$ rpki-client -vvf rpki.apnic.net/member_repository/A914450B/F7B9E30A13F111EBB8123950C4F9AE02/5LMs8qYR9wLf0JE-PqULT9YexXU.mft File: 5LMs8qYR9wLf0JE-PqULT9YexXU.mft (raw, json) Hash identifier: QBS2Nc4oFgdoorr0BqpKaByRp+d+DkMKH1nbXP1fIpo= Subject key identifier: FB:6E:B4:BF:3C:40:3C:ED:27:C8:DF:BB:9E:C7:11:27:2D:1D:79:36 Authority key identifier: E4:B3:2C:F2:A6:11:F7:02:DF:D0:91:3E:3E:A5:0B:4F:D6:1E:C5:75 Certificate issuer: /CN=A914450B/serialNumber=E4B32CF2A611F702DFD0913E3EA50B4FD61EC575 Certificate serial: 07A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LMs8qYR9wLf0JE-PqULT9YexXU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914450B/F7B9E30A13F111EBB8123950C4F9AE02/5LMs8qYR9wLf0JE-PqULT9YexXU.mft Manifest number: 079E Signing time: Fri 08 Aug 2025 21:44:50 +0000 Manifest this update: Fri 08 Aug 2025 21:44:49 +0000 Manifest next update: Fri 15 Aug 2025 21:44:49 +0000 Files and hashes: 1: 5LMs8qYR9wLf0JE-PqULT9YexXU.crl (hash: ONJAOAm1S2Tvsx1jJfIiIxfkOz42t5QogXWMNl9XHfo=) 2: 5B9B8A1213F311EBA7343351C4F9AE02.roa (hash: 2BrCNtIG6V0aTeNF5hAlLJ5D7nd2opyw1DNok89bW0k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914450B/F7B9E30A13F111EBB8123950C4F9AE02/5LMs8qYR9wLf0JE-PqULT9YexXU.crl rsync://rpki.apnic.net/member_repository/A914450B/F7B9E30A13F111EBB8123950C4F9AE02/5LMs8qYR9wLf0JE-PqULT9YexXU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LMs8qYR9wLf0JE-PqULT9YexXU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1956 (0x7a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914450B, serialNumber=E4B32CF2A611F702DFD0913E3EA50B4FD61EC575 Validity Not Before: Aug 8 21:44:49 2025 GMT Not After : Aug 15 21:44:49 2025 GMT Subject: CN=68966fd2-bd16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c7:27:5f:e4:b6:ff:e4:64:67:f2:b8:83:41: e0:05:f0:c6:81:3a:d1:a0:d4:c0:4b:de:e8:6b:88: 72:f9:e3:78:db:90:44:31:61:56:87:97:11:f1:78: 28:59:c4:f1:54:99:82:28:da:7b:19:bd:4d:55:c7: ce:04:80:85:13:83:55:16:5f:3e:a8:f3:29:bf:33: 19:4b:90:64:2f:33:8d:e3:90:2a:08:e0:72:8e:a4: d9:4c:dc:e4:ad:3d:06:58:40:98:14:7d:73:40:76: 7d:0d:35:d1:94:14:92:9e:18:c1:62:66:ec:fe:44: 80:56:a5:ff:85:16:25:7a:a6:02:86:81:d8:db:f8: 93:c4:58:de:c8:fd:16:0e:b5:8b:7f:95:5c:db:19: 93:48:86:0e:94:72:54:f8:68:f8:79:15:f3:99:7f: 30:69:bb:67:f7:bc:50:46:ec:16:c9:6c:f5:30:2b: a0:fd:7e:3e:48:b9:b3:23:14:f5:9a:59:27:9b:19: 66:51:83:1e:81:a1:bc:cc:fd:c1:d4:f0:e4:c0:36: b7:22:01:a9:34:b4:e6:0c:3f:63:d3:95:d1:ed:ce: c8:80:ea:7b:20:32:40:2c:c6:36:a9:43:5b:4e:c0: 00:54:f7:0c:44:dd:4e:51:3f:e2:a3:82:52:35:41: ec:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:6E:B4:BF:3C:40:3C:ED:27:C8:DF:BB:9E:C7:11:27:2D:1D:79:36 X509v3 Authority Key Identifier: