$ rpki-client -vvf rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/5pnbzeCcCqX45mrgpzJU3KBdhdQ.mft File: 5pnbzeCcCqX45mrgpzJU3KBdhdQ.mft (raw, json) Hash identifier: zHe6lr7IppX9Zjc5rOaeunyLApe2qE4aM9EGc3OqZrk= Subject key identifier: 8A:C5:B7:DF:90:E8:14:9E:A9:5B:DC:69:22:61:AF:9E:8A:7A:10:AF Authority key identifier: E6:99:DB:CD:E0:9C:0A:A5:F8:E6:6A:E0:A7:32:54:DC:A0:5D:85:D4 Certificate issuer: /CN=A915C15F/serialNumber=E699DBCDE09C0AA5F8E66AE0A73254DCA05D85D4 Certificate serial: 06A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pnbzeCcCqX45mrgpzJU3KBdhdQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/5pnbzeCcCqX45mrgpzJU3KBdhdQ.mft Manifest number: 068D Signing time: Wed 06 Aug 2025 22:50:29 +0000 Manifest this update: Wed 06 Aug 2025 22:50:28 +0000 Manifest next update: Wed 13 Aug 2025 22:50:28 +0000 Files and hashes: 1: 5pnbzeCcCqX45mrgpzJU3KBdhdQ.crl (hash: xurFW3W04OWyDpyMII6b7Ts0JOaBWFFuG+R4KLeoHFk=) 2: 2540A3D24C9F11F0B3E79877C4F9AE02.roa (hash: 6T54i51OGw9J/SGlpB680rrKuAdgx9J1NeMWxwYBKWc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/5pnbzeCcCqX45mrgpzJU3KBdhdQ.crl rsync://rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/5pnbzeCcCqX45mrgpzJU3KBdhdQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pnbzeCcCqX45mrgpzJU3KBdhdQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 22:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1696 (0x6a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C15F, serialNumber=E699DBCDE09C0AA5F8E66AE0A73254DCA05D85D4 Validity Not Before: Aug 6 22:50:28 2025 GMT Not After : Aug 13 22:50:28 2025 GMT Subject: CN=6893dc35-8c46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:81:db:8b:f4:13:b3:a1:42:29:73:d3:38:9e: bf:49:3a:a6:b4:24:91:66:53:61:aa:15:08:e5:f4: 32:16:57:85:72:6d:02:cb:78:44:6e:bc:74:6a:7f: c8:e2:0e:f7:6a:af:7b:47:cf:79:ab:9f:be:87:29: 9e:68:b7:6d:78:b9:8d:79:0e:d8:85:9b:01:89:94: 29:a4:1e:34:3f:da:df:2b:49:55:75:f6:bc:08:b0: e9:9c:1b:7b:59:f4:95:1c:0e:3c:3c:05:66:dc:36: 04:ce:73:14:c2:c8:e6:e3:5c:d3:81:45:36:c2:db: 0f:aa:e2:52:ba:d9:9e:13:ec:78:80:7c:87:15:bb: 5d:4b:a8:4c:bd:99:c8:51:08:ba:2e:4e:fe:57:c7: d1:44:c4:2b:5b:1f:0f:89:d5:ca:76:52:94:49:dd: cb:62:01:f8:94:bb:d3:04:1c:96:f1:34:47:8e:40: e1:27:22:f2:c4:80:58:d6:2b:c9:e0:15:13:a7:8d: 6c:fe:f5:28:db:84:bc:03:e0:27:22:c0:ec:a5:02: c2:46:c4:66:d7:c0:c1:d6:b9:da:fc:d1:88:ed:9b: 8f:19:87:36:d8:99:eb:75:ba:d8:10:63:e8:80:3b: 8c:8f:f0:bb:94:2d:68:04:3f:7b:08:7f:5f:76:14: f8:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:C5:B7:DF:90:E8:14:9E:A9:5B:DC:69:22:61:AF:9E:8A:7A:10:AF X509v3 Authority Key Identifier: