$ rpki-client -vvf rpki.apnic.net/member_repository/A9117602/AEBC5CF6CEFA11EE97F88C85C4F9AE02/5v6wYDITaH99TA3YxdHl8ycflmo.mft File: 5v6wYDITaH99TA3YxdHl8ycflmo.mft (raw, json) Hash identifier: bA8NWsOdjN9Lhdtlm9I6PCHzBjUJT+CVbG9EHTw52eQ= Subject key identifier: 4A:9F:FD:F5:DC:12:00:22:81:2C:66:3C:F4:40:6F:40:F7:07:CF:D9 Authority key identifier: E6:FE:B0:60:32:13:68:7F:7D:4C:0D:D8:C5:D1:E5:F3:27:1F:96:6A Certificate issuer: /CN=A9117602/serialNumber=E6FEB0603213687F7D4C0DD8C5D1E5F3271F966A Certificate serial: 011A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5v6wYDITaH99TA3YxdHl8ycflmo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117602/AEBC5CF6CEFA11EE97F88C85C4F9AE02/5v6wYDITaH99TA3YxdHl8ycflmo.mft Manifest number: 0118 Signing time: Thu 21 Aug 2025 04:59:05 +0000 Manifest this update: Thu 21 Aug 2025 04:59:05 +0000 Manifest next update: Thu 28 Aug 2025 04:59:05 +0000 Files and hashes: 1: 5v6wYDITaH99TA3YxdHl8ycflmo.crl (hash: isMsaNDVCZ0IjZKkj8Zp5tsDorAauxjkh0dCM6HkzFI=) 2: 1EF0CB38CEFB11EE9D1FB686C4F9AE02.roa (hash: TdWbrQouM5tMsxDZgyF71MAPlIDYzdDMiQL7lgFXRP8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117602/AEBC5CF6CEFA11EE97F88C85C4F9AE02/5v6wYDITaH99TA3YxdHl8ycflmo.crl rsync://rpki.apnic.net/member_repository/A9117602/AEBC5CF6CEFA11EE97F88C85C4F9AE02/5v6wYDITaH99TA3YxdHl8ycflmo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5v6wYDITaH99TA3YxdHl8ycflmo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 04:59:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 282 (0x11a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117602, serialNumber=E6FEB0603213687F7D4C0DD8C5D1E5F3271F966A Validity Not Before: Aug 21 04:59:05 2025 GMT Not After : Aug 28 04:59:05 2025 GMT Subject: CN=68a6a799-4ca8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:16:64:eb:eb:3c:5c:a5:82:f8:e2:03:f9:66: e8:a8:34:80:67:a4:0b:a7:85:de:f1:60:8c:d3:3e: 6a:9f:45:8f:cf:7e:ee:f4:5e:8b:5e:22:d2:2b:30: ed:10:55:7c:b8:d1:33:ad:14:01:7c:57:47:a9:b3: 45:83:7e:e8:0e:a4:b9:4d:af:76:38:d7:46:26:bf: 3f:e6:f0:a8:59:a1:7e:52:a8:76:f7:ae:7f:44:39: b3:6b:b2:e2:a6:ca:56:da:29:09:6c:f5:f1:1f:67: 50:ee:55:51:a3:83:7f:3f:e5:e1:18:a1:f8:ac:68: ce:ec:fc:c6:8c:2e:b6:2e:03:40:cd:ac:20:0b:5e: b2:44:78:e6:c9:84:6a:54:64:c6:25:22:6d:94:6c: bb:69:bc:bc:2a:8c:87:8c:c1:0e:0d:9a:0f:17:ba: 56:8d:91:f4:16:a2:78:51:26:a8:04:0e:2e:e7:7f: 6f:27:bf:e1:fb:7c:be:e7:67:da:c8:6a:07:0e:9f: 5c:55:4e:c2:ed:19:74:e0:6a:8c:6f:2c:c6:18:14: c9:0b:a1:67:29:07:0d:8e:49:0a:5a:68:85:34:f5: e2:2c:a3:3e:ae:31:6d:e9:84:d2:d0:99:74:50:e4: c0:03:7d:8b:1c:76:df:21:60:36:00:ab:0f:d7:34: f9:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:9F:FD:F5:DC:12:00:22:81:2C:66:3C:F4:40:6F:40:F7:07:CF:D9 X509v3 Authority Key Identifier: keyid:E6:FE:B0:60:32:13:68:7F:7D:4C:0D:D8:C5:D1:E5:F3:27:1F:96:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117602/AEBC5CF6CEFA11EE97F88C85C4F9AE02/5v6wYDITaH99TA3YxdHl8ycflmo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5v6wYDITaH99TA3YxdHl8ycflmo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117602/AEBC5CF6CEFA11EE97F88C85C4F9AE02/5v6wYDITaH99TA3YxdHl8ycflmo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:f9:cf:4f:45:69:58:3c:a8:81:bc:34:41:8e:f7:61:0e:4c: 88:06:5e:f0:0b:5f:65:d1:5d:3f:37:39:e4:72:31:f0:b2:8b: cd:00:9c:6b:58:d5:5b:80:9a:bd:c5:b2:0e:12:d5:49:fd:6c: 29:f6:c2:94:61:88:be:5a:5d:97:be:39:b6:38:8b:67:47:0f: 38:66:fa:37:c1:d6:fb:e5:b3:4c:3a:1f:78:88:1c:17:29:bf: 8c:b7:60:6a:bf:97:3f:7e:0d:da:e8:cd:b8:5d:56:4a:96:7c: 31:ed:2e:b5:5f:f3:83:61:01:bb:03:7c:92:14:74:59:ea:88: da:bf:0f:6c:6e:95:f3:dd:6f:ab:fc:af:56:cc:08:db:ea:69: 3d:f2:19:8e:a0:c2:2a:3a:d9:08:b2:06:c9:bd:29:34:c3:85: 36:93:43:ae:2d:85:05:e0:8f:56:46:db:c4:c5:39:ac:3f:a0: 03:b7:d5:3e:2b:37:e8:93:d6:c7:a1:59:ad:f1:29:f3:9f:93: 81:79:b3:db:19:cd:2b:40:53:c1:a0:60:47:55:a5:5a:9e:95: 88:66:82:2b:f8:6f:76:96:65:1e:82:78:1a:44:af:ef:e1:63: 05:e9:bc:0c:40:a3:9a:08:82:cd:ce:ba:51:b0:c7:7b:e4:25: 33:8b:f1:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc2MDIxMTAvBgNVBAUTKEU2RkVCMDYwMzIxMzY4N0Y3RDRDMEREOEM1RDFFNUYz MjcxRjk2NkEwHhcNMjUwODIxMDQ1OTA1WhcNMjUwODI4MDQ1OTA1WjAYMRYwFAYD VQQDEw02OGE2YTc5OS00Y2E4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwBZk6+s8XKWC+OID+WboqDSAZ6QLp4Xe8WCM0z5qn0WPz37u9F6LXiLSKzDt EFV8uNEzrRQBfFdHqbNFg37oDqS5Ta92ONdGJr8/5vCoWaF+Uqh2965/RDmza7Li pspW2ikJbPXxH2dQ7lVRo4N/P+XhGKH4rGjO7PzGjC62LgNAzawgC16yRHjmyYRq VGTGJSJtlGy7aby8KoyHjMEODZoPF7pWjZH0FqJ4USaoBA4u539vJ7/h+3y+52fa yGoHDp9cVU7C7Rl04GqMbyzGGBTJC6FnKQcNjkkKWmiFNPXiLKM+rjFt6YTS0Jl0 UOTAA32LHHbfIWA2AKsP1zT5GQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEqf/fXc EgAigSxmPPRAb0D3B8/ZMB8GA1UdIwQYMBaAFOb+sGAyE2h/fUwN2MXR5fMnH5Zq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzYwMi9BRUJDNUNGNkNF RkExMUVFOTdGODhDODVDNEY5QUUwMi81djZ3WURJVGFIOTlUQTNZeGRIbDh5Y2Zs bW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV2NndZRElUYUg5OVRBM1l4ZEhsOHljZmxtby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzYwMi9BRUJDNUNGNkNFRkExMUVFOTdGODhDODVDNEY5QUUwMi81djZ3WURJVGFI OTlUQTNZeGRIbDh5Y2ZsbW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBa+c9PRWlYPKiBvDRBjvdhDkyIBl7wC19l0V0/NznkcjHwsovNAJxr WNVbgJq9xbIOEtVJ/Wwp9sKUYYi+Wl2Xvjm2OItnRw84Zvo3wdb75bNMOh94iBwX Kb+Mt2Bqv5c/fg3a6M24XVZKlnwx7S61X/ODYQG7A3ySFHRZ6ojavw9sbpXz3W+r /K9WzAjb6mk98hmOoMIqOtkIsgbJvSk0w4U2k0OuLYUF4I9WRtvExTmsP6ADt9U+ Kzfok9bHoVmt8Snzn5OBebPbGc0rQFPBoGBHVaVanpWIZoIr+G92lmUegngaRK/v 4WMF6bwMQKOaCILNzrpRsMd75CUzi/H2 -----END CERTIFICATE-----Generated at Fri Aug 22 16:34:01 2025 by rpki-client