keyid:E4:B3:2C:F2:A6:11:F7:02:DF:D0:91:3E:3E:A5:0B:4F:D6:1E:C5:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914450B/F7B9E30A13F111EBB8123950C4F9AE02/5LMs8qYR9wLf0JE-PqULT9YexXU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LMs8qYR9wLf0JE-PqULT9YexXU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914450B/F7B9E30A13F111EBB8123950C4F9AE02/5LMs8qYR9wLf0JE-PqULT9YexXU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:09:41:8d:dc:4b:d7:3b:42:17:3d:03:12:be:10:1f:05:e2: 5d:24:00:33:94:0f:1d:6b:b5:84:31:ac:78:24:b0:eb:f3:82: 96:b9:7f:b0:2d:4a:4b:80:fc:7d:da:26:4f:ca:a2:d3:68:57: ca:9c:45:7b:7f:a6:db:68:b9:dd:58:eb:2c:11:c3:eb:b6:85: 88:c1:91:fb:73:39:02:56:d9:bb:c0:92:73:97:df:b7:9d:8d: b0:ac:9f:16:5b:24:d3:aa:42:a8:5b:4e:5b:84:30:72:76:08: fa:b7:ce:63:76:ed:5c:60:65:d7:25:6a:aa:0a:68:0d:c7:be: f2:b5:41:4a:2a:06:3e:85:cf:9e:47:2c:f3:ca:83:74:70:0e: f5:c9:55:e9:c2:36:9e:86:4d:27:f3:3d:d8:37:93:e5:19:f7: 30:3c:f6:43:6a:fc:be:9d:52:be:85:c8:04:af:b6:22:54:49: b4:3e:8d:4e:dd:1c:41:a3:7b:f4:9c:f3:9a:98:1d:72:fc:60: 34:f1:c3:49:e4:15:d7:b3:44:a1:66:76:95:72:e4:7d:d0:66: 5e:6e:68:63:77:00:88:eb:47:a1:4a:de:bf:24:3b:c1:20:37: 73:4f:80:76:75:4a:ef:d1:31:94:86:ad:2e:fd:3d:a5:bc:a2: 6a:b9:af:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ1MEIxMTAvBgNVBAUTKEU0QjMyQ0YyQTYxMUY3MDJERkQwOTEzRTNFQTUwQjRG RDYxRUM1NzUwHhcNMjUwODA4MjE0NDQ5WhcNMjUwODE1MjE0NDQ5WjAYMRYwFAYD VQQDEw02ODk2NmZkMi1iZDE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoMcnX+S2/+RkZ/K4g0HgBfDGgTrRoNTAS97oa4hy+eN425BEMWFWh5cR8Xgo WcTxVJmCKNp7Gb1NVcfOBICFE4NVFl8+qPMpvzMZS5BkLzON45AqCOByjqTZTNzk rT0GWECYFH1zQHZ9DTXRlBSSnhjBYmbs/kSAVqX/hRYleqYChoHY2/iTxFjeyP0W DrWLf5Vc2xmTSIYOlHJU+Gj4eRXzmX8wabtn97xQRuwWyWz1MCug/X4+SLmzIxT1 mlknmxlmUYMegaG8zP3B1PDkwDa3IgGpNLTmDD9j05XR7c7IgOp7IDJALMY2qUNb TsAAVPcMRN1OUT/io4JSNUHsqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPtutL88 QDztJ8jfu57HESctHXk2MB8GA1UdIwQYMBaAFOSzLPKmEfcC39CRPj6lC0/WHsV1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDUwQi9GN0I5RTMwQTEz RjExMUVCQjgxMjM5NTBDNEY5QUUwMi81TE1zOHFZUjl3TGYwSkUtUHFVTFQ5WWV4 WFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVMTXM4cVlSOXdMZjBKRS1QcVVMVDlZZXhYVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDUwQi9GN0I5RTMwQTEzRjExMUVCQjgxMjM5NTBDNEY5QUUwMi81TE1zOHFZUjl3 TGYwSkUtUHFVTFQ5WWV4WFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQCUGN3EvXO0IXPQMSvhAfBeJdJAAzlA8da7WEMax4JLDr84KWuX+w LUpLgPx92iZPyqLTaFfKnEV7f6bbaLndWOssEcPrtoWIwZH7czkCVtm7wJJzl9+3 nY2wrJ8WWyTTqkKoW05bhDBydgj6t85jdu1cYGXXJWqqCmgNx77ytUFKKgY+hc+e RyzzyoN0cA71yVXpwjaehk0n8z3YN5PlGfcwPPZDavy+nVK+hcgEr7YiVEm0Po1O 3RxBo3v0nPOamB1y/GA08cNJ5BXXs0ShZnaVcuR90GZebmhjdwCI60ehSt6/JDvB IDdzT4B2dUrv0TGUhq0u/T2lvKJqua8L -----END CERTIFICATE-----Generated at Sun Aug 10 04:29:46 2025 by rpki-client