$ rpki-client -vvf rpki.apnic.net/member_repository/A918CA0E/8A1164CA807711EB97D94054C4F9AE02/5wLFqnTYyWzI7vVhjk_-79UdN_k.mft File: 5wLFqnTYyWzI7vVhjk_-79UdN_k.mft (raw, json) Hash identifier: Zn2jMx2lztJUmAtKHXYsdzf7xFLBmg6J4CWd32WKjqs= Subject key identifier: 1B:8A:89:77:71:E2:45:BB:17:1C:CD:B2:60:5A:74:EA:A4:9C:F4:BB Authority key identifier: E7:02:C5:AA:74:D8:C9:6C:C8:EE:F5:61:8E:4F:FE:EF:D5:1D:37:F9 Certificate issuer: /CN=A918CA0E/serialNumber=E702C5AA74D8C96CC8EEF5618E4FFEEFD51D37F9 Certificate serial: 0690 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5wLFqnTYyWzI7vVhjk_-79UdN_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CA0E/8A1164CA807711EB97D94054C4F9AE02/5wLFqnTYyWzI7vVhjk_-79UdN_k.mft Manifest number: 068A Signing time: Fri 08 Aug 2025 22:42:39 +0000 Manifest this update: Fri 08 Aug 2025 22:42:38 +0000 Manifest next update: Fri 15 Aug 2025 22:42:38 +0000 Files and hashes: 1: 5wLFqnTYyWzI7vVhjk_-79UdN_k.crl (hash: Z/TXtwoo1TpcQ1RD4daOZKfaZUL6QvykY0se26ZsUHc=) 2: 98C0AE7E808411EBA15C9251C4F9AE02.roa (hash: zc3Pnw0/OkkjpSp764b1FQtIhHt1L5fn5FeWiUPa5I4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CA0E/8A1164CA807711EB97D94054C4F9AE02/5wLFqnTYyWzI7vVhjk_-79UdN_k.crl rsync://rpki.apnic.net/member_repository/A918CA0E/8A1164CA807711EB97D94054C4F9AE02/5wLFqnTYyWzI7vVhjk_-79UdN_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5wLFqnTYyWzI7vVhjk_-79UdN_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1680 (0x690) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CA0E, serialNumber=E702C5AA74D8C96CC8EEF5618E4FFEEFD51D37F9 Validity Not Before: Aug 8 22:42:38 2025 GMT Not After : Aug 15 22:42:38 2025 GMT Subject: CN=68967d5e-592a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:54:aa:dc:09:55:ff:41:db:d4:94:73:0d:fd: dd:7b:2b:9b:6a:da:90:8a:45:ea:88:e4:67:00:eb: d9:34:ed:9c:eb:db:49:a2:73:01:9c:49:33:f3:04: a1:96:cb:8c:02:47:d5:0a:03:7c:de:24:23:2f:4c: 3e:f0:bb:36:43:7b:69:24:a6:b4:38:ba:65:9b:c1: 56:c8:16:8f:a3:96:a1:29:7e:81:8d:cc:bc:fd:67: e4:61:b2:24:c6:28:67:ca:4d:df:d6:ba:aa:bb:94: 92:63:b1:1e:c5:a6:d6:c6:7a:cc:8e:8a:66:6a:e9: ca:31:1d:57:8d:f5:e5:42:20:1e:20:99:e5:7f:08: c4:f7:ed:b5:fe:88:7d:44:a2:8d:52:24:43:3e:d4: b7:ca:f1:4d:4c:ec:7c:31:18:bb:e1:2a:2f:e5:dd: 5c:f5:76:db:72:0d:82:0f:c3:9b:08:c0:31:ba:68: 4f:71:13:99:7d:74:f7:08:a2:d7:f6:73:94:16:15: 68:5d:0c:19:21:52:e8:11:87:29:44:0f:ea:1a:5b: ea:03:0c:bb:74:ed:06:c9:90:b7:85:20:a6:eb:b3: fd:d1:de:55:82:5c:99:d3:3e:95:51:37:a1:fd:63: 89:40:ca:bf:b2:e1:46:92:db:d4:aa:87:61:e3:05: ad:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:8A:89:77:71:E2:45:BB:17:1C:CD:B2:60:5A:74:EA:A4:9C:F4:BB X509v3 Authority Key Identifier: