$ rpki-client -vvf rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5EL5lVmsG6h-4TSLL8evCiL_smE.mft File: 5EL5lVmsG6h-4TSLL8evCiL_smE.mft (raw, json) Hash identifier: hBB7IJ2M+f8V85ye2IbyoqFNFMgmGSoxcCeiKurXUEE= Subject key identifier: E5:1D:A0:F6:B7:16:AA:96:F1:0F:D2:82:AA:36:E6:19:0B:CB:D8:89 Authority key identifier: E4:42:F9:95:59:AC:1B:A8:7E:E1:34:8B:2F:C7:AF:0A:22:FF:B2:61 Certificate issuer: /CN=A9143336/serialNumber=E442F99559AC1BA87EE1348B2FC7AF0A22FFB261 Certificate serial: 2B0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5EL5lVmsG6h-4TSLL8evCiL_smE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5EL5lVmsG6h-4TSLL8evCiL_smE.mft Manifest number: 2AFB Signing time: Fri 18 Jul 2025 15:37:30 +0000 Manifest this update: Fri 18 Jul 2025 15:37:29 +0000 Manifest next update: Fri 25 Jul 2025 15:37:29 +0000 Files and hashes: 1: 5EL5lVmsG6h-4TSLL8evCiL_smE.crl (hash: 7RzfxYsucV0vSDWA6fy0r3+EwfDHP3f3vD/RgAaFZRU=) 2: 5452AC309B4911EB9952394CC4F9AE02.roa (hash: 3EBZNTlM2pSnC9HcQ0kJddDB9AhHcVhBduQrWy64qKQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5EL5lVmsG6h-4TSLL8evCiL_smE.crl rsync://rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5EL5lVmsG6h-4TSLL8evCiL_smE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5EL5lVmsG6h-4TSLL8evCiL_smE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 15:37:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11019 (0x2b0b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143336, serialNumber=E442F99559AC1BA87EE1348B2FC7AF0A22FFB261 Validity Not Before: Jul 18 15:37:29 2025 GMT Not After : Jul 25 15:37:29 2025 GMT Subject: CN=687a6a3a-68ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:2b:5b:b5:4f:6a:47:78:80:ee:ea:e6:e9:8e: a3:01:e6:fa:42:d5:74:14:b1:32:b3:7f:fa:7c:2b: ec:fd:32:d8:0f:7d:c9:09:2f:5a:06:99:1e:72:21: 4f:02:83:fc:9a:8c:ca:d7:8a:3a:21:3b:f8:78:87: 4f:c6:3a:ee:25:23:b3:e5:fe:3a:88:19:3a:cb:d8: 12:70:7c:bf:13:14:c8:ff:6f:aa:2f:dd:c7:8f:3e: 6c:fd:47:2f:44:2f:22:69:c3:e5:63:40:bb:d5:7c: 83:9c:72:2b:3c:52:7e:74:b7:3e:66:a6:30:44:f6: a4:88:98:07:2a:5d:16:2f:e7:47:b0:9e:a1:46:79: 86:dc:f2:5c:34:0c:59:cb:93:d8:ff:b3:d1:fb:77: 04:88:66:ea:25:0b:79:2b:66:67:db:06:c9:82:48: f5:a6:a3:2d:ee:fe:6d:e4:89:0d:a8:ed:4c:76:0f: b5:55:98:c3:12:76:cd:7f:0d:20:02:c1:32:b4:02: c9:65:39:12:ef:fe:ff:d8:24:ec:2a:ca:2d:b1:52: 4c:27:d4:b5:3f:aa:33:30:56:f7:f5:4c:02:61:ee: 24:d7:6b:2b:7b:ea:e4:c2:67:7c:f7:c6:aa:f5:81: 89:31:52:22:c3:71:47:f2:01:50:91:f0:54:1a:df: ad:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:1D:A0:F6:B7:16:AA:96:F1:0F:D2:82:AA:36:E6:19:0B:CB:D8:89 X509v3 Authority Key Identifier: