$ rpki-client -vvf rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft File: 5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft (raw, json) Hash identifier: DHcR4IatEVCNunVHJCjeZ9LpJllTe7WUtHD6dxWan8k= Subject key identifier: A2:6E:82:E3:4C:BE:F7:3F:EA:D4:E2:7D:60:1F:34:3B:92:55:A0:1A Authority key identifier: E6:1B:EC:13:92:86:32:83:DC:99:E2:FF:93:15:75:A3:18:1C:28:18 Certificate issuer: /CN=A91367E0/serialNumber=E61BEC1392863283DC99E2FF931575A3181C2818 Certificate serial: 016C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hvsE5KGMoPcmeL_kxV1oxgcKBg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft Manifest number: 0166 Signing time: Mon 21 Jul 2025 04:00:24 +0000 Manifest this update: Mon 21 Jul 2025 04:00:24 +0000 Manifest next update: Mon 28 Jul 2025 04:00:24 +0000 Files and hashes: 1: 5hvsE5KGMoPcmeL_kxV1oxgcKBg.crl (hash: +iDQHDV/M5XCpMXrxa67tkINojk35WZvpd4UONZWKs0=) 2: 444EB35A459D11EEA8758641C4F9AE02.roa (hash: HxWrs2XE/yxdbhgHCsYXC3cP1Nukb/SzqytOwhYHUgs=) 3: 57F3935045A011EEA9A5215EC4F9AE02.roa (hash: zhWHaUx74UFv//O6sI95zwvuuZgRyOVSokAfykLA4G4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.crl rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hvsE5KGMoPcmeL_kxV1oxgcKBg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 04:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 364 (0x16c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91367E0, serialNumber=E61BEC1392863283DC99E2FF931575A3181C2818 Validity Not Before: Jul 21 04:00:24 2025 GMT Not After : Jul 28 04:00:24 2025 GMT Subject: CN=687dbb58-08b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:b5:11:f9:ef:c9:21:16:4d:c8:be:36:52:ab: e4:9c:60:8a:7a:54:c0:cf:63:4b:5d:a0:72:55:19: 22:19:f7:7b:69:e8:e6:be:e7:a5:fc:33:c3:a4:5b: d6:18:cf:07:86:26:27:bd:8b:e4:5f:66:8d:fa:65: 8d:23:c9:d5:ed:90:2c:c4:8a:cd:50:a3:51:35:50: 7f:d1:2b:ec:8b:ac:1f:98:fc:2c:eb:18:05:97:d3: cb:49:f1:dc:0d:b8:70:a2:72:d8:99:8b:24:b9:66: 3d:bf:70:cf:c4:41:23:3e:89:1a:9d:03:7c:26:d0: 7e:32:8e:f5:29:c2:fe:f9:69:1a:32:b4:6f:98:88: f1:d6:40:15:1b:1d:75:97:fd:cd:02:f6:61:c5:a1: 79:95:9a:8f:7e:35:2c:a4:bb:a4:56:60:26:2b:20: a5:b1:b1:71:c3:68:97:ac:25:ac:3a:fc:a6:69:0c: 37:81:f5:2b:56:7e:db:03:e4:46:08:50:6f:c4:1f: f7:c6:1d:ef:59:d7:8e:8b:a1:5f:9e:50:fb:de:c2: fd:4b:6c:79:7e:f7:16:de:26:b9:74:a1:69:f0:ff: a8:03:6c:99:59:53:6e:dc:f3:9b:f3:b3:ae:53:03: 6d:23:99:d3:98:92:6b:5b:f2:68:ef:be:8c:c8:7d: b0:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:6E:82:E3:4C:BE:F7:3F:EA:D4:E2:7D:60:1F:34:3B:92:55:A0:1A X509v3 Authority Key Identifier: