$ rpki-client -vvf rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.mft File: 5jLTjFoywhfG7nHVLe-fOMoWbFE.mft (raw, json) Hash identifier: EPwgcqzkHfFdivtRPxCuzin+2+U41E1wb3Mgh2PxO9Y= Subject key identifier: CC:9E:D7:83:60:1C:31:61:D7:F7:8F:88:F3:83:8A:28:03:1A:EA:5C Authority key identifier: E6:32:D3:8C:5A:32:C2:17:C6:EE:71:D5:2D:EF:9F:38:CA:16:6C:51 Certificate issuer: /CN=A911486F/serialNumber=E632D38C5A32C217C6EE71D52DEF9F38CA166C51 Certificate serial: 0200 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jLTjFoywhfG7nHVLe-fOMoWbFE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.mft Manifest number: 01F0 Signing time: Sat 19 Jul 2025 02:53:21 +0000 Manifest this update: Sat 19 Jul 2025 02:53:21 +0000 Manifest next update: Sat 26 Jul 2025 02:53:21 +0000 Files and hashes: 1: 5jLTjFoywhfG7nHVLe-fOMoWbFE.crl (hash: iY1Ky3jrODPaKwgVRHw6k06rM05oiYubJMQ6ITBqs5U=) 2: 32D8E190D0CB11EEAB1CAF34C4F9AE02.roa (hash: I6cFYaTwrscj9Do0u5LBBtA5etRJeCEnBRWA8YbVDTo=) 3: 4D554D70D0CA11EE9DCDFA83C4F9AE02.roa (hash: 6yZMYTHYRpP2MH6PChCYijNkjUxZFdtlKAJWlJtdpuc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.crl rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jLTjFoywhfG7nHVLe-fOMoWbFE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 02:53:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 512 (0x200) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911486F, serialNumber=E632D38C5A32C217C6EE71D52DEF9F38CA166C51 Validity Not Before: Jul 19 02:53:21 2025 GMT Not After : Jul 26 02:53:21 2025 GMT Subject: CN=687b08a1-f042 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:45:a5:a7:28:dc:69:04:a4:59:18:1f:be:c0: 3b:77:4f:b4:ca:fe:43:e6:97:49:9d:85:b3:97:6f: 11:05:00:a6:aa:ec:fc:83:a1:89:e1:19:2c:53:c0: d4:3d:9d:b4:a7:5d:27:b1:eb:bd:ff:4c:76:4a:b8: 0e:aa:53:09:78:5a:95:aa:af:06:f1:66:45:f9:7b: f1:1d:74:16:c5:f6:c7:c4:92:1f:47:4d:85:da:7a: bb:18:09:c7:c1:35:6b:e8:ec:b0:35:7f:ec:8a:1a: c8:d3:c0:06:d0:8a:3b:c0:6b:c4:d6:83:21:aa:e3: 75:58:d1:f0:2b:6b:68:9f:59:e3:a3:a0:00:88:e2: fb:bd:13:c7:b6:a4:21:ec:21:22:fa:5f:59:ef:d3: e6:42:b7:ea:be:6a:82:e8:a6:26:d9:dd:a6:88:3b: 27:54:17:2e:cb:ae:5a:82:6f:63:ff:5e:49:4e:63: 19:c8:dc:be:ca:53:9d:27:2d:cf:bd:b7:de:e4:aa: 6c:83:80:ba:b9:9f:66:fb:be:66:9d:4b:44:5b:69: e1:c2:41:84:6a:07:37:8b:a8:f6:55:17:ce:91:bb: cf:cc:9f:38:37:4e:3a:4a:89:eb:73:5e:ad:dd:90: 55:70:fb:b6:d4:45:63:da:8f:82:c2:c3:25:7c:dc: d0:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:9E:D7:83:60:1C:31:61:D7:F7:8F:88:F3:83:8A:28:03:1A:EA:5C X509v3 Authority Key Identifier: keyid:E6:32:D3:8C:5A:32:C2:17:C6:EE:71:D5:2D:EF:9F:38:CA:16:6C:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jLTjFoywhfG7nHVLe-fOMoWbFE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:7b:80:3a:00:32:f6:07:0d:78:7c:e8:7e:1a:67:a9:11:69: 8f:b2:07:5c:59:77:37:64:c2:4f:6e:cb:10:3a:2d:d0:d4:a7: 0b:46:38:bc:78:9c:f0:12:7f:e1:93:c6:2c:c2:71:55:9c:1a: ab:fc:34:ba:f4:78:4c:ec:a9:85:f9:b5:76:e7:67:b3:83:de: df:be:29:cb:16:6e:8d:62:66:01:c7:c4:f8:a1:9d:72:7f:61: 96:a0:92:66:cb:84:61:a4:98:18:40:ed:42:72:01:9f:f6:6b: 45:01:27:58:09:6f:09:08:5e:65:d2:76:f7:f8:37:54:55:58: 71:31:4a:d9:90:45:f2:1f:f8:a4:1e:19:fb:0a:d8:f4:d0:ee: 90:51:e2:a6:6d:3b:4a:17:f6:e9:07:e9:04:be:a0:2f:88:e0: b9:1a:91:8f:03:4a:fc:f8:73:59:39:11:24:cd:6b:fa:7c:f2: ff:67:82:bf:41:e3:34:73:4f:62:15:e5:42:ed:f7:59:5d:12: cd:6a:30:10:a9:f3:ea:67:9b:bc:3b:6d:8d:64:f0:e2:ce:3c: 19:b4:11:58:cf:50:3b:bf:a3:99:86:cd:f2:6f:a1:35:b0:ba: 04:46:4e:79:22:22:63:ff:d5:c7:f7:be:ec:62:a9:83:97:28: bb:6f:09:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ4NkYxMTAvBgNVBAUTKEU2MzJEMzhDNUEzMkMyMTdDNkVFNzFENTJERUY5RjM4 Q0ExNjZDNTEwHhcNMjUwNzE5MDI1MzIxWhcNMjUwNzI2MDI1MzIxWjAYMRYwFAYD VQQDEw02ODdiMDhhMS1mMDQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwUWlpyjcaQSkWRgfvsA7d0+0yv5D5pdJnYWzl28RBQCmquz8g6GJ4RksU8DU PZ20p10nseu9/0x2SrgOqlMJeFqVqq8G8WZF+XvxHXQWxfbHxJIfR02F2nq7GAnH wTVr6OywNX/sihrI08AG0Io7wGvE1oMhquN1WNHwK2ton1njo6AAiOL7vRPHtqQh 7CEi+l9Z79PmQrfqvmqC6KYm2d2miDsnVBcuy65agm9j/15JTmMZyNy+ylOdJy3P vbfe5Kpsg4C6uZ9m+75mnUtEW2nhwkGEagc3i6j2VRfOkbvPzJ84N046Sonrc16t 3ZBVcPu21EVj2o+CwsMlfNzQKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMye14Ng HDFh1/ePiPODiigDGupcMB8GA1UdIwQYMBaAFOYy04xaMsIXxu5x1S3vnzjKFmxR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDg2Ri8yMkNGMzQ0ODg2 NkMxMUVEQUZBNUE0NzFDNEY5QUUwMi81akxUakZveXdoZkc3bkhWTGUtZk9Nb1di RkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVqTFRqRm95d2hmRzduSFZMZS1mT01vV2JGRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDg2Ri8yMkNGMzQ0ODg2NkMxMUVEQUZBNUE0NzFDNEY5QUUwMi81akxUakZveXdo Zkc3bkhWTGUtZk9Nb1diRkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALe4A6ADL2Bw14fOh+GmepEWmPsgdcWXc3ZMJPbssQOi3Q1KcLRji8 eJzwEn/hk8YswnFVnBqr/DS69HhM7KmF+bV252ezg97fvinLFm6NYmYBx8T4oZ1y f2GWoJJmy4RhpJgYQO1CcgGf9mtFASdYCW8JCF5l0nb3+DdUVVhxMUrZkEXyH/ik Hhn7Ctj00O6QUeKmbTtKF/bpB+kEvqAviOC5GpGPA0r8+HNZOREkzWv6fPL/Z4K/ QeM0c09iFeVC7fdZXRLNajAQqfPqZ5u8O22NZPDizjwZtBFYz1A7v6OZhs3yb6E1 sLoERk55IiJj/9XH977sYqmDlyi7bwlS -----END CERTIFICATE-----Generated at Sun Jul 20 03:31:54 2025 by rpki-client