$ rpki-client -vvf rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft File: 5o7RJO9le2eb0SpY-gNQFODf6Cc.mft (raw, json) Hash identifier: 3nQYJo5s1FNqAlXaIYX/TWxDpXHeZmppXqW8pr+FgM4= Subject key identifier: F7:1E:5D:10:B1:31:64:AF:06:CD:C6:BA:C9:50:42:44:72:38:93:3F Authority key identifier: E6:8E:D1:24:EF:65:7B:67:9B:D1:2A:58:FA:03:50:14:E0:DF:E8:27 Certificate issuer: /CN=A9191A09/serialNumber=E68ED124EF657B679BD12A58FA035014E0DFE827 Certificate serial: 0DE5 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft Manifest number: 0DD1 Signing time: Fri 18 Jul 2025 14:43:17 +0000 Manifest this update: Fri 18 Jul 2025 14:43:17 +0000 Manifest next update: Fri 25 Jul 2025 14:43:17 +0000 Files and hashes: 1: 5o7RJO9le2eb0SpY-gNQFODf6Cc.crl (hash: 9gwJKJCK0saTnUK/ayLMEV8vLYtu3NpqBUSErkO8LJw=) 2: 9C06E51EE37A11EA84A20810C4F9AE02.roa (hash: BIq27Hxj0ymd/MyK4xyxLJopPOW9viNW0+I2cxj8GdM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.crl rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 14:43:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3557 (0xde5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191A09, serialNumber=E68ED124EF657B679BD12A58FA035014E0DFE827 Validity Not Before: Jul 18 14:43:17 2025 GMT Not After : Jul 25 14:43:17 2025 GMT Subject: CN=687a5d85-7371 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:5f:b8:67:46:a1:3e:a5:39:0b:28:24:bb:6a: 04:ca:1a:fe:81:b2:1e:3d:f1:77:0f:d1:f1:de:95: 2a:0a:c4:82:e4:64:96:84:cf:f5:6e:44:fc:ed:c2: c0:9d:37:cd:ca:3f:51:f6:0c:5f:4e:85:d8:ef:16: 80:55:23:b6:1e:04:87:7d:e3:68:88:4c:af:f5:49: dc:62:25:fb:b3:32:37:70:03:ca:23:43:67:88:b9: ed:3f:82:e2:f4:14:64:2e:79:d2:d5:7a:24:2f:52: cf:0a:f8:1a:7f:3d:8a:1d:96:67:9e:17:85:48:08: 92:a5:4f:50:57:4c:6d:66:12:64:f4:ed:e3:96:69: 1f:27:ee:a7:83:72:ed:fc:f0:40:33:df:3e:3f:5a: 91:4a:e1:4b:fe:16:7c:48:ba:d6:e7:fd:e5:21:fb: 5b:49:ce:b4:70:e2:4f:29:f1:98:63:7c:b6:19:71: ff:ed:41:44:e9:63:7c:fd:01:5d:a7:56:a6:bd:f6: e9:57:3f:c4:31:ea:45:a0:ab:a1:65:38:b4:15:b9: c7:a9:e4:05:58:7b:e3:fa:97:3d:d3:ca:61:4d:0a: 87:43:fd:9e:59:68:55:9f:19:74:a5:ae:d5:c1:b3: b2:b6:39:9a:eb:2f:e3:33:08:c4:6b:5c:54:08:1a: 3a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:1E:5D:10:B1:31:64:AF:06:CD:C6:BA:C9:50:42:44:72:38:93:3F X509v3 Authority Key Identifier: keyid:E6:8E:D1:24:EF:65:7B:67:9B:D1:2A:58:FA:03:50:14:E0:DF:E8:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:9b:75:d6:5d:19:f8:22:1a:81:7a:bc:3e:50:f9:6f:dc:07: 