$ rpki-client -vvf rpki.apnic.net/member_repository/A91561B7/5FA1ED309EF011E681102733C4F9AE02/5HE8G511dZKVr2TN-6YrcNuaBTc.mft File: 5HE8G511dZKVr2TN-6YrcNuaBTc.mft (raw, json) Hash identifier: 10GlDsaG7lVpw55ytUFW1UUCuefkRMkSctxknxEpnv8= Subject key identifier: 3C:BC:8D:3D:49:3B:2D:FF:E6:1B:56:96:8A:74:5A:21:B5:BA:5A:4B Authority key identifier: E4:71:3C:1B:9D:75:75:92:95:AF:64:CD:FB:A6:2B:70:DB:9A:05:37 Certificate issuer: /CN=A91561B7/serialNumber=E4713C1B9D75759295AF64CDFBA62B70DB9A0537 Certificate serial: 1DD1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5HE8G511dZKVr2TN-6YrcNuaBTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91561B7/5FA1ED309EF011E681102733C4F9AE02/5HE8G511dZKVr2TN-6YrcNuaBTc.mft Manifest number: 1DBC Signing time: Fri 08 Aug 2025 16:15:30 +0000 Manifest this update: Fri 08 Aug 2025 16:15:30 +0000 Manifest next update: Fri 15 Aug 2025 16:15:30 +0000 Files and hashes: 1: 5HE8G511dZKVr2TN-6YrcNuaBTc.crl (hash: O7xZt/+Hi94UwrXwpCCFqfYYoEp+BpXcALGyGoM5ljc=) 2: 4865DD00A13B11E687921078C4F9AE02.roa (hash: MaFWYkY2HcnSI16cq7zrf3Xg1TMrKe+K2OOU5n2vPcU=) 3: 1D57FF40A01311E684546521C4F9AE02.roa (hash: 8kLRR6g7/NXM5uPCUqU+X4Qb9woBVi0kDN/Wkxs+ARo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91561B7/5FA1ED309EF011E681102733C4F9AE02/5HE8G511dZKVr2TN-6YrcNuaBTc.crl rsync://rpki.apnic.net/member_repository/A91561B7/5FA1ED309EF011E681102733C4F9AE02/5HE8G511dZKVr2TN-6YrcNuaBTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5HE8G511dZKVr2TN-6YrcNuaBTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7633 (0x1dd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91561B7, serialNumber=E4713C1B9D75759295AF64CDFBA62B70DB9A0537 Validity Not Before: Aug 8 16:15:30 2025 GMT Not After : Aug 15 16:15:30 2025 GMT Subject: CN=689622a2-9006 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:73:4d:a3:5d:c4:98:eb:e9:63:7a:3b:28:c3: 1e:28:df:23:af:ce:f3:13:73:43:5d:30:b9:a8:f5: cb:65:01:6a:d9:b1:4b:f5:0b:af:09:04:ab:e9:d6: b3:a4:89:e9:c1:e3:1e:ac:6a:da:8d:8d:58:fd:e9: d3:51:11:7f:f7:65:ca:a6:e7:4b:7a:ce:e8:78:80: f1:f5:61:86:50:f2:e5:66:02:84:00:9d:93:38:8b: 58:7f:f9:86:cb:7e:31:98:9f:d1:b2:bf:c1:8b:02: ff:f5:62:2d:07:ba:b9:e3:87:3a:ad:9f:90:cb:fd: 48:47:43:3e:6f:3e:48:40:3a:99:29:b1:36:39:98: d0:54:13:ce:b4:82:7f:a3:c6:8d:ad:1b:00:3d:13: c7:fd:0e:0e:cf:7c:ce:3a:ca:18:6e:14:fd:f2:70: 95:f0:11:73:48:82:28:a3:c0:a7:16:d7:c1:ed:11: 4e:0d:ad:94:aa:84:3c:af:44:29:22:15:fa:00:ac: 43:0c:f9:8a:54:72:e3:11:ec:27:4f:28:eb:d3:94: 4f:d3:57:a3:3f:43:b1:e9:2e:aa:68:05:80:70:de: 2f:3f:ea:9a:66:30:1b:66:e3:03:ff:0b:87:5a:07: 52:44:75:ee:76:5e:8b:11:3c:65:a5:b5:0e:e2:81: 80:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:BC:8D:3D:49:3B:2D:FF:E6:1B:56:96:8A:74:5A:21:B5:BA:5A:4B X509v3 Authority Key Identifier: