:13: 26:32:ff:9a:c3:12:68:72:2d:58:01:b5:7f:d4:0a: 1f:00:03:16:47:e5:d5:cd:cf:ac:23:53:ba:fd:90: 07:8e:b7:49:9b:0e:c5:f4:34:19:34:f4:42:47:9d: 89:0f:58:1d:c9:1f:30:e3:a2:f2:08:9e:ad:65:51: 04:b1:b2:58:9c:0e:59:b7:26:f9:99:34:bf:2f:6c: 69:81:5d:98:9a:4c:fa:7a:fb:49:3f:6c:87:10:f2: 28:05:c4:08:4a:6a:f4:41:60:56:41:ab:ac:94:97: 3f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:3B:F0:BC:36:26:3F:31:C2:DD:10:E3:6D:D9:24:E1:86:B8:5C:74 X509v3 Authority Key Identifier: keyid:E4:75:D4:42:77:21:51:AC:F0:FA:EA:6B:39:B9:01:2B:D2:23:D3:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912809D/01FAC98A84F911EEA75C2F39C4F9AE02/5HXUQnchUazw-uprObkBK9Ij05M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5HXUQnchUazw-uprObkBK9Ij05M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912809D/01FAC98A84F911EEA75C2F39C4F9AE02/5HXUQnchUazw-uprObkBK9Ij05M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:1a:46:a2:00:de:ea:87:62:db:66:61:23:6f:d7:ef:05:a4: df:9a:a2:ea:d6:9b:79:41:4e:38:05:e9:d4:d2:46:a8:4e:be: 05:ef:5c:40:23:eb:ac:dd:fd:c6:c7:40:90:b1:be:b2:68:bc: 3f:12:6c:66:53:f4:49:0f:3c:e2:d7:df:8e:93:3d:69:3a:9e: cd:2f:35:83:36:2e:b3:c5:26:e9:94:a7:7d:6b:99:3e:d3:b4: 25:f5:45:d0:52:9b:40:54:be:dd:f4:2e:7a:c5:94:80:3b:1c: fd:7e:aa:e2:74:39:29:e7:47:6e:f4:54:be:95:39:fc:ff:2d: 51:e9:8d:ca:04:1c:fd:ce:1f:eb:01:ba:1f:b8:72:7f:f8:a3: 37:e5:d7:ac:39:d3:aa:2b:78:1e:40:6f:3b:d4:82:5c:d9:2d: c3:48:ff:f4:5e:ec:bb:10:34:97:6a:12:8f:3d:df:97:f5:38: dc:21:c8:67:b7:24:8e:a4:6b:e8:3c:98:88:b3:fd:8e:65:71: 2f:f2:67:57:dd:cd:40:31:c6:27:40:c5:12:77:1f:cd:6d:2a: a7:52:e9:66:f0:37:f0:88:7b:86:46:3c:ca:98:e1:f2:c4:be: 55:a9:0e:e5:0c:1f:8a:d5:dd:6e:65:76:7a:c0:0d:95:59:9d: 49:af:8f:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjgwOUQxMTAvBgNVBAUTKEU0NzVENDQyNzcyMTUxQUNGMEZBRUE2QjM5QjkwMTJC RDIyM0QzOTMwHhcNMjUwODA5MDQ0MjM1WhcNMjUwODE2MDQ0MjM1WjAYMRYwFAYD VQQDEw02ODk2ZDFiYy1lMjdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4xKbiDRjDf9z7I2WF7LQfBips8RwUmlJeVwyHkfm/oNYtXAtuY1gVardF9VQ /P3YCJHA8a25flbkUvDhkVDl/LLl+A5b9GXEUX5Rn/xD606B6yaZuEo6e2v0vTFH +KS0SlFumeqgIbEmkXgFraHTuW3nQ7IxyoqFTOwn+clDESjgkQ698H/CFeMdfcE6 7lARV7EsChMmMv+awxJoci1YAbV/1AofAAMWR+XVzc+sI1O6/ZAHjrdJmw7F9DQZ NPRCR52JD1gdyR8w46LyCJ6tZVEEsbJYnA5Ztyb5mTS/L2xpgV2Ymkz6evtJP2yH EPIoBcQISmr0QWBWQauslJc/fQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKk78Lw2 Jj8xwt0Q423ZJOGGuFx0MB8GA1UdIwQYMBaAFOR11EJ3IVGs8Prqazm5ASvSI9OT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODA5RC8wMUZBQzk4QTg0 RjkxMUVFQTc1QzJGMzlDNEY5QUUwMi81SFhVUW5jaFVhenctdXByT2JrQks5SWow NU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVIWFVRbmNoVWF6dy11cHJPYmtCSzlJajA1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODA5RC8wMUZBQzk4QTg0RjkxMUVFQTc1QzJGMzlDNEY5QUUwMi81SFhVUW5jaFVh enctdXByT2JrQks5SWowNU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvGkaiAN7qh2LbZmEjb9fvBaTfmqLq1pt5QU44BenU0kaoTr4F71xA I+us3f3Gx0CQsb6yaLw/EmxmU/RJDzzi19+Okz1pOp7NLzWDNi6zxSbplKd9a5k+ 07Ql9UXQUptAVL7d9C56xZSAOxz9fqridDkp50du9FS+lTn8/y1R6Y3KBBz9zh/r AbofuHJ/+KM35desOdOqK3geQG871IJc2S3DSP/0Xuy7EDSXahKPPd+X9TjcIchn tySOpGvoPJiIs/2OZXEv8mdX3c1AMcYnQMUSdx/NbSqnUulm8DfwiHuGRjzKmOHy xL5VqQ7lDB+K1d1uZXZ6wA2VWZ1Jr4+Z -----END CERTIFICATE-----Generated at Sun Aug 10 16:11:07 2025 by rpki-client