$ rpki-client -vvf rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.mft File: -0toP7pNtqwaWsUIgH_H6klsXsU.mft (raw, json) Hash identifier: gIk1JmjWDYV4EjGpev7BQeDeQdTao7kqGFupwTevERY= Subject key identifier: 2A:5D:C1:A0:94:AE:24:16:B3:39:7C:9A:44:4E:62:71:17:DA:61:D4 Authority key identifier: FB:4B:68:3F:BA:4D:B6:AC:1A:5A:C5:08:80:7F:C7:EA:49:6C:5E:C5 Certificate issuer: /CN=A918B759/serialNumber=FB4B683FBA4DB6AC1A5AC508807FC7EA496C5EC5 Certificate serial: 5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0toP7pNtqwaWsUIgH_H6klsXsU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.mft Manifest number: 5C Signing time: Mon 11 Aug 2025 07:23:49 +0000 Manifest this update: Mon 11 Aug 2025 07:23:48 +0000 Manifest next update: Mon 18 Aug 2025 07:23:48 +0000 Files and hashes: 1: -0toP7pNtqwaWsUIgH_H6klsXsU.crl (hash: mbwZW6da62zkrkgG8r6K9VopvlAp52gKVtQ8/ayU5eA=) 2: 44DE35D0EBE011EFB534ED7AC4F9AE02.roa (hash: 0+vRm59ex9NMyreeXhWeUcmkTmPtMjioToFn5xjtXJU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.crl rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0toP7pNtqwaWsUIgH_H6klsXsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 07:23:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 93 (0x5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B759, serialNumber=FB4B683FBA4DB6AC1A5AC508807FC7EA496C5EC5 Validity Not Before: Aug 11 07:23:48 2025 GMT Not After : Aug 18 07:23:48 2025 GMT Subject: CN=68999a85-5670 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:12:4e:b8:db:88:8a:7a:82:ce:81:6d:99:06: 4a:01:4c:d2:61:34:f2:ae:c4:df:ee:c1:a8:d8:db: 93:dd:67:d6:7d:70:87:cd:5b:30:87:b4:87:46:20: 7f:64:a1:6d:96:ff:e6:5e:a2:d9:2b:26:db:a8:3c: 6e:b2:63:e5:87:92:48:76:5d:be:40:62:f9:20:c7: 75:6e:9a:c7:00:c9:30:9c:88:3a:d5:0c:5a:d5:21: 39:f0:2a:b8:cf:f4:eb:16:e0:c5:e1:db:e0:59:ad: 9f:49:99:95:af:86:2c:38:12:f4:d8:2a:d6:23:8c: 38:eb:20:15:d5:21:45:b3:17:58:78:94:cf:f7:51: 1d:52:4c:5f:bf:11:97:67:b0:2c:1e:ad:ca:e7:7f: d8:13:30:90:e9:de:90:7f:27:31:b3:f0:76:d1:9e: 3e:4e:0f:7e:1c:b0:c1:13:e7:10:72:e9:d0:e3:6d: 85:62:e5:1d:09:b7:af:ab:9b:8e:39:e0:a8:5b:56: ac:6b:41:c0:53:33:29:f4:21:fb:a5:56:6c:62:ae: 8d:7e:57:95:ae:ee:8e:66:5f:56:79:c7:bc:f6:ee: d0:06:be:46:73:94:6c:cc:2c:bc:83:3b:2f:df:2f: e0:bd:d8:ca:2e:5f:52:18:64:3f:fd:e3:75:23:bd: 02:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:5D:C1:A0:94:AE:24:16:B3:39:7C:9A:44:4E:62:71:17:DA:61:D4 X509v3 Authority Key Identifier: keyid:FB:4B:68:3F:BA:4D:B6:AC:1A:5A:C5:08:80:7F:C7:EA:49:6C:5E:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0toP7pNtqwaWsUIgH_H6klsXsU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:2d:1d:e4:49:14:73:c7:e3:03:8f:a2:7d:77:77:08:85:f5: fe:c7:db:40:e0:73:a6:53:c0:e8:79:f4:64:3d:9d:05:74:75: 30:e8:a2:79:e2:48:1f:df:39:e5:61:5d:35:7a:56:ae:0e:fc: 56:79:ae:16:31:68:d4:2d:c6:59:36:27:30:3c:b4:c4:24:aa: 15:c6:50:f7:16:83:0f:c3:5c:7f:ea:d7:8e:b7:f8:47:c1:e9: 65:c4:3c:85:1e:8c:5e:a3:fb:70:1a:6d:f3:52:e6:8f:cf:57: c7:c7:f3:7c:fd:07:86:9a:3f:d4:03:8b:5f:e5:57:a5:a4:c0: 2d:d6:b5:ff:a0:f8:e2:f4:af:7b:05:d7:f9:dc:a9:b6:06:47: b9:1c:3c:b9:94:7e:6e:9d:0e:40:a2:97:28:79:a4:75:98:76: c3:e1:17:7e:23:48:5a:88:9d:60:d8:47:a3:6e:0f:37:30:e8: 97:35:a1:c2:bb:84:7a:13:5d:94:c8:51:44:0a:7e:c4:d3:b1: 88:d5:34:53:9e:04:3b:13:82:b9:32:8e:b5:42:39:67:68:78: ed:64:5b:8f:26:c4:49:11:7d:e6:9d:cd:94:00:1c:ff:e9:49: 17:6a:10:c3:91:bb:b7:77:96:1b:f3:90:f2:e0:88:bd:d8:73: 9d:67:07:b4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 Qjc1OTExMC8GA1UEBRMoRkI0QjY4M0ZCQTREQjZBQzFBNUFDNTA4ODA3RkM3RUE0 OTZDNUVDNTAeFw0yNTA4MTEwNzIzNDhaFw0yNTA4MTgwNzIzNDhaMBgxFjAUBgNV BAMTDTY4OTk5YTg1LTU2NzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAEk6424iKeoLOgW2ZBkoBTNJhNPKuxN/uwajY25PdZ9Z9cIfNWzCHtIdGIH9k oW2W/+ZeotkrJtuoPG6yY+WHkkh2Xb5AYvkgx3VumscAyTCciDrVDFrVITnwKrjP 9OsW4MXh2+BZrZ9JmZWvhiw4EvTYKtYjjDjrIBXVIUWzF1h4lM/3UR1STF+/EZdn sCwercrnf9gTMJDp3pB/JzGz8HbRnj5OD34csMET5xBy6dDjbYVi5R0Jt6+rm445 4KhbVqxrQcBTMyn0IfulVmxiro1+V5Wu7o5mX1Z5x7z27tAGvkZzlGzMLLyDOy/f L+C92MouX1IYZD/943UjvQJXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKl3BoJSu JBazOXyaRE5icRfaYdQwHwYDVR0jBBgwFoAU+0toP7pNtqwaWsUIgH/H6klsXsUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThCNzU5LzY5QzNCRUU2RUI2 NDExRUZBOUEyQzI2MUM0RjlBRTAyLy0wdG9QN3BOdHF3YVdzVUlnSF9INmtsc1hz VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLTB0b1A3cE50cXdhV3NVSWdIX0g2a2xzWHNVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThC NzU5LzY5QzNCRUU2RUI2NDExRUZBOUEyQzI2MUM0RjlBRTAyLy0wdG9QN3BOdHF3 YVdzVUlnSF9INmtsc1hzVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACgtHeRJFHPH4wOPon13dwiF9f7H20Dgc6ZTwOh59GQ9nQV0dTDoonni SB/fOeVhXTV6Vq4O/FZ5rhYxaNQtxlk2JzA8tMQkqhXGUPcWgw/DXH/q1463+EfB 6WXEPIUejF6j+3AabfNS5o/PV8fH83z9B4aaP9QDi1/lV6WkwC3Wtf+g+OL0r3sF 1/ncqbYGR7kcPLmUfm6dDkCilyh5pHWYdsPhF34jSFqInWDYR6NuDzcw6Jc1ocK7 hHoTXZTIUUQKfsTTsYjVNFOeBDsTgrkyjrVCOWdoeO1kW48mxEkRfeadzZQAHP/p SRdqEMORu7d3lhvzkPLgiL3Yc51nB7Q= -----END CERTIFICATE-----Generated at Wed Aug 13 00:32:50 2025 by rpki-client