$ rpki-client -vvf rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.mft File: 5jLTjFoywhfG7nHVLe-fOMoWbFE.mft (raw, json) Hash identifier: OZ6ASUj829svEYhhOwuQncvQekk9H0SOrJBJRhehiTI= Subject key identifier: 73:1C:9D:3A:D7:9C:F7:B0:C0:64:A2:E4:87:65:44:13:D8:EE:DB:22 Authority key identifier: E6:32:D3:8C:5A:32:C2:17:C6:EE:71:D5:2D:EF:9F:38:CA:16:6C:51 Certificate issuer: /CN=A911486F/serialNumber=E632D38C5A32C217C6EE71D52DEF9F38CA166C51 Certificate serial: 021C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jLTjFoywhfG7nHVLe-fOMoWbFE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.mft Manifest number: 020C Signing time: Thu 11 Sep 2025 02:44:21 +0000 Manifest this update: Thu 11 Sep 2025 02:44:20 +0000 Manifest next update: Thu 18 Sep 2025 02:44:20 +0000 Files and hashes: 1: 5jLTjFoywhfG7nHVLe-fOMoWbFE.crl (hash: 4tq2rQCsC2JDmFY+FS0B1Vq6E3o5/mJBlhzIrxSfjPk=) 2: 32D8E190D0CB11EEAB1CAF34C4F9AE02.roa (hash: I6cFYaTwrscj9Do0u5LBBtA5etRJeCEnBRWA8YbVDTo=) 3: 4D554D70D0CA11EE9DCDFA83C4F9AE02.roa (hash: 6yZMYTHYRpP2MH6PChCYijNkjUxZFdtlKAJWlJtdpuc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.crl rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jLTjFoywhfG7nHVLe-fOMoWbFE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Sep 2025 02:44:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 540 (0x21c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911486F, serialNumber=E632D38C5A32C217C6EE71D52DEF9F38CA166C51 Validity Not Before: Sep 11 02:44:20 2025 GMT Not After : Sep 18 02:44:20 2025 GMT Subject: CN=68c23784-720b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e5:a5:63:bf:be:96:e4:9d:7f:9a:78:47:2e: f6:95:df:af:ed:20:22:d7:94:d8:06:2a:db:81:bf: cd:dc:ee:62:96:e0:02:c6:bf:15:59:19:8e:8c:0d: 47:60:5b:07:dd:6f:8f:f4:40:e1:8f:b1:5e:2d:4a: 8b:e9:64:b9:e9:14:93:d3:d0:4b:39:93:8a:13:88: ed:ec:8c:3d:ac:51:c4:51:df:03:cd:c5:21:db:c7: 8d:69:7a:78:6f:a9:cc:ad:32:46:b2:d1:7a:e4:0e: 9e:97:c7:4d:5b:2a:78:05:51:f2:4c:7f:e9:73:d2: b6:0a:4d:1a:cf:a7:91:4f:e7:7b:ad:b1:3f:69:4f: ce:cd:c7:d0:65:68:94:11:02:42:c6:d8:02:15:05: 6c:9e:25:72:ac:93:a3:2b:fa:fa:22:8d:e7:97:b7: 81:05:71:83:63:57:e8:b3:7f:e8:fc:04:51:1d:7c: 3d:c8:b4:b1:8f:ec:30:bf:07:75:a2:20:91:aa:ce: a6:07:c8:14:0c:18:2f:f0:9e:79:a4:81:29:07:e1: 3d:5b:22:29:fb:64:c6:0b:99:d8:de:1e:59:79:b2: ec:c7:63:cc:37:a5:e2:e8:ae:40:d8:de:ed:98:cf: bd:d6:73:ca:35:a1:80:5b:be:a0:89:83:35:8c:9a: d2:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:1C:9D:3A:D7:9C:F7:B0:C0:64:A2:E4:87:65:44:13:D8:EE:DB:22 X509v3 Authority Key Identifier: keyid:E6:32:D3:8C:5A:32:C2:17:C6:EE:71:D5:2D:EF:9F:38:CA:16:6C:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jLTjFoywhfG7nHVLe-fOMoWbFE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:e4:5f:da:3d:4f:33:3d:77:ee:c4:21:e9:5d:05:a6:ee:6d: c8:a5:5c:f9:ed:3b:ed:fd:41:49:49:ec:f5:f9:d8:15:db:80: 09:b3:56:05:d0:e9:d9:77:a1:c3:8a:92:04:16:fb:0d:c4:f4: 6f:a4:9e:72:2f:6f:2d:da:2e:69:72:a2:80:d5:ce:df:61:b2: 7c:4d:a4:64:12:85:18:18:5e:b1:d1:f5:77:15:f0:1f:c6:48: f9:b8:81:bd:10:dd:2e:48:4d:7d:fd:8d:d7:8c:fa:f9:b5:a3: b5:bb:2e:cf:da:79:8f:a7:01:aa:54:49:4f:38:ad:48:5f:93: b7:32:41:a0:81:aa:92:24:50:a2:07:b4:01:84:8f:74:10:42: 07:b6:24:30:60:01:03:69:bc:33:c6:ff:14:18:16:f6:42:91: fc:56:aa:11:26:45:18:fa:2a:8e:40:25:a3:06:50:96:2f:c2: 13:b7:d7:68:db:37:f7:aa:be:f1:f5:b9:95:a9:9a:1c:53:86: 8c:1f:b7:d9:47:2d:6a:d0:be:ac:c7:5e:2f:3c:67:19:7d:30: 5c:dd:6d:5a:96:01:37:2a:18:5a:22:e7:b0:55:64:c8:c9:15: c1:c5:e7:60:b6:12:5f:16:ef:94:2a:2d:58:3a:b9:42:5f:f7: 0c:18:fb:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ4NkYxMTAvBgNVBAUTKEU2MzJEMzhDNUEzMkMyMTdDNkVFNzFENTJERUY5RjM4 Q0ExNjZDNTEwHhcNMjUwOTExMDI0NDIwWhcNMjUwOTE4MDI0NDIwWjAYMRYwFAYD VQQDEw02OGMyMzc4NC03MjBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm+WlY7++luSdf5p4Ry72ld+v7SAi15TYBirbgb/N3O5iluACxr8VWRmOjA1H YFsH3W+P9EDhj7FeLUqL6WS56RST09BLOZOKE4jt7Iw9rFHEUd8DzcUh28eNaXp4 b6nMrTJGstF65A6el8dNWyp4BVHyTH/pc9K2Ck0az6eRT+d7rbE/aU/OzcfQZWiU EQJCxtgCFQVsniVyrJOjK/r6Io3nl7eBBXGDY1fos3/o/ARRHXw9yLSxj+wwvwd1 oiCRqs6mB8gUDBgv8J55pIEpB+E9WyIp+2TGC5nY3h5ZebLsx2PMN6Xi6K5A2N7t mM+91nPKNaGAW76giYM1jJrS+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHMcnTrX nPewwGSi5IdlRBPY7tsiMB8GA1UdIwQYMBaAFOYy04xaMsIXxu5x1S3vnzjKFmxR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDg2Ri8yMkNGMzQ0ODg2 NkMxMUVEQUZBNUE0NzFDNEY5QUUwMi81akxUakZveXdoZkc3bkhWTGUtZk9Nb1di RkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVqTFRqRm95d2hmRzduSFZMZS1mT01vV2JGRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDg2Ri8yMkNGMzQ0ODg2NkMxMUVEQUZBNUE0NzFDNEY5QUUwMi81akxUakZveXdo Zkc3bkhWTGUtZk9Nb1diRkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJ5F/aPU8zPXfuxCHpXQWm7m3IpVz57Tvt/UFJSez1+dgV24AJs1YF 0OnZd6HDipIEFvsNxPRvpJ5yL28t2i5pcqKA1c7fYbJ8TaRkEoUYGF6x0fV3FfAf xkj5uIG9EN0uSE19/Y3XjPr5taO1uy7P2nmPpwGqVElPOK1IX5O3MkGggaqSJFCi B7QBhI90EEIHtiQwYAEDabwzxv8UGBb2QpH8VqoRJkUY+iqOQCWjBlCWL8ITt9do 2zf3qr7x9bmVqZocU4aMH7fZRy1q0L6sx14vPGcZfTBc3W1algE3KhhaIuewVWTI yRXBxedgthJfFu+UKi1YOrlCX/cMGPvN -----END CERTIFICATE-----Generated at Thu Sep 11 10:55:47 2025 by rpki-client