keyid:E6:1B:EC:13:92:86:32:83:DC:99:E2:FF:93:15:75:A3:18:1C:28:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hvsE5KGMoPcmeL_kxV1oxgcKBg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:62:bb:31:c3:b0:88:25:66:64:ac:fd:05:86:64:48:28:48: 44:48:e8:bb:a2:23:91:69:3e:85:08:71:90:e7:5a:80:58:91: 74:7b:19:95:3e:b0:9f:61:96:60:3b:3c:60:2f:1a:e2:32:04: 0a:5f:e6:84:60:b6:df:5b:1b:bb:73:fa:84:61:ef:89:b5:05: da:06:9c:49:c7:48:d2:a2:d5:7e:6f:10:85:28:e9:16:b6:9f: 30:00:ca:75:15:68:13:fd:83:36:46:6e:7b:db:04:e6:73:57: 31:39:de:42:f0:1c:65:c6:aa:a8:50:36:50:49:f6:44:e3:d1: b0:7d:20:d5:21:00:90:6b:43:b9:36:d6:77:91:ac:f0:98:ce: c3:e4:e7:fc:8c:9e:d2:7b:53:6b:b5:09:30:ac:ab:0f:fa:39: 6a:4b:d4:8a:a8:53:6f:ac:04:ee:0d:93:1c:5d:a0:15:86:43: 91:eb:06:0c:05:eb:40:9c:f9:f0:49:db:25:05:e4:85:7d:e9: ff:88:85:94:ac:94:5c:98:ca:9e:d1:43:a4:e4:3c:ee:e1:de: 11:d1:aa:bd:f8:04:cc:5d:e5:50:c5:a9:b1:e7:05:ba:e7:70: c5:82:ce:cf:5a:3b:e5:a1:ee:78:50:db:3a:00:f6:6b:12:9a: 8b:49:35:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzY3RTAxMTAvBgNVBAUTKEU2MUJFQzEzOTI4NjMyODNEQzk5RTJGRjkzMTU3NUEz MTgxQzI4MTgwHhcNMjUwNzIxMDQwMDI0WhcNMjUwNzI4MDQwMDI0WjAYMRYwFAYD VQQDEw02ODdkYmI1OC0wOGI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2bUR+e/JIRZNyL42UqvknGCKelTAz2NLXaByVRkiGfd7aejmvuel/DPDpFvW GM8HhiYnvYvkX2aN+mWNI8nV7ZAsxIrNUKNRNVB/0Svsi6wfmPws6xgFl9PLSfHc DbhwonLYmYskuWY9v3DPxEEjPokanQN8JtB+Mo71KcL++WkaMrRvmIjx1kAVGx11 l/3NAvZhxaF5lZqPfjUspLukVmAmKyClsbFxw2iXrCWsOvymaQw3gfUrVn7bA+RG CFBvxB/3xh3vWdeOi6FfnlD73sL9S2x5fvcW3ia5dKFp8P+oA2yZWVNu3POb87Ou UwNtI5nTmJJrW/Jo776MyH2wpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKJuguNM vvc/6tTifWAfNDuSVaAaMB8GA1UdIwQYMBaAFOYb7BOShjKD3Jni/5MVdaMYHCgY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjdFMC9FNDE4OTkxMDQ1 OUMxMUVFQjY5RDY4MzFDNEY5QUUwMi81aHZzRTVLR01vUGNtZUxfa3hWMW94Z2NL QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVodnNFNUtHTW9QY21lTF9reFYxb3hnY0tCZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjdFMC9FNDE4OTkxMDQ1OUMxMUVFQjY5RDY4MzFDNEY5QUUwMi81aHZzRTVLR01v UGNtZUxfa3hWMW94Z2NLQmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEYrsxw7CIJWZkrP0FhmRIKEhESOi7oiORaT6FCHGQ51qAWJF0exmV PrCfYZZgOzxgLxriMgQKX+aEYLbfWxu7c/qEYe+JtQXaBpxJx0jSotV+bxCFKOkW tp8wAMp1FWgT/YM2Rm572wTmc1cxOd5C8BxlxqqoUDZQSfZE49GwfSDVIQCQa0O5 NtZ3kazwmM7D5Of8jJ7Se1NrtQkwrKsP+jlqS9SKqFNvrATuDZMcXaAVhkOR6wYM BetAnPnwSdslBeSFfen/iIWUrJRcmMqe0UOk5Dzu4d4R0aq9+ATMXeVQxamx5wW6 53DFgs7PWjvloe54UNs6APZrEpqLSTWI -----END CERTIFICATE-----Generated at Mon Jul 21 08:07:03 2025 by rpki-client