$ rpki-client -vvf rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.mft File: 5G4YncjpEKGrvi42TdCBd1zkhGA.mft (raw, json) Hash identifier: 1IPRMOGP9RhkkLWTwg+naykHw6cNogMZFJR8ZYniQ+c= Subject key identifier: 2B:98:2D:10:36:3C:B4:19:B1:E4:CA:C8:D6:89:E9:37:B2:7B:3F:B5 Authority key identifier: E4:6E:18:9D:C8:E9:10:A1:AB:BE:2E:36:4D:D0:81:77:5C:E4:84:60 Certificate issuer: /CN=A9135B44/serialNumber=E46E189DC8E910A1ABBE2E364DD081775CE48460 Certificate serial: 0230 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G4YncjpEKGrvi42TdCBd1zkhGA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.mft Manifest number: 022B Signing time: Sat 09 Aug 2025 02:28:23 +0000 Manifest this update: Sat 09 Aug 2025 02:28:22 +0000 Manifest next update: Sat 16 Aug 2025 02:28:22 +0000 Files and hashes: 1: 5G4YncjpEKGrvi42TdCBd1zkhGA.crl (hash: cCq75q/i5PkH6hDoGngl64suPdD4fDwwbffMYpRpmuU=) 2: D4B06AAA3A6E11ED8266115DC4F9AE02.roa (hash: rXyXJ/J6rVFIkAmCNmdDPvJdD/VKGdNuveHL3e4vBN4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.crl rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G4YncjpEKGrvi42TdCBd1zkhGA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 560 (0x230) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135B44, serialNumber=E46E189DC8E910A1ABBE2E364DD081775CE48460 Validity Not Before: Aug 9 02:28:22 2025 GMT Not After : Aug 16 02:28:22 2025 GMT Subject: CN=6896b246-3d11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d8:b9:51:33:9a:85:83:08:fb:a0:18:03:08: dc:ae:fa:71:69:d4:95:d3:12:3a:d9:32:17:11:62: 99:e1:19:5c:be:5d:fe:37:0b:9c:a8:5f:aa:6a:11: 3c:9b:b5:e5:2c:61:64:e0:7f:aa:55:5d:f1:3d:e0: 5b:f9:00:9a:c5:e6:8c:a5:2d:91:45:bc:46:af:bb: 5c:2a:c8:b4:6a:4b:93:d7:d7:0f:4c:33:4f:ce:25: f6:47:92:15:d4:91:1f:25:8d:10:78:68:50:45:2f: 18:84:08:45:ee:e1:fd:ee:36:0f:ae:bf:c2:b7:88: cb:ed:fa:c7:32:88:75:c8:e6:5f:18:88:b0:e4:f0: 41:6a:0f:be:0b:d2:3d:8e:3c:9b:45:a9:72:8a:f5: ac:f7:03:6f:2b:3f:5b:53:28:7c:66:de:ee:08:43: 49:fa:7a:0d:73:5e:83:1a:93:64:53:d1:a8:e8:3b: 93:f9:6b:1a:be:5d:f8:0b:f4:22:55:11:18:ac:8c: 59:c1:a1:ad:7d:bf:d2:06:06:dd:dc:92:89:98:39: 7a:3c:1b:c2:48:14:3d:3b:65:f5:96:0d:c4:0e:ab: 6d:8b:23:7b:b3:30:f5:6b:8a:04:37:73:93:5b:68: 12:5b:ab:1e:65:e1:0c:31:61:5f:ba:57:ba:4d:0c: c9:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:98:2D:10:36:3C:B4:19:B1:E4:CA:C8:D6:89:E9:37:B2:7B:3F:B5 X509v3 Authority Key Identifier: keyid:E4:6E:18:9D:C8:E9:10:A1:AB:BE:2E:36:4D:D0:81:77:5C:E4:84:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G4YncjpEKGrvi42TdCBd1zkhGA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:2f:d1:d1:52:47:b6:52:fa:4d:66:3d:f2:70:fd:53:f7:1c: 99:73:df:5a:7f:af:25:db:e2:43:b7:cd:31:f4:58:ef:6e:20: 5c:37:91:29:7c:f1:db:8b:3d:04:00:99:55:a4:50:18:da:f8: 4c:44:3e:8a:ba:63:ce:5d:bc:09:06:f9:75:04:58:76:b7:f3: 80:2d:b6:dc:c4:28:4b:f5:78:49:66:34:d8:bd:e4:3b:28:89: 61:88:98:66:5c:0a:1a:89:48:e2:83:18:fa:33:ed:6b:1e:93: 4f:ad:b3:4c:81:7f:3d:f4:c2:48:e5:70:96:3d:50:79:3d:ca: a2:8e:16:e9:45:9e:05:a9:c3:94:67:31:eb:bb:b1:99:55:23: 07:52:ab:65:97:3c:db:d0:16:6b:c4:c2:a3:9e:6a:ea:be:1a: 06:e5:62:1e:ce:b5:e3:d8:2c:a1:f0:94:6c:99:d0:c4:6f:ba: fd:0f:ae:0a:63:a6:c4:bb:84:0a:5a:69:b8:9a:cb:ee:c7:a9: 16:64:e7:1e:ab:70:13:e3:58:54:e8:2f:c4:e4:37:82:b0:74: ab:5d:03:19:d5:a7:95:10:f4:a0:f9:fc:80:ba:29:82:6f:93: 91:2c:dd:10:86:a4:e7:e1:b1:3b:08:9d:40:f9:dd:95:36:65: c7:f0:7c:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzVCNDQxMTAvBgNVBAUTKEU0NkUxODlEQzhFOTEwQTFBQkJFMkUzNjRERDA4MTc3 NUNFNDg0NjAwHhcNMjUwODA5MDIyODIyWhcNMjUwODE2MDIyODIyWjAYMRYwFAYD VQQDEw02ODk2YjI0Ni0zZDExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Ni5UTOahYMI+6AYAwjcrvpxadSV0xI62TIXEWKZ4Rlcvl3+NwucqF+qahE8 m7XlLGFk4H+qVV3xPeBb+QCaxeaMpS2RRbxGr7tcKsi0akuT19cPTDNPziX2R5IV 1JEfJY0QeGhQRS8YhAhF7uH97jYPrr/Ct4jL7frHMoh1yOZfGIiw5PBBag++C9I9 jjybRalyivWs9wNvKz9bUyh8Zt7uCENJ+noNc16DGpNkU9Go6DuT+Wsavl34C/Qi VREYrIxZwaGtfb/SBgbd3JKJmDl6PBvCSBQ9O2X1lg3EDqttiyN7szD1a4oEN3OT W2gSW6seZeEMMWFfule6TQzJKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCuYLRA2 PLQZseTKyNaJ6Teyez+1MB8GA1UdIwQYMBaAFORuGJ3I6RChq74uNk3QgXdc5IRg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUI0NC9BRDBENjFGODNB NkMxMUVEOTk0MUY1NUNDNEY5QUUwMi81RzRZbmNqcEVLR3J2aTQyVGRDQmQxemto R0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVHNFluY2pwRUtHcnZpNDJUZENCZDF6a2hHQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NUI0NC9BRDBENjFGODNBNkMxMUVEOTk0MUY1NUNDNEY5QUUwMi81RzRZbmNqcEVL R3J2aTQyVGRDQmQxemtoR0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7L9HRUke2UvpNZj3ycP1T9xyZc99af68l2+JDt80x9FjvbiBcN5Ep fPHbiz0EAJlVpFAY2vhMRD6KumPOXbwJBvl1BFh2t/OALbbcxChL9XhJZjTYveQ7 KIlhiJhmXAoaiUjigxj6M+1rHpNPrbNMgX899MJI5XCWPVB5PcqijhbpRZ4FqcOU ZzHru7GZVSMHUqtllzzb0BZrxMKjnmrqvhoG5WIezrXj2Cyh8JRsmdDEb7r9D64K Y6bEu4QKWmm4msvux6kWZOceq3AT41hU6C/E5DeCsHSrXQMZ1aeVEPSg+fyAuimC b5ORLN0QhqTn4bE7CJ1A+d2VNmXH8Hwp -----END CERTIFICATE-----Generated at Sun Aug 10 04:16:57 2025 by rpki-client