$ rpki-client -vvf rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.mft File: p5uCiHAxRBmQsY0aBfnicefnuOY.mft (raw, json) Hash identifier: ayJsHs9TXvN/ypY5c1/du4AW6dlKRKdqF6GGdXUIAdI= Subject key identifier: D9:D8:06:E4:47:E6:0E:02:26:94:05:7B:FA:44:32:A2:5D:C8:E8:DC Authority key identifier: A7:9B:82:88:70:31:44:19:90:B1:8D:1A:05:F9:E2:71:E7:E7:B8:E6 Certificate issuer: /CN=A919BE9A/serialNumber=A79B82887031441990B18D1A05F9E271E7E7B8E6 Certificate serial: 01FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.mft Manifest number: 01D7 Signing time: Sat 19 Jul 2025 03:11:16 +0000 Manifest this update: Sat 19 Jul 2025 03:11:15 +0000 Manifest next update: Sat 26 Jul 2025 03:11:15 +0000 Files and hashes: 1: p5uCiHAxRBmQsY0aBfnicefnuOY.crl (hash: ByERPnGmbtqBYw92IFltgcVG0otplu9IaFWSnhCYVNw=) 2: 9CA607DA3C8411F0BDA85229C4F9AE02.roa (hash: feDA48MiXXJctKT3eZvp/d1nnsUlAcYOaj9wGQ7J2ec=) 3: 0900F7CA7AE611EF8CE1F784C4F9AE02.roa (hash: qqBFkEJNiWCb2cCDSNMAUnOoY6M5apd24HqIJ4T1rMk=) 4: 4DD66E3C347F11EFB73F4074C4F9AE02.roa (hash: UdSNL+M5bhbjwAkTjKkIwiTAoopRDA15sbVDq+xd/Mo=) 5: C8E6CF687AE811EFA0337A38C4F9AE02.roa (hash: UYQj695a2OmzGWejM8q0zjVy0UfE2w5YDuGLHHyUkKE=) 6: 610B51267AE711EFACC0CA34C4F9AE02.roa (hash: 0osuZSPKtRbkTEe2rjpJx0+V/IP2FJnFJRtn1br7+ws=) 7: 5D463936C87611EDAC86AA74C4F9AE02.roa (hash: wWTFLfND3EADAPn3/677/3gOc92RXHanLyJ2ZQO9E5Y=) 8: E98F15362B3811EF926F1555C4F9AE02.roa (hash: huhcBlB6kInuEcW0eyepHJy04Qrnm/zwE5F/lbsIg4U=) 9: 34D5ED1210F511EEBCE2A81EC4F9AE02.roa (hash: K7ih6dZEP7tPsDE029yQg9J9G2EoOjYxEh23BSXqdx4=) 10: 9F4683A0B86211EDB9EDAD2CC4F9AE02.roa (hash: xEdof+9upKEPJ5nZ8zJI+L9OfNurTTcojEoj01Jch2s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.crl rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 03:11:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 507 (0x1fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919BE9A, serialNumber=A79B82887031441990B18D1A05F9E271E7E7B8E6 Validity Not Before: Jul 19 03:11:15 2025 GMT Not After : Jul 26 03:11:15 2025 GMT Subject: CN=687b0cd4-ad89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:45:91:16:b3:62:ca:9e:91:34:b0:28:72:1e: 5f:a1:78:46:47:14:84:09:c0:86:f4:8a:0d:86:e9: 8c:27:ac:11:a9:a9:96:72:32:36:d0:ba:f9:49:d9: 7d:12:91:93:ed:bf:36:08:65:b5:92:b7:60:80:43: 86:a5:f3:3b:61:cd:b6:51:42:79:31:a3:cf:58:a9: 3e:b7:5e:6b:72:0e:e1:40:2c:51:77:6f:0e:7b:18: 48:2a:a7:cf:4c:f3:f6:ca:12:34:2b:b4:9a:e9:24: d4:90:3d:13:d6:90:2a:8b:01:9b:19:4f:24:e8:9d: 69:0e:c0:f1:ee:10:76:ea:3c:21:fb:e5:8f:59:f0: b2:c5:36:d0:09:4e:16:f2:5f:3e:5c:5b:e9:91:6b: 5b:3f:3f:f5:0e:6e:0b:bb:ab:5a:d4:25:4f:9e:f9: a2:da:08:6b:d8:98:ae:37:63:f4:0e:8d:55:da:8d: 6f:9a:c1:68:94:de:de:17:76:4e:74:52:0a:63:a5: 29:71:df:f8:a7:d8:9d:79:0b:d2:65:44:7d:bc:ae: 