$ rpki-client -vvf rpki.apnic.net/member_repository/A919136B/F7C87E843A7B11E9ACBC6A18C4F9AE02/5IPa-2wrg71IK24pCn5AU1W1Ltk.mft File: 5IPa-2wrg71IK24pCn5AU1W1Ltk.mft (raw, json) Hash identifier: JVl/+m3vPjBK1aSNtt8dEhnlTaUL83YsNVJpUnaf7ec= Subject key identifier: 7D:D0:C6:E1:2F:36:31:0F:08:14:A4:51:A0:12:C0:22:D9:62:A7:CD Authority key identifier: E4:83:DA:FB:6C:2B:83:BD:48:2B:6E:29:0A:7E:40:53:55:B5:2E:D9 Certificate issuer: /CN=A919136B/serialNumber=E483DAFB6C2B83BD482B6E290A7E405355B52ED9 Certificate serial: 1073 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5IPa-2wrg71IK24pCn5AU1W1Ltk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919136B/F7C87E843A7B11E9ACBC6A18C4F9AE02/5IPa-2wrg71IK24pCn5AU1W1Ltk.mft Manifest number: 1067 Signing time: Fri 18 Jul 2025 17:32:50 +0000 Manifest this update: Fri 18 Jul 2025 17:32:50 +0000 Manifest next update: Fri 25 Jul 2025 17:32:50 +0000 Files and hashes: 1: 5IPa-2wrg71IK24pCn5AU1W1Ltk.crl (hash: 2LKiH//ZOSVK/9OhQRO/P+XbKZrdvCvZ7bE7DCPM5C0=) 2: 99B6039C215311EA86E1E020C4F9AE02.roa (hash: GBYQ/lKi3z5roPUPwktfDVMLitw965pomXZAG5jfako=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919136B/F7C87E843A7B11E9ACBC6A18C4F9AE02/5IPa-2wrg71IK24pCn5AU1W1Ltk.crl rsync://rpki.apnic.net/member_repository/A919136B/F7C87E843A7B11E9ACBC6A18C4F9AE02/5IPa-2wrg71IK24pCn5AU1W1Ltk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5IPa-2wrg71IK24pCn5AU1W1Ltk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 17:32:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4211 (0x1073) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919136B, serialNumber=E483DAFB6C2B83BD482B6E290A7E405355B52ED9 Validity Not Before: Jul 18 17:32:50 2025 GMT Not After : Jul 25 17:32:50 2025 GMT Subject: CN=687a8542-26e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3a:f8:e0:78:de:0e:0c:02:83:e2:67:f1:fb: b1:2f:1e:1a:d8:2c:71:ae:1c:ae:25:49:98:a1:2a: c0:1e:67:4c:32:72:83:dc:40:79:c3:f3:36:a2:db: db:f3:0e:22:55:56:09:68:a3:3e:95:31:c8:9d:d9: ec:4b:f9:26:f1:c3:aa:3a:41:ca:dc:b1:90:73:5e: 0f:0e:40:07:63:2c:78:6e:f6:3d:e7:2c:56:bd:85: 71:f3:94:dc:40:8a:8e:fe:d2:fb:fc:35:f5:b4:3d: 7d:7f:ef:f8:3f:7e:c6:04:40:11:99:7b:e4:d3:2d: 73:76:c9:3b:1b:04:0b:7d:d7:ca:02:52:d5:03:b8: ed:39:69:44:65:9b:2d:fa:63:fa:25:3e:e5:0d:04: ec:b7:a7:d7:69:24:c9:6f:af:19:5e:8d:92:ad:e4: e3:06:8e:9f:27:83:24:a2:85:c8:14:51:34:fd:f9: 9b:78:5a:6d:14:a4:7e:3d:39:75:ed:e2:e9:3a:ee: 7c:4c:07:39:69:2c:fe:89:7e:dc:3d:d4:63:e4:56: 9a:d9:83:4d:e7:83:87:44:c7:4b:5a:0d:b2:57:50: 35:4e:f1:87:5c:2f:cd:4b:41:cb:fd:2a:01:a1:66: 90:7e:8c:5c:92:ef:2e:80:86:2d:f4:7b:7e:fa:1c: dc:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:D0:C6:E1:2F:36:31:0F:08:14:A4:51:A0:12:C0:22:D9:62:A7:CD X509v3 Authority Key Identifier: keyid:E4:83:DA:FB:6C:2B:83:BD:48:2B:6E:29:0A:7E:40:53:55:B5:2E:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919136B/F7C87E843A7B11E9ACBC6A18C4F9AE02/5IPa-2wrg71IK24pCn5AU1W1Ltk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5IPa-2wrg71IK24pCn5AU1W1Ltk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919136B/F7C87E843A7B11E9ACBC6A18C4F9AE02/5IPa-2wrg71IK24pCn5AU1W1Ltk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:5b:15:d0:60:db:81:f4:ff:03:18:9c:84:f9:c6:94:cb:f4: b7:6d:ec:39:73:d3:ba:a0:3f:4e:3e:b6:1c:c7:5e:07:b6:05: 97:36:b0:e2:6c:4c:75:3f:ad:1b:e2:ff:6b:df:c0:17:a9:95: 28:fa:b3:a8:91:8c:75:e3:85:63:a1:03:7c:6c:ad:14:20:e7: 4c:e3:48:13:23:8f:93:55:32:81:e6:d5:46:6d:ea:5d:c8:51: 1d:a4:0e:87:3f:1d:c8:30:12:ac:33:e3:8b:73:00:04:37:44: 92:67:31:0e:36:77:ae:dd:c7:8a:6d:21:93:f2:a2:64:e7:10: 68:59:80:95:cf:88:c6:a5:3d:a2:b2:b7:4e:f5:f3:4f:d6:8d: bb:0c:e9:88:8f:55:26:28:c9:20:e4:5f:2e:de:5d:1d:28:e6: 03:7a:15:1c:bf:5f:45:b0:97:0a:55:af:2e:51:ab:59:da:51: ec:51:bc:00:78:a0:74:9e:7c:06:22:b0:a4:73:7c:28:72:c0: fb:96:4e:c4:23:4d:e5:45:d4:24:2b:e1:2d:d4:50:b3:b4:7e: 83:4d:19:63:e1:70:15:56:75:82:80:15:5e:b5:0e:b9:7e:6d: 56:57:20:44:54:4c:00:b8:fa:26:d8:6d:bd:15:dc:32:7b:9f: ba:e6:4c:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEHMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTEzNkIxMTAvBgNVBAUTKEU0ODNEQUZCNkMyQjgzQkQ0ODJCNkUyOTBBN0U0MDUz NTVCNTJFRDkwHhcNMjUwNzE4MTczMjUwWhcNMjUwNzI1MTczMjUwWjAYMRYwFAYD VQQDEw02ODdhODU0Mi0yNmUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuzr44HjeDgwCg+Jn8fuxLx4a2CxxrhyuJUmYoSrAHmdMMnKD3EB5w/M2otvb 8w4iVVYJaKM+lTHIndnsS/km8cOqOkHK3LGQc14PDkAHYyx4bvY95yxWvYVx85Tc QIqO/tL7/DX1tD19f+/4P37GBEARmXvk0y1zdsk7GwQLfdfKAlLVA7jtOWlEZZst +mP6JT7lDQTst6fXaSTJb68ZXo2SreTjBo6fJ4MkooXIFFE0/fmbeFptFKR+PTl1 7eLpOu58TAc5aSz+iX7cPdRj5Faa2YNN54OHRMdLWg2yV1A1TvGHXC/NS0HL/SoB oWaQfoxcku8ugIYt9Ht++hzcZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH3QxuEv NjEPCBSkUaASwCLZYqfNMB8GA1UdIwQYMBaAFOSD2vtsK4O9SCtuKQp+QFNVtS7Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTM2Qi9GN0M4N0U4NDNB N0IxMUU5QUNCQzZBMThDNEY5QUUwMi81SVBhLTJ3cmc3MUlLMjRwQ241QVUxVzFM dGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVJUGEtMndyZzcxSUsyNHBDbjVBVTFXMUx0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTM2Qi9GN0M4N0U4NDNBN0IxMUU5QUNCQzZBMThDNEY5QUUwMi81SVBhLTJ3cmc3 MUlLMjRwQ241QVUxVzFMdGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpWxXQYNuB9P8DGJyE+caUy/S3bew5c9O6oD9OPrYcx14HtgWXNrDi bEx1P60b4v9r38AXqZUo+rOokYx144VjoQN8bK0UIOdM40gTI4+TVTKB5tVGbepd yFEdpA6HPx3IMBKsM+OLcwAEN0SSZzEONneu3ceKbSGT8qJk5xBoWYCVz4jGpT2i srdO9fNP1o27DOmIj1UmKMkg5F8u3l0dKOYDehUcv19FsJcKVa8uUatZ2lHsUbwA eKB0nnwGIrCkc3wocsD7lk7EI03lRdQkK+Et1FCztH6DTRlj4XAVVnWCgBVetQ65 fm1WVyBEVEwAuPom2G29Fdwye5+65ky5 -----END CERTIFICATE-----Generated at Sun Jul 20 04:47:11 2025 by rpki-client