$ rpki-client -vvf rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/L5rGimsA32BW9wq8WqxtuSCrGx0.mft File: L5rGimsA32BW9wq8WqxtuSCrGx0.mft (raw, json) Hash identifier: mFfKVmqjqqgy/GnQAC20n2Lr1iKA+s2hv3kDhriayKM= Subject key identifier: 4B:B1:F7:1C:E8:71:6F:D5:2F:C6:52:22:67:47:0D:80:35:FF:21:33 Authority key identifier: 2F:9A:C6:8A:6B:00:DF:60:56:F7:0A:BC:5A:AC:6D:B9:20:AB:1B:1D Certificate issuer: /CN=A9144266/serialNumber=2F9AC68A6B00DF6056F70ABC5AAC6DB920AB1B1D Certificate serial: 0542 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L5rGimsA32BW9wq8WqxtuSCrGx0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/L5rGimsA32BW9wq8WqxtuSCrGx0.mft Manifest number: 053A Signing time: Thu 07 Aug 2025 00:00:24 +0000 Manifest this update: Thu 07 Aug 2025 00:00:23 +0000 Manifest next update: Thu 14 Aug 2025 00:00:23 +0000 Files and hashes: 1: L5rGimsA32BW9wq8WqxtuSCrGx0.crl (hash: McseRCzjdn4x3WYwBGKOg5kl2VFATahNlkkxU8xi6XY=) 2: 85EAFFD806F911EC9558C827C4F9AE02.roa (hash: 9v3EHVS6OF29hHJXAC8+0BpNbFO1DRfm0tNrOjvIm8c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/L5rGimsA32BW9wq8WqxtuSCrGx0.crl rsync://rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/L5rGimsA32BW9wq8WqxtuSCrGx0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L5rGimsA32BW9wq8WqxtuSCrGx0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 00:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1346 (0x542) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144266, serialNumber=2F9AC68A6B00DF6056F70ABC5AAC6DB920AB1B1D Validity Not Before: Aug 7 00:00:23 2025 GMT Not After : Aug 14 00:00:23 2025 GMT Subject: CN=6893ec97-d6e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:0b:05:99:2f:8f:98:41:22:3c:87:49:6c:d4: ff:8e:bb:4f:71:f6:5e:7e:f4:74:b4:fe:06:16:d3: 14:32:87:f6:cc:ec:b2:21:42:d8:6f:21:48:14:0a: 66:4d:93:5e:c2:e9:21:84:a1:65:96:4b:d0:61:ef: d4:db:75:1d:e9:fb:0a:20:c0:21:a7:bc:89:86:00: 48:90:71:fc:cf:40:b9:0e:75:7d:f5:7c:c7:1e:14: 21:9e:b2:20:a1:cd:95:5a:53:7b:d3:85:4f:73:20: 23:8b:c8:8b:a9:38:3b:65:88:f6:3b:30:46:c6:e8: 07:56:26:a4:a7:c7:09:03:90:2b:30:52:2a:76:77: 4b:ac:c1:01:72:76:ef:8f:dd:aa:ce:a7:50:dd:5f: 35:3e:e1:67:ed:32:c3:18:40:08:8e:f9:0e:e9:85: cc:f2:4c:6f:c5:7c:f4:97:c1:d8:8c:d6:e3:63:9d: aa:f3:97:93:0c:35:ed:f3:30:71:58:9d:88:a6:cc: 08:f0:42:b7:5c:45:db:86:bc:76:60:92:e2:19:0e: a9:b1:64:16:33:c0:95:c6:2f:49:f4:0b:47:22:d7: 00:21:5d:b4:b2:e8:b0:17:f7:6d:54:ea:23:1a:09: 4e:a0:d7:94:6f:38:a0:d6:10:f0:a2:5c:ad:b4:be: 06:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:B1:F7:1C:E8:71:6F:D5:2F:C6:52:22:67:47:0D:80:35:FF:21:33 X509v3 Authority Key Identifier: