$ rpki-client -vvf rpki.apnic.net/member_repository/A917A362/7CBA4C4C726E11EE9FE35061C4F9AE02/5sRskdEtWFoSsFVpYh3uGtP4kI4.mft File: 5sRskdEtWFoSsFVpYh3uGtP4kI4.mft (raw, json) Hash identifier: v1d7ck4p539hBoUNsrvm2SZ8gMD1+aqCRtxQQ2pRxzQ= Subject key identifier: 62:67:CA:16:7A:C5:AE:C2:3C:21:7E:E7:20:79:43:4C:5E:D3:6C:90 Authority key identifier: E6:C4:6C:91:D1:2D:58:5A:12:B0:55:69:62:1D:EE:1A:D3:F8:90:8E Certificate issuer: /CN=A917A362/serialNumber=E6C46C91D12D585A12B05569621DEE1AD3F8908E Certificate serial: 0155 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5sRskdEtWFoSsFVpYh3uGtP4kI4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A362/7CBA4C4C726E11EE9FE35061C4F9AE02/5sRskdEtWFoSsFVpYh3uGtP4kI4.mft Manifest number: 0152 Signing time: Mon 11 Aug 2025 04:19:08 +0000 Manifest this update: Mon 11 Aug 2025 04:19:07 +0000 Manifest next update: Mon 18 Aug 2025 04:19:07 +0000 Files and hashes: 1: 5sRskdEtWFoSsFVpYh3uGtP4kI4.crl (hash: RrRwMQX+7Ao96snHpdRBHsG7tsS9+ncxGIguwfxF5K0=) 2: 1B299892726F11EEB1217365C4F9AE02.roa (hash: 6cDYRuNREDOcfjp20jGUwg25me6jxHxjZr5vSBlmhG8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A362/7CBA4C4C726E11EE9FE35061C4F9AE02/5sRskdEtWFoSsFVpYh3uGtP4kI4.crl rsync://rpki.apnic.net/member_repository/A917A362/7CBA4C4C726E11EE9FE35061C4F9AE02/5sRskdEtWFoSsFVpYh3uGtP4kI4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5sRskdEtWFoSsFVpYh3uGtP4kI4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 341 (0x155) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A362, serialNumber=E6C46C91D12D585A12B05569621DEE1AD3F8908E Validity Not Before: Aug 11 04:19:07 2025 GMT Not After : Aug 18 04:19:07 2025 GMT Subject: CN=68996f3b-c986 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:21:de:c8:6c:cd:91:57:4d:9a:8b:90:82:b2: 37:95:8a:75:ca:be:a9:e2:fd:11:77:87:9e:e2:5c: f7:99:d8:50:20:67:cc:e0:56:7f:a7:48:70:8b:7d: 8c:dc:b6:74:8b:c1:21:ff:50:48:ef:5f:b0:5d:82: 69:2a:52:ca:9d:15:0c:f5:9c:66:d7:82:f0:40:6b: f1:ca:c0:fa:b3:4e:a9:dc:ea:3a:f9:cb:47:66:f2: ce:55:5f:0a:69:26:08:be:e9:bf:2b:1c:59:9c:ce: f9:a9:af:3a:98:33:af:77:d7:4e:37:92:f9:84:4b: 11:a6:c7:8a:ce:24:eb:de:60:ea:fc:f5:6f:d9:11: a7:38:05:b5:45:d4:99:87:48:26:2c:53:4e:9d:1c: 70:8e:4e:5d:48:c6:28:d1:7f:9c:23:46:52:c1:d6: c5:05:6b:f4:2d:9c:e9:a6:c1:b2:d1:53:ab:ea:79: 00:9e:7e:fc:1e:bb:ca:99:46:7c:f8:c6:c2:9d:80: 86:f6:0e:48:86:4c:8f:81:69:9c:9a:ba:72:ff:e2: 3d:37:3f:22:ad:c6:e5:a3:85:76:ae:0d:82:10:a0: c3:02:d1:53:b7:a5:2e:05:6f:3c:7f:dc:c7:5e:6a: 40:5e:0e:cf:08:f6:81:3d:63:98:9e:e9:38:58:b3: 61:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:67:CA:16:7A:C5:AE:C2:3C:21:7E:E7:20:79:43:4C:5E:D3:6C:90 X509v3 Authority Key Identifier: