$ rpki-client -vvf rpki.apnic.net/member_repository/A917F8F2/022D571CD65E11EAB60CA36BC4F9AE02/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.mft File: t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.mft (raw, json) Hash identifier: V6oUTvfmhrWmiWWJI+nFYIChyPqaFC0KQuCztbxH9HI= Subject key identifier: 7B:5A:46:B3:DC:A6:99:33:88:C3:CE:7E:44:06:86:9B:A6:40:CB:B0 Authority key identifier: B7:91:BD:1C:9E:20:81:AA:84:F8:07:80:66:C0:C7:F6:0A:63:79:0E Certificate issuer: /CN=A917F8F2/serialNumber=B791BD1C9E2081AA84F8078066C0C7F60A63790E Certificate serial: 0856 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F8F2/022D571CD65E11EAB60CA36BC4F9AE02/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.mft Manifest number: 0847 Signing time: Wed 06 Aug 2025 21:02:36 +0000 Manifest this update: Wed 06 Aug 2025 21:02:36 +0000 Manifest next update: Wed 13 Aug 2025 21:02:36 +0000 Files and hashes: 1: t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.crl (hash: yGpAuhnrMn9hU5xja7v+DRRmM+EQldzBtzbAcLRgkrk=) 2: B78B5CB6D65F11EA8B30486EC4F9AE02.roa (hash: MyNq7pYsfXRPiYwbL0q3/Dn2sx3QYfe2KkNfFn5PXS8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F8F2/022D571CD65E11EAB60CA36BC4F9AE02/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.crl rsync://rpki.apnic.net/member_repository/A917F8F2/022D571CD65E11EAB60CA36BC4F9AE02/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 21:02:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2134 (0x856) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F8F2, serialNumber=B791BD1C9E2081AA84F8078066C0C7F60A63790E Validity Not Before: Aug 6 21:02:36 2025 GMT Not After : Aug 13 21:02:36 2025 GMT Subject: CN=6893c2ec-7c82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a0:01:58:ea:80:78:86:26:22:a9:4e:20:a6: e6:6c:6a:25:b3:f3:de:b3:72:c4:a6:6a:ce:a6:5f: 5c:e7:9d:82:bb:01:f9:78:a4:58:6f:ae:4e:14:5b: 99:a1:fd:44:00:cc:6c:d1:50:21:9f:af:d8:4f:ed: f2:a6:39:c1:62:04:6c:9a:df:b8:e0:4e:05:58:c5: 6e:96:bf:eb:6f:e8:c9:d6:15:c1:f0:2d:24:0a:20: db:09:d3:3d:1a:46:dc:46:9c:93:62:c4:ce:ce:7f: 39:ac:1e:e6:d1:4a:cb:f7:04:04:ac:c6:09:0f:ec: 35:cb:6a:d8:bd:12:0a:c0:9c:63:c8:8d:db:1c:ef: cf:c5:6a:00:75:7f:95:07:6b:a2:0d:13:b0:d7:4f: d9:f3:fc:2e:31:11:16:e4:99:79:0b:6b:40:21:b6: 6b:ec:b8:45:3b:b6:51:9f:90:0b:83:6e:44:2b:94: a8:7b:98:78:83:81:f5:87:1a:7f:70:af:d1:64:c0: 21:bb:0a:64:31:85:85:33:46:91:5d:b9:3a:bb:68: 0f:6f:92:b2:d7:40:7e:7a:33:8a:5c:c9:b2:f6:36: 66:11:55:67:af:66:3d:12:a4:6e:31:58:23:70:21: 5e:d3:7b:e6:68:b1:fe:94:63:c4:e7:eb:db:00:3f: f6:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:5A:46:B3:DC:A6:99:33:88:C3:CE:7E:44:06:86:9B:A6:40:CB:B0 X509v3 Authority Key