$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft File: 5esYDNbcUWxm01KwR7npxaUCcOM.mft (raw, json) Hash identifier: wWDqu/ImLxeUboLyay0Q8kz4VriW0rJyuvbGln4yyxQ= Subject key identifier: 4B:F2:39:38:90:13:4B:9E:CF:41:CC:77:62:92:72:B9:CC:9F:A3:04 Authority key identifier: E5:EB:18:0C:D6:DC:51:6C:66:D3:52:B0:47:B9:E9:C5:A5:02:70:E3 Certificate issuer: /CN=A91ABFD9/serialNumber=E5EB180CD6DC516C66D352B047B9E9C5A50270E3 Certificate serial: 08D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5esYDNbcUWxm01KwR7npxaUCcOM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft Manifest number: 08BD Signing time: Fri 18 Jul 2025 20:42:15 +0000 Manifest this update: Fri 18 Jul 2025 20:42:15 +0000 Manifest next update: Fri 25 Jul 2025 20:42:15 +0000 Files and hashes: 1: 5esYDNbcUWxm01KwR7npxaUCcOM.crl (hash: GBejbaaUNIxLHIbjdcYX3/TGvauBKQ/lHFakzMJ+6Jg=) 2: E2E21364C4F811EAB8D31113C4F9AE02.roa (hash: KT6K45U/vV1zQkhhfiaxr9a9XeTKLIwG0eEDcyR3ERI=) 3: F1A54AC47A5611EB876D281FC4F9AE02.roa (hash: LbbFjEbhHg5fzKZNW2jokQ6UuaIS/rDPKgFU2q0pJeg=) 4: 36945EC2232711EBA0F14F17C4F9AE02.roa (hash: Gzcr6RaAc7WjlspRH4slQcyVh4i/nmyVkR/RXd4O0KM=) 5: 6AE50E1C21E011EBBF36CD21C4F9AE02.roa (hash: Lg2iSZUiBgCc3+l3q9JExUq+jxWe1fvszct9oy4Ys3k=) 6: E22ECDEAC4F811EAB8D31113C4F9AE02.roa (hash: tlDd7aRrzNeu6uslbfPluCcOk663EDpRsH8KL9nqlD4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.crl rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5esYDNbcUWxm01KwR7npxaUCcOM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 20:42:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2265 (0x8d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ABFD9, serialNumber=E5EB180CD6DC516C66D352B047B9E9C5A50270E3 Validity Not Before: Jul 18 20:42:15 2025 GMT Not After : Jul 25 20:42:15 2025 GMT Subject: CN=687ab1a7-55be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:53:4c:87:c5:7d:f7:be:e6:e3:16:cd:3c:a1: 92:7c:e8:b2:69:38:e1:b0:9e:c2:ec:30:1e:22:2c: de:5b:86:8a:5b:62:2c:fb:de:40:d4:c6:83:a4:49: c3:d4:dc:a1:aa:eb:5c:92:34:cd:a1:cf:f3:6d:1c: df:c8:75:8d:c2:62:87:d9:30:07:c7:b3:63:e2:06: a0:2b:f1:22:b0:2a:db:9e:0d:9b:fb:83:30:8d:70: fe:e0:de:33:97:5a:5c:5e:c4:31:18:4e:74:d8:cf: 12:29:d1:de:8b:e6:99:19:69:ce:98:8d:32:14:77: 8e:f8:8f:89:3d:2c:07:75:28:0c:eb:77:2e:a8:11: ad:4e:71:d7:71:f9:f4:97:0c:6b:37:10:cb:33:0d: f1:5c:45:1a:3d:5e:05:7a:4d:eb:b6:37:9c:7d:2e: 7a:cb:5a:53:90:9a:05:54:3b:8f:19:66:01:2c:93: 5f:76:10:c0:0d:75:a9:01:c9:9b:f8:b8:d1:5b:8b: c9:0f:67:35:31:75:3e:12:9f:51:6a:5d:52:b7:f7: 35:51:81:1f:40:3d:47:d5:a5:5e:76:68:6b:ac:18: ae:a2:ed:8b:de:b8:23:e3:c7:a1:82:a6:d7:9d:56: 96:29:bf:e5:96:06:ca:51:e3:f4:05:3a:67:f6:2a: 65:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:F2:39:38:90:13:4B:9E:CF:41:CC:77:62:92:72:B9:CC:9F:A3:04 X509v3 Authority Key Identifier: keyid:E5:EB:18:0C:D6:DC:51:6C:66:D3:52:B0:47:B9:E9:C5:A5:02:70:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5esYDNbcUWxm01KwR7npxaUCcOM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:aa:21:68:fb:59:c3:09:9a:16:3b:d1:e6:8a:f6:4b:6b:d0: d8:1b:34:4b:a5:9f:8b:f6:9f:de:ee:99:46:71:bd:e9:86:09: de:bb:a7:f4:d5:22:ae:7d:2b:95:f0:3b:77:67:9d:52:55:67: 1f:81:e1:df:e4:23:a5:44:67:e5:5d:b4:89:a4:ef:78:68:08: 41:a6:a6:48:f3:ba:f3:33:d2:0e:03:c3:56:4b:ed:57:31:7f: c0:bd:b2:d6:1d:b9:63:04:fa:7d:11:c9:e5:a1:9f:ba:e4:0c: 25:69:33:0a:92:b6:b5:7a:35:00:1c:7a:eb:55:70:45:b8:51: 9f:cd:bc:7b:43:47:04:a0:34:d4:f7:39:0f:ca:86:0c:e1:f2: 2e:ef:43:0b:b2:a6:ac:74:59:54:1d:69:76:44:86:fa:7b:bf: d6:88:8d:a2:1e:85:eb:b1:16:08:26:33:cc:25:c9:1c:cf:f2: 0b:66:f0:6f:f1:a5:37:e9:b6:60:e4:01:bb:c7:75:f9:5d:f4: 09:f1:ba:5d:39:fd:1b:8d:62:c9:7d:3f:5c:4e:97:a5:35:ac: cd:64:07:88:e4:e1:87:4c:77:87:47:26:80:ea:25:c4:11:29: cd:90:99:ef:f1:e5:c3:1a:58:3d:14:00:fa:33:39:33:34:24: 2e:4f:c1:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCNkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUJGRDkxMTAvBgNVBAUTKEU1RUIxODBDRDZEQzUxNkM2NkQzNTJCMDQ3QjlFOUM1 QTUwMjcwRTMwHhcNMjUwNzE4MjA0MjE1WhcNMjUwNzI1MjA0MjE1WjAYMRYwFAYD VQQDEw02ODdhYjFhNy01NWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmVNMh8V9977m4xbNPKGSfOiyaTjhsJ7C7DAeIizeW4aKW2Is+95A1MaDpEnD 1NyhqutckjTNoc/zbRzfyHWNwmKH2TAHx7Nj4gagK/EisCrbng2b+4MwjXD+4N4z l1pcXsQxGE502M8SKdHei+aZGWnOmI0yFHeO+I+JPSwHdSgM63cuqBGtTnHXcfn0 lwxrNxDLMw3xXEUaPV4Fek3rtjecfS56y1pTkJoFVDuPGWYBLJNfdhDADXWpAcmb +LjRW4vJD2c1MXU+Ep9Ral1St/c1UYEfQD1H1aVedmhrrBiuou2L3rgj48ehgqbX nVaWKb/llgbKUeP0BTpn9iplRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEvyOTiQ E0uez0HMd2KScrnMn6MEMB8GA1UdIwQYMBaAFOXrGAzW3FFsZtNSsEe56cWlAnDj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQkZEOS80QUU4MDQxRUI5 RDcxMUVBOUNGNTFFNUZDNEY5QUUwMi81ZXNZRE5iY1VXeG0wMUt3UjducHhhVUNj T00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVlc1lETmJjVVd4bTAxS3dSN25weGFVQ2NPTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QkZEOS80QUU4MDQxRUI5RDcxMUVBOUNGNTFFNUZDNEY5QUUwMi81ZXNZRE5iY1VX eG0wMUt3UjducHhhVUNjT00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMqiFo+1nDCZoWO9HmivZLa9DYGzRLpZ+L9p/e7plGcb3phgneu6f0 1SKufSuV8Dt3Z51SVWcfgeHf5COlRGflXbSJpO94aAhBpqZI87rzM9IOA8NWS+1X MX/AvbLWHbljBPp9EcnloZ+65AwlaTMKkra1ejUAHHrrVXBFuFGfzbx7Q0cEoDTU 9zkPyoYM4fIu70MLsqasdFlUHWl2RIb6e7/WiI2iHoXrsRYIJjPMJckcz/ILZvBv 8aU36bZg5AG7x3X5XfQJ8bpdOf0bjWLJfT9cTpelNazNZAeI5OGHTHeHRyaA6iXE ESnNkJnv8eXDGlg9FAD6MzkzNCQuT8Fc -----END CERTIFICATE-----Generated at Sun Jul 20 17:26:34 2025 by rpki-client