keyid:E7:02:C5:AA:74:D8:C9:6C:C8:EE:F5:61:8E:4F:FE:EF:D5:1D:37:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CA0E/8A1164CA807711EB97D94054C4F9AE02/5wLFqnTYyWzI7vVhjk_-79UdN_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5wLFqnTYyWzI7vVhjk_-79UdN_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CA0E/8A1164CA807711EB97D94054C4F9AE02/5wLFqnTYyWzI7vVhjk_-79UdN_k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:41:25:5e:2f:94:a8:9e:f7:3f:89:f6:cc:bf:dd:48:8e:c6: b7:9f:a7:a5:d0:59:f0:2b:48:0b:69:9a:60:35:c5:ae:6f:3b: 1d:c3:ab:0d:87:cb:2e:fd:d2:6e:86:11:31:05:98:83:7f:b6: 51:24:68:30:84:7d:4c:36:b8:98:1a:0b:ae:01:60:8c:7b:57: b0:c8:b9:8b:d1:52:2a:8c:f5:24:13:a6:2b:c5:09:70:9a:c4: 92:d8:7b:6a:9f:b0:41:7e:59:8b:2e:a9:5b:64:95:a3:67:cd: 9e:72:83:17:36:96:0e:5e:e6:79:8f:82:6d:7a:17:34:2c:30: b0:eb:2f:d2:ce:b8:db:2d:17:36:cf:22:1a:71:f4:1f:13:e1: 03:fd:af:cb:b1:e3:39:8e:7f:35:be:bd:76:c1:84:9e:84:eb: bb:15:ef:c7:16:49:28:ba:10:e2:9a:dc:5d:88:e7:f3:55:2f: 04:43:8b:9b:5d:76:ef:d1:12:cf:0f:f1:23:b7:5a:83:2f:e6: 58:11:75:ac:b7:b2:89:8a:9f:ab:c9:75:18:dd:4d:46:9d:15: 07:3a:1b:13:96:ae:37:dc:49:bb:0d:ad:3e:da:60:e0:b3:99: 9f:6a:a6:89:28:6e:e9:24:26:ec:83:6c:8a:3f:5d:86:44:29: 54:72:a6:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OENBMEUxMTAvBgNVBAUTKEU3MDJDNUFBNzREOEM5NkNDOEVFRjU2MThFNEZGRUVG RDUxRDM3RjkwHhcNMjUwODA4MjI0MjM4WhcNMjUwODE1MjI0MjM4WjAYMRYwFAYD VQQDEw02ODk2N2Q1ZS01OTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwlSq3AlV/0Hb1JRzDf3deyubatqQikXqiORnAOvZNO2c69tJonMBnEkz8wSh lsuMAkfVCgN83iQjL0w+8Ls2Q3tpJKa0OLplm8FWyBaPo5ahKX6Bjcy8/WfkYbIk xihnyk3f1rqqu5SSY7EexabWxnrMjopmaunKMR1XjfXlQiAeIJnlfwjE9+21/oh9 RKKNUiRDPtS3yvFNTOx8MRi74Sov5d1c9Xbbcg2CD8ObCMAxumhPcROZfXT3CKLX 9nOUFhVoXQwZIVLoEYcpRA/qGlvqAwy7dO0GyZC3hSCm67P90d5VglyZ0z6VUTeh /WOJQMq/suFGktvUqodh4wWtrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBuKiXdx 4kW7FxzNsmBadOqknPS7MB8GA1UdIwQYMBaAFOcCxap02MlsyO71YY5P/u/VHTf5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0EwRS84QTExNjRDQTgw NzcxMUVCOTdEOTQwNTRDNEY5QUUwMi81d0xGcW5UWXlXekk3dlZoamtfLTc5VWRO X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV3TEZxblRZeVd6STd2Vmhqa18tNzlVZE5fay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Q0EwRS84QTExNjRDQTgwNzcxMUVCOTdEOTQwNTRDNEY5QUUwMi81d0xGcW5UWXlX ekk3dlZoamtfLTc5VWROX2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDHQSVeL5Sonvc/ifbMv91Ijsa3n6el0FnwK0gLaZpgNcWubzsdw6sN h8su/dJuhhExBZiDf7ZRJGgwhH1MNriYGguuAWCMe1ewyLmL0VIqjPUkE6YrxQlw msSS2Htqn7BBflmLLqlbZJWjZ82ecoMXNpYOXuZ5j4Jtehc0LDCw6y/SzrjbLRc2 zyIacfQfE+ED/a/LseM5jn81vr12wYSehOu7Fe/HFkkouhDimtxdiOfzVS8EQ4ub XXbv0RLPD/Ejt1qDL+ZYEXWst7KJip+ryXUY3U1GnRUHOhsTlq433Em7Da0+2mDg s5mfaqaJKG7pJCbsg2yKP12GRClUcqaq -----END CERTIFICATE-----Generated at Sat Aug 9 23:18:22 2025 by rpki-client