keyid:2F:9A:C6:8A:6B:00:DF:60:56:F7:0A:BC:5A:AC:6D:B9:20:AB:1B:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/L5rGimsA32BW9wq8WqxtuSCrGx0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L5rGimsA32BW9wq8WqxtuSCrGx0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/L5rGimsA32BW9wq8WqxtuSCrGx0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:0c:17:fd:2b:51:95:0b:95:27:55:7f:86:e5:4e:68:67:7f: ed:1c:f2:44:6e:5d:05:f1:51:08:3b:1c:e9:5b:68:58:db:20: a7:26:7b:3a:95:e5:b3:8b:cf:27:d7:41:a9:28:94:cb:b2:69: 49:6f:62:e9:66:39:43:c3:41:5f:9b:c4:f6:1e:75:3c:51:e9: 72:07:0e:bc:6c:94:6b:8d:47:6f:a1:0c:d2:1f:55:ce:f1:0e: 17:12:70:00:04:0c:80:4d:b2:10:b8:6e:d4:56:e8:6e:6f:b2: c4:79:d0:85:17:ae:b0:36:46:67:ae:61:0f:71:ba:12:2a:89: 8d:15:bb:28:05:49:66:26:53:fb:e6:f6:60:be:2a:74:34:78: 3f:f0:31:a2:a3:aa:99:cb:69:85:86:3c:b9:96:9c:f6:32:55: f1:39:5f:95:e2:2f:45:85:0d:92:9a:f9:66:7a:23:6f:80:ae: 8b:1c:58:a1:01:a3:ea:0a:f3:01:1f:f0:35:31:39:95:ac:0d: ec:eb:26:82:b3:d2:87:ba:b8:7d:ed:02:86:1b:b1:74:27:e5: c8:36:a4:bf:42:77:37:69:66:73:53:e2:52:0e:95:6e:62:e7: 47:68:b1:91:92:7b:c2:35:21:4a:fa:41:0b:1f:55:83:bf:02: 1d:3b:20:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQyNjYxMTAvBgNVBAUTKDJGOUFDNjhBNkIwMERGNjA1NkY3MEFCQzVBQUM2REI5 MjBBQjFCMUQwHhcNMjUwODA3MDAwMDIzWhcNMjUwODE0MDAwMDIzWjAYMRYwFAYD VQQDEw02ODkzZWM5Ny1kNmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmgsFmS+PmEEiPIdJbNT/jrtPcfZefvR0tP4GFtMUMof2zOyyIULYbyFIFApm TZNewukhhKFllkvQYe/U23Ud6fsKIMAhp7yJhgBIkHH8z0C5DnV99XzHHhQhnrIg oc2VWlN704VPcyAji8iLqTg7ZYj2OzBGxugHViakp8cJA5ArMFIqdndLrMEBcnbv j92qzqdQ3V81PuFn7TLDGEAIjvkO6YXM8kxvxXz0l8HYjNbjY52q85eTDDXt8zBx WJ2IpswI8EK3XEXbhrx2YJLiGQ6psWQWM8CVxi9J9AtHItcAIV20suiwF/dtVOoj GglOoNeUbzig1hDwolyttL4GHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEux9xzo cW/VL8ZSImdHDYA1/yEzMB8GA1UdIwQYMBaAFC+axoprAN9gVvcKvFqsbbkgqxsd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDI2Ni8wRTg1OEUyODA2 Q0IxMUVDOTlCMEVBM0JDNEY5QUUwMi9MNXJHaW1zQTMyQlc5d3E4V3F4dHVTQ3JH eDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0w1ckdpbXNBMzJCVzl3cThXcXh0dVNDckd4MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDI2Ni8wRTg1OEUyODA2Q0IxMUVDOTlCMEVBM0JDNEY5QUUwMi9MNXJHaW1zQTMy Qlc5d3E4V3F4dHVTQ3JHeDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATDBf9K1GVC5UnVX+G5U5oZ3/tHPJEbl0F8VEIOxzpW2hY2yCnJns6 leWzi88n10GpKJTLsmlJb2LpZjlDw0Ffm8T2HnU8UelyBw68bJRrjUdvoQzSH1XO 8Q4XEnAABAyATbIQuG7UVuhub7LEedCFF66wNkZnrmEPcboSKomNFbsoBUlmJlP7 5vZgvip0NHg/8DGio6qZy2mFhjy5lpz2MlXxOV+V4i9FhQ2SmvlmeiNvgK6LHFih AaPqCvMBH/A1MTmVrA3s6yaCs9KHurh97QKGG7F0J+XINqS/Qnc3aWZzU+JSDpVu YudHaLGRknvCNSFK+kELH1WDvwIdOyDF -----END CERTIFICATE-----Generated at Sat Aug 9 01:20:57 2025 by rpki-client