$ rpki-client -vvf rpki.apnic.net/member_repository/A91561B7/5FA1ED309EF011E681102733C4F9AE02/5HE8G511dZKVr2TN-6YrcNuaBTc.mft File: 5HE8G511dZKVr2TN-6YrcNuaBTc.mft (raw, json) Hash identifier: HoGZG26+GSMv0fSjhr4nyOsWDzgqU8I45F26BBmWlnw= Subject key identifier: 9D:2F:1F:FD:1B:10:03:1F:37:85:74:50:76:93:54:10:04:6E:94:77 Authority key identifier: E4:71:3C:1B:9D:75:75:92:95:AF:64:CD:FB:A6:2B:70:DB:9A:05:37 Certificate issuer: /CN=A91561B7/serialNumber=E4713C1B9D75759295AF64CDFBA62B70DB9A0537 Certificate serial: 1DCA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5HE8G511dZKVr2TN-6YrcNuaBTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91561B7/5FA1ED309EF011E681102733C4F9AE02/5HE8G511dZKVr2TN-6YrcNuaBTc.mft Manifest number: 1DB5 Signing time: Sat 26 Jul 2025 16:09:16 +0000 Manifest this update: Sat 26 Jul 2025 16:09:15 +0000 Manifest next update: Sat 02 Aug 2025 16:09:15 +0000 Files and hashes: 1: 5HE8G511dZKVr2TN-6YrcNuaBTc.crl (hash: a2naqdSy4LWPuUsw0+5nfQgvQjYKqbwrTNRG3zlkUQI=) 2: 4865DD00A13B11E687921078C4F9AE02.roa (hash: MaFWYkY2HcnSI16cq7zrf3Xg1TMrKe+K2OOU5n2vPcU=) 3: 1D57FF40A01311E684546521C4F9AE02.roa (hash: 8kLRR6g7/NXM5uPCUqU+X4Qb9woBVi0kDN/Wkxs+ARo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91561B7/5FA1ED309EF011E681102733C4F9AE02/5HE8G511dZKVr2TN-6YrcNuaBTc.crl rsync://rpki.apnic.net/member_repository/A91561B7/5FA1ED309EF011E681102733C4F9AE02/5HE8G511dZKVr2TN-6YrcNuaBTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5HE8G511dZKVr2TN-6YrcNuaBTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 02 Aug 2025 16:09:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7626 (0x1dca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91561B7, serialNumber=E4713C1B9D75759295AF64CDFBA62B70DB9A0537 Validity Not Before: Jul 26 16:09:15 2025 GMT Not After : Aug 2 16:09:15 2025 GMT Subject: CN=6884fdac-cada Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9c:01:8e:3f:ee:dc:a4:00:21:6b:62:c1:2f: bb:0d:e0:06:9d:29:56:19:5c:1d:61:dd:b2:85:3c: 9f:4a:76:ce:4e:cb:ee:bb:71:5d:23:13:2b:26:46: e6:5e:37:2e:69:c1:3b:30:15:5d:b9:09:d3:43:b6: 0a:b6:3b:16:4c:06:24:2b:59:a1:a8:cc:ee:ca:8e: cf:38:f1:d2:d7:1b:26:30:cc:0d:76:61:dd:0e:98: a9:26:34:38:5e:ba:bb:fc:ec:19:28:d8:9b:7c:15: 99:dd:bd:20:a4:55:95:bb:70:ae:5d:48:f1:82:3e: 07:ec:93:d2:96:88:e8:f8:a3:b5:b4:1a:d9:dd:d0: 4a:9a:f0:0f:74:ea:0d:24:31:c4:bb:5d:ee:23:0f: bd:2d:cc:a2:8d:56:23:28:4b:47:53:b2:69:28:aa: db:17:98:53:76:bf:8d:38:a9:03:ea:6b:01:97:d4: e8:c3:d8:96:fa:3d:14:c0:96:25:4f:26:17:bd:60: 17:dc:1a:bb:1f:0d:8d:d7:cc:1c:99:93:5c:60:53: 9d:c0:14:05:cc:2a:7a:c5:6e:8b:44:a8:7f:79:67: ad:62:6b:71:5e:45:bf:9d:ad:23:04:d4:9c:7c:fe: 7e:fa:83:21:bf:47:41:78:49:7f:1f:ee:20:cd:a0: f5:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:2F:1F:FD:1B:10:03:1F:37:85:74:50:76:93:54:10:04:6E:94:77 X509v3 