$ rpki-client -vvf rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.mft File: 5Qlj1wRocnNWt4t_xDgJdEKbZOE.mft (raw, json) Hash identifier: +/EhwpbdEWspiPD81mjzyCiYrAPrrYkJfJxEis/zONw= Subject key identifier: EE:E2:71:D3:0C:91:FE:BA:CA:03:E9:67:3C:6A:7A:11:71:B1:70:41 Authority key identifier: E5:09:63:D7:04:68:72:73:56:B7:8B:7F:C4:38:09:74:42:9B:64:E1 Certificate issuer: /CN=A914C7F8/serialNumber=E50963D70468727356B78B7FC4380974429B64E1 Certificate serial: 01A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qlj1wRocnNWt4t_xDgJdEKbZOE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.mft Manifest number: 019B Signing time: Mon 11 Aug 2025 03:35:19 +0000 Manifest this update: Mon 11 Aug 2025 03:35:19 +0000 Manifest next update: Mon 18 Aug 2025 03:35:19 +0000 Files and hashes: 1: 5Qlj1wRocnNWt4t_xDgJdEKbZOE.crl (hash: 7nZY8b8oH4QUEco6cygloLJAeholVU+NYd91suUAfEk=) 2: 47862E7E129C11EEA43CFD46C4F9AE02.roa (hash: aY3skSp/jdiXbJIQ5t5v3SVRkkPdKbP7qDrCfdERMMo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.crl rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qlj1wRocnNWt4t_xDgJdEKbZOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 418 (0x1a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C7F8, serialNumber=E50963D70468727356B78B7FC4380974429B64E1 Validity Not Before: Aug 11 03:35:19 2025 GMT Not After : Aug 18 03:35:19 2025 GMT Subject: CN=689964f7-f434 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c4:2b:71:1b:10:05:ab:d8:66:9d:1d:55:b1: 03:8e:59:d5:af:23:ec:a2:11:6e:8f:af:45:3b:47: 43:94:14:80:af:84:ba:c2:65:41:78:1a:fa:14:fc: ec:3b:cf:aa:c1:7f:41:0a:93:94:c0:0a:fb:a3:30: 66:e2:f7:fe:8f:da:7e:f7:b3:e1:db:10:7c:07:91: 47:13:2e:5d:7c:4c:1f:ff:99:86:81:1b:9a:59:da: 57:13:f9:1b:9e:ff:4b:54:a0:65:b7:a1:1e:01:40: d1:c8:c8:bb:f7:31:96:51:3d:cc:4b:aa:a8:37:a7: b2:9f:b3:91:99:fa:a4:2d:bc:3b:07:20:f3:87:cf: 8d:82:8f:82:d4:40:d6:2a:bf:9e:dd:4b:78:8b:e3: cb:8c:f7:65:fa:f6:02:66:e6:b7:38:96:db:a7:73: 45:0f:70:b1:dd:40:84:3c:4f:2c:c2:0f:5b:2d:78: 53:91:7f:d5:f2:e2:96:a3:11:d5:d8:74:d3:79:ad: 16:77:c9:2e:71:72:f2:3b:84:46:18:46:b2:03:23: a9:1b:c9:9d:8d:77:cd:74:90:fd:9b:12:e6:7a:ae: a4:7b:23:e4:85:72:22:be:67:94:5a:03:ea:88:4d: b6:5a:30:cd:80:59:05:9e:a9:85:ba:eb:ef:4a:14: 84:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:E2:71:D3:0C:91:FE:BA:CA:03:E9:67:3C:6A:7A:11:71:B1:70:41 X509v3 Authority Key Identifier: keyid:E5:09:63:D7:04:68:72:73:56:B7:8B:7F:C4:38:09:74:42:9B:64:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qlj1wRocnNWt4t_xDgJdEKbZOE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:c5:ab:2c:ee:a2:0a:47:53:63:77:9a:67:06:66:5f:54:b9: f3:f1:96:70:93:4f:df:d5:87:c5:74:21:1c:af:cc:49:bc:c7: c3:99:47:95:12:e9:65:13:6d:3a:15:5c:7f:49:51:24:18:09: 6a:80:f7:13:76:a2:e0:92:b4:6c:e7:13:69:c2:0d:29:24:21: 23:b1:7e:e7:1a:f7:a0:45:66:06:0e:33:f9:97:42:bd:6b:a7: d2:f5:55:b1:9c:f0:44:84:1c:e2:f1:aa:99:83:b3:a1:5f:02: b8:6f:20:9b:3d:a5:04:23:38:9c:d4:13:1f:ce:ba:24:da:b3: 82:4c:23:2c:5f:6b:c8:39:6b:ee:c4:82:7e:0b:0d:cb:80:89: 3a:8a:04:f6:3e:29:38:69:a4:bf:8e:d5:20:17:fc:cf:e7:ad: f8:3a:f6:5f:0b:44:99:dc:a7:5f:e3:4a:87:6a:42:21:28:e3: d8:ab:2b:b5:51:6f:d3:38:a2:9b:91:1c:cc:c1:85:96:52:79: 77:26:55:cd:d3:e4:b0:82:01:40:5f:6d:a4:42:da:9e:5f:71: 39:69:cd:57:2f:cf:a6:fa:32:66:e5:a2:9a:34:a7:ac:5d:4d: 9d:4a:b1:5e:9f:9b:47:37:cf:ff:a2:18:e9:79:96:8a:52:24: 73:5e:2b:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM3RjgxMTAvBgNVBAUTKEU1MDk2M0Q3MDQ2ODcyNzM1NkI3OEI3RkM0MzgwOTc0 NDI5QjY0RTEwHhcNMjUwODExMDMzNTE5WhcNMjUwODE4MDMzNTE5WjAYMRYwFAYD VQQDEw02ODk5NjRmNy1mNDM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlcQrcRsQBavYZp0dVbEDjlnVryPsohFuj69FO0dDlBSAr4S6wmVBeBr6FPzs O8+qwX9BCpOUwAr7ozBm4vf+j9p+97Ph2xB8B5FHEy5dfEwf/5mGgRuaWdpXE/kb nv9LVKBlt6EeAUDRyMi79zGWUT3MS6qoN6eyn7ORmfqkLbw7ByDzh8+Ngo+C1EDW Kr+e3Ut4i+PLjPdl+vYCZua3OJbbp3NFD3Cx3UCEPE8swg9bLXhTkX/V8uKWoxHV 2HTTea0Wd8kucXLyO4RGGEayAyOpG8mdjXfNdJD9mxLmeq6keyPkhXIivmeUWgPq iE22WjDNgFkFnqmFuuvvShSENwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO7icdMM kf66ygPpZzxqehFxsXBBMB8GA1UdIwQYMBaAFOUJY9cEaHJzVreLf8Q4CXRCm2Th MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzdGOC9FMjUxMEUxQzEy OTUxMUVFODRCQUQ3NDZDNEY5QUUwMi81UWxqMXdSb2NuTld0NHRfeERnSmRFS2Ja T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVRbGoxd1JvY25OV3Q0dF94RGdKZEVLYlpPRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzdGOC9FMjUxMEUxQzEyOTUxMUVFODRCQUQ3NDZDNEY5QUUwMi81UWxqMXdSb2Nu Tld0NHRfeERnSmRFS2JaT0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYxass7qIKR1Njd5pnBmZfVLnz8ZZwk0/f1YfFdCEcr8xJvMfDmUeV EullE206FVx/SVEkGAlqgPcTdqLgkrRs5xNpwg0pJCEjsX7nGvegRWYGDjP5l0K9 a6fS9VWxnPBEhBzi8aqZg7OhXwK4byCbPaUEIzic1BMfzrok2rOCTCMsX2vIOWvu xIJ+Cw3LgIk6igT2Pik4aaS/jtUgF/zP5634OvZfC0SZ3Kdf40qHakIhKOPYqyu1 UW/TOKKbkRzMwYWWUnl3JlXN0+SwggFAX22kQtqeX3E5ac1XL8+m+jJm5aKaNKes XU2dSrFen5tHN8//ohjpeZaKUiRzXitZ -----END CERTIFICATE-----Generated at Mon Aug 11 10:34:08 2025 by rpki-client