$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.mft File: 5KlM-o0vn1s570Y1BZHOMS5RT7M.mft (raw, json) Hash identifier: a5b04zrv/zyXugDm02RTsaMuJywflObc+3wFXw1dVpg= Subject key identifier: CD:10:93:AD:8A:E5:28:2A:58:43:9F:2E:AB:36:48:01:82:C7:7E:CB Authority key identifier: E4:A9:4C:FA:8D:2F:9F:5B:39:EF:46:35:05:91:CE:31:2E:51:4F:B3 Certificate issuer: /CN=A91A3AB3/serialNumber=E4A94CFA8D2F9F5B39EF46350591CE312E514FB3 Certificate serial: 02A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KlM-o0vn1s570Y1BZHOMS5RT7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.mft Manifest number: 028C Signing time: Sat 19 Jul 2025 02:10:29 +0000 Manifest this update: Sat 19 Jul 2025 02:10:28 +0000 Manifest next update: Sat 26 Jul 2025 02:10:28 +0000 Files and hashes: 1: 5KlM-o0vn1s570Y1BZHOMS5RT7M.crl (hash: /E8k33O9MvTwgTaI3B0mR2LaIohdBLLA7ObGykWX6hw=) 2: F3997FACE21D11EFA5819B7EC4F9AE02.roa (hash: YJknqh8T+qXW11AGQpkWixPSeb/oim2jtPvDZDC0Y5M=) 3: 5B69CE3A474A11EF8624EE6DC4F9AE02.roa (hash: 0d7okG44VFnG4nuLf3zjFz92ZcS33/9Y18izFVAiNWk=) 4: 3D331986E17211EFA5959B2FC4F9AE02.roa (hash: pOsL4nJKiT9Wc01cD2wPZO+WlYtBX9ZtStyQuOwRJu4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.crl rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KlM-o0vn1s570Y1BZHOMS5RT7M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 02:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 674 (0x2a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3AB3, serialNumber=E4A94CFA8D2F9F5B39EF46350591CE312E514FB3 Validity Not Before: Jul 19 02:10:28 2025 GMT Not After : Jul 26 02:10:28 2025 GMT Subject: CN=687afe94-f0af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c6:d9:07:0a:d1:5e:15:a1:9e:74:32:70:4d: c0:96:ce:74:4d:4f:ca:84:e1:7c:d2:76:e6:e6:35: 9f:45:e0:22:d1:da:62:33:8a:cb:64:20:cf:90:34: 46:a9:23:61:f1:54:74:e9:70:26:7d:51:8c:93:d0: 44:c6:2e:45:fe:1d:98:79:6d:60:72:ef:aa:62:48: 23:2d:69:d4:ef:b6:54:81:64:30:a8:e2:00:7b:ec: d4:a1:db:e4:32:4a:5c:67:3c:a9:aa:3e:68:d1:10: 50:56:df:04:21:7d:f8:79:e4:c6:d4:88:af:6c:e1: b3:93:56:cd:8f:0c:26:a2:e3:50:6e:a3:db:06:5a: 34:64:20:5d:b2:da:78:5f:39:71:fd:09:ff:98:57: 18:19:9a:85:18:ed:77:58:59:07:31:42:d7:45:4a: 25:1c:95:8a:5c:28:ec:d0:6c:9a:f2:78:6a:38:c7: 9c:ac:f6:38:7a:c2:1f:90:10:04:c8:df:6c:b0:a4: 7c:12:f9:69:eb:3e:6d:be:44:a3:91:3f:b4:79:7b: b0:a6:06:5f:bc:36:b7:a7:48:82:1e:b0:f7:fd:ee: 87:6b:1c:5c:95:d1:25:31:ab:e5:9b:74:db:a2:93: 8c:ee:3e:d0:a7:7f:66:94:4c:4f:44:ba:00:5f:e2: d1:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:10:93:AD:8A:E5:28:2A:58:43:9F:2E:AB:36:48:01:82:C7:7E:CB X509v3 