$ rpki-client -vvf rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.mft File: 5S1_f7qsH3Wv-nYu2z8oFgvPvSU.mft (raw, json) Hash identifier: LaQUkcxiqCRE2BKItabQYu4nQ3Cgc0e+EaJx4sorrhg= Subject key identifier: ED:DE:23:BB:A9:FC:6C:18:AE:26:ED:C2:34:47:F6:1D:E8:58:A6:E8 Authority key identifier: E5:2D:7F:7F:BA:AC:1F:75:AF:FA:76:2E:DB:3F:28:16:0B:CF:BD:25 Certificate issuer: /CN=A914A47A/serialNumber=E52D7F7FBAAC1F75AFFA762EDB3F28160BCFBD25 Certificate serial: 34B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.mft Manifest number: 34AA Signing time: Mon 04 Aug 2025 14:54:13 +0000 Manifest this update: Mon 04 Aug 2025 14:54:12 +0000 Manifest next update: Mon 11 Aug 2025 14:54:12 +0000 Files and hashes: 1: 5S1_f7qsH3Wv-nYu2z8oFgvPvSU.crl (hash: DJnk5XhG9Z8ykgVEDCH8qddVltaUmQ3ii9dgVeVSbdM=) 2: A5C01D6ED15511EA904EF30BC4F9AE02.roa (hash: tieWSzu8lKOoBqQ293X6Mhk+ox3CzZ2+KgEe+KsaI+8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.crl rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 14:54:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13488 (0x34b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A47A, serialNumber=E52D7F7FBAAC1F75AFFA762EDB3F28160BCFBD25 Validity Not Before: Aug 4 14:54:12 2025 GMT Not After : Aug 11 14:54:12 2025 GMT Subject: CN=6890c995-8422 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9c:f5:5e:8c:0b:61:34:76:be:1f:33:7f:c1: e3:52:ed:b2:cd:e7:aa:63:a5:56:ab:0e:d0:28:53: 75:a1:f7:03:ab:31:4c:d2:e1:41:05:69:26:9e:5a: d9:e6:e5:c8:59:da:71:e8:aa:0b:b4:0f:63:9e:4f: 5d:23:85:34:43:66:c8:78:02:46:56:3a:7b:91:ea: 24:06:0e:d3:32:ad:b8:6b:42:32:cb:ec:13:86:7e: 9e:a0:39:d4:07:45:35:60:cc:f2:f3:03:4c:74:c6: 3e:d2:f1:fd:35:7a:94:b1:1f:84:74:93:b9:f0:05: 11:ad:a2:c0:e7:f9:5f:7a:71:bd:96:e0:4b:96:64: c0:93:18:30:46:f9:be:b1:7b:ff:4c:e6:44:a5:4c: 6d:5f:dd:4f:a4:cb:33:5e:88:f3:cf:5f:56:86:5a: d4:19:7b:9a:8c:b7:99:e6:d0:b5:35:42:3f:69:a7: 6d:3f:79:16:d8:80:41:7d:b8:02:cf:62:f4:22:95: 0c:37:af:27:54:42:44:1e:53:36:e0:6a:4e:86:6d: 5c:ea:3d:0a:33:22:3f:b6:4b:7c:3f:75:cd:25:2c: 54:11:6b:49:05:23:4c:24:db:17:db:26:b6:8a:95: 96:a2:aa:57:28:65:7c:14:19:6c:d4:6f:f3:ef:68: 9c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:DE:23:BB:A9:FC:6C:18:AE:26:ED:C2:34:47:F6:1D:E8:58:A6:E8 X509v3 Authority Key Identifier: keyid:E5:2D:7F:7F:BA:AC:1F:75:AF:FA:76:2E:DB:3F:28:16:0B:CF:BD:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:da:d9:05:8e:67:2c:ff:83:67:2b:4c:37:88:ce:87:f4:99: 