$ rpki-client -vvf rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft File: 5o7RJO9le2eb0SpY-gNQFODf6Cc.mft (raw, json) Hash identifier: nXhDETbIW0AIdMPECEw549Y2hNG1ISzeo1aK/wtk+Fo= Subject key identifier: 2A:A3:BA:D9:30:82:C1:30:13:B6:A6:4F:D9:0E:03:13:7D:23:37:13 Authority key identifier: E6:8E:D1:24:EF:65:7B:67:9B:D1:2A:58:FA:03:50:14:E0:DF:E8:27 Certificate issuer: /CN=A9191A09/serialNumber=E68ED124EF657B679BD12A58FA035014E0DFE827 Certificate serial: 0DF2 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft Manifest number: 0DDE Signing time: Tue 12 Aug 2025 14:43:03 +0000 Manifest this update: Tue 12 Aug 2025 14:43:03 +0000 Manifest next update: Tue 19 Aug 2025 14:43:03 +0000 Files and hashes: 1: 5o7RJO9le2eb0SpY-gNQFODf6Cc.crl (hash: 8/1bIMylDfIzhjLMWXqR6xXX5EQLz7lg/JZmimrEqk8=) 2: 9C06E51EE37A11EA84A20810C4F9AE02.roa (hash: BIq27Hxj0ymd/MyK4xyxLJopPOW9viNW0+I2cxj8GdM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.crl rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 14:43:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3570 (0xdf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191A09, serialNumber=E68ED124EF657B679BD12A58FA035014E0DFE827 Validity Not Before: Aug 12 14:43:03 2025 GMT Not After : Aug 19 14:43:03 2025 GMT Subject: CN=689b52f7-e099 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:60:0e:4f:7e:ea:8d:60:2c:bb:ba:78:30:72: 09:a5:1b:0b:51:e4:40:bf:52:31:d2:50:92:b9:3b: 6b:20:56:ba:41:26:8b:e7:65:af:d4:78:73:04:04: 39:f9:e4:0d:30:b9:ff:30:b6:db:1a:ef:a1:a4:07: 2f:65:86:7c:50:df:ea:29:bc:6e:2a:b4:af:1d:93: 91:27:89:d5:39:b7:ae:85:5d:83:b4:cc:eb:13:8c: 4a:eb:7a:0e:25:f3:75:31:65:81:68:7f:17:d0:d5: d9:95:c7:4a:2e:2d:f0:94:58:38:e8:27:7d:c7:80: a0:dd:24:9a:11:83:25:81:f7:d2:39:08:37:91:7d: fe:04:43:fb:8d:d3:c5:06:50:f5:d5:37:e6:e5:88: 43:65:6f:ed:37:49:71:b4:70:53:e6:11:da:b5:39: a1:53:62:8f:87:49:19:20:de:7b:03:b6:cc:12:19: d0:44:da:b8:52:f7:fd:71:65:04:8f:03:2c:ca:e2: 37:d3:92:bc:76:4e:1e:e6:ee:0d:5a:ed:11:0d:d8: 1c:b9:eb:59:fd:b1:01:5d:93:ce:f5:f6:f2:99:03: 27:21:9d:1a:b4:df:47:fe:a0:5b:a2:92:5f:17:75: d9:66:56:ce:c1:93:8f:e2:54:80:34:e9:26:16:39: 9d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:A3:BA:D9:30:82:C1:30:13:B6:A6:4F:D9:0E:03:13:7D:23:37:13 X509v3 Authority Key Identifier: keyid:E6:8E:D1:24:EF:65:7B:67:9B:D1:2A:58:FA:03:50:14:E0:DF:E8:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:de:4e:1a:db:eb:1b:eb:8a:82:a6:f8:38:de:36:47:41:4a: 