$ rpki-client -vvf rpki.apnic.net/member_repository/A9185413/759AD24CAB9E11EE963D317DC4F9AE02/D5mx_s-lcAT2Q9gr9RHN1HR4baA.mft File: D5mx_s-lcAT2Q9gr9RHN1HR4baA.mft (raw, json) Hash identifier: d/e8gtcRLH93m62On6z+2StEVNSirgI20Rq26psswDs= Subject key identifier: F0:86:A0:7F:1B:4C:3B:F0:40:DD:4D:01:10:80:35:17:C1:F8:E7:42 Authority key identifier: 0F:99:B1:FE:CF:A5:70:04:F6:43:D8:2B:F5:11:CD:D4:74:78:6D:A0 Certificate issuer: /CN=A9185413/serialNumber=0F99B1FECFA57004F643D82BF511CDD474786DA0 Certificate serial: 0132 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5mx_s-lcAT2Q9gr9RHN1HR4baA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185413/759AD24CAB9E11EE963D317DC4F9AE02/D5mx_s-lcAT2Q9gr9RHN1HR4baA.mft Manifest number: 012F Signing time: Sat 09 Aug 2025 04:58:51 +0000 Manifest this update: Sat 09 Aug 2025 04:58:51 +0000 Manifest next update: Sat 16 Aug 2025 04:58:51 +0000 Files and hashes: 1: D5mx_s-lcAT2Q9gr9RHN1HR4baA.crl (hash: /UqDmazrqE1q/A5NPZ0PwEXil32BYIJhYU28TuPd8q4=) 2: C1D49C12AEDF11EE96155C68C4F9AE02.roa (hash: g1jIfsO6mvnPQ5u6rCHd1+bi2Eyo0F5psuhhGonMZAg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185413/759AD24CAB9E11EE963D317DC4F9AE02/D5mx_s-lcAT2Q9gr9RHN1HR4baA.crl rsync://rpki.apnic.net/member_repository/A9185413/759AD24CAB9E11EE963D317DC4F9AE02/D5mx_s-lcAT2Q9gr9RHN1HR4baA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5mx_s-lcAT2Q9gr9RHN1HR4baA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 306 (0x132) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185413, serialNumber=0F99B1FECFA57004F643D82BF511CDD474786DA0 Validity Not Before: Aug 9 04:58:51 2025 GMT Not After : Aug 16 04:58:51 2025 GMT Subject: CN=6896d58b-7acd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:69:41:d8:4d:21:69:8c:9a:c6:76:d1:3e:2e: cc:24:d1:0e:21:b7:29:31:b3:6c:cc:bc:d1:1d:29: e4:6b:81:c1:e5:73:c8:2d:db:ea:13:1f:78:79:97: dc:04:ac:f2:28:1b:2d:97:7e:d7:17:98:8b:cb:28: b0:d1:86:7e:f7:a2:85:a1:f2:51:94:18:20:27:85: e9:e6:4a:61:c8:84:81:f2:30:92:b4:1d:29:14:50: fc:7a:64:29:ae:df:7e:20:43:8f:0d:e8:20:f4:c3: f2:f8:1b:89:40:15:3d:a3:b0:ac:2f:4d:4a:09:7a: e9:e6:98:0d:e2:6b:e3:1c:57:9e:a5:9f:b9:56:d7: 50:a7:9d:a0:95:5a:39:e2:d9:6e:2d:0d:ea:2c:05: d5:c5:2f:c3:15:3c:22:31:0d:42:05:02:3a:19:3e: 1f:8e:aa:d6:a4:4a:c7:c9:67:ed:67:6d:8c:07:5e: b5:1c:1e:fd:d0:10:66:3b:7d:ff:a0:fd:bd:d8:cf: b7:fb:09:b1:60:ab:0c:42:e5:bf:80:31:3f:95:0a: bc:b3:8b:3f:1b:83:a5:46:86:20:de:78:c2:86:5a: b9:70:f1:12:a9:0d:1a:a8:63:f0:7b:2e:1e:ec:2d: d2:89:9d:71:f5:b9:69:65:85:c2:9b:ec:eb:19:9e: 9e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:86:A0:7F:1B:4C:3B:F0:40:DD:4D:01:10:80:35:17:C1:F8:E7:42 X509v3 Authority Key Identifier: keyid:0F:99:B1:FE:CF:A5:70:04:F6:43:D8:2B:F5:11:CD:D4:74:78:6D:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185413/759AD24CAB9E11EE963D317DC4F9AE02/D5mx_s-lcAT2Q9gr9RHN1HR4baA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5mx_s-lcAT2Q9gr9RHN1HR4baA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185413/759AD24CAB9E11EE963D317DC4F9AE02/D5mx_s-lcAT2Q9gr9RHN1HR4baA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:85:46:c8:72:70:ad:b7:00:2e:bc:af:81:c7:59:e7:9a:d8: 5a:9c:d0:45:31:8d:ad:e8:e7:b5:d5:1b:31:16:8b:cc:ee:25: d1:9c:8d:ca:b0:0b:ae:1a:7b:a8:06:4b:ff:fd:3d:56:b2:68: 6d:f5:69:71:43:96:84:c7:18:67:33:51:38:32:ea:ef:70:3e: 9b:a6:aa:1a:9d:68:ae:76:1a:6a:8a:c7:fb:92:ed:b2:92:fc: 0b:62:37:a7:d2:3f:df:97:fe:a3:58:c4:63:7c:57:06:3c:e2: b2:0f:af:da:93:2c:4f:88:1a:ac:d4:c1:f4:ae:10:ce:80:d2: 34:df:c3:e0:3e:e9:56:61:4a:01:7c:de:25:98:8e:cf:9f:af: 95:bd:e2:27:d1:30:15:2a:e0:b2:42:ab:e1:4a:1c:42:ba:fb: e0:a5:93:32:f0:2a:16:8f:a7:0b:41:ad:6b:30:de:25:86:20: 66:b4:70:81:03:6b:8c:d6:31:92:e3:85:31:25:26:e1:5c:57: 82:3e:6c:71:c1:ae:c4:d8:bc:a3:d3:ab:3a:62:8b:f5:fb:73: 5a:6b:d8:fa:04:ab:2b:af:64:60:e2:3b:fe:5d:79:8f:5d:94: a6:f0:02:ae:72:b3:65:f9:f3:0b:cc:c5:17:8b:63:84:c0:f0: 3b:66:97:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU0MTMxMTAvBgNVBAUTKDBGOTlCMUZFQ0ZBNTcwMDRGNjQzRDgyQkY1MTFDREQ0 NzQ3ODZEQTAwHhcNMjUwODA5MDQ1ODUxWhcNMjUwODE2MDQ1ODUxWjAYMRYwFAYD VQQDEw02ODk2ZDU4Yi03YWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy2lB2E0haYyaxnbRPi7MJNEOIbcpMbNszLzRHSnka4HB5XPILdvqEx94eZfc BKzyKBstl37XF5iLyyiw0YZ+96KFofJRlBggJ4Xp5kphyISB8jCStB0pFFD8emQp rt9+IEOPDegg9MPy+BuJQBU9o7CsL01KCXrp5pgN4mvjHFeepZ+5VtdQp52glVo5 4tluLQ3qLAXVxS/DFTwiMQ1CBQI6GT4fjqrWpErHyWftZ22MB161HB790BBmO33/ oP292M+3+wmxYKsMQuW/gDE/lQq8s4s/G4OlRoYg3njChlq5cPESqQ0aqGPwey4e 7C3SiZ1x9blpZYXCm+zrGZ6e5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPCGoH8b TDvwQN1NARCANRfB+OdCMB8GA1UdIwQYMBaAFA+Zsf7PpXAE9kPYK/URzdR0eG2g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTQxMy83NTlBRDI0Q0FC OUUxMUVFOTYzRDMxN0RDNEY5QUUwMi9ENW14X3MtbGNBVDJROWdyOVJITjFIUjRi YUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q1bXhfcy1sY0FUMlE5Z3I5UkhOMUhSNGJhQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTQxMy83NTlBRDI0Q0FCOUUxMUVFOTYzRDMxN0RDNEY5QUUwMi9ENW14X3MtbGNB VDJROWdyOVJITjFIUjRiYUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANhUbIcnCttwAuvK+Bx1nnmthanNBFMY2t6Oe11RsxFovM7iXRnI3K sAuuGnuoBkv//T1Wsmht9WlxQ5aExxhnM1E4MurvcD6bpqoanWiudhpqisf7ku2y kvwLYjen0j/fl/6jWMRjfFcGPOKyD6/akyxPiBqs1MH0rhDOgNI038PgPulWYUoB fN4lmI7Pn6+VveIn0TAVKuCyQqvhShxCuvvgpZMy8CoWj6cLQa1rMN4lhiBmtHCB A2uM1jGS44UxJSbhXFeCPmxxwa7E2Lyj06s6Yov1+3Naa9j6BKsrr2Rg4jv+XXmP XZSm8AKucrNl+fMLzMUXi2OEwPA7ZpfD -----END CERTIFICATE-----Generated at Sat Aug 9 10:49:22 2025 by rpki-client