keyid:E6:C4:6C:91:D1:2D:58:5A:12:B0:55:69:62:1D:EE:1A:D3:F8:90:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A362/7CBA4C4C726E11EE9FE35061C4F9AE02/5sRskdEtWFoSsFVpYh3uGtP4kI4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5sRskdEtWFoSsFVpYh3uGtP4kI4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A362/7CBA4C4C726E11EE9FE35061C4F9AE02/5sRskdEtWFoSsFVpYh3uGtP4kI4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:c0:8c:51:f8:6e:be:d3:a2:89:93:d2:6d:d6:e0:68:7b:5b: 8e:db:0c:df:0a:66:d7:8c:49:8f:f8:c0:a9:90:eb:e3:62:1b: 80:66:a5:38:fd:31:74:bd:32:da:3a:0b:57:3a:95:d5:37:a0: 87:54:58:73:e8:c3:7f:eb:0e:68:76:ba:17:94:98:84:96:f9: 45:71:a6:97:69:d0:05:86:15:79:56:52:5a:d3:8a:14:bd:e2: e3:7f:b2:9e:68:c3:77:85:fa:e0:99:9e:60:89:45:68:67:1e: 5d:d8:f2:2b:ae:33:4f:67:3a:8c:6a:b6:d8:d3:20:f4:e1:0f: 24:eb:40:72:6e:44:aa:9a:a2:12:02:62:5c:66:69:2a:ee:a8: cd:92:a1:50:0a:1f:2b:c5:93:89:ad:48:99:30:dc:20:77:ea: b3:5d:48:2f:a3:64:60:35:6d:5f:91:06:db:1f:01:dd:52:3f: 65:0d:9d:1a:89:cb:3c:6c:a8:f3:c9:b8:63:b3:f6:c8:3f:92: 55:13:c3:8d:1e:98:39:7d:f9:dc:ed:ce:6b:b6:28:15:bf:fe: 71:03:8a:73:65:37:42:cd:9a:30:bd:c5:ef:93:1f:ee:ad:ae: 12:91:bf:77:f1:ba:b4:1d:9c:24:e0:d8:5d:77:43:41:1c:12: e6:e4:2d:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0EzNjIxMTAvBgNVBAUTKEU2QzQ2QzkxRDEyRDU4NUExMkIwNTU2OTYyMURFRTFB RDNGODkwOEUwHhcNMjUwODExMDQxOTA3WhcNMjUwODE4MDQxOTA3WjAYMRYwFAYD VQQDEw02ODk5NmYzYi1jOTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9CHeyGzNkVdNmouQgrI3lYp1yr6p4v0Rd4ee4lz3mdhQIGfM4FZ/p0hwi32M 3LZ0i8Eh/1BI71+wXYJpKlLKnRUM9Zxm14LwQGvxysD6s06p3Oo6+ctHZvLOVV8K aSYIvum/KxxZnM75qa86mDOvd9dON5L5hEsRpseKziTr3mDq/PVv2RGnOAW1RdSZ h0gmLFNOnRxwjk5dSMYo0X+cI0ZSwdbFBWv0LZzppsGy0VOr6nkAnn78HrvKmUZ8 +MbCnYCG9g5IhkyPgWmcmrpy/+I9Nz8ircblo4V2rg2CEKDDAtFTt6UuBW88f9zH XmpAXg7PCPaBPWOYnuk4WLNhkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGJnyhZ6 xa7CPCF+5yB5Q0xe02yQMB8GA1UdIwQYMBaAFObEbJHRLVhaErBVaWId7hrT+JCO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTM2Mi83Q0JBNEM0Qzcy NkUxMUVFOUZFMzUwNjFDNEY5QUUwMi81c1Jza2RFdFdGb1NzRlZwWWgzdUd0UDRr STQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVzUnNrZEV0V0ZvU3NGVnBZaDN1R3RQNGtJNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTM2Mi83Q0JBNEM0QzcyNkUxMUVFOUZFMzUwNjFDNEY5QUUwMi81c1Jza2RFdFdG b1NzRlZwWWgzdUd0UDRrSTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiwIxR+G6+06KJk9Jt1uBoe1uO2wzfCmbXjEmP+MCpkOvjYhuAZqU4 /TF0vTLaOgtXOpXVN6CHVFhz6MN/6w5odroXlJiElvlFcaaXadAFhhV5VlJa04oU veLjf7KeaMN3hfrgmZ5giUVoZx5d2PIrrjNPZzqMarbY0yD04Q8k60BybkSqmqIS AmJcZmkq7qjNkqFQCh8rxZOJrUiZMNwgd+qzXUgvo2RgNW1fkQbbHwHdUj9lDZ0a ics8bKjzybhjs/bIP5JVE8ONHpg5ffnc7c5rtigVv/5xA4pzZTdCzZowvcXvkx/u ra4Skb938bq0HZwk4Nhdd0NBHBLm5C2+ -----END CERTIFICATE-----Generated at Mon Aug 11 10:37:58 2025 by rpki-client