$ rpki-client -vvf rpki.apnic.net/member_repository/A913ABFE/F1D5587E25F111EEB7B48058C4F9AE02/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.mft File: 5YjHPmy0_bOLhO5A-Pm2TFC-S3M.mft (raw, json) Hash identifier: kRY2CuHKHz0gr7IsMoGTx5jaD58hp4UZ8nW1gPDrH+Q= Subject key identifier: FC:D7:5F:18:B7:68:0F:F4:05:BE:1F:31:78:2C:16:78:55:0E:4A:80 Authority key identifier: E5:88:C7:3E:6C:B4:FD:B3:8B:84:EE:40:F8:F9:B6:4C:50:BE:4B:73 Certificate issuer: /CN=A913ABFE/serialNumber=E588C73E6CB4FDB38B84EE40F8F9B64C50BE4B73 Certificate serial: 019F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913ABFE/F1D5587E25F111EEB7B48058C4F9AE02/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.mft Manifest number: 0192 Signing time: Sat 09 Aug 2025 03:58:44 +0000 Manifest this update: Sat 09 Aug 2025 03:58:43 +0000 Manifest next update: Sat 16 Aug 2025 03:58:43 +0000 Files and hashes: 1: 5YjHPmy0_bOLhO5A-Pm2TFC-S3M.crl (hash: HEM+HD2WU7ggRS2SQV2xCDZR+WPliMo8dun5kYjiDos=) 2: F4C13F18066811F0B521BF2FC4F9AE02.roa (hash: epExzgPr36sDhlRxRH5MQNOpHIGT7+cJfb/YyVTxfcc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913ABFE/F1D5587E25F111EEB7B48058C4F9AE02/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.crl rsync://rpki.apnic.net/member_repository/A913ABFE/F1D5587E25F111EEB7B48058C4F9AE02/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 415 (0x19f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913ABFE, serialNumber=E588C73E6CB4FDB38B84EE40F8F9B64C50BE4B73 Validity Not Before: Aug 9 03:58:43 2025 GMT Not After : Aug 16 03:58:43 2025 GMT Subject: CN=6896c774-1053 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:dd:6d:0e:99:70:b1:f1:a6:d4:3b:09:49:33: 63:1e:be:fc:60:80:42:25:03:43:b0:e4:84:e3:82: b1:e0:32:0c:cb:77:0b:66:7e:9e:c0:50:a6:c5:df: bb:1c:8d:09:85:9d:bd:e2:f7:61:86:4d:2c:8a:19: b6:a3:de:0f:e4:a0:61:7e:86:d9:8f:e0:48:6c:c9: 9d:0a:1b:0f:1e:aa:5c:d1:3c:8c:9b:13:7e:e0:2c: 05:60:ad:27:4d:bf:40:16:4e:0c:83:8b:1a:16:eb: 98:6e:64:0d:94:9a:10:c6:a5:ce:91:d1:44:89:7f: cf:11:ce:4e:10:5f:5a:01:22:13:c5:f3:54:e0:97: 4c:3a:94:0f:7d:e8:7e:36:5b:90:96:52:a8:ef:aa: f5:43:e1:0c:40:ab:ad:68:f7:13:15:25:5e:d9:43: f5:73:cd:13:0d:ba:1e:67:e5:33:d0:6f:ab:ff:a4: 7b:0a:ba:00:a1:7d:d9:af:1f:77:62:28:3f:d8:8c: 26:9c:ec:17:24:3d:3b:ff:64:da:8a:7f:78:4b:94: 72:6f:69:4f:65:66:1f:d4:42:35:ee:d5:ea:02:2d: 29:e3:43:6b:c7:98:cd:d6:4c:a4:02:08:f7:e3:63: b3:59:11:02:65:cc:84:d1:80:a4:aa:09:db:e4:ff: b9:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:D7:5F:18:B7:68:0F:F4:05:BE:1F:31:78:2C:16:78:55:0E:4A:80 X509v3 Authority Key Identifier: keyid:E5:88:C7:3E:6C:B4:FD:B3:8B:84:EE:40:F8:F9:B6:4C:50:BE:4B:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913ABFE/F1D5587E25F111EEB7B48058C4F9AE02/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913ABFE/F1D5587E25F111EEB7B48058C4F9AE02/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:40:f5:ea:3b:19:21:10:b3:c6:79:ac:80:2f:59:60:dd:62: 2c:06:4d:2c:db:d7:42:c0:5a:c4:60:23:a5:ff:40:33:55:63: 66:bc:50:e4:ec:08:2d:a2:cf:3f:11:96:b8:84:f9:94:94:8c: df:3a:f4:b9:1b:7f:06:08:25:aa:45:db:0c:8a:a0:28:a8:6e: e4:cd:0a:b6:f7:5a:f3:b4:49:dd:17:3a:3a:57:f5:a8:4b:3f: 3d:c0:5c:30:de:9d:ea:8e:cf:41:39:a6:53:c2:91:51:d0:50: 4e:e2:0d:cb:be:e5:d8:5f:b4:65:81:0e:fe:8d:ec:86:e0:fd: 42:92:16:68:a7:47:85:ab:21:52:e7:d0:55:63:b5:b3:a3:d1: 66:92:ff:fd:ae:b9:d9:0c:9a:bf:94:97:22:19:25:3c:1e:29: 36:6d:b0:6d:22:fe:17:c8:df:39:99:63:9e:2a:42:43:37:38: 99:dd:c8:a2:e4:7b:81:58:e4:b1:89:b0:5b:e7:71:a1:9e:4d: 44:ae:94:37:25:df:71:32:58:ac:79:ef:a0:00:b3:db:92:81: 87:a0:99:cf:58:47:53:f5:b7:37:1d:dc:5f:8f:2e:50:4f:ae: 95:4e:2d:df:ac:cc:0f:3f:2b:bc:20:bc:4f:82:0f:16:dc:9e: 12:6d:a1:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0FCRkUxMTAvBgNVBAUTKEU1ODhDNzNFNkNCNEZEQjM4Qjg0RUU0MEY4RjlCNjRD NTBCRTRCNzMwHhcNMjUwODA5MDM1ODQzWhcNMjUwODE2MDM1ODQzWjAYMRYwFAYD VQQDEw02ODk2Yzc3NC0xMDUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA091tDplwsfGm1DsJSTNjHr78YIBCJQNDsOSE44Kx4DIMy3cLZn6ewFCmxd+7 HI0JhZ294vdhhk0sihm2o94P5KBhfobZj+BIbMmdChsPHqpc0TyMmxN+4CwFYK0n Tb9AFk4Mg4saFuuYbmQNlJoQxqXOkdFEiX/PEc5OEF9aASITxfNU4JdMOpQPfeh+ NluQllKo76r1Q+EMQKutaPcTFSVe2UP1c80TDboeZ+Uz0G+r/6R7CroAoX3Zrx93 Yig/2IwmnOwXJD07/2Tain94S5Ryb2lPZWYf1EI17tXqAi0p40Nrx5jN1kykAgj3 42OzWRECZcyE0YCkqgnb5P+5iwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPzXXxi3 aA/0Bb4fMXgsFnhVDkqAMB8GA1UdIwQYMBaAFOWIxz5stP2zi4TuQPj5tkxQvktz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUJGRS9GMUQ1NTg3RTI1 RjExMUVFQjdCNDgwNThDNEY5QUUwMi81WWpIUG15MF9iT0xoTzVBLVBtMlRGQy1T M00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVZakhQbXkwX2JPTGhPNUEtUG0yVEZDLVMzTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QUJGRS9GMUQ1NTg3RTI1RjExMUVFQjdCNDgwNThDNEY5QUUwMi81WWpIUG15MF9i T0xoTzVBLVBtMlRGQy1TM00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYQPXqOxkhELPGeayAL1lg3WIsBk0s29dCwFrEYCOl/0AzVWNmvFDk 7Agtos8/EZa4hPmUlIzfOvS5G38GCCWqRdsMiqAoqG7kzQq291rztEndFzo6V/Wo Sz89wFww3p3qjs9BOaZTwpFR0FBO4g3LvuXYX7RlgQ7+jeyG4P1CkhZop0eFqyFS 59BVY7Wzo9Fmkv/9rrnZDJq/lJciGSU8Hik2bbBtIv4XyN85mWOeKkJDNziZ3cii 5HuBWOSxibBb53Ghnk1ErpQ3Jd9xMlisee+gALPbkoGHoJnPWEdT9bc3Hdxfjy5Q T66VTi3frMwPPyu8ILxPgg8W3J4SbaGT -----END CERTIFICATE-----Generated at Sun Aug 10 03:50:41 2025 by rpki-client