$ rpki-client -vvf rpki.apnic.net/member_repository/A914F3BA/FF20EBDC013D11EBA000126BC4F9AE02/5GI8_UQ-YjLybCPoH9-XWLJvOyw.mft File: 5GI8_UQ-YjLybCPoH9-XWLJvOyw.mft (raw, json) Hash identifier: RMXDp/ry0vGrDjcJjy0pidMV8hgV7Kz7GsUqg7g9yzQ= Subject key identifier: 7A:6C:C6:40:A4:39:9B:8C:D1:51:01:96:6E:B7:F4:DC:02:2B:99:34 Authority key identifier: E4:62:3C:FD:44:3E:62:32:F2:6C:23:E8:1F:DF:97:58:B2:6F:3B:2C Certificate issuer: /CN=A914F3BA/serialNumber=E4623CFD443E6232F26C23E81FDF9758B26F3B2C Certificate serial: 07C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5GI8_UQ-YjLybCPoH9-XWLJvOyw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F3BA/FF20EBDC013D11EBA000126BC4F9AE02/5GI8_UQ-YjLybCPoH9-XWLJvOyw.mft Manifest number: 07C3 Signing time: Fri 18 Jul 2025 21:23:36 +0000 Manifest this update: Fri 18 Jul 2025 21:23:36 +0000 Manifest next update: Fri 25 Jul 2025 21:23:36 +0000 Files and hashes: 1: 5GI8_UQ-YjLybCPoH9-XWLJvOyw.crl (hash: k3XULDl+m52mDuPL+JFqHUUyG9mPyouGM5prv3yd6GY=) 2: D0D7EE48343211EFBF2C280DC4F9AE02.roa (hash: hbQmOshNkorS1/g78QiEhSVwbWUn9A8H0a6ZSzOWB98=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F3BA/FF20EBDC013D11EBA000126BC4F9AE02/5GI8_UQ-YjLybCPoH9-XWLJvOyw.crl rsync://rpki.apnic.net/member_repository/A914F3BA/FF20EBDC013D11EBA000126BC4F9AE02/5GI8_UQ-YjLybCPoH9-XWLJvOyw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5GI8_UQ-YjLybCPoH9-XWLJvOyw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 21:23:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1990 (0x7c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F3BA, serialNumber=E4623CFD443E6232F26C23E81FDF9758B26F3B2C Validity Not Before: Jul 18 21:23:36 2025 GMT Not After : Jul 25 21:23:36 2025 GMT Subject: CN=687abb58-0683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:80:85:44:fb:ba:5c:0e:9f:ee:e8:58:f0:51: 92:71:5d:63:33:0d:5b:3b:2c:c4:97:fd:3e:5b:0e: 50:ac:48:6a:f6:85:69:f1:a6:57:7e:17:22:be:1c: f1:de:91:4e:1c:12:f8:bd:f4:9e:97:1e:b9:28:7e: ee:e6:5d:b3:ff:6b:2a:7b:1a:f6:8b:c5:a5:44:1f: 4a:8c:77:4d:f3:0d:f4:ed:6e:dc:2e:67:49:75:c1: 75:af:78:3d:97:11:a8:f2:bd:7b:49:5d:19:c5:48: 64:ec:ff:88:09:d2:1b:af:e8:55:d8:cb:bd:16:dd: d2:e7:db:b5:c3:b9:f3:55:39:f5:d2:35:8a:fe:2b: 31:2b:f5:c4:a8:7b:1e:a3:e0:36:14:71:3a:4f:50: f1:c3:73:d9:94:ed:18:3c:0c:83:25:8b:ab:50:ff: 2d:c9:09:f3:1d:13:c3:48:51:d9:4e:58:60:5f:c3: b5:77:cb:b8:00:f1:0e:d4:cf:64:e6:71:92:1f:fd: 1a:17:6f:85:6a:05:e5:06:01:0b:33:50:47:d3:af: 42:62:46:64:f3:36:d8:03:59:b8:6b:6d:a6:40:9a: ce:34:f4:3b:e4:d1:e8:0a:bb:42:10:3a:41:4c:89: 58:ba:f8:90:a2:c0:5a:fd:f2:b5:82:71:5d:37:cf: 12:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:6C:C6:40:A4:39:9B:8C:D1:51:01:96:6E:B7:F4:DC:02:2B:99:34 X509v3 Authority Key Identifier: