$ rpki-client -vvf rpki.apnic.net/member_repository/A913ABFE/F1D5587E25F111EEB7B48058C4F9AE02/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.mft File: 5YjHPmy0_bOLhO5A-Pm2TFC-S3M.mft (raw, json) Hash identifier: ONYwlaAhdcgAkZfyhDlMWOSFWKp9NfusG3K0JwXgvBY= Subject key identifier: CA:02:2B:85:1F:EF:ED:43:EF:79:46:C2:9B:A6:B0:89:9B:39:1B:02 Authority key identifier: E5:88:C7:3E:6C:B4:FD:B3:8B:84:EE:40:F8:F9:B6:4C:50:BE:4B:73 Certificate issuer: /CN=A913ABFE/serialNumber=E588C73E6CB4FDB38B84EE40F8F9B64C50BE4B73 Certificate serial: 0195 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913ABFE/F1D5587E25F111EEB7B48058C4F9AE02/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.mft Manifest number: 0188 Signing time: Mon 21 Jul 2025 03:47:00 +0000 Manifest this update: Mon 21 Jul 2025 03:46:59 +0000 Manifest next update: Mon 28 Jul 2025 03:46:59 +0000 Files and hashes: 1: 5YjHPmy0_bOLhO5A-Pm2TFC-S3M.crl (hash: nb96Af0bOV9snU5Su+3pMPPn9giF4dHA3w7QOMmxbGc=) 2: F4C13F18066811F0B521BF2FC4F9AE02.roa (hash: epExzgPr36sDhlRxRH5MQNOpHIGT7+cJfb/YyVTxfcc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913ABFE/F1D5587E25F111EEB7B48058C4F9AE02/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.crl rsync://rpki.apnic.net/member_repository/A913ABFE/F1D5587E25F111EEB7B48058C4F9AE02/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 03:46:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 405 (0x195) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913ABFE, serialNumber=E588C73E6CB4FDB38B84EE40F8F9B64C50BE4B73 Validity Not Before: Jul 21 03:46:59 2025 GMT Not After : Jul 28 03:46:59 2025 GMT Subject: CN=687db833-ad3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f7:70:3f:2e:ed:39:17:cb:cc:c5:2d:c5:6f: c3:ea:e9:7a:bd:b8:32:9c:4e:98:24:88:2a:8e:7c: 22:6c:fc:01:83:ae:85:38:a8:28:a4:8a:67:d0:8a: 9b:21:84:95:20:3a:29:6d:88:e8:62:dd:79:96:24: 39:07:2e:a4:52:08:d0:02:c7:47:0d:02:25:3a:48: 70:7c:93:30:11:78:2b:1c:da:97:36:b0:02:75:d6: b9:e4:29:3f:65:8b:fa:47:77:92:af:a7:de:52:6b: 09:4e:8f:b3:28:b1:e0:92:10:5c:55:54:4c:1e:6c: e7:7d:cb:2c:0e:01:31:2a:38:4c:11:56:0e:db:69: 88:57:bc:71:42:71:ba:5b:27:55:9f:95:cd:9a:e9: 21:d6:c7:9b:8d:39:6e:f4:c9:0a:ad:52:a8:ea:fd: a2:08:b4:b3:c4:a7:60:9a:8b:24:dc:f6:b5:2c:77: 7f:8c:90:3b:24:2c:bb:98:db:78:2b:7d:34:da:a0: ab:1d:0d:17:a6:1a:86:10:2e:c7:0e:d7:03:94:c8: 8c:00:71:8a:49:82:04:e8:b8:b1:0e:ea:a5:e2:8e: d3:e2:c1:19:c0:0b:bb:15:ca:fe:ee:41:34:a8:b2: d7:cf:a3:38:46:9b:76:80:b2:0e:85:7a:a5:0e:66: fd:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:02:2B:85:1F:EF:ED:43:EF:79:46:C2:9B:A6:B0:89:9B:39:1B:02 X509v3 Authority Key Identifier: keyid:E5:88:C7:3E:6C:B4:FD:B3:8B:84:EE:40:F8:F9:B6:4C:50:BE:4B:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913ABFE/F1D5587E25F111EEB7B48058C4F9AE02/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913ABFE/F1D5587E25F111EEB7B48058C4F9AE02/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:d1:ad:80:36:41:55:fe:7c:0a:99:00:46:6c:fd:e7:45:4d: 19:09:02:d8:7f:a3:9c:d2:3d:40:a6:a5:b8:a4:99:32:78:61: ab:de:8c:b4:bd:2c:a4:01:08:1a:c3:ea:81:89:b8:23:b0:7c: 54:ee:24:c5:20:56:1c:d5:29:42:91:2a:16:fb:3f:fe:94:cc: e1:7d:52:74:ce:28:a7:c8:f9:8e:33:5a:31:a2:ae:52:59:38: 24:17:c5:3e:c7:c7:8c:47:42:ef:a9:a2:55:99:1c:e4:4e:03: 5c:0e:a6:69:e8:e6:f9:76:8d:d9:0c:93:03:6a:57:3e:4f:c7: ae:91:64:58:a7:62:49:9c:0c:2a:f3:94:79:83:22:14:c5:e7: 00:36:a6:95:41:cc:25:e1:f3:af:0d:26:6e:61:9f:02:0c:76: 10:4b:b1:d0:a7:c0:f1:1a:70:4b:f1:4e:60:b1:83:81:b3:c1: 6d:a9:3a:83:53:a4:5f:b7:09:28:36:14:70:6b:8a:1e:a7:8c: ca:5c:ec:aa:9d:4a:51:18:b1:9c:08:b0:66:ee:af:f3:fc:e8: df:a2:0e:6b:33:4a:a0:97:0c:6d:c2:e3:2d:8d:08:8e:65:25: 22:de:27:1f:e1:79:8e:6d:30:c6:45:e2:6f:94:37:0b:d4:08: 4f:8a:41:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0FCRkUxMTAvBgNVBAUTKEU1ODhDNzNFNkNCNEZEQjM4Qjg0RUU0MEY4RjlCNjRD NTBCRTRCNzMwHhcNMjUwNzIxMDM0NjU5WhcNMjUwNzI4MDM0NjU5WjAYMRYwFAYD VQQDEw02ODdkYjgzMy1hZDNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw/dwPy7tORfLzMUtxW/D6ul6vbgynE6YJIgqjnwibPwBg66FOKgopIpn0Iqb IYSVIDopbYjoYt15liQ5By6kUgjQAsdHDQIlOkhwfJMwEXgrHNqXNrACdda55Ck/ ZYv6R3eSr6feUmsJTo+zKLHgkhBcVVRMHmznfcssDgExKjhMEVYO22mIV7xxQnG6 WydVn5XNmukh1sebjTlu9MkKrVKo6v2iCLSzxKdgmosk3Pa1LHd/jJA7JCy7mNt4 K3002qCrHQ0XphqGEC7HDtcDlMiMAHGKSYIE6LixDuql4o7T4sEZwAu7Fcr+7kE0 qLLXz6M4Rpt2gLIOhXqlDmb9MQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMoCK4Uf 7+1D73lGwpumsImbORsCMB8GA1UdIwQYMBaAFOWIxz5stP2zi4TuQPj5tkxQvktz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUJGRS9GMUQ1NTg3RTI1 RjExMUVFQjdCNDgwNThDNEY5QUUwMi81WWpIUG15MF9iT0xoTzVBLVBtMlRGQy1T M00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVZakhQbXkwX2JPTGhPNUEtUG0yVEZDLVMzTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QUJGRS9GMUQ1NTg3RTI1RjExMUVFQjdCNDgwNThDNEY5QUUwMi81WWpIUG15MF9i T0xoTzVBLVBtMlRGQy1TM00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAr0a2ANkFV/nwKmQBGbP3nRU0ZCQLYf6Oc0j1ApqW4pJkyeGGr3oy0 vSykAQgaw+qBibgjsHxU7iTFIFYc1SlCkSoW+z/+lMzhfVJ0ziinyPmOM1oxoq5S WTgkF8U+x8eMR0LvqaJVmRzkTgNcDqZp6Ob5do3ZDJMDalc+T8eukWRYp2JJnAwq 85R5gyIUxecANqaVQcwl4fOvDSZuYZ8CDHYQS7HQp8DxGnBL8U5gsYOBs8FtqTqD U6RftwkoNhRwa4oep4zKXOyqnUpRGLGcCLBm7q/z/Ojfog5rM0qglwxtwuMtjQiO ZSUi3icf4XmObTDGReJvlDcL1AhPikGm -----END CERTIFICATE-----Generated at Mon Jul 21 06:57:43 2025 by rpki-client