keyid:E4:71:3C:1B:9D:75:75:92:95:AF:64:CD:FB:A6:2B:70:DB:9A:05:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91561B7/5FA1ED309EF011E681102733C4F9AE02/5HE8G511dZKVr2TN-6YrcNuaBTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5HE8G511dZKVr2TN-6YrcNuaBTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91561B7/5FA1ED309EF011E681102733C4F9AE02/5HE8G511dZKVr2TN-6YrcNuaBTc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:8d:83:8c:02:28:fc:20:e9:d3:73:36:14:4f:23:68:94:13: 2a:94:72:ae:cb:09:6e:e1:33:6d:50:06:ae:fe:59:27:f0:12: 89:d3:9c:e1:4a:eb:34:01:59:1c:61:57:84:b7:60:be:e6:92: eb:b6:f7:33:27:d8:e9:74:ad:90:b6:76:51:12:02:d4:ea:a7: eb:15:75:0f:94:36:62:b6:9b:d5:b5:e4:b1:ee:ee:bd:65:18: 0f:c5:83:0c:a1:02:9a:09:63:1e:bb:e8:40:af:18:95:76:ce: a8:55:1e:fb:a8:24:36:36:44:75:d0:ad:db:dd:ce:2b:c5:0e: c8:27:52:c9:ed:6c:8a:b2:71:56:0b:d1:ca:18:bc:2c:43:cf: 78:14:86:ec:63:e8:65:d4:e0:d4:27:8b:ff:78:9d:4c:4c:9e: 96:10:c2:30:3d:28:d2:de:f2:87:a9:2e:80:8d:18:e0:e1:8b: ad:a1:0b:c3:e4:9c:03:5e:ec:f8:42:50:a9:8d:e6:f1:12:5c: 11:59:4e:60:e0:84:ec:05:f2:c0:59:cd:5e:e0:07:7d:f3:0d: cd:c8:ab:d5:32:6e:61:53:6f:5a:4f:2d:13:2e:b5:94:a3:ee: 5e:ce:0d:09:16:5d:16:13:30:fb:8a:f4:9e:44:5c:81:b8:2f: e7:87:8c:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHdEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYxQjcxMTAvBgNVBAUTKEU0NzEzQzFCOUQ3NTc1OTI5NUFGNjRDREZCQTYyQjcw REI5QTA1MzcwHhcNMjUwODA4MTYxNTMwWhcNMjUwODE1MTYxNTMwWjAYMRYwFAYD VQQDEw02ODk2MjJhMi05MDA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsXNNo13EmOvpY3o7KMMeKN8jr87zE3NDXTC5qPXLZQFq2bFL9QuvCQSr6daz pInpweMerGrajY1Y/enTURF/92XKpudLes7oeIDx9WGGUPLlZgKEAJ2TOItYf/mG y34xmJ/Rsr/BiwL/9WItB7q544c6rZ+Qy/1IR0M+bz5IQDqZKbE2OZjQVBPOtIJ/ o8aNrRsAPRPH/Q4Oz3zOOsoYbhT98nCV8BFzSIIoo8CnFtfB7RFODa2UqoQ8r0Qp IhX6AKxDDPmKVHLjEewnTyjr05RP01ejP0Ox6S6qaAWAcN4vP+qaZjAbZuMD/wuH WgdSRHXudl6LETxlpbUO4oGA/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDy8jT1J Oy3/5htWlop0WiG1ulpLMB8GA1UdIwQYMBaAFORxPBuddXWSla9kzfumK3DbmgU3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjFCNy81RkExRUQzMDlF RjAxMUU2ODExMDI3MzNDNEY5QUUwMi81SEU4RzUxMWRaS1ZyMlROLTZZcmNOdWFC VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVIRThHNTExZFpLVnIyVE4tNllyY051YUJUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjFCNy81RkExRUQzMDlFRjAxMUU2ODExMDI3MzNDNEY5QUUwMi81SEU4RzUxMWRa S1ZyMlROLTZZcmNOdWFCVGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0jYOMAij8IOnTczYUTyNolBMqlHKuywlu4TNtUAau/lkn8BKJ05zh Sus0AVkcYVeEt2C+5pLrtvczJ9jpdK2QtnZREgLU6qfrFXUPlDZitpvVteSx7u69 ZRgPxYMMoQKaCWMeu+hArxiVds6oVR77qCQ2NkR10K3b3c4rxQ7IJ1LJ7WyKsnFW C9HKGLwsQ894FIbsY+hl1ODUJ4v/eJ1MTJ6WEMIwPSjS3vKHqS6AjRjg4YutoQvD 5JwDXuz4QlCpjebxElwRWU5g4ITsBfLAWc1e4Ad98w3NyKvVMm5hU29aTy0TLrWU o+5ezg0JFl0WEzD7ivSeRFyBuC/nh4yR -----END CERTIFICATE-----Generated at Sat Aug 9 02:48:07 2025 by rpki-client