$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5CEA/28A77B6864EE11EDA4A34513C4F9AE02/_U5c-75RNAFgOW1ZbhsySM_IHMQ.mft File: _U5c-75RNAFgOW1ZbhsySM_IHMQ.mft (raw, json) Hash identifier: Ro9jcotKwPrkzmyUEZJaHu7WS8JZUrqD/R/ggcitVwM= Subject key identifier: D6:30:69:55:17:BB:24:96:95:6E:C1:5D:D1:5E:55:0E:66:2E:AB:97 Authority key identifier: FD:4E:5C:FB:BE:51:34:01:60:39:6D:59:6E:1B:32:48:CF:C8:1C:C4 Certificate issuer: /CN=A91B5CEA/serialNumber=FD4E5CFBBE51340160396D596E1B3248CFC81CC4 Certificate serial: 020A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_U5c-75RNAFgOW1ZbhsySM_IHMQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5CEA/28A77B6864EE11EDA4A34513C4F9AE02/_U5c-75RNAFgOW1ZbhsySM_IHMQ.mft Manifest number: 0205 Signing time: Tue 05 Aug 2025 02:48:13 +0000 Manifest this update: Tue 05 Aug 2025 02:48:13 +0000 Manifest next update: Tue 12 Aug 2025 02:48:13 +0000 Files and hashes: 1: _U5c-75RNAFgOW1ZbhsySM_IHMQ.crl (hash: GNSeM6KCdCYtgXXfsiunWqW+B6GlF4iwVUKR6VH9je0=) 2: B42198DC64F211ED9AEC046FC4F9AE02.roa (hash: GPN+fU+xzGuylWye0nkTRYwbIM5sQRJJyZ5po6QU8a8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5CEA/28A77B6864EE11EDA4A34513C4F9AE02/_U5c-75RNAFgOW1ZbhsySM_IHMQ.crl rsync://rpki.apnic.net/member_repository/A91B5CEA/28A77B6864EE11EDA4A34513C4F9AE02/_U5c-75RNAFgOW1ZbhsySM_IHMQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_U5c-75RNAFgOW1ZbhsySM_IHMQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 02:48:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 522 (0x20a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5CEA, serialNumber=FD4E5CFBBE51340160396D596E1B3248CFC81CC4 Validity Not Before: Aug 5 02:48:13 2025 GMT Not After : Aug 12 02:48:13 2025 GMT Subject: CN=689170ed-d203 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:7d:91:1d:42:06:33:f3:a8:f8:aa:c7:4f:30: 1b:27:f5:a6:2d:15:5b:40:90:22:d4:6e:b3:e9:ac: 31:6a:90:18:4c:ec:48:4d:40:b7:85:3e:53:88:15: bc:cf:d9:ce:1b:f2:84:f1:3e:2b:b0:71:ff:48:19: 9d:b8:cb:8a:f8:39:04:21:8f:e1:f6:1a:6f:94:d2: a7:a0:46:db:c3:8c:62:4e:95:b6:09:39:39:78:9c: f9:6b:84:0d:9e:8b:99:4b:7d:0b:9d:49:ad:a4:d7: 92:5a:b4:59:95:6a:96:19:5d:0a:8a:7f:55:bb:9f: d2:47:46:15:a6:37:d9:00:6a:9a:f8:05:aa:49:a5: 84:fb:31:46:8f:df:46:2c:52:e9:0d:34:c2:6e:16: 40:6e:6c:c7:62:f8:cc:77:99:a4:48:4d:bc:e7:93: a9:52:22:cd:cb:04:81:8e:63:f7:07:15:43:10:a9: 4d:7e:d7:1a:73:40:c7:db:94:72:77:0f:6b:9a:d6: 35:f9:bf:8f:64:36:4c:5b:7e:83:51:c8:a3:85:dc: cf:40:8c:d3:e3:92:bb:47:fb:7e:42:43:4f:28:12: 33:98:a0:03:91:29:a6:3f:06:3c:60:05:b9:21:87: b1:a6:f2:aa:57:78:8d:58:4a:48:ea:d1:b4:9c:16: 88:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:30:69:55:17:BB:24:96:95:6E:C1:5D:D1:5E:55:0E:66:2E:AB:97 X509v3 Authority Key Identifier: keyid:FD:4E:5C:FB:BE:51:34:01:60:39:6D:59:6E:1B:32:48:CF:C8:1C:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5CEA/28A77B6864EE11EDA4A34513C4F9AE02/_U5c-75RNAFgOW1ZbhsySM_IHMQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_U5c-75RNAFgOW1ZbhsySM_IHMQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5CEA/28A77B6864EE11EDA4A34513C4F9AE02/_U5c-75RNAFgOW1ZbhsySM_IHMQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d3:bc:e9:e1:d6:bd:ac:95:27:7a:c9:56:36:cd:0c:c4:b8:05: a8:44:68:4c:45:fc:ee:9a:90:48:90:53:63:6c:69:5a:b4:ef: 3d:41:3b:93:21:d8:b3:be:42:41:ac:89:24:e2:c9:83:2f:28: 77:b8:17:49:65:c7:78:ac:0f:26:bf:fe:0d:af:f6:c2:61:b7: 6c:85:2a:62:bf:60:85:35:3e:96:22:2e:3d:76:11:7f:8b:43: 75:0c:4b:a8:89:fa:69:b5:94:e8:85:8b:2f:0b:37:d1:09:92: 27:32:60:66:07:66:f0:d4:f5:0e:45:26:ff:9a:ff:16:79:34: b5:53:de:22:de:e3:31:ea:d4:f1:84:b6:e2:29:f5:10:49:93: 10:f0:3c:53:b4:0a:db:b3:a9:78:78:82:a9:22:d5:3b:86:9c: cc:12:3c:43:66:aa:60:58:ea:b6:45:27:4c:33:cf:c4:40:89: a0:5f:7e:2f:10:4c:3d:72:9e:2b:a5:6f:56:3f:30:bf:6a:cd: 2d:47:82:dd:c0:a3:2c:5d:ae:89:8d:3b:ac:bb:8c:9c:9b:4a: 98:33:60:9e:e2:1d:c8:96:55:03:ba:dc:21:3f:41:a8:65:1f: 49:cb:59:b8:c7:45:8a:36:d8:f5:cb:9a:38:6f:3a:64:a1:96: 38:5b:69:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVDRUExMTAvBgNVBAUTKEZENEU1Q0ZCQkU1MTM0MDE2MDM5NkQ1OTZFMUIzMjQ4 Q0ZDODFDQzQwHhcNMjUwODA1MDI0ODEzWhcNMjUwODEyMDI0ODEzWjAYMRYwFAYD VQQDEw02ODkxNzBlZC1kMjAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1X2RHUIGM/Oo+KrHTzAbJ/WmLRVbQJAi1G6z6awxapAYTOxITUC3hT5TiBW8 z9nOG/KE8T4rsHH/SBmduMuK+DkEIY/h9hpvlNKnoEbbw4xiTpW2CTk5eJz5a4QN nouZS30LnUmtpNeSWrRZlWqWGV0Kin9Vu5/SR0YVpjfZAGqa+AWqSaWE+zFGj99G LFLpDTTCbhZAbmzHYvjMd5mkSE2855OpUiLNywSBjmP3BxVDEKlNftcac0DH25Ry dw9rmtY1+b+PZDZMW36DUcijhdzPQIzT45K7R/t+QkNPKBIzmKADkSmmPwY8YAW5 IYexpvKqV3iNWEpI6tG0nBaIOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNYwaVUX uySWlW7BXdFeVQ5mLquXMB8GA1UdIwQYMBaAFP1OXPu+UTQBYDltWW4bMkjPyBzE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUNFQS8yOEE3N0I2ODY0 RUUxMUVEQTRBMzQ1MTNDNEY5QUUwMi9fVTVjLTc1Uk5BRmdPVzFaYmhzeVNNX0lI TVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19VNWMtNzVSTkFGZ09XMVpiaHN5U01fSUhNUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NUNFQS8yOEE3N0I2ODY0RUUxMUVEQTRBMzQ1MTNDNEY5QUUwMi9fVTVjLTc1Uk5B RmdPVzFaYmhzeVNNX0lITVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDTvOnh1r2slSd6yVY2zQzEuAWoRGhMRfzumpBIkFNjbGlatO89QTuT IdizvkJBrIkk4smDLyh3uBdJZcd4rA8mv/4Nr/bCYbdshSpiv2CFNT6WIi49dhF/ i0N1DEuoifpptZTohYsvCzfRCZInMmBmB2bw1PUORSb/mv8WeTS1U94i3uMx6tTx hLbiKfUQSZMQ8DxTtArbs6l4eIKpItU7hpzMEjxDZqpgWOq2RSdMM8/EQImgX34v EEw9cp4rpW9WPzC/as0tR4LdwKMsXa6JjTusu4ycm0qYM2Ce4h3IllUDutwhP0Go ZR9Jy1m4x0WKNtj1y5o4bzpkoZY4W2nA -----END CERTIFICATE-----Generated at Wed Aug 6 10:21:30 2025 by rpki-client