$ rpki-client -vvf rpki.apnic.net/member_repository/A919136B/F7C87E843A7B11E9ACBC6A18C4F9AE02/5IPa-2wrg71IK24pCn5AU1W1Ltk.mft File: 5IPa-2wrg71IK24pCn5AU1W1Ltk.mft (raw, json) Hash identifier: WOjzyk0ksiiS9zLv67i96A0AKUCBlhZkPpZp+zqOyLM= Subject key identifier: E4:18:05:40:31:58:68:77:9C:75:83:99:36:1B:BC:9B:6A:53:DF:86 Authority key identifier: E4:83:DA:FB:6C:2B:83:BD:48:2B:6E:29:0A:7E:40:53:55:B5:2E:D9 Certificate issuer: /CN=A919136B/serialNumber=E483DAFB6C2B83BD482B6E290A7E405355B52ED9 Certificate serial: 107F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5IPa-2wrg71IK24pCn5AU1W1Ltk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919136B/F7C87E843A7B11E9ACBC6A18C4F9AE02/5IPa-2wrg71IK24pCn5AU1W1Ltk.mft Manifest number: 1073 Signing time: Sun 10 Aug 2025 17:23:03 +0000 Manifest this update: Sun 10 Aug 2025 17:23:02 +0000 Manifest next update: Sun 17 Aug 2025 17:23:02 +0000 Files and hashes: 1: 5IPa-2wrg71IK24pCn5AU1W1Ltk.crl (hash: FLFp1sUP+TUbMJAY+SYAEMHKIrQkkSwDwynci56lKPI=) 2: 99B6039C215311EA86E1E020C4F9AE02.roa (hash: GBYQ/lKi3z5roPUPwktfDVMLitw965pomXZAG5jfako=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919136B/F7C87E843A7B11E9ACBC6A18C4F9AE02/5IPa-2wrg71IK24pCn5AU1W1Ltk.crl rsync://rpki.apnic.net/member_repository/A919136B/F7C87E843A7B11E9ACBC6A18C4F9AE02/5IPa-2wrg71IK24pCn5AU1W1Ltk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5IPa-2wrg71IK24pCn5AU1W1Ltk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4223 (0x107f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919136B, serialNumber=E483DAFB6C2B83BD482B6E290A7E405355B52ED9 Validity Not Before: Aug 10 17:23:02 2025 GMT Not After : Aug 17 17:23:02 2025 GMT Subject: CN=6898d577-2d42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:78:f9:16:13:4c:5a:03:f9:6c:7f:c4:ab:88: 02:ed:b7:9f:93:1e:b0:8e:7c:70:dd:6f:f2:53:ec: c0:5e:6f:39:75:c9:10:6d:e5:8d:9c:b2:98:67:a0: 2b:fa:fe:ff:cd:63:cd:41:b3:8b:ae:80:76:32:1e: 22:3f:77:1d:9b:3a:85:3d:b8:ae:6b:da:7b:b2:0e: 01:b1:28:8a:97:40:b5:de:c8:39:12:16:52:23:c1: 47:e1:3b:49:36:4f:76:fc:04:48:9b:ea:a0:90:3e: ae:7b:60:06:c8:a3:48:9f:67:b2:13:da:77:3b:6e: 7d:7e:6f:96:f7:e5:b4:3f:d5:b7:a6:b7:11:1d:69: 51:6f:b5:d2:c7:d1:00:36:8e:c7:6a:03:fb:1b:78: d6:c7:b3:d8:c4:40:cc:9d:56:4a:a9:95:51:7d:e3: 84:4f:ae:3d:88:e1:da:80:ba:3d:48:dd:a2:d8:f8: 47:25:09:2c:52:68:c8:1e:d0:d9:24:c2:d2:e6:b9: 19:ea:2e:23:45:41:99:5a:6f:5c:40:d2:49:26:12: e4:83:25:24:27:3e:e0:d6:76:b8:64:e7:72:84:49: b8:89:9e:4b:4a:6b:2e:6a:30:8c:9a:a8:d0:1f:cc: 32:cb:99:c4:13:ec:f0:14:ec:2e:99:d3:82:63:69: a4:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:18:05:40:31:58:68:77:9C:75:83:99:36:1B:BC:9B:6A:53:DF:86 X509v3 Authority Key Identifier: keyid:E4:83:DA:FB:6C:2B:83:BD:48:2B:6E:29:0A:7E:40:53:55:B5:2E:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919136B/F7C87E843A7B11E9ACBC6A18C4F9AE02/5IPa-2wrg71IK24pCn5AU1W1Ltk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5IPa-2wrg71IK24pCn5AU1W1Ltk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919136B/F7C87E843A7B11E9ACBC6A18C4F9AE02/5IPa-2wrg71IK24pCn5AU1W1Ltk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:ba:73:0a:1a:a2:67:fe:76:69:18:76:98:e9:b6:2e:1a:60: be:e6:47:6f:e8:f3:60:18:08:9b:ea:70:58:21:64:26:39:9c: 30:44:5e:ad:30:39:31:fb:37:ce:3d:97:e0:ae:c3:82:56:41: 48:48:35:4a:15:64:9d:05:89:bd:a2:1b:8b:3e:1d:a4:fc:1a: 5f:9f:75:68:38:91:4e:c3:af:f2:5a:03:03:f0:ff:22:b8:9d: da:a0:60:5f:6d:d6:67:6b:cf:a9:c2:06:0b:60:7f:82:2a:24: e6:7c:57:ae:c2:28:2b:c9:50:ab:a1:e0:8c:5a:a7:11:d2:a0: a5:c2:05:8f:ac:79:51:f5:3d:89:ac:a3:d2:86:c9:00:7e:36: b5:a6:b0:76:8f:79:f3:c4:3c:ad:6c:5f:56:c0:f5:5c:d9:e1: 41:ab:43:50:82:b4:9b:a1:72:4a:d8:bf:0c:41:d7:da:39:1a: cb:72:b9:65:7d:ef:ec:bc:ed:98:5f:af:5b:d3:bd:a2:38:75: 80:ca:49:03:34:8a:83:0a:96:a0:e7:33:71:61:06:d7:8d:ca: 21:f6:88:7f:6c:a1:02:e0:7a:33:ca:71:98:90:21:e3:b3:ea: ff:9e:8a:f2:12:97:ca:44:80:6d:95:5c:1b:55:8d:76:f7:49: 83:eb:29:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEH8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTEzNkIxMTAvBgNVBAUTKEU0ODNEQUZCNkMyQjgzQkQ0ODJCNkUyOTBBN0U0MDUz NTVCNTJFRDkwHhcNMjUwODEwMTcyMzAyWhcNMjUwODE3MTcyMzAyWjAYMRYwFAYD VQQDEw02ODk4ZDU3Ny0yZDQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Hj5FhNMWgP5bH/Eq4gC7befkx6wjnxw3W/yU+zAXm85dckQbeWNnLKYZ6Ar +v7/zWPNQbOLroB2Mh4iP3cdmzqFPbiua9p7sg4BsSiKl0C13sg5EhZSI8FH4TtJ Nk92/ARIm+qgkD6ue2AGyKNIn2eyE9p3O259fm+W9+W0P9W3prcRHWlRb7XSx9EA No7HagP7G3jWx7PYxEDMnVZKqZVRfeOET649iOHagLo9SN2i2PhHJQksUmjIHtDZ JMLS5rkZ6i4jRUGZWm9cQNJJJhLkgyUkJz7g1na4ZOdyhEm4iZ5LSmsuajCMmqjQ H8wyy5nEE+zwFOwumdOCY2mkGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOQYBUAx WGh3nHWDmTYbvJtqU9+GMB8GA1UdIwQYMBaAFOSD2vtsK4O9SCtuKQp+QFNVtS7Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTM2Qi9GN0M4N0U4NDNB N0IxMUU5QUNCQzZBMThDNEY5QUUwMi81SVBhLTJ3cmc3MUlLMjRwQ241QVUxVzFM dGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVJUGEtMndyZzcxSUsyNHBDbjVBVTFXMUx0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTM2Qi9GN0M4N0U4NDNBN0IxMUU5QUNCQzZBMThDNEY5QUUwMi81SVBhLTJ3cmc3 MUlLMjRwQ241QVUxVzFMdGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiunMKGqJn/nZpGHaY6bYuGmC+5kdv6PNgGAib6nBYIWQmOZwwRF6t MDkx+zfOPZfgrsOCVkFISDVKFWSdBYm9ohuLPh2k/Bpfn3VoOJFOw6/yWgMD8P8i uJ3aoGBfbdZna8+pwgYLYH+CKiTmfFeuwigryVCroeCMWqcR0qClwgWPrHlR9T2J rKPShskAfja1prB2j3nzxDytbF9WwPVc2eFBq0NQgrSboXJK2L8MQdfaORrLcrll fe/svO2YX69b072iOHWAykkDNIqDCpag5zNxYQbXjcoh9oh/bKEC4HozynGYkCHj s+r/noryEpfKRIBtlVwbVY1290mD6yl7 -----END CERTIFICATE-----Generated at Mon Aug 11 04:27:59 2025 by rpki-client