$ rpki-client -vvf rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5EL5lVmsG6h-4TSLL8evCiL_smE.mft File: 5EL5lVmsG6h-4TSLL8evCiL_smE.mft (raw, json) Hash identifier: nP8iNMaFzN10svq82UmEDKPLUSwCVs59tL/tPHIwKq4= Subject key identifier: 09:11:04:50:78:B5:10:21:C9:B4:92:71:99:C3:E7:77:BA:0F:0F:F9 Authority key identifier: E4:42:F9:95:59:AC:1B:A8:7E:E1:34:8B:2F:C7:AF:0A:22:FF:B2:61 Certificate issuer: /CN=A9143336/serialNumber=E442F99559AC1BA87EE1348B2FC7AF0A22FFB261 Certificate serial: 2B15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5EL5lVmsG6h-4TSLL8evCiL_smE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5EL5lVmsG6h-4TSLL8evCiL_smE.mft Manifest number: 2B05 Signing time: Wed 06 Aug 2025 15:35:48 +0000 Manifest this update: Wed 06 Aug 2025 15:35:48 +0000 Manifest next update: Wed 13 Aug 2025 15:35:48 +0000 Files and hashes: 1: 5EL5lVmsG6h-4TSLL8evCiL_smE.crl (hash: axSI6lWuEPaLZhKIo88ym3tk/flK4gQDroVIBH8tNEM=) 2: 5452AC309B4911EB9952394CC4F9AE02.roa (hash: 3EBZNTlM2pSnC9HcQ0kJddDB9AhHcVhBduQrWy64qKQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5EL5lVmsG6h-4TSLL8evCiL_smE.crl rsync://rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5EL5lVmsG6h-4TSLL8evCiL_smE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5EL5lVmsG6h-4TSLL8evCiL_smE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 15:35:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11029 (0x2b15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143336, serialNumber=E442F99559AC1BA87EE1348B2FC7AF0A22FFB261 Validity Not Before: Aug 6 15:35:48 2025 GMT Not After : Aug 13 15:35:48 2025 GMT Subject: CN=68937654-f51d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:43:c5:ce:0d:f6:14:11:a2:1a:56:1a:54:24: d0:ac:c3:91:0d:1d:df:a5:77:76:23:30:1d:62:58: 66:19:d3:d8:65:3e:ac:b9:1d:a9:d0:52:95:cb:c4: c4:a4:a2:a2:bc:bc:0b:0c:75:a7:d5:d2:81:2e:52: 88:6a:0d:ca:95:e0:db:c5:19:d9:7e:29:bc:f8:e8: 1c:13:fc:dc:70:a7:2d:69:83:75:0a:d2:fc:fe:0a: b6:d9:ad:97:13:29:79:72:90:c4:cc:21:37:5a:d8: 5e:60:62:13:9f:78:c3:3a:1e:e5:1b:c0:73:0c:cc: 4b:d0:73:98:1d:fa:cf:27:1a:e5:77:22:a7:12:17: bd:be:c2:82:ea:13:27:10:07:6c:36:79:43:33:b7: 8e:a9:7c:c8:7a:06:ce:3f:47:3c:3f:05:39:e6:35: bb:d8:c5:6f:77:1b:42:00:79:8d:f8:89:3c:77:74: 8c:19:e9:5b:d4:54:12:28:56:11:79:9f:8b:31:4d: 33:23:8f:81:61:84:0b:24:e5:15:50:41:bf:e1:af: ff:32:ce:60:bc:fa:ad:1a:f7:df:7d:e8:dc:4f:8c: df:05:28:aa:87:55:05:a0:f9:df:17:a4:de:52:5a: 88:10:8e:46:5c:af:7e:2d:cf:dd:11:0e:bb:6d:5b: 5d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:11:04:50:78:B5:10:21:C9:B4:92:71:99:C3:E7:77:BA:0F:0F:F9 X509v3 Authority Key Identifier: keyid:E4:42:F9:95:59:AC:1B:A8:7E:E1:34:8B:2F:C7:AF:0A:22:FF:B2:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5EL5lVmsG6h-4TSLL8evCiL_smE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5EL5lVmsG6h-4TSLL8evCiL_smE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5EL5lVmsG6h-4TSLL8evCiL_smE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:dd:e1:28:85:d1:7b:ba:dd:cc:02:2d:9c:24:02:ed:70:dc: 6f:55:42:13:75:5b:01:ed:24:7f:20:53:42:a2:0d:6f:11:c3: 93:9a:8f:7e:b1:84:db:08:31:8b:cb:19:1f:b7:da:97:27:8f: 96:b5:9d:ed:ed:7b:b3:a5:09:48:b7:9f:ac:8b:88:a3:68:4d: fe:6a:7b:e5:f2:dd:9b:c3:dd:ea:47:53:29:ba:92:72:b1:c3: b8:38:ed:f9:9c:cb:57:4c:92:5b:ad:62:bf:76:26:78:1e:e0: 68:bb:26:92:49:2a:32:71:3a:61:56:33:54:34:b3:39:5a:cf: 28:21:1a:60:4b:24:4c:d5:27:3f:3e:88:c1:09:27:c5:c8:18: 01:bd:7a:ee:94:83:15:63:37:c1:6c:cb:01:16:b0:98:79:37: 57:be:80:0b:ca:8d:90:84:7e:8b:61:56:58:da:c5:54:f6:f8: 1c:9b:fc:cf:34:d6:ba:01:c2:2b:a0:1d:26:0d:8e:2f:6f:e7: 2a:ad:2b:1c:d8:03:62:c6:b5:0a:3e:80:a2:95:f2:2d:91:5d: cc:a8:24:ef:be:49:24:be:92:9b:92:b5:42:b2:31:be:6f:bb: b2:2d:36:bd:07:0b:1c:45:9d:61:cc:1a:0d:12:2f:02:d6:2c: f7:b6:cd:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKxUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDMzMzYxMTAvBgNVBAUTKEU0NDJGOTk1NTlBQzFCQTg3RUUxMzQ4QjJGQzdBRjBB MjJGRkIyNjEwHhcNMjUwODA2MTUzNTQ4WhcNMjUwODEzMTUzNTQ4WjAYMRYwFAYD VQQDEw02ODkzNzY1NC1mNTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0EPFzg32FBGiGlYaVCTQrMORDR3fpXd2IzAdYlhmGdPYZT6suR2p0FKVy8TE pKKivLwLDHWn1dKBLlKIag3KleDbxRnZfim8+OgcE/zccKctaYN1CtL8/gq22a2X Eyl5cpDEzCE3WtheYGITn3jDOh7lG8BzDMxL0HOYHfrPJxrldyKnEhe9vsKC6hMn EAdsNnlDM7eOqXzIegbOP0c8PwU55jW72MVvdxtCAHmN+Ik8d3SMGelb1FQSKFYR eZ+LMU0zI4+BYYQLJOUVUEG/4a//Ms5gvPqtGvfffejcT4zfBSiqh1UFoPnfF6Te UlqIEI5GXK9+Lc/dEQ67bVtdeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAkRBFB4 tRAhybSScZnD53e6Dw/5MB8GA1UdIwQYMBaAFORC+ZVZrBuofuE0iy/Hrwoi/7Jh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzMzNi84RUU3RkMxRTA4 NTMxMUU0QjAyMzlFNjFDNEY5QUUwMi81RUw1bFZtc0c2aC00VFNMTDhldkNpTF9z bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVFTDVsVm1zRzZoLTRUU0xMOGV2Q2lMX3NtRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzMzNi84RUU3RkMxRTA4NTMxMUU0QjAyMzlFNjFDNEY5QUUwMi81RUw1bFZtc0c2 aC00VFNMTDhldkNpTF9zbUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAv3eEohdF7ut3MAi2cJALtcNxvVUITdVsB7SR/IFNCog1vEcOTmo9+ sYTbCDGLyxkft9qXJ4+WtZ3t7XuzpQlIt5+si4ijaE3+anvl8t2bw93qR1MpupJy scO4OO35nMtXTJJbrWK/diZ4HuBouyaSSSoycTphVjNUNLM5Ws8oIRpgSyRM1Sc/ PojBCSfFyBgBvXrulIMVYzfBbMsBFrCYeTdXvoALyo2QhH6LYVZY2sVU9vgcm/zP NNa6AcIroB0mDY4vb+cqrSsc2ANixrUKPoCilfItkV3MqCTvvkkkvpKbkrVCsjG+ b7uyLTa9BwscRZ1hzBoNEi8C1iz3ts1g -----END CERTIFICATE-----Generated at Thu Aug 7 04:37:05 2025 by rpki-client