$ rpki-client -vvf rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.mft File: dg5qfwi3L_gOtW9nUDI7Fkpw2h0.mft (raw, json) Hash identifier: J+1rOxvhCNNFAZNkyInxlRv4tqw/u9m0K7nSkleO3zI= Subject key identifier: 5C:26:2B:3E:07:F9:1A:96:A0:DB:55:C4:DB:2E:44:85:B3:1A:73:4D Authority key identifier: 76:0E:6A:7F:08:B7:2F:F8:0E:B5:6F:67:50:32:3B:16:4A:70:DA:1D Certificate issuer: /CN=A9157DAE/serialNumber=760E6A7F08B72FF80EB56F6750323B164A70DA1D Certificate serial: 047B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.mft Manifest number: 0467 Signing time: Fri 18 Jul 2025 17:15:28 +0000 Manifest this update: Fri 18 Jul 2025 17:15:27 +0000 Manifest next update: Fri 25 Jul 2025 17:15:27 +0000 Files and hashes: 1: dg5qfwi3L_gOtW9nUDI7Fkpw2h0.crl (hash: NuZo9ctwoVzHGSpwhkLffnoQpJxFhE4iYLmR+gjDQBs=) 2: 13EE3260596A11ECB1394271C4F9AE02.roa (hash: BSTa7sI/Wxp7paF8iFEhYcOXczYzjvqpGs3tFatgPsE=) 3: F91F0C028A2E11EC98A2702CC4F9AE02.roa (hash: EM7EONiwHXhiPFzyfONkaOBX/AROwU9rjV4ETvuVQDQ=) 4: 1479C514596A11ECB1394271C4F9AE02.roa (hash: TLiIvWlCkSUznKaCtTmASc45uAF4Q8KIvn7LhcKxI18=) 5: F5A921B85BE911EF8624AA20C4F9AE02.roa (hash: HMDK7qPjAO3ncQEJzX6SKnODDt4e7glxidti8sfhV1k=) 6: D36F0B6ECF4411ECB6B61825C4F9AE02.roa (hash: Z/SQA8GAHBj69mDXnfsLMK8qu+tlZ5LxlzdXDGduFGo=) 7: 9CD16392309711F09EFD0C4CC4F9AE02.roa (hash: AfGxVPGE0X5aiSEnPrV13VcxuUAvslUoJjsgWW+PD9o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.crl rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 17:15:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1147 (0x47b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157DAE, serialNumber=760E6A7F08B72FF80EB56F6750323B164A70DA1D Validity Not Before: Jul 18 17:15:27 2025 GMT Not After : Jul 25 17:15:27 2025 GMT Subject: CN=687a8130-0a56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5b:94:e4:46:3a:a7:b4:54:96:9b:0e:95:46: 01:57:3e:22:6d:0f:41:48:a1:a4:6d:c1:aa:64:aa: ec:96:31:45:e8:21:f4:8a:01:90:ed:01:2b:9d:58: 6c:7c:77:8f:a0:7b:c4:fd:15:91:63:42:ee:b2:79: 6e:53:3a:c9:f7:50:2e:b9:dc:5d:34:20:9f:8c:a4: 49:5b:b9:f4:6b:af:84:4e:2c:7e:d3:74:29:2a:08: af:7f:2c:8d:f8:fb:fc:f9:6f:33:97:b5:2d:39:6c: b5:66:82:91:d8:6d:43:b6:d8:bd:2c:cb:ff:5b:4b: f1:f8:c0:ca:de:89:98:a5:be:86:1b:4b:a7:58:0e: e5:b9:81:9d:0c:91:0e:05:4c:b3:8f:7c:7a:1a:69: 43:11:0e:f1:19:e4:97:5e:d3:da:e0:08:d8:40:0f: 3a:02:cb:45:c4:32:a8:a7:42:fd:71:e0:b7:ff:a7: e9:80:bd:34:a7:66:df:24:8c:71:51:09:e4:a9:ae: 58:c3:f7:17:86:0c:d2:e6:23:60:d4:3b:37:c9:f0: 47:3e:94:bf:d2:be:75:c2:4b:02:7f:09:98:99:64: 0b:23:a2:ac:ff:55:fb:00:a1:aa:e4:b5:2a:d9:75: 17:e2:64:61:5b:a4:52:88:d1:9e:56:17:d6:6d:81: 73:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:26:2B:3E:07:F9:1A:96:A0:DB:55:C4:DB:2E:44:85:B3:1A:73:4D X509v3 Authority Key Identifier: keyid:76:0E:6A:7F:08:B7:2F:F8:0E:B5:6F:67:50:32:3B:16:4A:70:DA:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:bb:d7:6d:db:22:98:73:ef:a7:45:ff:35:24:ef:63:d0:0f: 8d:2f:c4:0f:75:3a:5a:5d:9f:fd:7c:64:0f:97:60:f7:d3:7a: 98:72:e4:b6:54:8e:87:8c:67:74:a9:23:e4:83:6d:c0:79:03: 96:1b:60:29:af:8b:bc:c8:a8:0f:34:fc:a6:f5:64:a6:f7:57: bd:26:ba:85:28:21:2f:d4:c9:76:df:52:40:a5:00:0b:4b:fe: fa:a6:f9:b2:31:ba:a5:5f:ea:10:b5:23:0a:5b:db:f2:96:b2: f7:5b:ab:ee:eb:08:5b:ea:14:69:f7:ba:88:ae:ee:ad:c0:dc: 67:55:7b:8c:7c:ab:08:a8:2c:02:3d:53:0e:ba:0f:f4:58:87: dd:0b:e0:05:80:7f:ba:8b:b9:b9:29:3f:56:8e:3a:d2:c8:16: 76:37:18:2e:7b:52:4b:1a:43:34:ea:6c:76:89:e3:f7:53:f5: 0f:fd:d1:e5:f1:8d:06:7b:bc:e0:2d:cb:50:be:87:7a:f5:2a: 60:75:32:43:a7:13:18:e7:38:3f:85:51:bb:55:75:04:3a:ec: f9:27:d9:0c:34:c9:76:c0:18:f6:70:bd:a6:f9:92:2f:0d:d4: 3c:68:e6:ac:1b:9c:a3:c3:aa:4a:cc:0c:c1:6e:b3:01:7f:73: 7b:ba:30:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdEQUUxMTAvBgNVBAUTKDc2MEU2QTdGMDhCNzJGRjgwRUI1NkY2NzUwMzIzQjE2 NEE3MERBMUQwHhcNMjUwNzE4MTcxNTI3WhcNMjUwNzI1MTcxNTI3WjAYMRYwFAYD VQQDEw02ODdhODEzMC0wYTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwVuU5EY6p7RUlpsOlUYBVz4ibQ9BSKGkbcGqZKrsljFF6CH0igGQ7QErnVhs fHePoHvE/RWRY0LusnluUzrJ91AuudxdNCCfjKRJW7n0a6+ETix+03QpKgivfyyN +Pv8+W8zl7UtOWy1ZoKR2G1Dtti9LMv/W0vx+MDK3omYpb6GG0unWA7luYGdDJEO BUyzj3x6GmlDEQ7xGeSXXtPa4AjYQA86AstFxDKop0L9ceC3/6fpgL00p2bfJIxx UQnkqa5Yw/cXhgzS5iNg1Ds3yfBHPpS/0r51wksCfwmYmWQLI6Ks/1X7AKGq5LUq 2XUX4mRhW6RSiNGeVhfWbYFzfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFwmKz4H +RqWoNtVxNsuRIWzGnNNMB8GA1UdIwQYMBaAFHYOan8Ity/4DrVvZ1AyOxZKcNod MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0RBRS81QjRDNEUzNjU5 NjkxMUVDOTRBM0U3NzBDNEY5QUUwMi9kZzVxZndpM0xfZ090VzluVURJN0ZrcHcy aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2RnNXFmd2kzTF9nT3RXOW5VREk3RmtwdzJoMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0RBRS81QjRDNEUzNjU5NjkxMUVDOTRBM0U3NzBDNEY5QUUwMi9kZzVxZndpM0xf Z090VzluVURJN0ZrcHcyaDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1u9dt2yKYc++nRf81JO9j0A+NL8QPdTpaXZ/9fGQPl2D303qYcuS2 VI6HjGd0qSPkg23AeQOWG2Apr4u8yKgPNPym9WSm91e9JrqFKCEv1Ml231JApQAL S/76pvmyMbqlX+oQtSMKW9vylrL3W6vu6whb6hRp97qIru6twNxnVXuMfKsIqCwC PVMOug/0WIfdC+AFgH+6i7m5KT9WjjrSyBZ2Nxgue1JLGkM06mx2ieP3U/UP/dHl 8Y0Ge7zgLctQvod69SpgdTJDpxMY5zg/hVG7VXUEOuz5J9kMNMl2wBj2cL2m+ZIv DdQ8aOasG5yjw6pKzAzBbrMBf3N7ujAA -----END CERTIFICATE-----Generated at Sun Jul 20 02:50:17 2025 by rpki-client