Authority Key Identifier: keyid:E4:A9:4C:FA:8D:2F:9F:5B:39:EF:46:35:05:91:CE:31:2E:51:4F:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KlM-o0vn1s570Y1BZHOMS5RT7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:e0:ef:73:aa:0a:bf:3c:d5:87:94:22:85:27:6e:a9:42:ce: 8a:86:ae:6d:2e:21:04:3a:ce:9d:d4:ec:98:04:4c:ab:16:f3: 7f:18:6b:2d:bb:ea:f2:91:4a:e2:d0:21:95:7e:79:e6:9d:55: 53:72:7e:da:5a:2d:a3:bf:d8:f8:2c:bf:ca:87:29:c2:47:13: f1:31:a4:cb:7b:ba:09:ab:44:46:ee:52:62:82:1e:ee:dd:ea: 84:fb:4b:89:27:e4:73:c1:e8:69:95:1e:7e:94:a9:8e:5b:45: ac:b0:a7:a9:58:20:c9:fb:d6:28:8d:ef:ff:2d:54:91:f2:d9: 7b:a1:e9:9c:a7:bd:58:dc:81:f2:aa:53:c5:80:2f:f2:92:56: d8:13:f6:77:4e:77:8f:05:55:8d:1d:ce:0a:b4:51:6f:ab:5c: 5b:5c:88:f9:fb:ce:b5:5e:93:db:e8:59:10:28:fc:ab:cf:f7: 7b:d9:55:91:22:fb:f1:50:35:b8:4a:1d:9f:10:d5:ae:f6:9e: 4d:23:73:69:84:cd:ea:a9:4e:d8:29:6d:a4:bd:a3:66:26:21: 84:8d:bf:f9:e7:e0:f4:16:e3:66:6b:9e:ad:bc:c7:96:44:b8: 40:36:19:be:fb:09:89:a0:3c:11:f2:47:47:b7:00:9b:73:5f: 71:ef:75:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNBQjMxMTAvBgNVBAUTKEU0QTk0Q0ZBOEQyRjlGNUIzOUVGNDYzNTA1OTFDRTMx MkU1MTRGQjMwHhcNMjUwNzE5MDIxMDI4WhcNMjUwNzI2MDIxMDI4WjAYMRYwFAYD VQQDEw02ODdhZmU5NC1mMGFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxsbZBwrRXhWhnnQycE3Als50TU/KhOF80nbm5jWfReAi0dpiM4rLZCDPkDRG qSNh8VR06XAmfVGMk9BExi5F/h2YeW1gcu+qYkgjLWnU77ZUgWQwqOIAe+zUodvk MkpcZzypqj5o0RBQVt8EIX34eeTG1IivbOGzk1bNjwwmouNQbqPbBlo0ZCBdstp4 Xzlx/Qn/mFcYGZqFGO13WFkHMULXRUolHJWKXCjs0Gya8nhqOMecrPY4esIfkBAE yN9ssKR8Evlp6z5tvkSjkT+0eXuwpgZfvDa3p0iCHrD3/e6HaxxcldElMavlm3Tb opOM7j7Qp39mlExPRLoAX+LRiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM0Qk62K 5SgqWEOfLqs2SAGCx37LMB8GA1UdIwQYMBaAFOSpTPqNL59bOe9GNQWRzjEuUU+z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0FCMy8wNUVEOTRDRTE5 NEMxMUVEQUQzOEYyMkJDNEY5QUUwMi81S2xNLW8wdm4xczU3MFkxQlpIT01TNVJU N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVLbE0tbzB2bjFzNTcwWTFCWkhPTVM1UlQ3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB M0FCMy8wNUVEOTRDRTE5NEMxMUVEQUQzOEYyMkJDNEY5QUUwMi81S2xNLW8wdm4x czU3MFkxQlpIT01TNVJUN00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZ4O9zqgq/PNWHlCKFJ26pQs6Khq5tLiEEOs6d1OyYBEyrFvN/GGst u+rykUri0CGVfnnmnVVTcn7aWi2jv9j4LL/KhynCRxPxMaTLe7oJq0RG7lJigh7u 3eqE+0uJJ+RzwehplR5+lKmOW0WssKepWCDJ+9Yoje//LVSR8tl7oemcp71Y3IHy qlPFgC/yklbYE/Z3TnePBVWNHc4KtFFvq1xbXIj5+861XpPb6FkQKPyrz/d72VWR IvvxUDW4Sh2fENWu9p5NI3NphM3qqU7YKW2kvaNmJiGEjb/55+D0FuNma56tvMeW RLhANhm++wmJoDwR8kdHtwCbc19x73Ui -----END CERTIFICATE-----Generated at Sun Jul 20 10:55:25 2025 by rpki-client