$ rpki-client -vvf rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft File: s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft (raw, json) Hash identifier: +w8Tmi4LOwDyAXUOrwacDHUDzoD2e5kaOW4244CN7Gw= Subject key identifier: 4E:CB:84:EB:03:E8:19:89:CB:62:64:A6:E6:EB:CE:0B:60:33:BF:7B Authority key identifier: B3:99:2F:0D:49:BA:F6:A3:6F:DA:65:8E:5B:45:94:69:52:1E:5B:44 Certificate issuer: /CN=A917530D/serialNumber=B3992F0D49BAF6A36FDA658E5B459469521E5B44 Certificate serial: 0134 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s5kvDUm69qNv2mWOW0WUaVIeW0Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft Manifest number: 0128 Signing time: Sat 19 Jul 2025 05:01:58 +0000 Manifest this update: Sat 19 Jul 2025 05:01:57 +0000 Manifest next update: Sat 26 Jul 2025 05:01:57 +0000 Files and hashes: 1: s5kvDUm69qNv2mWOW0WUaVIeW0Q.crl (hash: yRk/0MOgoI85AIZ26w7m65og81sbYOZFSrOQOxCCYtw=) 2: 762CACD0B04311EF95390327C4F9AE02.roa (hash: 7lH097TnqT2Frr0JL7F0/A/6TnFN0hBEwwqzvbNC3Tc=) 3: A97CBD42A06611EFA888B57DC4F9AE02.roa (hash: iA4PiBqhCGu6j+QREktQJZZ0YDevgINmDR162rqZIpg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.crl rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s5kvDUm69qNv2mWOW0WUaVIeW0Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:01:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 308 (0x134) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917530D, serialNumber=B3992F0D49BAF6A36FDA658E5B459469521E5B44 Validity Not Before: Jul 19 05:01:57 2025 GMT Not After : Jul 26 05:01:57 2025 GMT Subject: CN=687b26c5-a11e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:83:9e:b8:30:fc:29:d8:40:fe:65:32:9b:bd: 1c:90:c0:61:10:63:c2:53:9a:0f:c1:c8:dd:d0:ca: 7c:3d:ad:ac:11:1b:c7:77:73:3d:cc:37:23:f5:6b: 42:57:eb:9c:23:70:65:80:da:af:11:e1:9e:ac:10: 75:81:c7:93:46:a0:69:4b:d6:57:9a:11:49:f2:4b: c9:7c:ee:dc:ce:43:1a:9a:87:4a:fd:57:7f:6b:bd: a4:f3:5a:48:65:80:18:82:de:69:b2:e3:0e:15:ff: 46:e5:bb:86:93:56:ed:f8:69:92:c2:20:0f:49:55: 52:6a:e1:f8:e2:e4:31:15:28:83:44:4a:5c:63:ca: b7:74:e9:c0:fd:40:4d:89:5d:74:c6:a8:3e:7e:1e: 2a:0d:26:bd:3a:18:13:fc:36:42:f9:88:d0:71:a0: 4e:70:ec:3a:0b:57:88:16:b2:95:ba:e3:8a:4c:34: 43:e8:ab:8c:fd:41:f2:6d:d8:c4:32:9f:80:20:95: 0a:12:b2:74:9e:9a:62:e5:0d:b9:09:16:9c:cd:2d: 28:0a:7d:72:e9:be:28:40:89:37:33:8d:b2:13:2a: 25:d6:8f:5e:9f:e2:4f:55:09:e4:8f:5b:26:ce:74: 9b:38:dc:ba:01:f6:1d:28:30:0f:4f:4e:54:66:a9: 74:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:CB:84:EB:03:E8:19:89:CB:62:64:A6:E6:EB:CE:0B:60:33:BF:7B X509v3 Authority Key Identifier: keyid:B3:99:2F:0D:49:BA:F6:A3:6F:DA:65:8E:5B:45:94:69:52:1E:5B:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s5kvDUm69qNv2mWOW0WUaVIeW0Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:b6:f0:64:09:f9:e8:14:a6:ff:a5:01:08:ff:af:29:a3:4c: 51:dd:f5:2e:e3:4d:f8:d4:8e:9e:ff:71:6e:68:56:b2:19:67: ce:00:96:19:fd:3f:cf:6e:f1:07:6f:4c:4f:a6:e1:30:ef:86: 09:c9:16:6e:63:f6:07:52:e7:2f:dd:8b:5d:04:bc:86:73:0b: ba:6a:e2:22:93:f1:e0:e2:f1:d5:e0:66:24:fb:25:85:1b:f2: 65:df:ed:03:8b:43:83:44:c2:9d:26:e8:ac:51:f7:68:e3:d8: e5:aa:45:d6:d9:84:ea:c8:ae:9f:65:ea:1a:0e:5c:75:3e:cd: f1:01:a2:31:72:88:b8:65:60:37:67:f0:0e:79:36:da:86:d4: 89:43:68:09:9b:2e:61:88:b5:aa:4c:e7:df:23:fe:bb:75:d2: 46:25:68:23:81:2a:4b:9d:49:e6:1e:2d:e8:94:2b:8f:1f:57: b4:54:f8:a8:ab:78:51:7c:6f:69:1e:fd:66:fb:2d:5e:5b:3b: ee:a6:c5:f6:d5:d6:b4:92:1b:45:d2:94:1f:0f:0a:fd:d2:ca: 4e:38:f0:bd:d0:e9:d0:88:18:6b:a0:0a:99:d8:82:91:cd:54: 75:b4:2b:16:cb:f8:99:5e:c3:97:b0:17:88:95:26:74:b0:0c: f4:ac:db:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUzMEQxMTAvBgNVBAUTKEIzOTkyRjBENDlCQUY2QTM2RkRBNjU4RTVCNDU5NDY5 NTIxRTVCNDQwHhcNMjUwNzE5MDUwMTU3WhcNMjUwNzI2MDUwMTU3WjAYMRYwFAYD VQQDEw02ODdiMjZjNS1hMTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+YOeuDD8KdhA/mUym70ckMBhEGPCU5oPwcjd0Mp8Pa2sERvHd3M9zDcj9WtC V+ucI3BlgNqvEeGerBB1gceTRqBpS9ZXmhFJ8kvJfO7czkMamodK/Vd/a72k81pI ZYAYgt5psuMOFf9G5buGk1bt+GmSwiAPSVVSauH44uQxFSiDREpcY8q3dOnA/UBN iV10xqg+fh4qDSa9OhgT/DZC+YjQcaBOcOw6C1eIFrKVuuOKTDRD6KuM/UHybdjE Mp+AIJUKErJ0nppi5Q25CRaczS0oCn1y6b4oQIk3M42yEyol1o9en+JPVQnkj1sm znSbONy6AfYdKDAPT05UZql0ywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE7LhOsD 6BmJy2JkpubrzgtgM797MB8GA1UdIwQYMBaAFLOZLw1Juvajb9pljltFlGlSHltE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTMwRC9ERDdFMDkxQ0I2 NEIxMUVFOTE0NjM3NjBDNEY5QUUwMi9zNWt2RFVtNjlxTnYybVdPVzBXVWFWSWVX MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3M1a3ZEVW02OXFOdjJtV09XMFdVYVZJZVcwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTMwRC9ERDdFMDkxQ0I2NEIxMUVFOTE0NjM3NjBDNEY5QUUwMi9zNWt2RFVtNjlx TnYybVdPVzBXVWFWSWVXMFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCutvBkCfnoFKb/pQEI/68po0xR3fUu40341I6e/3FuaFayGWfOAJYZ /T/PbvEHb0xPpuEw74YJyRZuY/YHUucv3YtdBLyGcwu6auIik/Hg4vHV4GYk+yWF G/Jl3+0Di0ODRMKdJuisUfdo49jlqkXW2YTqyK6fZeoaDlx1Ps3xAaIxcoi4ZWA3 Z/AOeTbahtSJQ2gJmy5hiLWqTOffI/67ddJGJWgjgSpLnUnmHi3olCuPH1e0VPio q3hRfG9pHv1m+y1eWzvupsX21da0khtF0pQfDwr90spOOPC90OnQiBhroAqZ2IKR zVR1tCsWy/iZXsOXsBeIlSZ0sAz0rNsY -----END CERTIFICATE-----Generated at Sun Jul 20 06:22:01 2025 by rpki-client