$ rpki-client -vvf rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.mft File: 5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.mft (raw, json) Hash identifier: /pPk8hExi6gqUnTNWHIYxvQIcX9KBw3KBgRXMTzCxwI= Subject key identifier: FB:5B:4B:4A:FD:B8:F1:A3:D0:C4:78:51:F6:34:F4:81:EA:78:48:88 Authority key identifier: E5:18:E9:48:15:C4:6D:7D:8E:6F:EF:4E:BC:3D:18:DF:0E:21:F8:36 Certificate issuer: /CN=A9183DB7/serialNumber=E518E94815C46D7D8E6FEF4EBC3D18DF0E21F836 Certificate serial: 0E06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.mft Manifest number: 0DF5 Signing time: Fri 18 Jul 2025 18:01:59 +0000 Manifest this update: Fri 18 Jul 2025 18:01:59 +0000 Manifest next update: Fri 25 Jul 2025 18:01:59 +0000 Files and hashes: 1: 5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.crl (hash: 3sUg8M23U2KGSNq7gJB1l9rRr+aiR343FYNa//ehSiU=) 2: 6B7E8FC670DE11EC8B944928C4F9AE02.roa (hash: 6b2tMOXqi0MLk/Hu4xH6AhhU3ZFcsYoMzDIzjHh7G84=) 3: 6A5EC93A70DE11EC8B944928C4F9AE02.roa (hash: pfOPMFW4kQhWgEqFAOwq3YPcCBwScpJaJmY0T/CFlyo=) 4: 9F14D15E70DB11ECACCABD21C4F9AE02.roa (hash: +n1zXMDCEU4YWE/0cXk32wV8ITOzuCJeFwK/MfgKlSw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.crl rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 18:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3590 (0xe06) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183DB7, serialNumber=E518E94815C46D7D8E6FEF4EBC3D18DF0E21F836 Validity Not Before: Jul 18 18:01:59 2025 GMT Not After : Jul 25 18:01:59 2025 GMT Subject: CN=687a8c17-bdb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:1e:7d:1c:c7:83:be:6c:2b:0c:e1:f2:2a:d2: 38:16:4d:b3:2c:e0:4b:9a:ac:27:4e:97:50:57:f8: 60:bc:d3:66:4b:b8:85:57:c2:91:54:7d:07:22:a4: 77:8f:04:62:49:94:81:8d:cc:4e:a0:7a:79:d1:5c: bb:bd:3b:22:6c:e4:20:df:9b:b6:e9:89:05:6a:ea: e9:53:3a:d7:01:a4:89:44:a0:39:5b:d8:81:a0:fd: e0:c9:5e:61:0a:b8:1d:c7:1f:80:68:3b:95:68:bb: d8:60:77:2e:ea:fb:d4:fb:3d:13:1d:b1:ce:db:71: 87:25:eb:bc:0f:97:ca:bb:bd:6f:64:44:5e:37:13: 9a:f3:e8:e3:ae:58:e4:b5:f6:64:0c:ef:00:fb:96: ff:41:c5:60:65:b9:90:3d:6a:ad:38:1a:74:21:12: ee:59:26:b4:52:1f:dc:b2:4e:3e:5b:90:82:07:ed: 34:6e:22:b7:cc:4d:44:4d:e7:1e:fe:25:d9:00:68: b6:59:5e:07:7a:ad:3a:5d:6f:74:6b:48:a9:f3:f1: d1:29:74:02:a4:50:a5:aa:50:38:9e:b1:c8:23:47: ca:3b:4d:e4:7d:f5:52:ac:51:a4:29:50:9e:88:44: 31:00:e8:65:9c:68:b2:df:2d:f9:97:a9:f1:8c:59: 4f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:5B:4B:4A:FD:B8:F1:A3:D0:C4:78:51:F6:34:F4:81:EA:78:48:88 X509v3 Authority Key Identifier: keyid:E5:18:E9:48:15:C4:6D:7D:8E:6F:EF:4E:BC:3D:18:DF:0E:21:F8:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:dd:8a:28:ec:19:68:35:fd:63:43:7c:7c:35:69:92:be:08: 74:36:38:83:83:17:de:a3:31:66:99:9c:2a:04:76:de:42:46: 85:a1:45:f7:09:ee:40:f9:95:1b:40:54:39:a8:42:b3:c3:55: cd:e0:e8:a9:12:1b:9e:d8:0a:8e:84:72:37:1d:e9:d4:d5:cd: ad:2b:17:14:ba:24:1d:f3:23:4e:bd:53:f9:f8:67:3b:68:88: d6:e9:4c:16:b9:17:44:7b:97:a1:52:c7:57:0b:40:40:38:c3: 4d:44:30:ff:aa:62:c2:e1:b6:cf:fd:dd:4c:95:ca:80:63:3a: 27:95:33:95:99:1c:b2:de:d3:73:d8:17:12:64:1d:c9:05:bc: ad:5a:44:f5:b4:d1:0d:63:74:d7:39:76:f6:d0:a7:19:63:ac: b0:64:76:17:07:35:28:ae:cc:3a:23:03:69:b1:10:56:98:76: fa:e6:a7:73:1e:99:b4:ee:71:19:cb:c9:54:0b:7f:a6:29:1f: 8a:b9:5a:51:12:67:7b:00:64:f5:88:5d:9a:8e:c4:1a:ee:d9: f0:9c:87:0f:32:ab:3c:2b:c0:8b:13:34:17:08:2d:1c:e7:9f: 5c:2f:90:f5:5d:d0:b4:b1:5e:65:83:8b:5f:0b:76:15:d7:37: 7c:3a:c2:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDgYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODNEQjcxMTAvBgNVBAUTKEU1MThFOTQ4MTVDNDZEN0Q4RTZGRUY0RUJDM0QxOERG MEUyMUY4MzYwHhcNMjUwNzE4MTgwMTU5WhcNMjUwNzI1MTgwMTU5WjAYMRYwFAYD VQQDEw02ODdhOGMxNy1iZGI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzB59HMeDvmwrDOHyKtI4Fk2zLOBLmqwnTpdQV/hgvNNmS7iFV8KRVH0HIqR3 jwRiSZSBjcxOoHp50Vy7vTsibOQg35u26YkFaurpUzrXAaSJRKA5W9iBoP3gyV5h Crgdxx+AaDuVaLvYYHcu6vvU+z0THbHO23GHJeu8D5fKu71vZEReNxOa8+jjrljk tfZkDO8A+5b/QcVgZbmQPWqtOBp0IRLuWSa0Uh/csk4+W5CCB+00biK3zE1ETece /iXZAGi2WV4Heq06XW90a0ip8/HRKXQCpFClqlA4nrHII0fKO03kffVSrFGkKVCe iEQxAOhlnGiy3y35l6nxjFlPRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPtbS0r9 uPGj0MR4UfY09IHqeEiIMB8GA1UdIwQYMBaAFOUY6UgVxG19jm/vTrw9GN8OIfg2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0RCNy8wRjM3NTk5RUI1 MjExMUU5OEQ4QkFDNTJDNEY5QUUwMi81UmpwU0JYRWJYMk9iLTlPdkQwWTN3NGgt RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVSanBTQlhFYlgyT2ItOU92RDBZM3c0aC1EWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 M0RCNy8wRjM3NTk5RUI1MjExMUU5OEQ4QkFDNTJDNEY5QUUwMi81UmpwU0JYRWJY Mk9iLTlPdkQwWTN3NGgtRFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB83Yoo7BloNf1jQ3x8NWmSvgh0NjiDgxfeozFmmZwqBHbeQkaFoUX3 Ce5A+ZUbQFQ5qEKzw1XN4OipEhue2AqOhHI3HenU1c2tKxcUuiQd8yNOvVP5+Gc7 aIjW6UwWuRdEe5ehUsdXC0BAOMNNRDD/qmLC4bbP/d1MlcqAYzonlTOVmRyy3tNz 2BcSZB3JBbytWkT1tNENY3TXOXb20KcZY6ywZHYXBzUorsw6IwNpsRBWmHb65qdz Hpm07nEZy8lUC3+mKR+KuVpREmd7AGT1iF2ajsQa7tnwnIcPMqs8K8CLEzQXCC0c 559cL5D1XdC0sV5lg4tfC3YV1zd8OsJz -----END CERTIFICATE-----Generated at Sun Jul 20 08:01:43 2025 by rpki-client