$ rpki-client -vvf rpki.apnic.net/member_repository/A913B5C7/67D24396E80911EEBE489563C4F9AE02/5B7XVgdLN63ceU-UC9H1Pj9na5M.mft File: 5B7XVgdLN63ceU-UC9H1Pj9na5M.mft (raw, json) Hash identifier: HylBobHocBmXBMhjDequ4iTAuLfWdvhmyKMQbimdaj8= Subject key identifier: 2E:6F:E8:55:B6:1C:F8:92:93:08:36:3D:9B:57:40:1A:C2:6F:7E:0D Authority key identifier: E4:1E:D7:56:07:4B:37:AD:DC:79:4F:94:0B:D1:F5:3E:3F:67:6B:93 Certificate issuer: /CN=A913B5C7/serialNumber=E41ED756074B37ADDC794F940BD1F53E3F676B93 Certificate serial: FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5B7XVgdLN63ceU-UC9H1Pj9na5M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B5C7/67D24396E80911EEBE489563C4F9AE02/5B7XVgdLN63ceU-UC9H1Pj9na5M.mft Manifest number: F8 Signing time: Wed 23 Jul 2025 05:27:51 +0000 Manifest this update: Wed 23 Jul 2025 05:27:50 +0000 Manifest next update: Wed 30 Jul 2025 05:27:50 +0000 Files and hashes: 1: 5B7XVgdLN63ceU-UC9H1Pj9na5M.crl (hash: 6YSU6luKHGF49xGifeEltbLztzU8uyKuL4yj57UwkBE=) 2: B0CE94A0E80911EEADE3420AC4F9AE02.roa (hash: JMqNNeHY27Hx5eJ7SJKoh8TY1qwKjQvReEB44gwMvpE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B5C7/67D24396E80911EEBE489563C4F9AE02/5B7XVgdLN63ceU-UC9H1Pj9na5M.crl rsync://rpki.apnic.net/member_repository/A913B5C7/67D24396E80911EEBE489563C4F9AE02/5B7XVgdLN63ceU-UC9H1Pj9na5M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5B7XVgdLN63ceU-UC9H1Pj9na5M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 05:27:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 250 (0xfa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B5C7, serialNumber=E41ED756074B37ADDC794F940BD1F53E3F676B93 Validity Not Before: Jul 23 05:27:50 2025 GMT Not After : Jul 30 05:27:50 2025 GMT Subject: CN=688072d7-a789 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a1:5d:c1:db:74:ba:14:c8:95:e9:a4:33:ff: 14:57:19:8d:ba:f1:06:e5:d2:f2:23:be:a3:5f:e6: 86:a2:ee:ec:4b:ca:10:1a:1e:29:29:14:62:3b:b2: 93:3b:e4:c2:92:02:ea:77:19:38:de:70:3b:82:73: db:76:4b:4b:b6:cf:c7:ff:9a:6b:ab:8f:dc:9e:30: bd:75:a9:61:8f:4a:f5:0e:3d:98:d3:1d:98:22:59: 55:a1:b3:33:67:e7:32:d3:fc:79:8e:20:ca:fd:7d: 7e:78:91:59:3d:82:e6:37:50:27:f4:e8:28:1a:e5: 56:08:7e:97:0f:ec:a2:45:d6:b8:15:89:20:d5:de: dd:4c:6e:0c:c9:df:a5:44:58:85:f1:ec:53:08:a5: 45:d3:9b:7f:2a:b6:22:53:81:25:ac:65:07:b8:9a: 98:25:db:25:d4:65:47:5c:cd:7d:19:2a:90:17:70: 95:6d:49:3f:52:37:e5:1b:0a:72:3a:ff:3b:f4:db: d7:62:41:48:8a:7d:a6:d2:03:38:d2:02:bc:93:01: 58:0e:97:26:0f:27:cc:ab:e3:bd:18:c5:ff:ed:c8: ad:4a:5c:3e:6b:f7:e8:56:6c:61:62:1e:68:9a:81: 0e:f7:06:7e:2f:bf:1d:7e:ec:48:d2:ad:03:86:32: 33:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:6F:E8:55:B6:1C:F8:92:93:08:36:3D:9B:57:40:1A:C2:6F:7E:0D X509v3 Authority Key Identifier: keyid:E4:1E:D7:56:07:4B:37:AD:DC:79:4F:94:0B:D1:F5:3E:3F:67:6B:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B5C7/67D24396E80911EEBE489563C4F9AE02/5B7XVgdLN63ceU-UC9H1Pj9na5M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5B7XVgdLN63ceU-UC9H1Pj9na5M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B5C7/67D24396E80911EEBE489563C4F9AE02/5B7XVgdLN63ceU-UC9H1Pj9na5M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:f2:93:aa:87:0a:79:f8:1f:b1:85:74:45:af:4f:a7:aa:e8: 5a:2f:b0:43:85:dc:59:c7:c6:53:fa:d5:6c:5b:39:81:97:ce: e0:cb:a4:46:ac:72:2d:7f:0e:a4:38:56:35:05:93:a7:1b:a9: 40:fb:5d:25:00:fd:5f:fc:90:4e:c3:ea:62:ab:4d:de:c1:26: 91:4a:ad:3f:ca:d8:c1:69:f7:b3:38:2f:95:6d:4f:e5:20:e1: 4d:97:dd:37:1a:fc:ea:a8:e4:81:88:1a:a2:57:41:3f:bb:2f: f1:d3:28:f5:42:e5:1e:80:61:d7:92:7a:28:a2:14:80:65:65: 30:10:90:f9:82:95:4b:dc:3c:9f:a2:20:6f:2a:0c:e3:96:cf: 37:c9:be:29:bf:d2:59:8c:46:96:e1:bc:3b:d2:64:13:47:9c: a9:fb:82:5f:4b:58:28:1c:67:cc:d1:b1:73:ea:3a:99:d1:6d: 4a:a8:4c:13:da:18:12:c5:74:bc:f7:30:32:d8:1b:f7:b1:8f: aa:62:fa:0a:f5:42:9d:46:b9:52:f7:8c:63:11:25:09:d0:8d: 3d:ed:f2:17:c3:cc:59:f3:b4:4f:96:96:f3:31:8c:23:61:9c: ac:c6:60:bd:c5:26:50:6c:d7:22:82:af:9d:52:ea:9a:e6:92: f1:49:a8:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0I1QzcxMTAvBgNVBAUTKEU0MUVENzU2MDc0QjM3QUREQzc5NEY5NDBCRDFGNTNF M0Y2NzZCOTMwHhcNMjUwNzIzMDUyNzUwWhcNMjUwNzMwMDUyNzUwWjAYMRYwFAYD VQQDEw02ODgwNzJkNy1hNzg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtKFdwdt0uhTIlemkM/8UVxmNuvEG5dLyI76jX+aGou7sS8oQGh4pKRRiO7KT O+TCkgLqdxk43nA7gnPbdktLts/H/5prq4/cnjC9dalhj0r1Dj2Y0x2YIllVobMz Z+cy0/x5jiDK/X1+eJFZPYLmN1An9OgoGuVWCH6XD+yiRda4FYkg1d7dTG4Myd+l RFiF8exTCKVF05t/KrYiU4ElrGUHuJqYJdsl1GVHXM19GSqQF3CVbUk/UjflGwpy Ov879NvXYkFIin2m0gM40gK8kwFYDpcmDyfMq+O9GMX/7citSlw+a/foVmxhYh5o moEO9wZ+L78dfuxI0q0DhjIzQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC5v6FW2 HPiSkwg2PZtXQBrCb34NMB8GA1UdIwQYMBaAFOQe11YHSzet3HlPlAvR9T4/Z2uT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjVDNy82N0QyNDM5NkU4 MDkxMUVFQkU0ODk1NjNDNEY5QUUwMi81QjdYVmdkTE42M2NlVS1VQzlIMVBqOW5h NU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVCN1hWZ2RMTjYzY2VVLVVDOUgxUGo5bmE1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjVDNy82N0QyNDM5NkU4MDkxMUVFQkU0ODk1NjNDNEY5QUUwMi81QjdYVmdkTE42 M2NlVS1VQzlIMVBqOW5hNU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB28pOqhwp5+B+xhXRFr0+nquhaL7BDhdxZx8ZT+tVsWzmBl87gy6RG rHItfw6kOFY1BZOnG6lA+10lAP1f/JBOw+piq03ewSaRSq0/ytjBafezOC+VbU/l IOFNl903GvzqqOSBiBqiV0E/uy/x0yj1QuUegGHXknooohSAZWUwEJD5gpVL3Dyf oiBvKgzjls83yb4pv9JZjEaW4bw70mQTR5yp+4JfS1goHGfM0bFz6jqZ0W1KqEwT 2hgSxXS89zAy2Bv3sY+qYvoK9UKdRrlS94xjESUJ0I097fIXw8xZ87RPlpbzMYwj YZysxmC9xSZQbNcigq+dUuqa5pLxSago -----END CERTIFICATE-----Generated at Thu Jul 24 12:09:16 2025 by rpki-client