$ rpki-client -vvf rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.mft File: N5vU53MvGo0cOyItt3c8HBVBn0I.mft (raw, json) Hash identifier: Up1nuqHeRVHHQWoksZO+5iinoZgTX1cZqcmYHTnREmc= Subject key identifier: 41:ED:3C:74:00:69:58:00:65:18:E0:A2:F5:29:91:13:CE:53:39:AE Authority key identifier: 37:9B:D4:E7:73:2F:1A:8D:1C:3B:22:2D:B7:77:3C:1C:15:41:9F:42 Certificate issuer: /CN=A912527F/serialNumber=379BD4E7732F1A8D1C3B222DB7773C1C15419F42 Certificate serial: 028B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5vU53MvGo0cOyItt3c8HBVBn0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.mft Manifest number: 0287 Signing time: Sat 19 Jul 2025 02:05:08 +0000 Manifest this update: Sat 19 Jul 2025 02:05:07 +0000 Manifest next update: Sat 26 Jul 2025 02:05:07 +0000 Files and hashes: 1: N5vU53MvGo0cOyItt3c8HBVBn0I.crl (hash: ftcVFkChtOyFjnioQCURFvwmttMB8hRIqctF5rcWK4o=) 2: BE0481A4EFA111ED87AD1F0BC4F9AE02.roa (hash: NQf56Uj9m/23kHcMdcevpS6JxvdYxcKJxC0qqxSbed4=) 3: 2C257150DBCA11EF920CC12BC4F9AE02.roa (hash: bsnKJQWxF5UUZ+STFoaUleWe8G1krXm9q3cPKIQEWa4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.crl rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5vU53MvGo0cOyItt3c8HBVBn0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 02:05:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 651 (0x28b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912527F, serialNumber=379BD4E7732F1A8D1C3B222DB7773C1C15419F42 Validity Not Before: Jul 19 02:05:07 2025 GMT Not After : Jul 26 02:05:07 2025 GMT Subject: CN=687afd54-7077 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:08:f4:0e:d4:a6:37:ee:c5:f0:3d:5c:0a:67: 7f:b4:9f:8f:5c:4b:bf:cd:cc:c4:ba:88:69:e1:6f: e7:e3:b0:de:08:80:d4:2a:39:86:23:23:30:44:d0: 89:24:48:be:4b:31:e2:a2:1f:c2:ab:41:29:aa:23: ab:cb:60:44:eb:13:59:8c:c9:12:2c:3c:ac:c7:7c: a2:a7:73:bd:97:23:10:e3:28:2d:f6:56:b9:37:75: 91:3b:44:b8:5e:46:99:24:60:20:95:39:c3:16:c8: 41:95:76:fb:48:eb:14:b8:a8:ba:11:99:6c:40:b7: 87:a5:a2:4e:c4:b5:9b:0c:f6:64:7c:12:26:23:75: f5:fc:e4:e3:b5:d8:81:9d:8a:2a:96:5a:3c:ef:ec: 5a:66:ff:14:f9:c4:e4:79:62:02:5e:48:48:76:3c: 6a:67:94:01:53:96:89:af:6d:4f:d8:ff:f2:4c:73: 60:79:39:66:76:e5:0f:45:5b:70:2e:49:81:10:dd: c9:e2:81:0f:e7:b1:b7:65:c9:e4:45:af:a1:4d:d7: 39:ef:50:f9:46:80:39:a2:bc:c6:ee:51:18:a8:0c: a4:26:e4:ff:cf:25:4b:4e:c8:4a:f4:d6:e8:69:7d: d7:b6:e5:a9:22:a7:f2:b0:89:0b:7f:31:17:4e:5f: 2c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:ED:3C:74:00:69:58:00:65:18:E0:A2:F5:29:91:13:CE:53:39:AE X509v3 Authority Key Identifier: keyid:37:9B:D4:E7:73:2F:1A:8D:1C:3B:22:2D:B7:77:3C:1C:15:41:9F:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5vU53MvGo0cOyItt3c8HBVBn0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:af:d7:11:61:38:25:16:b4:72:48:08:72:ff:be:45:c9:97: f3:76:fd:74:85:c3:ae:30:b7:89:ac:ab:ae:5c:ab:b8:88:6a: db:2f:b4:da:f7:f1:93:4c:e2:34:e8:61:4b:65:b2:d2:d3:48: ae:b6:f7:94:cf:45:f6:81:af:6e:0a:4f:82:f8:ce:d4:67:fb: 1d:56:2a:d7:61:c6:a1:af:51:04:c9:e0:be:a3:0c:4f:44:6d: e6:20:36:53:e8:07:75:34:33:f0:b5:fc:fa:bf:02:c6:20:45: e8:6f:ce:43:39:ed:2e:dc:ac:dc:26:21:10:9c:db:8f:42:82: ac:e3:f8:bd:69:ed:af:ed:d2:5c:17:e9:00:40:ce:0c:d0:91: b0:a0:70:c0:93:49:1f:d3:72:57:e4:fc:c9:9c:b0:49:05:ed: 7f:9e:87:dd:e8:f7:09:97:a1:11:b0:4c:57:73:6f:73:be:49: f1:20:98:2e:d6:7a:c6:fd:6d:cf:7a:c5:70:65:f8:e6:a7:7e: ad:31:65:a9:81:26:13:1b:5b:da:49:9b:f3:4f:c9:2f:de:d0: 91:c8:bf:24:c9:74:8a:2b:5c:dc:68:11:18:1a:bc:f4:25:55: 17:52:d8:9d:95:3d:8f:81:1c:ef:f1:66:8b:89:6f:a6:d2:07: c4:34:a1:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAoswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjUyN0YxMTAvBgNVBAUTKDM3OUJENEU3NzMyRjFBOEQxQzNCMjIyREI3NzczQzFD MTU0MTlGNDIwHhcNMjUwNzE5MDIwNTA3WhcNMjUwNzI2MDIwNTA3WjAYMRYwFAYD VQQDEw02ODdhZmQ1NC03MDc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7gj0DtSmN+7F8D1cCmd/tJ+PXEu/zczEuohp4W/n47DeCIDUKjmGIyMwRNCJ JEi+SzHioh/Cq0EpqiOry2BE6xNZjMkSLDysx3yip3O9lyMQ4ygt9la5N3WRO0S4 XkaZJGAglTnDFshBlXb7SOsUuKi6EZlsQLeHpaJOxLWbDPZkfBImI3X1/OTjtdiB nYoqllo87+xaZv8U+cTkeWICXkhIdjxqZ5QBU5aJr21P2P/yTHNgeTlmduUPRVtw LkmBEN3J4oEP57G3ZcnkRa+hTdc571D5RoA5orzG7lEYqAykJuT/zyVLTshK9Nbo aX3XtuWpIqfysIkLfzEXTl8siQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEHtPHQA aVgAZRjgovUpkRPOUzmuMB8GA1UdIwQYMBaAFDeb1OdzLxqNHDsiLbd3PBwVQZ9C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTI3Ri9CQ0ZEQUZDQzEw REQxMUVEODBBQTI0ODVDNEY5QUUwMi9ONXZVNTNNdkdvMGNPeUl0dDNjOEhCVkJu MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL041dlU1M012R28wY095SXR0M2M4SEJWQm4wSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTI3Ri9CQ0ZEQUZDQzEwREQxMUVEODBBQTI0ODVDNEY5QUUwMi9ONXZVNTNNdkdv MGNPeUl0dDNjOEhCVkJuMEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOr9cRYTglFrRySAhy/75FyZfzdv10hcOuMLeJrKuuXKu4iGrbL7Ta 9/GTTOI06GFLZbLS00iutveUz0X2ga9uCk+C+M7UZ/sdVirXYcahr1EEyeC+owxP RG3mIDZT6Ad1NDPwtfz6vwLGIEXob85DOe0u3KzcJiEQnNuPQoKs4/i9ae2v7dJc F+kAQM4M0JGwoHDAk0kf03JX5PzJnLBJBe1/nofd6PcJl6ERsExXc29zvknxIJgu 1nrG/W3PesVwZfjmp36tMWWpgSYTG1vaSZvzT8kv3tCRyL8kyXSKK1zcaBEYGrz0 JVUXUtidlT2PgRzv8WaLiW+m0gfENKES -----END CERTIFICATE-----Generated at Sun Jul 20 10:01:42 2025 by rpki-client