keyid:E4:42:F9:95:59:AC:1B:A8:7E:E1:34:8B:2F:C7:AF:0A:22:FF:B2:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5EL5lVmsG6h-4TSLL8evCiL_smE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5EL5lVmsG6h-4TSLL8evCiL_smE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5EL5lVmsG6h-4TSLL8evCiL_smE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:1f:d8:d2:cb:d6:0f:35:4b:11:7d:56:f1:8f:d9:7b:85:5b: 6d:d9:d3:b2:16:62:cf:58:8c:62:cd:24:ea:29:dd:71:cf:9f: f2:7a:e0:cc:6a:cb:88:13:35:80:dd:16:87:ff:f6:8c:34:17: e0:f3:07:f0:0d:36:ad:a9:2e:d9:96:fc:4b:b2:7d:85:9a:19: 2d:58:c8:14:9f:12:a8:4a:08:a0:b7:91:54:bd:45:dc:6a:2c: a2:23:64:a8:5f:44:4c:2f:6d:e3:7e:1e:cc:7a:a6:e9:aa:e8: 48:b1:95:bd:c0:f7:ab:22:38:8b:66:ec:c7:bd:16:5e:d5:5b: 38:35:53:df:50:97:90:2f:46:95:9e:59:b5:40:5a:19:bd:13: 56:4c:9c:b7:37:be:30:81:66:2a:32:fb:e1:19:1a:db:d7:43: 6c:5d:45:40:16:ba:61:ae:c8:75:13:4a:0d:14:c7:a7:70:ab: cd:9f:55:b1:1c:3d:b4:c2:11:80:0e:86:61:ac:24:d2:48:17: 37:62:bf:fc:0e:cb:4b:76:e1:cf:b5:84:45:e4:62:17:db:95: 6d:c8:d6:9f:4f:16:cc:23:41:75:83:40:3e:df:43:87:aa:e4: 62:db:e3:ce:c8:05:57:0d:91:2a:15:14:d0:24:be:15:f6:5f: 48:ca:9d:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKwswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDMzMzYxMTAvBgNVBAUTKEU0NDJGOTk1NTlBQzFCQTg3RUUxMzQ4QjJGQzdBRjBB MjJGRkIyNjEwHhcNMjUwNzE4MTUzNzI5WhcNMjUwNzI1MTUzNzI5WjAYMRYwFAYD VQQDEw02ODdhNmEzYS02OGFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ytbtU9qR3iA7urm6Y6jAeb6QtV0FLEys3/6fCvs/TLYD33JCS9aBpkeciFP AoP8mozK14o6ITv4eIdPxjruJSOz5f46iBk6y9gScHy/ExTI/2+qL93Hjz5s/Ucv RC8iacPlY0C71XyDnHIrPFJ+dLc+ZqYwRPakiJgHKl0WL+dHsJ6hRnmG3PJcNAxZ y5PY/7PR+3cEiGbqJQt5K2Zn2wbJgkj1pqMt7v5t5IkNqO1Mdg+1VZjDEnbNfw0g AsEytALJZTkS7/7/2CTsKsotsVJMJ9S1P6ozMFb39UwCYe4k12sre+rkwmd898aq 9YGJMVIiw3FH8gFQkfBUGt+tEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOUdoPa3 FqqW8Q/Sgqo25hkLy9iJMB8GA1UdIwQYMBaAFORC+ZVZrBuofuE0iy/Hrwoi/7Jh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzMzNi84RUU3RkMxRTA4 NTMxMUU0QjAyMzlFNjFDNEY5QUUwMi81RUw1bFZtc0c2aC00VFNMTDhldkNpTF9z bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVFTDVsVm1zRzZoLTRUU0xMOGV2Q2lMX3NtRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzMzNi84RUU3RkMxRTA4NTMxMUU0QjAyMzlFNjFDNEY5QUUwMi81RUw1bFZtc0c2 aC00VFNMTDhldkNpTF9zbUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhH9jSy9YPNUsRfVbxj9l7hVtt2dOyFmLPWIxizSTqKd1xz5/yeuDM asuIEzWA3RaH//aMNBfg8wfwDTatqS7ZlvxLsn2FmhktWMgUnxKoSgigt5FUvUXc aiyiI2SoX0RML23jfh7MeqbpquhIsZW9wPerIjiLZuzHvRZe1Vs4NVPfUJeQL0aV nlm1QFoZvRNWTJy3N74wgWYqMvvhGRrb10NsXUVAFrphrsh1E0oNFMencKvNn1Wx HD20whGADoZhrCTSSBc3Yr/8DstLduHPtYRF5GIX25VtyNafTxbMI0F1g0A+30OH quRi2+POyAVXDZEqFRTQJL4V9l9Iyp1w -----END CERTIFICATE-----Generated at Sun Jul 20 07:32:16 2025 by rpki-client