Identifier: keyid:B7:91:BD:1C:9E:20:81:AA:84:F8:07:80:66:C0:C7:F6:0A:63:79:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F8F2/022D571CD65E11EAB60CA36BC4F9AE02/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F8F2/022D571CD65E11EAB60CA36BC4F9AE02/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:4d:cc:46:42:ba:8c:89:b6:6d:b1:04:77:65:00:98:3a:23: 7b:a0:75:a1:1e:ab:d4:39:6b:8e:75:7d:56:cc:9d:09:51:82: 98:ac:70:16:cc:de:00:81:24:0d:b8:cd:ed:35:6f:16:fa:a7: fb:94:f5:60:3b:21:e3:ad:56:a0:f7:fd:68:b4:c8:45:50:9d: 91:50:95:6d:e3:0b:0b:86:5b:54:65:9e:57:ad:8b:17:de:8b: 7b:40:27:05:1f:8d:3c:7d:a4:d3:8d:65:7a:28:5a:b7:f2:8b: 7f:bc:94:04:b7:a9:f1:86:65:4b:3a:c6:ec:e8:c7:97:f9:18: 90:89:2a:78:5e:aa:da:95:75:d2:49:8f:9f:41:8a:48:96:5f: 0c:de:fa:87:c7:3a:49:00:f3:2f:e2:bb:0c:d5:68:ab:d8:8e: 92:7b:a6:7e:a8:3f:31:82:b6:18:56:47:cb:90:f3:e0:83:72: e8:43:36:78:79:73:17:9b:64:06:20:43:a0:10:cf:ff:b2:2d: f7:f1:f5:42:23:cd:eb:99:5a:f8:43:e4:b1:7b:ce:b0:78:a5: 5b:92:ad:ac:56:b6:9b:bf:6e:84:24:f7:0e:d6:08:c8:ef:63: 39:32:4d:be:8a:05:d2:79:eb:dc:76:03:5a:dd:84:07:c2:83: 8c:89:d7:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Y4RjIxMTAvBgNVBAUTKEI3OTFCRDFDOUUyMDgxQUE4NEY4MDc4MDY2QzBDN0Y2 MEE2Mzc5MEUwHhcNMjUwODA2MjEwMjM2WhcNMjUwODEzMjEwMjM2WjAYMRYwFAYD VQQDEw02ODkzYzJlYy03YzgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArKABWOqAeIYmIqlOIKbmbGols/Pes3LEpmrOpl9c552CuwH5eKRYb65OFFuZ of1EAMxs0VAhn6/YT+3ypjnBYgRsmt+44E4FWMVulr/rb+jJ1hXB8C0kCiDbCdM9 GkbcRpyTYsTOzn85rB7m0UrL9wQErMYJD+w1y2rYvRIKwJxjyI3bHO/PxWoAdX+V B2uiDROw10/Z8/wuMREW5Jl5C2tAIbZr7LhFO7ZRn5ALg25EK5Soe5h4g4H1hxp/ cK/RZMAhuwpkMYWFM0aRXbk6u2gPb5Ky10B+ejOKXMmy9jZmEVVnr2Y9EqRuMVgj cCFe03vmaLH+lGPE5+vbAD/2nQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHtaRrPc ppkziMPOfkQGhpumQMuwMB8GA1UdIwQYMBaAFLeRvRyeIIGqhPgHgGbAx/YKY3kO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjhGMi8wMjJENTcxQ0Q2 NUUxMUVBQjYwQ0EzNkJDNEY5QUUwMi90NUc5SEo0Z2dhcUUtQWVBWnNESDlncGpl UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q1RzlISjRnZ2FxRS1BZUFac0RIOWdwamVRNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjhGMi8wMjJENTcxQ0Q2NUUxMUVBQjYwQ0EzNkJDNEY5QUUwMi90NUc5SEo0Z2dh cUUtQWVBWnNESDlncGplUTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADTcxGQrqMibZtsQR3ZQCYOiN7oHWhHqvUOWuOdX1WzJ0JUYKYrHAW zN4AgSQNuM3tNW8W+qf7lPVgOyHjrVag9/1otMhFUJ2RUJVt4wsLhltUZZ5XrYsX 3ot7QCcFH408faTTjWV6KFq38ot/vJQEt6nxhmVLOsbs6MeX+RiQiSp4XqralXXS SY+fQYpIll8M3vqHxzpJAPMv4rsM1Wir2I6Se6Z+qD8xgrYYVkfLkPPgg3LoQzZ4 eXMXm2QGIEOgEM//si338fVCI83rmVr4Q+Sxe86weKVbkq2sVrabv26EJPcO1gjI 72M5Mk2+igXSeevcdgNa3YQHwoOMides -----END CERTIFICATE-----Generated at Fri Aug 8 12:58:40 2025 by rpki-client