$ rpki-client -vvf rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.mft File: c5h-zOd-ROs2ZR4JjTN1D6hk5nY.mft (raw, json) Hash identifier: ecfXXhaJZr46oSXUc/iNAKXQXZE/zrIoveGzfxXcMso= Subject key identifier: 65:53:0E:A6:AA:EC:1B:E9:4E:2E:16:02:7B:02:F2:6D:8A:01:E6:9B Authority key identifier: 73:98:7E:CC:E7:7E:44:EB:36:65:1E:09:8D:33:75:0F:A8:64:E6:76 Certificate issuer: /CN=A91316E5/serialNumber=73987ECCE77E44EB36651E098D33750FA864E676 Certificate serial: 016E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.mft Manifest number: 016B Signing time: Tue 05 Aug 2025 04:18:06 +0000 Manifest this update: Tue 05 Aug 2025 04:18:06 +0000 Manifest next update: Tue 12 Aug 2025 04:18:06 +0000 Files and hashes: 1: c5h-zOd-ROs2ZR4JjTN1D6hk5nY.crl (hash: CtVs71IyEMxM8xtqEOf0Mxz47x7KQQIsim/smBG4/Pw=) 2: C1A8182646D011EE8BE5AE80C4F9AE02.roa (hash: gAXQ6XOA3NODkbVV4z4rY8FPGvcx9W1CdIeenZ4k+xI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.crl rsync://rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 04:18:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 366 (0x16e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91316E5, serialNumber=73987ECCE77E44EB36651E098D33750FA864E676 Validity Not Before: Aug 5 04:18:06 2025 GMT Not After : Aug 12 04:18:06 2025 GMT Subject: CN=689185fe-ad2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c0:1a:fd:01:56:d5:25:7d:9e:c2:91:4c:6b: d4:ea:6d:45:39:fc:ba:e4:2f:a6:0f:08:81:21:41: 23:41:f7:a8:fb:ae:8e:cf:d7:dc:9c:c9:45:3c:18: 71:31:3e:b9:16:ab:80:f4:cf:c2:de:4d:d0:91:da: a8:59:fa:3c:51:3d:cb:2f:52:6f:b3:ca:4c:d9:73: 35:72:a4:0e:6e:9a:e7:03:7e:33:7e:e4:dd:3f:8a: 4f:c6:cd:ea:b6:02:68:80:d7:0d:63:ae:10:35:26: 4e:16:84:fe:7d:c6:2e:13:a9:ae:9a:72:70:d2:91: e6:cd:7b:20:23:cb:cf:3a:bb:c5:15:0b:11:18:7d: f0:4c:70:f8:27:11:63:50:61:bd:ee:0c:46:10:ef: a0:0b:bf:dc:a1:a4:a4:b5:ee:84:3d:e2:06:09:7c: f2:6e:1d:de:cb:61:89:e4:01:9a:f3:de:cc:be:1a: 17:c4:39:0a:b9:e4:60:79:3d:f9:6e:94:97:a4:76: 9f:44:f6:5e:35:53:de:4e:69:b3:23:bf:f7:8f:b5: f9:93:15:23:ea:9f:4d:f3:bd:84:14:90:c3:8b:b3: d3:c4:51:7d:74:8c:b6:e5:f0:de:c6:29:da:db:0d: 12:c0:9d:e0:61:59:27:c2:4c:7e:9e:25:f3:d0:47: 71:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:53:0E:A6:AA:EC:1B:E9:4E:2E:16:02:7B:02:F2:6D:8A:01:E6:9B X509v3 Authority Key Identifier: keyid:73:98:7E:CC:E7:7E:44:EB:36:65:1E:09:8D:33:75:0F:A8:64:E6:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:23:7f:93:5d:ef:f3:0e:37:36:ce:56:1d:27:a4:ab:52:ef: 