55:9e:b3:2d:66:de:35:71:b3:44:21:0d:bd:57:bd: 7f:31:af:fc:52:e1:38:da:fd:75:ad:a2:12:5e:a5: 77:de:e6:a2:23:b0:72:68:bc:8d:4b:9b:57:dd:5a: b5:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:D8:06:E4:47:E6:0E:02:26:94:05:7B:FA:44:32:A2:5D:C8:E8:DC X509v3 Authority Key Identifier: keyid:A7:9B:82:88:70:31:44:19:90:B1:8D:1A:05:F9:E2:71:E7:E7:B8:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:2b:fa:e6:95:fd:77:f7:15:e0:10:55:9f:8d:f9:3e:8d:b9: 23:2a:7d:46:6f:db:80:17:9b:a8:c9:02:a2:55:03:2d:a6:00: 8c:f4:24:9f:93:10:af:d5:9c:0a:10:3b:d9:d6:4a:bc:7a:6c: ea:19:33:53:44:d6:94:04:e8:4a:76:a0:67:8f:7f:20:f8:80: 8d:6a:7a:32:36:4e:b2:1c:7c:87:b2:6b:90:ae:b1:ef:d0:bc: c5:6f:38:17:fd:bd:f5:4d:b7:fb:77:6b:f9:c4:5c:e1:2c:d7: 59:d1:9e:24:a6:ff:bf:6b:3d:62:98:5a:aa:09:ac:38:d5:d4: ad:21:5a:82:2c:83:87:58:a0:cb:38:d0:3f:28:44:41:c8:e4: dd:35:e7:7f:5f:0b:e9:71:ee:ee:b2:c7:69:03:01:cd:62:33: 11:06:e5:a8:fe:c7:69:f6:93:7e:c7:6b:48:a0:50:a1:14:95: 5b:d7:d4:ae:a3:f9:5d:7b:56:d1:8f:38:c7:7e:d5:99:19:1c: 8a:f2:2e:40:d3:be:53:1d:23:e3:81:77:af:b7:de:df:a9:cb: 57:25:b2:0c:53:d5:1b:f7:a7:28:2b:fe:3c:52:8b:87:af:40: b1:b2:8e:de:06:63:4f:4a:2f:c8:e3:3d:a8:76:87:6a:ce:65: 0c:91:f6:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUJFOUExMTAvBgNVBAUTKEE3OUI4Mjg4NzAzMTQ0MTk5MEIxOEQxQTA1RjlFMjcx RTdFN0I4RTYwHhcNMjUwNzE5MDMxMTE1WhcNMjUwNzI2MDMxMTE1WjAYMRYwFAYD VQQDEw02ODdiMGNkNC1hZDg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsUWRFrNiyp6RNLAoch5foXhGRxSECcCG9IoNhumMJ6wRqamWcjI20Lr5Sdl9 EpGT7b82CGW1krdggEOGpfM7Yc22UUJ5MaPPWKk+t15rcg7hQCxRd28OexhIKqfP TPP2yhI0K7Sa6STUkD0T1pAqiwGbGU8k6J1pDsDx7hB26jwh++WPWfCyxTbQCU4W 8l8+XFvpkWtbPz/1Dm4Lu6ta1CVPnvmi2ghr2JiuN2P0Do1V2o1vmsFolN7eF3ZO dFIKY6Upcd/4p9ideQvSZUR9vK5VnrMtZt41cbNEIQ29V71/Ma/8UuE42v11raIS XqV33uaiI7ByaLyNS5tX3Vq1KwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNnYBuRH 5g4CJpQFe/pEMqJdyOjcMB8GA1UdIwQYMBaAFKebgohwMUQZkLGNGgX54nHn57jm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QkU5QS84RkExRjU2RUI4 NUUxMUVEOEU2RjQyMTNDNEY5QUUwMi9wNXVDaUhBeFJCbVFzWTBhQmZuaWNlZm51 T1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3A1dUNpSEF4UkJtUXNZMGFCZm5pY2VmbnVPWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QkU5QS84RkExRjU2RUI4NUUxMUVEOEU2RjQyMTNDNEY5QUUwMi9wNXVDaUhBeFJC bVFzWTBhQmZuaWNlZm51T1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxK/rmlf139xXgEFWfjfk+jbkjKn1Gb9uAF5uoyQKiVQMtpgCM9CSf kxCv1ZwKEDvZ1kq8emzqGTNTRNaUBOhKdqBnj38g+ICNanoyNk6yHHyHsmuQrrHv 0LzFbzgX/b31Tbf7d2v5xFzhLNdZ0Z4kpv+/az1imFqqCaw41dStIVqCLIOHWKDL ONA/KERByOTdNed/Xwvpce7ussdpAwHNYjMRBuWo/sdp9pN+x2tIoFChFJVb19Su o/lde1bRjzjHftWZGRyK8i5A075THSPjgXevt97fqctXJbIMU9Ub96coK/48UouH r0Cxso7eBmNPSi/I4z2ododqzmUMkfZz -----END CERTIFICATE-----Generated at Sun Jul 20 07:56:43 2025 by rpki-client