$ rpki-client -vvf rpki.apnic.net/member_repository/A917EFA9/ED68B5F031A511EEBEF8BD2AC4F9AE02/e5GosBHWGcQnHUUgOg4z2Rhe94E.mft File: e5GosBHWGcQnHUUgOg4z2Rhe94E.mft (raw, json) Hash identifier: oZHLE5NUQtqj+hCSnmmNcBSJq4t0dmFD9IrT++obSFA= Subject key identifier: 2A:83:4E:0B:3E:12:93:6D:07:0A:2E:16:E4:9D:69:C0:99:F6:7E:EA Authority key identifier: 7B:91:A8:B0:11:D6:19:C4:27:1D:45:20:3A:0E:33:D9:18:5E:F7:81 Certificate issuer: /CN=A917EFA9/serialNumber=7B91A8B011D619C4271D45203A0E33D9185EF781 Certificate serial: 0187 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5GosBHWGcQnHUUgOg4z2Rhe94E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917EFA9/ED68B5F031A511EEBEF8BD2AC4F9AE02/e5GosBHWGcQnHUUgOg4z2Rhe94E.mft Manifest number: 017A Signing time: Sat 19 Jul 2025 04:00:12 +0000 Manifest this update: Sat 19 Jul 2025 04:00:12 +0000 Manifest next update: Sat 26 Jul 2025 04:00:12 +0000 Files and hashes: 1: e5GosBHWGcQnHUUgOg4z2Rhe94E.crl (hash: nICx6/GcWBzHN94gTzA65jDuVodHUCAtbenxwqlP918=) 2: 1468305C31A811EE939F1D33C4F9AE02.roa (hash: A0nJe/MkW8TSZdk/E2Vu0knizTlyVLUt37DSyW+bHLE=) 3: 113D35904DD611EE8F798349C4F9AE02.roa (hash: /egOGavRQgmetbzvLfczJLgMzHXL9RZQguM8QCgkO14=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917EFA9/ED68B5F031A511EEBEF8BD2AC4F9AE02/e5GosBHWGcQnHUUgOg4z2Rhe94E.crl rsync://rpki.apnic.net/member_repository/A917EFA9/ED68B5F031A511EEBEF8BD2AC4F9AE02/e5GosBHWGcQnHUUgOg4z2Rhe94E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5GosBHWGcQnHUUgOg4z2Rhe94E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 04:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 391 (0x187) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917EFA9, serialNumber=7B91A8B011D619C4271D45203A0E33D9185EF781 Validity Not Before: Jul 19 04:00:12 2025 GMT Not After : Jul 26 04:00:12 2025 GMT Subject: CN=687b184c-9ede Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ad:3c:fc:f2:a6:95:e9:36:e9:d0:5d:cf:4c: cf:e3:19:be:3c:c5:a2:26:43:1b:aa:d5:e9:81:c7: 10:31:81:06:03:f7:30:a0:c0:4d:c6:9e:16:a0:06: 45:a2:d1:8e:2b:13:06:f4:17:91:c9:f2:21:93:93: 5e:3c:a3:42:f2:3a:17:49:c6:8a:99:ef:e8:8c:e0: c1:58:d6:04:1a:3f:13:6b:37:6f:f9:db:f0:f7:71: 65:3c:87:00:ed:7c:51:bf:1b:81:83:74:2d:9c:a6: 39:30:ff:4f:3a:5c:9d:9f:0e:65:8c:e6:12:9c:bc: 88:9a:39:2b:79:cf:62:78:90:d0:f6:59:e5:46:9b: ef:a0:0f:38:b4:02:a4:46:0c:47:24:e3:48:a5:2d: a2:35:7b:26:cb:8b:b3:7c:9f:93:c9:34:3f:f6:c8: f8:5c:da:b8:74:36:db:d5:63:2d:62:70:09:80:32: 2b:7d:82:95:c9:8c:9e:c2:6d:52:e3:0f:06:60:7c: 58:6a:d8:a4:e4:38:b9:24:18:99:f1:cc:fa:1b:8a: b3:7d:05:db:c3:00:5f:c6:9a:cd:f3:ca:d0:58:1c: e4:a2:08:15:9f:02:ca:3a:8e:3a:f5:7a:46:c4:99: 44:24:22:ed:01:7c:6c:e8:58:fa:d2:75:44:94:b4: 58:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:83:4E:0B:3E:12:93:6D:07:0A:2E:16:E4:9D:69:C0:99:F6:7E:EA X509v3 