$ rpki-client -vvf rpki.apnic.net/member_repository/A918D2CA/09F74EF6354711F08103BE24C4F9AE02/b5HHak90ZkEA3Y3r0XhRQuE3gC0.mft File: b5HHak90ZkEA3Y3r0XhRQuE3gC0.mft (raw, json) Hash identifier: IxSl1ZKGgSe2fg78yvyfLWxYkC3jo4SJIsweL82L80M= Subject key identifier: 84:A5:70:E8:00:DF:3D:73:30:26:3A:07:B6:77:82:C6:E2:60:A1:D9 Authority key identifier: 6F:91:C7:6A:4F:74:66:41:00:DD:8D:EB:D1:78:51:42:E1:37:80:2D Certificate issuer: /CN=A918D2CA/serialNumber=6F91C76A4F74664100DD8DEBD1785142E137802D Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b5HHak90ZkEA3Y3r0XhRQuE3gC0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D2CA/09F74EF6354711F08103BE24C4F9AE02/b5HHak90ZkEA3Y3r0XhRQuE3gC0.mft Manifest number: 28 Signing time: Tue 29 Jul 2025 08:23:11 +0000 Manifest this update: Tue 29 Jul 2025 08:23:11 +0000 Manifest next update: Tue 05 Aug 2025 08:23:11 +0000 Files and hashes: 1: b5HHak90ZkEA3Y3r0XhRQuE3gC0.crl (hash: f3HONMM4VJ5+Vauvcp0t1TDj654SlFM/6dDhUfgkFuY=) 2: 8C9E2B18354711F09FCEEE25C4F9AE02.roa (hash: Rm2y9XYNOuLaJLPo5EgOIcrmYm6wYWaPwijgwTBKrVM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D2CA/09F74EF6354711F08103BE24C4F9AE02/b5HHak90ZkEA3Y3r0XhRQuE3gC0.crl rsync://rpki.apnic.net/member_repository/A918D2CA/09F74EF6354711F08103BE24C4F9AE02/b5HHak90ZkEA3Y3r0XhRQuE3gC0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b5HHak90ZkEA3Y3r0XhRQuE3gC0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 05 Aug 2025 08:23:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D2CA, serialNumber=6F91C76A4F74664100DD8DEBD1785142E137802D Validity Not Before: Jul 29 08:23:11 2025 GMT Not After : Aug 5 08:23:11 2025 GMT Subject: CN=688884ef-c3f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:7a:01:23:57:59:3a:bf:74:78:5c:b5:6b:48: e4:40:d2:23:47:5f:24:f3:67:29:44:b9:43:a6:88: 5c:e6:2a:60:67:1f:16:78:7e:94:2f:ea:b0:36:af: 1f:04:a4:83:9d:b6:0a:87:be:35:73:a3:ed:08:23: 79:91:fb:f5:88:e9:31:eb:bd:6b:c5:b4:5a:dd:13: 10:0a:09:d8:56:bf:cb:c5:61:7f:2f:f7:11:6a:85: 54:64:0f:55:50:f6:3f:10:e3:65:79:1f:d7:42:3f: eb:81:82:d8:ac:c5:37:73:7b:dc:97:4c:87:ff:e4: ff:8a:d1:30:5f:a4:ac:6d:a2:fc:c4:f3:87:e4:d2: eb:56:5d:c0:ca:54:b5:db:ce:70:bd:77:00:23:da: 2a:e7:0b:bd:6a:37:6c:5a:a2:66:04:b3:c2:fe:81: c2:46:e6:bc:86:ac:ba:2c:28:46:73:1e:e8:41:7d: 46:2e:20:56:28:f0:da:59:30:96:67:6d:e9:44:9e: 0e:8f:df:ab:1d:98:65:fe:77:4f:17:e1:5d:4f:ba: f3:78:2f:e7:5b:63:27:6d:c3:c7:c0:07:b3:09:56: 76:c9:a6:3d:3a:b7:2d:42:29:fc:c9:45:bc:70:8f: 1a:77:b1:78:c1:7b:81:d6:55:7b:9f:1c:a0:9d:00: ec:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:A5:70:E8:00:DF:3D:73:30:26:3A:07:B6:77:82:C6:E2:60:A1:D9 X509v3 Authority Key Identifier: keyid:6F:91:C7:6A:4F:74:66:41:00:DD:8D:EB:D1:78:51:42:E1:37:80:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D2CA/09F74EF6354711F08103BE24C4F9AE02/b5HHak90ZkEA3Y3r0XhRQuE3gC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b5HHak90ZkEA3Y3r0XhRQuE3gC0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D2CA/09F74EF6354711F08103BE24C4F9AE02/b5HHak90ZkEA3Y3r0XhRQuE3gC0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:a6:60:3d:e5:66:85:d6:e2:35:52:f7:dc:8f:e5:12:09:3d: fd:ca:4c:ff:dc:38:88:19:26:b4:3e:5c:c4:7f:65:92:53:ad: 3f:a3:27:62:bd:c5:23:32:f4:c9:5d:6a:94:c7:28:3b:06:7d: 96:83:9d:c0:09:71:a7:d5:dc:51:bb:59:98:b3:a9:2b:90:66: ee:20:fa:67:c4:1a:fd:23:60:b8:24:63:6f:99:07:73:5f:35: 12:b2:91:b2:96:56:4b:a2:8b:b7:a9:32:2e:b5:25:3f:3a:a3: 6b:7e:69:e2:8f:24:a7:93:19:cf:61:a3:cb:5b:8a:bb:2e:1e: 6d:81:35:f2:72:c2:e7:f8:55:4d:0b:66:f6:47:bf:70:ea:2a: a4:da:cf:4f:9c:d3:0f:b4:fb:5e:b5:ba:9a:fd:ac:c9:6b:78: 00:9c:44:79:6c:3c:74:b7:00:51:74:ce:4c:93:22:5c:2a:3c: 7d:00:ad:0d:56:02:0c:8b:3d:52:f1:f8:7d:12:53:f3:b7:cb: a5:fa:b9:f9:33:a5:36:40:eb:53:18:a3:03:a6:d6:a2:9b:9e: ce:48:01:e0:7c:2f:75:b5:f9:e6:ec:c1:a4:37:e2:9d:50:56: 25:ac:2a:82:7d:eb:b7:a1:0d:62:8a:c7:1a:bd:28:c8:5e:27: 71:84:a7:25 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RDJDQTExMC8GA1UEBRMoNkY5MUM3NkE0Rjc0NjY0MTAwREQ4REVCRDE3ODUxNDJF MTM3ODAyRDAeFw0yNTA3MjkwODIzMTFaFw0yNTA4MDUwODIzMTFaMBgxFjAUBgNV BAMTDTY4ODg4NGVmLWMzZjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUegEjV1k6v3R4XLVrSORA0iNHXyTzZylEuUOmiFzmKmBnHxZ4fpQv6rA2rx8E pIOdtgqHvjVzo+0II3mR+/WI6THrvWvFtFrdExAKCdhWv8vFYX8v9xFqhVRkD1VQ 9j8Q42V5H9dCP+uBgtisxTdze9yXTIf/5P+K0TBfpKxtovzE84fk0utWXcDKVLXb znC9dwAj2irnC71qN2xaomYEs8L+gcJG5ryGrLosKEZzHuhBfUYuIFYo8NpZMJZn belEng6P36sdmGX+d08X4V1PuvN4L+dbYydtw8fAB7MJVnbJpj06ty1CKfzJRbxw jxp3sXjBe4HWVXufHKCdAOztAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhKVw6ADf PXMwJjoHtneCxuJgodkwHwYDVR0jBBgwFoAUb5HHak90ZkEA3Y3r0XhRQuE3gC0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThEMkNBLzA5Rjc0RUY2MzU0 NzExRjA4MTAzQkUyNEM0RjlBRTAyL2I1SEhhazkwWmtFQTNZM3IwWGhSUXVFM2dD MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvYjVISGFrOTBaa0VBM1kzcjBYaFJRdUUzZ0MwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThE MkNBLzA5Rjc0RUY2MzU0NzExRjA4MTAzQkUyNEM0RjlBRTAyL2I1SEhhazkwWmtF QTNZM3IwWGhSUXVFM2dDMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAL+mYD3lZoXW4jVS99yP5RIJPf3KTP/cOIgZJrQ+XMR/ZZJTrT+jJ2K9 xSMy9MldapTHKDsGfZaDncAJcafV3FG7WZizqSuQZu4g+mfEGv0jYLgkY2+ZB3Nf NRKykbKWVkuii7epMi61JT86o2t+aeKPJKeTGc9ho8tbirsuHm2BNfJywuf4VU0L ZvZHv3DqKqTaz0+c0w+0+161upr9rMlreACcRHlsPHS3AFF0zkyTIlwqPH0ArQ1W AgyLPVLx+H0SU/O3y6X6ufkzpTZA61MYowOm1qKbns5IAeB8L3W1+ebswaQ34p1Q ViWsKoJ967ehDWKKxxq9KMheJ3GEpyU= -----END CERTIFICATE-----Generated at Wed Jul 30 12:53:13 2025 by rpki-client