keyid:E6:99:DB:CD:E0:9C:0A:A5:F8:E6:6A:E0:A7:32:54:DC:A0:5D:85:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/5pnbzeCcCqX45mrgpzJU3KBdhdQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pnbzeCcCqX45mrgpzJU3KBdhdQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/5pnbzeCcCqX45mrgpzJU3KBdhdQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:86:3e:70:f7:d1:67:97:97:8c:f4:56:c6:92:9c:ca:03:a5: 3d:8b:7e:93:24:df:b0:94:27:41:1d:98:35:28:2e:db:7b:78: 94:76:d0:8a:ab:0d:43:e2:eb:0d:44:b0:cb:67:fe:8f:10:a2: 6a:df:6f:53:62:f8:3c:a3:4e:4d:56:d8:c1:ae:98:b3:38:4c: 67:a2:43:c7:37:e1:5e:0e:fd:44:00:70:cf:d5:f7:dc:b1:5e: 95:e5:2e:f0:cd:3e:cc:27:29:19:54:6c:78:5d:c4:2c:80:6d: b1:01:cf:c9:b7:6c:a6:f6:e4:9e:bd:c9:03:b9:8c:f7:77:50: 39:6e:23:84:ce:10:6a:6c:93:28:75:c3:ea:3e:27:fc:13:7c: 4e:01:b7:8c:dd:fd:d3:7d:84:11:39:dd:c6:fa:3d:86:fb:91: 49:23:f1:1a:a8:d0:72:d4:18:32:eb:55:06:c3:fc:c0:cb:80: 7d:30:20:4b:19:e0:7b:de:db:55:7d:de:83:36:fd:cb:d6:1a: 19:3f:97:61:0d:e8:cb:fc:96:db:d4:66:2d:48:5b:b9:65:b0: ab:97:37:18:df:62:50:a2:3e:bd:33:cf:6d:fb:49:bb:50:60: 80:16:c1:86:e9:ef:f9:a8:4d:d7:80:3b:ba:1d:29:b5:22:f9: 20:f9:f2:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUMxNUYxMTAvBgNVBAUTKEU2OTlEQkNERTA5QzBBQTVGOEU2NkFFMEE3MzI1NERD QTA1RDg1RDQwHhcNMjUwODA2MjI1MDI4WhcNMjUwODEzMjI1MDI4WjAYMRYwFAYD VQQDEw02ODkzZGMzNS04YzQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArIHbi/QTs6FCKXPTOJ6/STqmtCSRZlNhqhUI5fQyFleFcm0Cy3hEbrx0an/I 4g73aq97R895q5++hymeaLdteLmNeQ7YhZsBiZQppB40P9rfK0lVdfa8CLDpnBt7 WfSVHA48PAVm3DYEznMUwsjm41zTgUU2wtsPquJSutmeE+x4gHyHFbtdS6hMvZnI UQi6Lk7+V8fRRMQrWx8PidXKdlKUSd3LYgH4lLvTBByW8TRHjkDhJyLyxIBY1ivJ 4BUTp41s/vUo24S8A+AnIsDspQLCRsRm18DB1rna/NGI7ZuPGYc22JnrdbrYEGPo gDuMj/C7lC1oBD97CH9fdhT4mQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIrFt9+Q 6BSeqVvcaSJhr56KehCvMB8GA1UdIwQYMBaAFOaZ283gnAql+OZq4KcyVNygXYXU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzE1Ri85MzI5QjBCNjhD NjcxMUVCQjdFRTg2M0VDNEY5QUUwMi81cG5iemVDY0NxWDQ1bXJncHpKVTNLQmRo ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVwbmJ6ZUNjQ3FYNDVtcmdwekpVM0tCZGhkUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QzE1Ri85MzI5QjBCNjhDNjcxMUVCQjdFRTg2M0VDNEY5QUUwMi81cG5iemVDY0Nx WDQ1bXJncHpKVTNLQmRoZFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGhj5w99Fnl5eM9FbGkpzKA6U9i36TJN+wlCdBHZg1KC7be3iUdtCK qw1D4usNRLDLZ/6PEKJq329TYvg8o05NVtjBrpizOExnokPHN+FeDv1EAHDP1ffc sV6V5S7wzT7MJykZVGx4XcQsgG2xAc/Jt2ym9uSevckDuYz3d1A5biOEzhBqbJMo dcPqPif8E3xOAbeM3f3TfYQROd3G+j2G+5FJI/EaqNBy1Bgy61UGw/zAy4B9MCBL GeB73ttVfd6DNv3L1hoZP5dhDejL/Jbb1GYtSFu5ZbCrlzcY32JQoj69M89t+0m7 UGCAFsGG6e/5qE3XgDu6HSm1Ivkg+fLx -----END CERTIFICATE-----Generated at Fri Aug 8 21:02:28 2025 by rpki-client