$ rpki-client -vvf rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.mft File: 5xSoFJfIF3hoy7TNszjD72zp6VM.mft (raw, json) Hash identifier: DFTT/NG16+oj5ra697SNPqP89w8Obo2Ka+l5HOC7pk8= Subject key identifier: 28:42:6E:B7:62:30:BD:F0:5F:5E:52:46:B1:7D:3C:4E:64:B5:8B:79 Authority key identifier: E7:14:A8:14:97:C8:17:78:68:CB:B4:CD:B3:38:C3:EF:6C:E9:E9:53 Certificate issuer: /CN=A9172C8D/serialNumber=E714A81497C8177868CBB4CDB338C3EF6CE9E953 Certificate serial: 0A65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xSoFJfIF3hoy7TNszjD72zp6VM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.mft Manifest number: 0A5C Signing time: Tue 22 Jul 2025 19:56:08 +0000 Manifest this update: Tue 22 Jul 2025 19:56:08 +0000 Manifest next update: Tue 29 Jul 2025 19:56:08 +0000 Files and hashes: 1: 5xSoFJfIF3hoy7TNszjD72zp6VM.crl (hash: CEaEoU1+pnmMWa8oznTIzEFCPvPZ/KKUhe9wECMy014=) 2: 9085F6C0B78911EFB9994180C4F9AE02.roa (hash: KPuYYAQ14XpM20WTZh+zfqEqRXqFeAhCtZEHNEUGMw8=) 3: CDD96B60B78911EF9BD3EF80C4F9AE02.roa (hash: sDoqH+F903pEZfTL5CZCahrin5P/dPEPc5OIr03Af9w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.crl rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xSoFJfIF3hoy7TNszjD72zp6VM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 19:56:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2661 (0xa65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172C8D, serialNumber=E714A81497C8177868CBB4CDB338C3EF6CE9E953 Validity Not Before: Jul 22 19:56:08 2025 GMT Not After : Jul 29 19:56:08 2025 GMT Subject: CN=687fecd8-8901 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:6b:18:bf:c7:c6:65:d7:45:38:bb:bb:da:d8: c9:2f:31:bc:84:7f:e3:34:cf:66:29:2d:30:0d:f3: 7f:f4:48:e3:e5:25:f4:8d:da:a8:f2:0a:ac:2f:7a: a7:1d:8d:2a:f5:2e:bd:0d:4c:b9:9d:3d:23:91:ca: 67:62:fb:37:53:3f:36:66:92:6c:f5:0a:5a:65:80: 0f:8f:92:e8:f9:77:35:5d:9d:ea:10:8b:6a:ee:57: af:91:8d:b7:b1:7a:58:53:f2:58:90:26:ff:73:69: 19:70:2b:e4:b4:4c:51:60:72:ed:3b:88:58:49:45: e3:fc:3e:4d:50:2f:a3:04:0f:88:84:7f:16:36:07: f1:89:3e:4c:19:11:3a:0a:2a:4b:70:5f:d7:bf:3d: b9:6d:71:31:14:34:1a:30:17:06:f7:ff:2f:50:7d: ad:a2:c5:02:01:81:67:b1:39:5c:92:39:99:ce:72: 4f:25:b0:2a:1b:b2:52:28:74:18:ec:db:3e:b3:a9: bd:af:7c:e1:25:0c:b1:78:ad:2f:91:99:71:91:ae: 3a:13:b2:44:df:4a:b3:c8:28:77:3e:9d:9a:f4:11: bb:17:03:eb:3b:43:7c:eb:a2:03:21:9d:ec:05:b1: 85:bf:86:40:aa:ed:4d:fd:c8:90:1a:c7:20:05:34: ff:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:42:6E:B7:62:30:BD:F0:5F:5E:52:46:B1:7D:3C:4E:64:B5:8B:79 X509v3 Authority Key Identifier: keyid:E7:14:A8:14:97:C8:17:78:68:CB:B4:CD:B3:38:C3:EF:6C:E9:E9:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xSoFJfIF3hoy7TNszjD72zp6VM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:b2:ff:21:e9:49:77:27:3d:23:2c:7b:28:db:71:e3:87:33: 9c:ab:41:1b:4e:24:33:e4:98:6b:91:3e:f6:5e:6c:77:80:27: cf:d2:34:73:5d:37:aa:4d:84:d1:8c:5c:fc:fa:ce:bb:48:fe: 77:b5:fb:ef:2a:67:07:17:81:41:0b:96:07:ac:36:60:4d:17: 94:9f:ab:01:bd:7d:28:ea:bd:f5:e0:77:e3:cd:cb:18:97:54: 61:1c:d4:35:10:0d:c0:7c:04:e0:ad:8f:0a:e6:6d:e3:c6:41: c0:c5:2d:2d:3f:fb:90:7f:35:c2:e5:7a:23:c4:ee:05:3c:22: 51:f2:f9:1d:1d:27:43:f4:2a:f7:35:15:67:b0:58:78:70:c2: 88:2f:24:8b:54:da:8f:29:3a:84:e8:32:6e:21:dc:65:28:8f: 5e:90:3a:77:c5:39:09:3b:30:f9:99:73:b3:d5:1a:25:23:f2: a4:ae:46:fe:e4:8b:79:d0:a8:f8:a5:ba:61:8c:b9:fc:36:77: 38:fd:a8:4e:09:b0:0f:90:3e:e9:78:29:2d:23:80:7b:01:ae: 54:57:2e:cc:8b:c0:b1:23:16:ea:44:6d:ad:26:11:52:5a:68: 92:8b:36:c4:c9:39:24:f3:62:16:39:d8:50:3c:89:10:ca:ea: e3:22:3a:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCmUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJDOEQxMTAvBgNVBAUTKEU3MTRBODE0OTdDODE3Nzg2OENCQjRDREIzMzhDM0VG NkNFOUU5NTMwHhcNMjUwNzIyMTk1NjA4WhcNMjUwNzI5MTk1NjA4WjAYMRYwFAYD VQQDEw02ODdmZWNkOC04OTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA12sYv8fGZddFOLu72tjJLzG8hH/jNM9mKS0wDfN/9Ejj5SX0jdqo8gqsL3qn HY0q9S69DUy5nT0jkcpnYvs3Uz82ZpJs9QpaZYAPj5Lo+Xc1XZ3qEItq7levkY23 sXpYU/JYkCb/c2kZcCvktExRYHLtO4hYSUXj/D5NUC+jBA+IhH8WNgfxiT5MGRE6 CipLcF/Xvz25bXExFDQaMBcG9/8vUH2tosUCAYFnsTlckjmZznJPJbAqG7JSKHQY 7Ns+s6m9r3zhJQyxeK0vkZlxka46E7JE30qzyCh3Pp2a9BG7FwPrO0N866IDIZ3s BbGFv4ZAqu1N/ciQGscgBTT/oQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFChCbrdi ML3wX15SRrF9PE5ktYt5MB8GA1UdIwQYMBaAFOcUqBSXyBd4aMu0zbM4w+9s6elT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkM4RC85QTExMDg2NDY5 QkExMUVBQkMwQkQ4NjNDNEY5QUUwMi81eFNvRkpmSUYzaG95N1ROc3pqRDcyenA2 Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV4U29GSmZJRjNob3k3VE5zempENzJ6cDZWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkM4RC85QTExMDg2NDY5QkExMUVBQkMwQkQ4NjNDNEY5QUUwMi81eFNvRkpmSUYz aG95N1ROc3pqRDcyenA2Vk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjsv8h6Ul3Jz0jLHso23HjhzOcq0EbTiQz5JhrkT72Xmx3gCfP0jRz XTeqTYTRjFz8+s67SP53tfvvKmcHF4FBC5YHrDZgTReUn6sBvX0o6r314HfjzcsY l1RhHNQ1EA3AfATgrY8K5m3jxkHAxS0tP/uQfzXC5XojxO4FPCJR8vkdHSdD9Cr3 NRVnsFh4cMKILySLVNqPKTqE6DJuIdxlKI9ekDp3xTkJOzD5mXOz1RolI/Kkrkb+ 5It50Kj4pbphjLn8Nnc4/ahOCbAPkD7peCktI4B7Aa5UVy7Mi8CxIxbqRG2tJhFS WmiSizbEyTkk82IWOdhQPIkQyurjIjrc -----END CERTIFICATE-----Generated at Wed Jul 23 12:21:51 2025 by rpki-client