keyid:E4:62:3C:FD:44:3E:62:32:F2:6C:23:E8:1F:DF:97:58:B2:6F:3B:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F3BA/FF20EBDC013D11EBA000126BC4F9AE02/5GI8_UQ-YjLybCPoH9-XWLJvOyw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5GI8_UQ-YjLybCPoH9-XWLJvOyw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F3BA/FF20EBDC013D11EBA000126BC4F9AE02/5GI8_UQ-YjLybCPoH9-XWLJvOyw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:a9:b1:ef:79:0c:42:97:f5:63:56:df:ee:16:6e:4c:83:91: b4:bf:40:45:fb:21:53:d9:7d:01:cd:49:c3:b0:10:6f:8c:ef: 32:30:d7:02:da:c6:fd:d3:d8:68:93:b2:22:19:c8:be:8b:35: 4e:b8:79:bb:c5:c1:ac:7e:49:89:ed:2c:f7:57:fd:69:47:cb: 7d:f1:b2:a8:71:32:72:a4:77:ad:67:28:b9:a8:7e:d2:20:86: 49:03:34:a4:c3:82:68:ad:84:30:82:ce:67:fb:c2:45:cf:55: e9:e6:47:0d:28:94:e4:33:11:f2:98:bd:78:f4:d9:a0:84:a7: e5:76:dc:4a:f8:e1:ad:ee:f0:8a:23:52:87:7a:45:e2:32:b6: 9d:3d:78:da:8f:f5:9d:e4:f9:5f:36:21:b3:57:c6:23:19:7b: 94:ce:5f:bc:72:04:0f:a9:1b:fa:fc:ae:85:d6:ee:23:19:56: b4:63:99:7e:4b:d5:52:e2:86:48:88:61:29:e2:c2:75:7c:8d: 78:5c:c2:17:28:5a:88:1b:d5:88:60:fd:8c:54:73:20:d4:85: 2c:03:ec:1e:b0:f4:de:2b:21:0f:ff:10:a0:67:f3:32:2d:57: 84:76:93:68:80:cd:f3:bb:95:7b:f6:fe:8a:5d:58:5c:55:c4: 59:c1:87:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEYzQkExMTAvBgNVBAUTKEU0NjIzQ0ZENDQzRTYyMzJGMjZDMjNFODFGREY5NzU4 QjI2RjNCMkMwHhcNMjUwNzE4MjEyMzM2WhcNMjUwNzI1MjEyMzM2WjAYMRYwFAYD VQQDEw02ODdhYmI1OC0wNjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2YCFRPu6XA6f7uhY8FGScV1jMw1bOyzEl/0+Ww5QrEhq9oVp8aZXfhcivhzx 3pFOHBL4vfSelx65KH7u5l2z/2sqexr2i8WlRB9KjHdN8w307W7cLmdJdcF1r3g9 lxGo8r17SV0ZxUhk7P+ICdIbr+hV2Mu9Ft3S59u1w7nzVTn10jWK/isxK/XEqHse o+A2FHE6T1Dxw3PZlO0YPAyDJYurUP8tyQnzHRPDSFHZTlhgX8O1d8u4APEO1M9k 5nGSH/0aF2+FagXlBgELM1BH069CYkZk8zbYA1m4a22mQJrONPQ75NHoCrtCEDpB TIlYuviQosBa/fK1gnFdN88SEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHpsxkCk OZuM0VEBlm639NwCK5k0MB8GA1UdIwQYMBaAFORiPP1EPmIy8mwj6B/fl1iybzss MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjNCQS9GRjIwRUJEQzAx M0QxMUVCQTAwMDEyNkJDNEY5QUUwMi81R0k4X1VRLVlqTHliQ1BvSDktWFdMSnZP eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVHSThfVVEtWWpMeWJDUG9IOS1YV0xKdk95dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RjNCQS9GRjIwRUJEQzAxM0QxMUVCQTAwMDEyNkJDNEY5QUUwMi81R0k4X1VRLVlq THliQ1BvSDktWFdMSnZPeXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlqbHveQxCl/VjVt/uFm5Mg5G0v0BF+yFT2X0BzUnDsBBvjO8yMNcC 2sb909hok7IiGci+izVOuHm7xcGsfkmJ7Sz3V/1pR8t98bKocTJypHetZyi5qH7S IIZJAzSkw4JorYQwgs5n+8JFz1Xp5kcNKJTkMxHymL149NmghKfldtxK+OGt7vCK I1KHekXiMradPXjaj/Wd5PlfNiGzV8YjGXuUzl+8cgQPqRv6/K6F1u4jGVa0Y5l+ S9VS4oZIiGEp4sJ1fI14XMIXKFqIG9WIYP2MVHMg1IUsA+wesPTeKyEP/xCgZ/My LVeEdpNogM3zu5V79v6KXVhcVcRZwYcK -----END CERTIFICATE-----Generated at Sun Jul 20 07:42:59 2025 by rpki-client