Authority Key Identifier: keyid:E4:71:3C:1B:9D:75:75:92:95:AF:64:CD:FB:A6:2B:70:DB:9A:05:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91561B7/5FA1ED309EF011E681102733C4F9AE02/5HE8G511dZKVr2TN-6YrcNuaBTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5HE8G511dZKVr2TN-6YrcNuaBTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91561B7/5FA1ED309EF011E681102733C4F9AE02/5HE8G511dZKVr2TN-6YrcNuaBTc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:29:e4:7e:e1:d1:b1:df:01:0e:64:9f:90:b6:bc:5d:37:e5: 59:13:2c:52:41:1c:fd:5e:8a:6a:b8:97:1e:63:21:3a:26:7b: 9c:75:1c:c7:df:6a:1b:53:cf:97:69:5f:6f:c8:40:d1:d7:03: c6:cb:c9:35:11:9b:98:85:a8:9d:46:4b:c5:6e:f3:d6:e8:2f: 3a:8e:6b:f5:b0:f2:e8:df:f8:0d:8d:b0:28:8d:3d:75:0e:35: ba:a6:b3:22:30:5e:b2:6d:f3:b7:f7:29:d3:9f:93:69:c0:f4: ce:02:55:c9:7e:18:53:8a:17:2d:ed:fb:eb:30:33:4b:77:ec: 21:c7:6d:3b:9c:83:f4:e1:25:f7:4a:d9:7a:4a:9a:0d:9f:37: 96:79:13:10:40:b9:58:74:7d:79:df:40:fe:69:c3:5e:27:d7: 64:26:31:a0:cc:4a:1c:06:c2:5d:2e:43:af:fe:aa:bf:f7:fd: af:f1:ba:94:22:51:74:0e:4c:33:58:2f:1a:40:db:76:46:8d: 86:3f:66:76:6c:cf:73:67:99:51:9e:9c:5a:1b:9e:3e:87:b3: 38:45:fa:cf:55:a8:71:e2:34:bd:ec:40:02:1f:a9:88:97:b7: 34:1f:dc:c0:ad:ed:ac:ab:60:49:0c:f6:4f:e8:44:09:5e:93: 5e:d7:34:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYxQjcxMTAvBgNVBAUTKEU0NzEzQzFCOUQ3NTc1OTI5NUFGNjRDREZCQTYyQjcw REI5QTA1MzcwHhcNMjUwNzI2MTYwOTE1WhcNMjUwODAyMTYwOTE1WjAYMRYwFAYD VQQDEw02ODg0ZmRhYy1jYWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp5wBjj/u3KQAIWtiwS+7DeAGnSlWGVwdYd2yhTyfSnbOTsvuu3FdIxMrJkbm XjcuacE7MBVduQnTQ7YKtjsWTAYkK1mhqMzuyo7POPHS1xsmMMwNdmHdDpipJjQ4 Xrq7/OwZKNibfBWZ3b0gpFWVu3CuXUjxgj4H7JPSlojo+KO1tBrZ3dBKmvAPdOoN JDHEu13uIw+9LcyijVYjKEtHU7JpKKrbF5hTdr+NOKkD6msBl9Tow9iW+j0UwJYl TyYXvWAX3Bq7Hw2N18wcmZNcYFOdwBQFzCp6xW6LRKh/eWetYmtxXkW/na0jBNSc fP5++oMhv0dBeEl/H+4gzaD1TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ0vH/0b EAMfN4V0UHaTVBAEbpR3MB8GA1UdIwQYMBaAFORxPBuddXWSla9kzfumK3DbmgU3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjFCNy81RkExRUQzMDlF RjAxMUU2ODExMDI3MzNDNEY5QUUwMi81SEU4RzUxMWRaS1ZyMlROLTZZcmNOdWFC VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVIRThHNTExZFpLVnIyVE4tNllyY051YUJUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjFCNy81RkExRUQzMDlFRjAxMUU2ODExMDI3MzNDNEY5QUUwMi81SEU4RzUxMWRa S1ZyMlROLTZZcmNOdWFCVGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChKeR+4dGx3wEOZJ+QtrxdN+VZEyxSQRz9XopquJceYyE6JnucdRzH 32obU8+XaV9vyEDR1wPGy8k1EZuYhaidRkvFbvPW6C86jmv1sPLo3/gNjbAojT11 DjW6prMiMF6ybfO39ynTn5NpwPTOAlXJfhhTihct7fvrMDNLd+whx207nIP04SX3 Stl6SpoNnzeWeRMQQLlYdH1530D+acNeJ9dkJjGgzEocBsJdLkOv/qq/9/2v8bqU IlF0DkwzWC8aQNt2Ro2GP2Z2bM9zZ5lRnpxaG54+h7M4RfrPVahx4jS97EACH6mI l7c0H9zAre2sq2BJDPZP6EQJXpNe1zQS -----END CERTIFICATE-----Generated at Sun Jul 27 05:57:26 2025 by rpki-client