$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.mft File: 5aTU-VYLW1xcX-TQYbS4gcjSI1I.mft (raw, json) Hash identifier: 71IoDTfxa3DTlIPzqnHg7TlQX5Zu62B80TU/QInTvDI= Subject key identifier: 7E:D6:6D:8D:D8:37:A8:D9:F2:2A:E0:5E:E1:AE:78:48:02:25:BE:ED Authority key identifier: E5:A4:D4:F9:56:0B:5B:5C:5C:5F:E4:D0:61:B4:B8:81:C8:D2:23:52 Certificate issuer: /CN=A91C8790/serialNumber=E5A4D4F9560B5B5C5C5FE4D061B4B881C8D22352 Certificate serial: 04CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5aTU-VYLW1xcX-TQYbS4gcjSI1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.mft Manifest number: 04C5 Signing time: Sat 19 Jul 2025 00:13:25 +0000 Manifest this update: Sat 19 Jul 2025 00:13:24 +0000 Manifest next update: Sat 26 Jul 2025 00:13:24 +0000 Files and hashes: 1: 5aTU-VYLW1xcX-TQYbS4gcjSI1I.crl (hash: P/VhByzvBqJa5OgiJVdRdqEaR2alh1Buaph4JwVr9cY=) 2: BA7E6B1A30B911EC974C3830C4F9AE02.roa (hash: DlfXyvIdL0s+0tBp2hXjHGEv5V90Epcx4LrbGdX7dDk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.crl rsync://rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5aTU-VYLW1xcX-TQYbS4gcjSI1I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 00:13:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1226 (0x4ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8790, serialNumber=E5A4D4F9560B5B5C5C5FE4D061B4B881C8D22352 Validity Not Before: Jul 19 00:13:24 2025 GMT Not After : Jul 26 00:13:24 2025 GMT Subject: CN=687ae324-5c24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:65:b1:52:d7:82:c9:9d:d1:42:af:5f:2d:c8: 11:7d:0f:e2:71:2d:9c:a0:b3:a0:41:01:5e:2d:9c: 5e:e8:d6:22:d5:2d:47:25:fa:cc:54:7d:35:6d:74: 61:58:7e:ed:46:09:f0:76:99:51:bf:d1:06:6b:b6: 8c:e9:e9:94:8f:ed:7c:62:cb:36:6c:94:23:2f:7e: 67:ae:95:99:15:f5:d0:f6:cb:cc:73:e0:27:dc:8a: 45:eb:cd:e4:c4:44:f4:fd:26:c0:31:08:7a:a4:c4: cf:c1:c1:84:9b:26:1c:1e:d3:3b:95:06:cf:07:60: 87:b1:b6:ce:8a:a7:09:04:42:be:32:20:e9:5f:01: c7:83:3e:85:61:bc:99:93:9d:13:1f:55:66:9e:8a: f3:a9:75:38:26:c1:6e:36:20:6d:fc:e5:38:f3:89: c8:ba:f0:ed:64:f1:c3:d2:a8:0a:c5:85:4d:e6:b0: 8e:e4:14:87:2a:bf:44:d1:2c:52:ac:0e:2e:a3:2e: d0:81:6b:a4:9a:b8:e6:45:0b:7d:dc:95:66:ac:56: 2b:a1:d3:cd:0a:80:8c:96:9b:cf:0e:46:c4:90:94: 15:b8:47:73:db:e4:43:68:1c:63:50:6a:65:70:23: eb:f0:b2:9a:f4:98:7e:a0:da:69:3e:6e:63:40:1a: d3:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:D6:6D:8D:D8:37:A8:D9:F2:2A:E0:5E:E1:AE:78:48:02:25:BE:ED X509v3 Authority Key Identifier: keyid:E5:A4:D4:F9:56:0B:5B:5C:5C:5F:E4:D0:61:B4:B8:81:C8:D2:23:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5aTU-VYLW1xcX-TQYbS4gcjSI1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:9c:fe:16:89:b6:25:a3:1c:a2:29:fe:0d:d2:a1:2c:93:f6: 3a:82:97:88:5f:b9:ce:a1:8f:43:cd:ee:19:e8:2e:2b:32:26: 82:cd:55:71:74:e2:01:68:94:35:37:1c:23:53:f2:30:14:ef: b6:52:5c:49:f0:4c:d2:f4:35:5b:99:29:8c:94:0f:e5:f3:54: bc:39:c6:14:51:03:2a:6b:20:f7:c5:1d:0e:f2:76:37:ef:53: 7b:26:7e:e2:e8:15:55:0b:53:ad:b0:dc:0d:c8:53:84:ad:86: fe:67:fa:87:84:57:8c:53:d8:1a:27:0c:60:db:0a:9c:4e:d8: e0:d9:47:ad:13:9d:f8:47:2a:bb:5b:81:f0:c5:44:d3:7d:b9: c5:e4:89:5d:da:7b:fd:02:b5:f8:35:c4:55:7c:5b:73:1f:f3: 46:df:80:76:56:dc:55:b1:1d:2b:87:6c:c0:4c:fd:f4:a0:58: 8b:ee:58:e6:85:fe:3e:91:f0:15:1a:4a:e7:e6:ac:ca:30:ec: 02:b1:0e:d6:30:90:97:a3:10:81:39:a4:22:34:c7:fb:a0:f9: c7:70:45:99:2c:b2:af:22:12:82:35:d6:d9:91:86:b8:cb:8e: a6:f6:f6:2b:90:72:7d:f2:bc:52:7d:ca:1a:34:96:36:0d:00: 9d:77:83:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzg3OTAxMTAvBgNVBAUTKEU1QTRENEY5NTYwQjVCNUM1QzVGRTREMDYxQjRCODgx QzhEMjIzNTIwHhcNMjUwNzE5MDAxMzI0WhcNMjUwNzI2MDAxMzI0WjAYMRYwFAYD VQQDEw02ODdhZTMyNC01YzI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwmWxUteCyZ3RQq9fLcgRfQ/icS2coLOgQQFeLZxe6NYi1S1HJfrMVH01bXRh WH7tRgnwdplRv9EGa7aM6emUj+18Yss2bJQjL35nrpWZFfXQ9svMc+An3IpF683k xET0/SbAMQh6pMTPwcGEmyYcHtM7lQbPB2CHsbbOiqcJBEK+MiDpXwHHgz6FYbyZ k50TH1VmnorzqXU4JsFuNiBt/OU484nIuvDtZPHD0qgKxYVN5rCO5BSHKr9E0SxS rA4uoy7QgWukmrjmRQt93JVmrFYrodPNCoCMlpvPDkbEkJQVuEdz2+RDaBxjUGpl cCPr8LKa9Jh+oNppPm5jQBrTbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH7WbY3Y N6jZ8irgXuGueEgCJb7tMB8GA1UdIwQYMBaAFOWk1PlWC1tcXF/k0GG0uIHI0iNS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODc5MC8zM0ZFMzYyNjMw QjcxMUVDOUIwMjk0MkRDNEY5QUUwMi81YVRVLVZZTFcxeGNYLVRRWWJTNGdjalNJ MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVhVFUtVllMVzF4Y1gtVFFZYlM0Z2NqU0kxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODc5MC8zM0ZFMzYyNjMwQjcxMUVDOUIwMjk0MkRDNEY5QUUwMi81YVRVLVZZTFcx eGNYLVRRWWJTNGdjalNJMUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAnP4WibYloxyiKf4N0qEsk/Y6gpeIX7nOoY9Dze4Z6C4rMiaCzVVx dOIBaJQ1NxwjU/IwFO+2UlxJ8EzS9DVbmSmMlA/l81S8OcYUUQMqayD3xR0O8nY3 71N7Jn7i6BVVC1OtsNwNyFOErYb+Z/qHhFeMU9gaJwxg2wqcTtjg2UetE534Ryq7 W4HwxUTTfbnF5Ild2nv9ArX4NcRVfFtzH/NG34B2VtxVsR0rh2zATP30oFiL7ljm hf4+kfAVGkrn5qzKMOwCsQ7WMJCXoxCBOaQiNMf7oPnHcEWZLLKvIhKCNdbZkYa4 y46m9vYrkHJ98rxSfcoaNJY2DQCdd4MY -----END CERTIFICATE-----Generated at Sun Jul 20 19:05:47 2025 by rpki-client