Authority Key Identifier: keyid:7B:91:A8:B0:11:D6:19:C4:27:1D:45:20:3A:0E:33:D9:18:5E:F7:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917EFA9/ED68B5F031A511EEBEF8BD2AC4F9AE02/e5GosBHWGcQnHUUgOg4z2Rhe94E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5GosBHWGcQnHUUgOg4z2Rhe94E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EFA9/ED68B5F031A511EEBEF8BD2AC4F9AE02/e5GosBHWGcQnHUUgOg4z2Rhe94E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:7e:f2:d7:42:85:92:73:16:f7:11:3d:fb:b0:60:a4:07:d3: d5:93:50:5b:70:f5:8d:b5:0d:4a:51:c9:5a:20:df:c9:b9:09: d0:05:4e:b3:3a:5c:68:3c:5b:4f:6e:17:71:10:bd:4c:c8:5b: b5:05:e6:f5:79:ed:a8:0f:b7:03:39:ba:b6:87:8f:80:cd:ad: 39:c3:eb:49:78:61:9b:ee:ab:0e:74:d5:d0:d2:1a:53:2c:01: 2a:17:40:8e:bc:1a:51:76:18:eb:41:e4:5d:0a:a1:95:00:12: 76:e0:27:d3:c6:fa:c5:22:49:85:68:de:d0:56:c6:f5:64:b3: ea:e3:5e:f4:bf:9b:0f:6b:ab:7f:d8:ce:83:f5:34:0b:be:0a: c1:47:c1:de:ee:83:62:d8:b6:23:2d:ec:43:ee:67:14:ba:60: 45:dd:e8:c0:d5:8b:91:11:b7:ac:90:e7:ea:cc:98:47:ed:59: ca:61:5a:88:9f:e5:cd:b7:64:bc:1c:b3:eb:6c:54:82:37:a5: 79:00:b0:0d:50:5d:71:84:5c:24:9d:fc:94:12:40:0b:2d:b1: 48:97:a7:a3:34:cf:ea:c3:79:45:4d:81:08:b7:a8:6c:c9:d7: 09:47:26:43:c9:96:00:b2:21:75:47:28:8b:06:2f:ff:32:86: 57:d5:50:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VGQTkxMTAvBgNVBAUTKDdCOTFBOEIwMTFENjE5QzQyNzFENDUyMDNBMEUzM0Q5 MTg1RUY3ODEwHhcNMjUwNzE5MDQwMDEyWhcNMjUwNzI2MDQwMDEyWjAYMRYwFAYD VQQDEw02ODdiMTg0Yy05ZWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwK08/PKmlek26dBdz0zP4xm+PMWiJkMbqtXpgccQMYEGA/cwoMBNxp4WoAZF otGOKxMG9BeRyfIhk5NePKNC8joXScaKme/ojODBWNYEGj8Tazdv+dvw93FlPIcA 7XxRvxuBg3QtnKY5MP9POlydnw5ljOYSnLyImjkrec9ieJDQ9lnlRpvvoA84tAKk RgxHJONIpS2iNXsmy4uzfJ+TyTQ/9sj4XNq4dDbb1WMtYnAJgDIrfYKVyYyewm1S 4w8GYHxYatik5Di5JBiZ8cz6G4qzfQXbwwBfxprN88rQWBzkoggVnwLKOo469XpG xJlEJCLtAXxs6Fj60nVElLRYvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCqDTgs+ EpNtBwouFuSdacCZ9n7qMB8GA1UdIwQYMBaAFHuRqLAR1hnEJx1FIDoOM9kYXveB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUZBOS9FRDY4QjVGMDMx QTUxMUVFQkVGOEJEMkFDNEY5QUUwMi9lNUdvc0JIV0djUW5IVVVnT2c0ejJSaGU5 NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2U1R29zQkhXR2NRbkhVVWdPZzR6MlJoZTk0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RUZBOS9FRDY4QjVGMDMxQTUxMUVFQkVGOEJEMkFDNEY5QUUwMi9lNUdvc0JIV0dj UW5IVVVnT2c0ejJSaGU5NEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHfvLXQoWScxb3ET37sGCkB9PVk1BbcPWNtQ1KUclaIN/JuQnQBU6z OlxoPFtPbhdxEL1MyFu1Beb1ee2oD7cDObq2h4+Aza05w+tJeGGb7qsOdNXQ0hpT LAEqF0COvBpRdhjrQeRdCqGVABJ24CfTxvrFIkmFaN7QVsb1ZLPq4170v5sPa6t/ 2M6D9TQLvgrBR8He7oNi2LYjLexD7mcUumBF3ejA1YuREbeskOfqzJhH7VnKYVqI n+XNt2S8HLPrbFSCN6V5ALANUF1xhFwknfyUEkALLbFIl6ejNM/qw3lFTYEIt6hs ydcJRyZDyZYAsiF1RyiLBi//MoZX1VAf -----END CERTIFICATE-----Generated at Sun Jul 20 06:11:15 2025 by rpki-client