$ rpki-client -vvf rpki.apnic.net/member_repository/A918D2CA/09F74EF6354711F08103BE24C4F9AE02/b5HHak90ZkEA3Y3r0XhRQuE3gC0.mft File: b5HHak90ZkEA3Y3r0XhRQuE3gC0.mft (raw, json) Hash identifier: fmmrYBHLJqckwFCGdFWYgj7TsFS3h0lPpfKfs1BfQok= Subject key identifier: B0:2D:97:74:9D:10:84:EF:A3:04:FA:3B:6E:1D:FE:B1:17:18:49:68 Authority key identifier: 6F:91:C7:6A:4F:74:66:41:00:DD:8D:EB:D1:78:51:42:E1:37:80:2D Certificate issuer: /CN=A918D2CA/serialNumber=6F91C76A4F74664100DD8DEBD1785142E137802D Certificate serial: 31 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b5HHak90ZkEA3Y3r0XhRQuE3gC0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D2CA/09F74EF6354711F08103BE24C4F9AE02/b5HHak90ZkEA3Y3r0XhRQuE3gC0.mft Manifest number: 2F Signing time: Mon 11 Aug 2025 08:00:20 +0000 Manifest this update: Mon 11 Aug 2025 08:00:19 +0000 Manifest next update: Mon 18 Aug 2025 08:00:19 +0000 Files and hashes: 1: b5HHak90ZkEA3Y3r0XhRQuE3gC0.crl (hash: latUyNMIKNpY0JrcoMhWWkPb+084MudPFATxJxYKZts=) 2: 8C9E2B18354711F09FCEEE25C4F9AE02.roa (hash: Rm2y9XYNOuLaJLPo5EgOIcrmYm6wYWaPwijgwTBKrVM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D2CA/09F74EF6354711F08103BE24C4F9AE02/b5HHak90ZkEA3Y3r0XhRQuE3gC0.crl rsync://rpki.apnic.net/member_repository/A918D2CA/09F74EF6354711F08103BE24C4F9AE02/b5HHak90ZkEA3Y3r0XhRQuE3gC0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b5HHak90ZkEA3Y3r0XhRQuE3gC0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 08:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D2CA, serialNumber=6F91C76A4F74664100DD8DEBD1785142E137802D Validity Not Before: Aug 11 08:00:19 2025 GMT Not After : Aug 18 08:00:19 2025 GMT Subject: CN=6899a314-0c9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0f:3a:bc:6d:e6:e0:f9:5d:34:15:7e:8a:07: dc:80:15:fe:35:44:80:bd:fa:60:17:68:46:5b:40: 03:1e:58:39:84:e1:c0:26:63:33:b7:df:30:3e:2f: 3f:9e:b0:b7:bc:4e:c9:f5:33:59:98:9e:bc:f3:8e: 6b:d8:2f:d7:d5:d9:cc:f5:ba:94:cd:18:2e:dd:ef: ea:b1:96:bb:b7:38:84:f3:aa:b0:8b:82:06:2c:ca: ad:e6:f0:00:81:4c:73:8a:30:42:39:17:57:13:5a: 1a:29:6e:3d:db:c1:e1:66:7a:8b:39:2a:5c:4e:1c: 7a:f6:71:39:a3:f9:32:1f:28:bf:8f:42:0a:9a:7b: 50:db:c6:31:5b:5b:5e:57:db:ba:d9:da:d1:c4:3d: 6e:a6:09:e6:9e:52:c3:dd:d2:3c:74:2c:5e:74:5a: ea:39:58:d7:bc:e4:76:3d:0d:f7:1b:9d:4a:db:5a: e0:70:4c:1d:dc:f5:cf:70:37:7d:8e:b7:88:b1:cd: f2:77:ba:58:93:e3:65:31:a0:8a:df:00:df:b8:bd: ec:e3:5d:5f:20:d8:05:ee:5c:91:af:6f:d5:60:e7: 04:33:be:ad:6d:d0:6b:5e:bb:d5:5e:8c:d6:2e:be: 85:66:7d:92:fb:2d:c1:ac:8c:f9:5c:36:b4:f4:b3: 2b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:2D:97:74:9D:10:84:EF:A3:04:FA:3B:6E:1D:FE:B1:17:18:49:68 X509v3 Authority Key Identifier: keyid:6F:91:C7:6A:4F:74:66:41:00:DD:8D:EB:D1:78:51:42:E1:37:80:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D2CA/09F74EF6354711F08103BE24C4F9AE02/b5HHak90ZkEA3Y3r0XhRQuE3gC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b5HHak90ZkEA3Y3r0XhRQuE3gC0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D2CA/09F74EF6354711F08103BE24C4F9AE02/b5HHak90ZkEA3Y3r0XhRQuE3gC0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:60:7e:51:19:1b:f7:09:24:b4:cb:a6:2a:3a:7c:39:09:5d: ff:fe:47:ec:45:37:27:a7:e6:7f:19:9c:9b:8a:9b:ba:e3:7c: 37:a3:84:dc:77:c8:fe:10:0f:a3:69:8d:c0:92:cb:d3:eb:2c: 88:3d:5d:46:a6:fb:f8:34:c8:58:de:46:d9:a6:65:d1:c1:de: ec:b3:1d:4d:7e:8e:c7:91:4f:27:5e:41:b9:4a:e5:42:d7:a6: 38:23:a2:34:7d:d2:5a:e2:6d:9e:1f:3c:de:54:28:43:8d:0a: c1:ac:d9:70:66:9a:6d:b7:84:0a:8b:b2:11:e4:63:3a:83:0a: 90:01:16:c3:69:04:2c:64:66:34:79:34:27:9a:57:90:06:52: 81:56:16:44:15:d9:eb:95:57:e4:cb:c2:f4:ed:b0:f9:a3:0b: 7d:db:e3:50:81:8e:ab:2e:a2:a1:68:86:39:56:93:94:af:89: 40:ac:7b:7a:5d:0a:47:56:da:70:19:29:36:5a:c4:1f:76:e4: 54:89:c3:af:0f:e4:bd:be:2a:8d:4a:c9:ea:5a:8a:c4:b4:74: 36:f6:69:16:28:30:66:5d:70:ad:dc:fb:41:2e:c4:85:f4:58: ff:44:4d:c8:3d:87:df:a9:72:f2:63:84:a0:ab:3a:d8:46:8a: d6:f8:84:67 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RDJDQTExMC8GA1UEBRMoNkY5MUM3NkE0Rjc0NjY0MTAwREQ4REVCRDE3ODUxNDJF MTM3ODAyRDAeFw0yNTA4MTEwODAwMTlaFw0yNTA4MTgwODAwMTlaMBgxFjAUBgNV BAMTDTY4OTlhMzE0LTBjOWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvDzq8bebg+V00FX6KB9yAFf41RIC9+mAXaEZbQAMeWDmE4cAmYzO33zA+Lz+e sLe8Tsn1M1mYnrzzjmvYL9fV2cz1upTNGC7d7+qxlru3OITzqrCLggYsyq3m8ACB THOKMEI5F1cTWhopbj3bweFmeos5KlxOHHr2cTmj+TIfKL+PQgqae1DbxjFbW15X 27rZ2tHEPW6mCeaeUsPd0jx0LF50Wuo5WNe85HY9DfcbnUrbWuBwTB3c9c9wN32O t4ixzfJ3uliT42UxoIrfAN+4vezjXV8g2AXuXJGvb9Vg5wQzvq1t0Gteu9VejNYu voVmfZL7LcGsjPlcNrT0syv5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUsC2XdJ0Q hO+jBPo7bh3+sRcYSWgwHwYDVR0jBBgwFoAUb5HHak90ZkEA3Y3r0XhRQuE3gC0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThEMkNBLzA5Rjc0RUY2MzU0 NzExRjA4MTAzQkUyNEM0RjlBRTAyL2I1SEhhazkwWmtFQTNZM3IwWGhSUXVFM2dD MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvYjVISGFrOTBaa0VBM1kzcjBYaFJRdUUzZ0MwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThE MkNBLzA5Rjc0RUY2MzU0NzExRjA4MTAzQkUyNEM0RjlBRTAyL2I1SEhhazkwWmtF QTNZM3IwWGhSUXVFM2dDMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEdgflEZG/cJJLTLpio6fDkJXf/+R+xFNyen5n8ZnJuKm7rjfDejhNx3 yP4QD6NpjcCSy9PrLIg9XUam+/g0yFjeRtmmZdHB3uyzHU1+jseRTydeQblK5ULX pjgjojR90lribZ4fPN5UKEONCsGs2XBmmm23hAqLshHkYzqDCpABFsNpBCxkZjR5 NCeaV5AGUoFWFkQV2euVV+TLwvTtsPmjC33b41CBjqsuoqFohjlWk5SviUCse3pd CkdW2nAZKTZaxB925FSJw68P5L2+Ko1KyepaisS0dDb2aRYoMGZdcK3c+0EuxIX0 WP9ETcg9h9+pcvJjhKCrOthGitb4hGc= -----END CERTIFICATE-----Generated at Tue Aug 12 22:55:08 2025 by rpki-client