$ rpki-client -vvf rpki.apnic.net/member_repository/A915393C/6D04315E640E11EFB5446458C4F9AE02/S5R0cysQASlff10ywBNpOhk3aBM.mft File: S5R0cysQASlff10ywBNpOhk3aBM.mft (raw, json) Hash identifier: MCEdBUu0Y+2ZzNsOFdJJfdyP/c4uF9eYw8XdD/nBPK8= Subject key identifier: 5E:2A:1F:CE:EE:C7:6E:BF:EC:01:D3:81:92:BE:AB:01:02:9B:EA:8B Authority key identifier: 4B:94:74:73:2B:10:01:29:5F:7F:5D:32:C0:13:69:3A:19:37:68:13 Certificate issuer: /CN=A915393C/serialNumber=4B9474732B1001295F7F5D32C013693A19376813 Certificate serial: A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5R0cysQASlff10ywBNpOhk3aBM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915393C/6D04315E640E11EFB5446458C4F9AE02/S5R0cysQASlff10ywBNpOhk3aBM.mft Manifest number: A8 Signing time: Mon 21 Jul 2025 06:18:10 +0000 Manifest this update: Mon 21 Jul 2025 06:18:09 +0000 Manifest next update: Mon 28 Jul 2025 06:18:09 +0000 Files and hashes: 1: S5R0cysQASlff10ywBNpOhk3aBM.crl (hash: Oz8zY9pHxBzUPQhBKvcBUpULTrUv/nq9Yxc8yE+Iyn0=) 2: D970354A640E11EF93D18659C4F9AE02.roa (hash: k3HZpqynszzvTxkVmhHqGRdf/ZQZ2uvnxZO8lo9Yzko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915393C/6D04315E640E11EFB5446458C4F9AE02/S5R0cysQASlff10ywBNpOhk3aBM.crl rsync://rpki.apnic.net/member_repository/A915393C/6D04315E640E11EFB5446458C4F9AE02/S5R0cysQASlff10ywBNpOhk3aBM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5R0cysQASlff10ywBNpOhk3aBM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 06:18:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 169 (0xa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915393C, serialNumber=4B9474732B1001295F7F5D32C013693A19376813 Validity Not Before: Jul 21 06:18:09 2025 GMT Not After : Jul 28 06:18:09 2025 GMT Subject: CN=687ddba2-3b29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:4f:2f:7a:2d:61:4e:65:0e:d9:73:bc:16:e7: a9:e1:f9:b9:e5:7a:43:ab:ba:86:ce:97:dd:0b:44: 9e:08:92:fa:4f:5a:db:86:7f:43:a1:13:9d:27:7a: 1e:03:66:23:78:7b:3b:c1:2a:e2:93:eb:64:0a:b2: 36:59:49:e6:24:36:29:51:e3:62:b2:34:29:62:c4: 9c:01:79:a5:26:23:b3:e2:b1:ce:de:21:4c:b8:d0: 61:da:1a:a2:18:fe:d5:f4:a5:3a:2b:ec:d0:83:da: c1:44:92:28:be:71:5f:82:f9:58:24:88:20:03:eb: ab:d6:64:8a:ad:6d:ca:a0:a8:a9:df:9b:55:2c:6c: ec:e4:23:9c:14:0c:96:1e:5f:d8:36:59:18:d4:34: 9c:2a:6c:04:f1:aa:63:49:9c:b4:1f:ee:30:64:ee: 8e:d7:0a:96:fc:bd:dd:4a:7d:e8:67:36:5a:bf:fd: 7e:95:1d:bf:47:ae:93:6d:cc:d7:9d:9d:ad:c4:1d: 9a:62:75:c4:ad:cd:53:b3:52:d6:ee:76:f4:5e:23: bd:03:e2:a3:e5:75:97:33:21:6d:66:fe:eb:cc:1a: 7a:ef:6d:c6:61:dd:32:26:2a:28:51:9c:05:1d:e3: 28:91:30:ee:3b:4b:6f:25:ca:85:e6:05:8d:f6:44: 80:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:2A:1F:CE:EE:C7:6E:BF:EC:01:D3:81:92:BE:AB:01:02:9B:EA:8B X509v3 Authority Key Identifier: keyid:4B:94:74:73:2B:10:01:29:5F:7F:5D:32:C0:13:69:3A:19:37:68:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915393C/6D04315E640E11EFB5446458C4F9AE02/S5R0cysQASlff10ywBNpOhk3aBM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5R0cysQASlff10ywBNpOhk3aBM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915393C/6D04315E640E11EFB5446458C4F9AE02/S5R0cysQASlff10ywBNpOhk3aBM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:4e:54:cb:9e:9a:6a:9b:3f:8d:1c:03:49:2a:af:98:40:c0: 1b:3c:a2:12:69:e0:f5:34:bb:8b:16:aa:ff:18:5b:92:62:bb: c7:12:2f:87:cd:c8:32:59:bb:88:c4:62:28:29:a7:cc:7e:6f: 41:6d:2f:04:99:4c:09:41:56:e1:62:39:69:77:b6:8d:63:3d: d6:3e:24:d9:36:24:9e:5b:b2:1d:dc:69:7a:2d:4d:f0:31:a9: fb:05:6f:0e:e9:90:2b:4e:86:2d:50:6f:65:8e:a3:9d:73:a1: 4b:93:41:06:bd:d8:1a:84:5d:76:52:0c:ad:31:8a:68:0d:3e: 18:70:07:f4:cf:86:47:3d:2f:34:78:dd:fa:ee:2f:67:69:1b: 40:59:24:d7:a7:10:03:cd:aa:17:1b:99:fc:cc:04:58:9b:8c: dd:a0:a9:1f:1a:2f:2f:16:ff:af:58:e6:8d:6e:88:ca:b6:65: ac:96:9a:01:25:84:bd:9e:f6:23:03:37:ef:80:5b:0f:79:06: 38:55:96:2f:51:81:f1:b5:f0:86:3d:75:07:ea:ba:a1:b8:26: 62:60:04:1c:35:63:36:a5:84:ec:f3:f4:1c:d2:1d:19:b5:76: 0d:a8:56:c3:1b:58:60:6a:cc:b1:2c:0a:1e:b9:e4:cc:61:1e: 8f:a9:b9:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM5M0MxMTAvBgNVBAUTKDRCOTQ3NDczMkIxMDAxMjk1RjdGNUQzMkMwMTM2OTNB MTkzNzY4MTMwHhcNMjUwNzIxMDYxODA5WhcNMjUwNzI4MDYxODA5WjAYMRYwFAYD VQQDEw02ODdkZGJhMi0zYjI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6k8vei1hTmUO2XO8Fuep4fm55XpDq7qGzpfdC0SeCJL6T1rbhn9DoROdJ3oe A2YjeHs7wSrik+tkCrI2WUnmJDYpUeNisjQpYsScAXmlJiOz4rHO3iFMuNBh2hqi GP7V9KU6K+zQg9rBRJIovnFfgvlYJIggA+ur1mSKrW3KoKip35tVLGzs5COcFAyW Hl/YNlkY1DScKmwE8apjSZy0H+4wZO6O1wqW/L3dSn3oZzZav/1+lR2/R66TbczX nZ2txB2aYnXErc1Ts1LW7nb0XiO9A+Kj5XWXMyFtZv7rzBp6723GYd0yJiooUZwF HeMokTDuO0tvJcqF5gWN9kSAIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF4qH87u x26/7AHTgZK+qwECm+qLMB8GA1UdIwQYMBaAFEuUdHMrEAEpX39dMsATaToZN2gT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzkzQy82RDA0MzE1RTY0 MEUxMUVGQjU0NDY0NThDNEY5QUUwMi9TNVIwY3lzUUFTbGZmMTB5d0JOcE9oazNh Qk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1M1UjBjeXNRQVNsZmYxMHl3Qk5wT2hrM2FCTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzkzQy82RDA0MzE1RTY0MEUxMUVGQjU0NDY0NThDNEY5QUUwMi9TNVIwY3lzUUFT bGZmMTB5d0JOcE9oazNhQk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkTlTLnppqmz+NHANJKq+YQMAbPKISaeD1NLuLFqr/GFuSYrvHEi+H zcgyWbuIxGIoKafMfm9BbS8EmUwJQVbhYjlpd7aNYz3WPiTZNiSeW7Id3Gl6LU3w Man7BW8O6ZArToYtUG9ljqOdc6FLk0EGvdgahF12UgytMYpoDT4YcAf0z4ZHPS80 eN367i9naRtAWSTXpxADzaoXG5n8zARYm4zdoKkfGi8vFv+vWOaNbojKtmWslpoB JYS9nvYjAzfvgFsPeQY4VZYvUYHxtfCGPXUH6rqhuCZiYAQcNWM2pYTs8/Qc0h0Z tXYNqFbDG1hgasyxLAoeueTMYR6PqbnH -----END CERTIFICATE-----Generated at Mon Jul 21 12:32:08 2025 by rpki-client