53:a9:49:78:e5:53:ac:dc:57:ed:19:e9:1b:be:26:38:43:bf: 14:59:ad:2b:ea:65:d4:c4:dd:67:24:49:20:4c:0a:37:19:17: 83:14:22:c2:b9:0c:84:39:79:f7:16:3a:bb:66:95:0d:99:4b: b4:01:2a:82:5a:97:f2:24:02:76:7e:cc:f9:c8:e5:67:07:01: e4:58:ce:fa:a0:a5:8c:fd:af:52:ae:1c:43:ba:c6:7c:fb:4a: 4c:40:94:47:45:77:58:6d:d9:d6:2f:07:ef:0c:ac:0c:31:9e: 5c:d1:31:f9:ed:24:79:e9:87:28:2c:71:8a:9a:1f:f5:ab:4b: 3b:e3:94:af:97:d5:d8:50:4b:53:33:15:88:88:d1:95:a4:0f: 22:a7:2a:b3:58:5a:a7:0a:64:96:af:d6:aa:f0:a1:b4:ee:28: bf:f1:73:2f:33:8d:51:f8:23:1b:ef:ca:82:79:85:b7:93:fe: 4a:70:02:46:47:26:2d:9d:c3:6a:e8:22:96:7d:16:7d:3c:16: dd:f3:cf:f7:82:87:c1:4b:bf:73:6c:ed:07:28:66:22:75:9a: 33:77:55:ad:3b:24:f9:56:23:6a:b0:9a:f4:58:fd:dc:dd:0b: 42:aa:35:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE0N0ExMTAvBgNVBAUTKEU1MkQ3RjdGQkFBQzFGNzVBRkZBNzYyRURCM0YyODE2 MEJDRkJEMjUwHhcNMjUwODA0MTQ1NDEyWhcNMjUwODExMTQ1NDEyWjAYMRYwFAYD VQQDEw02ODkwYzk5NS04NDIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxZz1XowLYTR2vh8zf8HjUu2yzeeqY6VWqw7QKFN1ofcDqzFM0uFBBWkmnlrZ 5uXIWdpx6KoLtA9jnk9dI4U0Q2bIeAJGVjp7keokBg7TMq24a0Iyy+wThn6eoDnU B0U1YMzy8wNMdMY+0vH9NXqUsR+EdJO58AURraLA5/lfenG9luBLlmTAkxgwRvm+ sXv/TOZEpUxtX91PpMszXojzz19WhlrUGXuajLeZ5tC1NUI/aadtP3kW2IBBfbgC z2L0IpUMN68nVEJEHlM24GpOhm1c6j0KMyI/tkt8P3XNJSxUEWtJBSNMJNsX2ya2 ipWWoqpXKGV8FBls1G/z72ic+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO3eI7up /GwYribtwjRH9h3oWKboMB8GA1UdIwQYMBaAFOUtf3+6rB91r/p2Lts/KBYLz70l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTQ3QS80QUYyMjFEQTFE OTgxMUUyQUQyQjM5ODIwOEIwMkNEMi81UzFfZjdxc0gzV3Ytbll1Mno4b0ZndlB2 U1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVTMV9mN3FzSDNXdi1uWXUyejhvRmd2UHZTVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTQ3QS80QUYyMjFEQTFEOTgxMUUyQUQyQjM5ODIwOEIwMkNEMi81UzFfZjdxc0gz V3Ytbll1Mno4b0ZndlB2U1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAp2tkFjmcs/4NnK0w3iM6H9JlTqUl45VOs3FftGekbviY4Q78UWa0r 6mXUxN1nJEkgTAo3GReDFCLCuQyEOXn3Fjq7ZpUNmUu0ASqCWpfyJAJ2fsz5yOVn BwHkWM76oKWM/a9SrhxDusZ8+0pMQJRHRXdYbdnWLwfvDKwMMZ5c0TH57SR56Yco LHGKmh/1q0s745Svl9XYUEtTMxWIiNGVpA8ipyqzWFqnCmSWr9aq8KG07ii/8XMv M41R+CMb78qCeYW3k/5KcAJGRyYtncNq6CKWfRZ9PBbd88/3gofBS79zbO0HKGYi dZozd1WtOyT5ViNqsJr0WP3c3QtCqjXK -----END CERTIFICATE-----Generated at Wed Aug 6 13:16:38 2025 by rpki-client