6f:69:90:48:70:dd:f5:4e:10:d4:ff:89:41:d4:61:25:c8:a2: 3c:7a:8e:f0:31:f5:15:72:38:34:69:80:62:b1:9a:df:aa:15: 79:41:19:0b:b8:89:f0:7d:cc:0a:ad:4d:32:fb:3f:3f:1d:01: 32:45:5a:e6:14:9f:96:4f:8d:bb:cf:2d:63:b7:df:2c:8a:4e: 9d:79:41:70:9f:4f:56:7c:06:4c:e1:8f:45:ad:a2:d9:03:c7: b9:32:6d:db:90:15:7e:6d:1d:d8:33:95:30:bb:10:76:af:61: 30:7f:92:1d:5d:24:de:02:99:3b:e2:85:2f:84:b0:d8:95:74: 84:e6:dd:23:30:3a:9b:86:f0:55:e3:77:a3:64:5d:2c:46:66: 06:09:cc:a9:ec:b1:f9:96:4f:31:90:47:9b:00:3a:45:a8:ac: c5:2e:cd:14:e5:30:1a:a1:26:16:a0:ed:6f:f5:ef:12:84:fc: e2:f2:03:a3:10:b4:24:7d:9c:72:f9:ea:13:5a:34:00:65:28: c6:6b:0d:38:aa:56:6f:4a:c6:5a:01:13:7d:55:a6:ba:bc:a8: 5c:b8:6b:55:4d:fb:b3:50:31:92:d4:9e:f5:48:09:37:8c:d8: 35:d0:7d:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDeUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFBMDkxMTAvBgNVBAUTKEU2OEVEMTI0RUY2NTdCNjc5QkQxMkE1OEZBMDM1MDE0 RTBERkU4MjcwHhcNMjUwNzE4MTQ0MzE3WhcNMjUwNzI1MTQ0MzE3WjAYMRYwFAYD VQQDEw02ODdhNWQ4NS03MzcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0V+4Z0ahPqU5Cygku2oEyhr+gbIePfF3D9Hx3pUqCsSC5GSWhM/1bkT87cLA nTfNyj9R9gxfToXY7xaAVSO2HgSHfeNoiEyv9UncYiX7szI3cAPKI0NniLntP4Li 9BRkLnnS1XokL1LPCvgafz2KHZZnnheFSAiSpU9QV0xtZhJk9O3jlmkfJ+6ng3Lt /PBAM98+P1qRSuFL/hZ8SLrW5/3lIftbSc60cOJPKfGYY3y2GXH/7UFE6WN8/QFd p1amvfbpVz/EMepFoKuhZTi0FbnHqeQFWHvj+pc908phTQqHQ/2eWWhVnxl0pa7V wbOytjma6y/jMwjEa1xUCBo6mwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPceXRCx MWSvBs3GuslQQkRyOJM/MB8GA1UdIwQYMBaAFOaO0STvZXtnm9EqWPoDUBTg3+gn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUEwOS8zQzQxMkMzNkJG MzkxMUU5ODk3RDdDMkVDNEY5QUUwMi81bzdSSk85bGUyZWIwU3BZLWdOUUZPRGY2 Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzVvN1JKTzlsZTJlYjBTcFktZ05RRk9EZjZDYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUEwOS8zQzQxMkMzNkJGMzkxMUU5ODk3RDdDMkVDNEY5QUUwMi81bzdSSk85bGUy ZWIwU3BZLWdOUUZPRGY2Q2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUm3XWXRn4IhqBerw+UPlv3AdvaZBIcN31ThDU/4lB1GElyKI8eo7w MfUVcjg0aYBisZrfqhV5QRkLuInwfcwKrU0y+z8/HQEyRVrmFJ+WT427zy1jt98s ik6deUFwn09WfAZM4Y9FraLZA8e5Mm3bkBV+bR3YM5UwuxB2r2Ewf5IdXSTeApk7 4oUvhLDYlXSE5t0jMDqbhvBV43ejZF0sRmYGCcyp7LH5lk8xkEebADpFqKzFLs0U 5TAaoSYWoO1v9e8ShPzi8gOjELQkfZxy+eoTWjQAZSjGaw04qlZvSsZaARN9Vaa6 vKhcuGtVTfuzUDGS1J71SAk3jNg10H3d -----END CERTIFICATE-----Generated at Sun Jul 20 07:32:15 2025 by rpki-client