$ rpki-client -vvf rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft File: 5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft (raw, json) Hash identifier: 3pF/4kzfX/4/8ZSZS+OgYiGyD1jRtDOZ5aAt15w3LD4= Subject key identifier: B5:C2:F7:C1:15:D1:31:1E:37:C0:DD:72:53:37:FE:66:07:24:1A:02 Authority key identifier: E5:02:75:7C:61:7C:21:D4:7B:1B:35:59:C0:9D:6E:A7:C3:AF:E4:03 Certificate issuer: /CN=A91652F7/serialNumber=E502757C617C21D47B1B3559C09D6EA7C3AFE403 Certificate serial: 08CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft Manifest number: 08C2 Signing time: Fri 08 Aug 2025 20:48:38 +0000 Manifest this update: Fri 08 Aug 2025 20:48:37 +0000 Manifest next update: Fri 15 Aug 2025 20:48:37 +0000 Files and hashes: 1: 5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl (hash: A0jZ86/X/3dd6TS+NkgRaLgKlk7LcoSy+XE53sKZRag=) 2: A12DD18E2F1C11EDA3E29B09C4F9AE02.roa (hash: JY394gUy9qqM6BqtEt3A+TeeEC3ZSaP+KRzIxp12INs=) 3: A29A66FE2F1C11EDA3E29B09C4F9AE02.roa (hash: pwrQo06SW1WaZHmpSMN3Di6drTMadsg0IhrZWaRW7r4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2253 (0x8cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91652F7, serialNumber=E502757C617C21D47B1B3559C09D6EA7C3AFE403 Validity Not Before: Aug 8 20:48:37 2025 GMT Not After : Aug 15 20:48:37 2025 GMT Subject: CN=689662a6-189f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f1:d1:f9:b3:87:9c:09:66:06:9d:f5:da:fd: ff:c1:20:73:42:1d:93:2a:3e:be:21:d3:86:f5:b9: b9:c7:79:62:c2:92:35:97:7a:56:86:51:b4:6d:a7: 54:59:69:25:b6:31:5b:58:00:73:18:3e:c8:d9:ab: f5:eb:01:d2:cd:cb:d6:49:17:4c:0a:c8:02:31:3b: 7c:25:b1:b0:ed:71:c7:cc:30:fb:21:e2:c1:d3:ce: fc:b6:09:b8:67:1f:90:b4:dc:62:6a:43:f6:a4:af: d4:93:45:49:db:de:d5:f8:c5:ba:67:03:eb:be:01: af:93:0f:19:95:ce:08:ae:30:55:06:9c:4e:01:80: d6:c1:42:1c:19:4c:40:06:8f:8e:a9:f9:75:c2:af: 14:35:e7:0a:61:d8:d5:6b:8d:2a:e2:ea:bb:28:41: ed:f4:72:1c:f0:41:35:0a:13:4b:f9:8f:ba:9c:c1: fb:40:25:7f:5a:85:72:1f:53:15:44:e0:3b:3d:71: 9c:fb:3f:e9:88:eb:50:33:df:8a:ff:d5:55:4a:34: 57:a6:0c:f8:1e:1a:12:79:1a:0b:29:d7:e3:a8:e0: 7f:74:5f:6a:a2:9c:b5:b0:27:bd:c2:01:3b:c5:65: 42:8b:a4:c8:51:66:53:35:04:bb:b7:5c:62:4f:c4: 14:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:C2:F7:C1:15:D1:31:1E:37:C0:DD:72:53:37:FE:66:07:24:1A:02 X509v3 Authority Key Identifier: keyid:E5:02:75:7C:61:7C:21:D4:7B:1B:35:59:C0:9D:6E:A7:C3:AF:E4:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:f4:4c:34:17:9b:8a:9c:76:b7:fd:9a:97:17:31:61:f3:00: a8:7c:81:50:0a:74:85:89:37:ef:6c:e1:0e:54:f1:aa:88:73: fe:53:2b:37:63:24:38:a2:c3:fb:d1:ef:4f:4a:b0:4d:77:15: 61:1c:25:d1:9f:ec:75:89:27:6a:92:70:6e:65:76:6a:a5:6f: 1c:89:32:0d:c6:1d:40:82:25:58:85:25:7e:20:15:74:48:ea: 5b:d0:88:06:1a:fa:84:bb:03:d2:67:93:88:75:05:1c:be:b2: 1e:ca:72:c9:b9:ab:1d:cf:b4:69:3c:6c:02:7d:71:d0:48:67: b5:83:d6:d2:27:da:57:02:59:5d:9f:23:b3:a9:e7:82:5d:76: c0:33:08:da:07:21:c3:94:f1:79:5f:14:2d:e0:f6:bd:55:78: f1:99:26:24:ce:4a:8c:ad:cb:e1:d4:bb:9b:68:f6:75:59:fa: 5e:6e:35:40:29:2d:73:df:58:11:ac:c6:7a:ad:58:75:4b:14: bc:92:5c:8a:d5:57:e1:69:f1:80:7b:8c:5a:92:61:03:6a:f0: 18:53:04:63:9d:75:2a:42:72:69:a1:31:e5:2e:c4:ac:41:46: a6:57:e8:74:cd:58:3a:11:eb:a2:9f:05:7e:e4:8b:2b:80:0b: 05:92:3e:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjUyRjcxMTAvBgNVBAUTKEU1MDI3NTdDNjE3QzIxRDQ3QjFCMzU1OUMwOUQ2RUE3 QzNBRkU0MDMwHhcNMjUwODA4MjA0ODM3WhcNMjUwODE1MjA0ODM3WjAYMRYwFAYD VQQDEw02ODk2NjJhNi0xODlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzPHR+bOHnAlmBp312v3/wSBzQh2TKj6+IdOG9bm5x3liwpI1l3pWhlG0badU WWkltjFbWABzGD7I2av16wHSzcvWSRdMCsgCMTt8JbGw7XHHzDD7IeLB0878tgm4 Zx+QtNxiakP2pK/Uk0VJ297V+MW6ZwPrvgGvkw8Zlc4IrjBVBpxOAYDWwUIcGUxA Bo+Oqfl1wq8UNecKYdjVa40q4uq7KEHt9HIc8EE1ChNL+Y+6nMH7QCV/WoVyH1MV ROA7PXGc+z/piOtQM9+K/9VVSjRXpgz4HhoSeRoLKdfjqOB/dF9qopy1sCe9wgE7 xWVCi6TIUWZTNQS7t1xiT8QUVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLXC98EV 0TEeN8DdclM3/mYHJBoCMB8GA1UdIwQYMBaAFOUCdXxhfCHUexs1WcCdbqfDr+QD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTJGNy83Q0M0NUZBRUJB QUYxMUVBQTZERDFBM0RDNEY5QUUwMi81UUoxZkdGOElkUjdHelZad0oxdXA4T3Y1 QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVRSjFmR0Y4SWRSN0d6Vlp3SjF1cDhPdjVBTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTJGNy83Q0M0NUZBRUJBQUYxMUVBQTZERDFBM0RDNEY5QUUwMi81UUoxZkdGOElk UjdHelZad0oxdXA4T3Y1QU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQ9Ew0F5uKnHa3/ZqXFzFh8wCofIFQCnSFiTfvbOEOVPGqiHP+Uys3 YyQ4osP70e9PSrBNdxVhHCXRn+x1iSdqknBuZXZqpW8ciTINxh1AgiVYhSV+IBV0 SOpb0IgGGvqEuwPSZ5OIdQUcvrIeynLJuasdz7RpPGwCfXHQSGe1g9bSJ9pXAlld nyOzqeeCXXbAMwjaByHDlPF5XxQt4Pa9VXjxmSYkzkqMrcvh1LubaPZ1WfpebjVA KS1z31gRrMZ6rVh1SxS8klyK1VfhafGAe4xakmEDavAYUwRjnXUqQnJpoTHlLsSs QUamV+h0zVg6EeuinwV+5IsrgAsFkj4+ -----END CERTIFICATE-----Generated at Sun Aug 10 04:47:36 2025 by rpki-client