15:19:e0:96:c2:37:5a:75:77:4e:b5:46:1c:a1:98:eb:73:78: 8c:e8:79:e7:8f:3d:8a:32:60:b8:00:e8:60:86:43:26:f4:93: ba:0b:0f:e2:6f:53:b5:42:68:da:0b:e9:d6:bc:4e:32:f1:aa: 49:06:b4:76:8c:ec:72:1c:4f:15:f3:d2:50:ab:b0:e5:76:cc: 48:39:b5:fd:0d:60:b4:ef:c7:c2:9b:70:72:15:2b:3b:65:7f: 93:d6:c3:5e:16:fd:67:c9:ac:cf:7f:ab:04:77:65:2d:11:94: 12:f7:63:36:ad:17:03:2d:9e:43:25:92:c8:f4:bd:6f:14:56: d8:d4:e2:2f:e1:5b:fd:f2:0b:42:85:38:21:94:1b:59:c8:c2: 5c:dc:57:7b:86:69:cf:67:3b:af:96:e5:66:8a:82:28:9b:38: df:ee:86:e6:ed:a7:f7:21:51:e8:e4:fa:16:15:c5:51:72:f0: b6:2d:fe:79:b9:66:1f:13:f2:5b:81:64:9f:de:e9:c2:55:ae: 6b:64:4d:b4:0d:5f:d8:bd:a1:9b:16:54:62:03:33:e7:80:93: d1:3e:5a:3d:7d:36:68:f1:e6:da:ca:44:8c:85:c4:b3:d8:c2: e6:90:35:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDfIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFBMDkxMTAvBgNVBAUTKEU2OEVEMTI0RUY2NTdCNjc5QkQxMkE1OEZBMDM1MDE0 RTBERkU4MjcwHhcNMjUwODEyMTQ0MzAzWhcNMjUwODE5MTQ0MzAzWjAYMRYwFAYD VQQDEw02ODliNTJmNy1lMDk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvWAOT37qjWAsu7p4MHIJpRsLUeRAv1Ix0lCSuTtrIFa6QSaL52Wv1HhzBAQ5 +eQNMLn/MLbbGu+hpAcvZYZ8UN/qKbxuKrSvHZORJ4nVObeuhV2DtMzrE4xK63oO JfN1MWWBaH8X0NXZlcdKLi3wlFg46Cd9x4Cg3SSaEYMlgffSOQg3kX3+BEP7jdPF BlD11Tfm5YhDZW/tN0lxtHBT5hHatTmhU2KPh0kZIN57A7bMEhnQRNq4Uvf9cWUE jwMsyuI305K8dk4e5u4NWu0RDdgcuetZ/bEBXZPO9fbymQMnIZ0atN9H/qBbopJf F3XZZlbOwZOP4lSANOkmFjmdhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCqjutkw gsEwE7amT9kOAxN9IzcTMB8GA1UdIwQYMBaAFOaO0STvZXtnm9EqWPoDUBTg3+gn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUEwOS8zQzQxMkMzNkJG MzkxMUU5ODk3RDdDMkVDNEY5QUUwMi81bzdSSk85bGUyZWIwU3BZLWdOUUZPRGY2 Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzVvN1JKTzlsZTJlYjBTcFktZ05RRk9EZjZDYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUEwOS8zQzQxMkMzNkJGMzkxMUU5ODk3RDdDMkVDNEY5QUUwMi81bzdSSk85bGUy ZWIwU3BZLWdOUUZPRGY2Q2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBh3k4a2+sb64qCpvg43jZHQUoVGeCWwjdadXdOtUYcoZjrc3iM6Hnn jz2KMmC4AOhghkMm9JO6Cw/ib1O1QmjaC+nWvE4y8apJBrR2jOxyHE8V89JQq7Dl dsxIObX9DWC078fCm3ByFSs7ZX+T1sNeFv1nyazPf6sEd2UtEZQS92M2rRcDLZ5D JZLI9L1vFFbY1OIv4Vv98gtChTghlBtZyMJc3Fd7hmnPZzuvluVmioIomzjf7obm 7af3IVHo5PoWFcVRcvC2Lf55uWYfE/JbgWSf3unCVa5rZE20DV/YvaGbFlRiAzPn gJPRPlo9fTZo8ebaykSMhcSz2MLmkDVZ -----END CERTIFICATE-----Generated at Wed Aug 13 08:47:19 2025 by rpki-client