51:9d:20:3e:f5:21:ba:f9:b2:9b:d8:2a:ba:91:5e:ee:23:d9: c9:7f:91:b6:47:ec:3e:8d:71:4b:ef:67:5f:3a:a2:12:e4:f5: 65:53:c1:f0:c6:f2:ce:d2:bf:73:50:18:99:c4:65:f7:d2:0d: b3:cc:9d:46:fd:1b:41:0e:d9:14:dd:a8:49:3c:d0:f4:1b:11: 59:31:01:d6:21:d7:66:d9:68:ac:aa:f1:ff:f6:fa:61:4c:ac: 39:b3:46:94:59:44:bd:11:1b:2f:99:cc:79:ae:70:79:60:cb: d8:62:d8:ca:04:3e:99:dd:0c:7e:79:ec:c1:1e:11:c9:55:53: 01:61:00:8b:fd:d0:a6:37:e5:a0:54:e6:92:55:6a:38:83:ef: f1:41:b2:e9:28:06:07:6c:a8:af:d1:80:59:55:7e:ad:4c:1d: 75:12:c8:54:5b:6b:4c:72:d4:ca:31:57:54:91:43:32:45:a9: ab:46:99:20:0e:dc:99:4f:41:66:e8:b6:ce:fb:52:b1:8f:17: 24:64:3b:6f:5d:4c:dc:05:c4:1b:35:6e:81:05:4d:40:e6:ce: 43:6c:63:22:46:66:12:c2:98:d3:bb:b7:cb:de:ce:7f:45:86: a0:74:61:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE2RTUxMTAvBgNVBAUTKDczOTg3RUNDRTc3RTQ0RUIzNjY1MUUwOThEMzM3NTBG QTg2NEU2NzYwHhcNMjUwODA1MDQxODA2WhcNMjUwODEyMDQxODA2WjAYMRYwFAYD VQQDEw02ODkxODVmZS1hZDJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA08Aa/QFW1SV9nsKRTGvU6m1FOfy65C+mDwiBIUEjQfeo+66Oz9fcnMlFPBhx MT65FquA9M/C3k3QkdqoWfo8UT3LL1Jvs8pM2XM1cqQObprnA34zfuTdP4pPxs3q tgJogNcNY64QNSZOFoT+fcYuE6mumnJw0pHmzXsgI8vPOrvFFQsRGH3wTHD4JxFj UGG97gxGEO+gC7/coaSkte6EPeIGCXzybh3ey2GJ5AGa897MvhoXxDkKueRgeT35 bpSXpHafRPZeNVPeTmmzI7/3j7X5kxUj6p9N872EFJDDi7PTxFF9dIy25fDexina 2w0SwJ3gYVknwkx+niXz0EdxGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGVTDqaq 7BvpTi4WAnsC8m2KAeabMB8GA1UdIwQYMBaAFHOYfsznfkTrNmUeCY0zdQ+oZOZ2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTZFNS81MUY5ODM1QzQ2 RDAxMUVFODFGMjA3M0ZDNEY5QUUwMi9jNWgtek9kLVJPczJaUjRKalROMUQ2aGs1 blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M1aC16T2QtUk9zMlpSNEpqVE4xRDZoazVuWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTZFNS81MUY5ODM1QzQ2RDAxMUVFODFGMjA3M0ZDNEY5QUUwMi9jNWgtek9kLVJP czJaUjRKalROMUQ2aGs1blkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuI3+TXe/zDjc2zlYdJ6SrUu9RnSA+9SG6+bKb2Cq6kV7uI9nJf5G2 R+w+jXFL72dfOqIS5PVlU8HwxvLO0r9zUBiZxGX30g2zzJ1G/RtBDtkU3ahJPND0 GxFZMQHWIddm2WisqvH/9vphTKw5s0aUWUS9ERsvmcx5rnB5YMvYYtjKBD6Z3Qx+ eezBHhHJVVMBYQCL/dCmN+WgVOaSVWo4g+/xQbLpKAYHbKiv0YBZVX6tTB11EshU W2tMctTKMVdUkUMyRamrRpkgDtyZT0Fm6LbO+1KxjxckZDtvXUzcBcQbNW6BBU1A 5s5DbGMiRmYSwpjTu7fL3s5/RYagdGEx -----END CERTIFICATE-----Generated at Wed Aug 6 11:02:27 2025 by rpki-client