$ rpki-client -vvf rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft File: keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft (raw, json) Hash identifier: SvEAxW0WlxYE4OKwNMRDmk+soXvSjINM6stvfPPcRIk= Subject key identifier: 42:08:10:86:63:F7:09:61:0D:90:66:C5:E4:FF:39:02:08:3C:45:C5 Authority key identifier: 91:E6:79:72:1E:D1:E0:92:7E:BB:7E:46:1C:80:58:0D:23:93:59:2A Certificate issuer: /CN=A911ACAC/serialNumber=91E679721ED1E0927EBB7E461C80580D2393592A Certificate serial: 04F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZ5ch7R4JJ-u35GHIBYDSOTWSo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft Manifest number: 04E5 Signing time: Mon 08 Sep 2025 23:50:40 +0000 Manifest this update: Mon 08 Sep 2025 23:50:39 +0000 Manifest next update: Mon 15 Sep 2025 23:50:39 +0000 Files and hashes: 1: keZ5ch7R4JJ-u35GHIBYDSOTWSo.crl (hash: a/8mU9eqMqNYBhqSLOUacR7nqwa9tuoHAyC7Mpv1Hr8=) 2: C52B4E0A3FE011EF88794913C4F9AE02.roa (hash: BHc0YO4uerOV3pChxVjG7O544zd2LrVw+gOJhxCdrB0=) 3: 1295B5943FA611EF94664041C4F9AE02.roa (hash: FuWrvkmDIg3mxhyAWWbi/ukBRQacmBTwsE71FX0nX8M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.crl rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZ5ch7R4JJ-u35GHIBYDSOTWSo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 23:50:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1265 (0x4f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911ACAC, serialNumber=91E679721ED1E0927EBB7E461C80580D2393592A Validity Not Before: Sep 8 23:50:39 2025 GMT Not After : Sep 15 23:50:39 2025 GMT Subject: CN=68bf6bcf-d72e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:62:10:e5:f0:a1:5b:28:ac:68:86:13:d7:58: 94:95:8f:5f:ff:80:df:c7:41:78:28:a3:a3:a1:7c: 50:a1:8e:e1:95:bd:08:0d:e7:57:3d:7d:2b:b8:b1: a2:e0:f2:3c:3f:25:36:75:6f:5a:65:fd:c1:35:b4: d8:95:19:3c:99:05:d8:13:25:82:f9:7e:60:1d:f6: f2:e7:53:16:3f:90:e9:aa:c8:c1:24:7a:b9:69:29: c6:86:b4:83:d4:2d:d9:fb:8e:76:68:21:ef:81:44: cf:1a:79:ad:39:5b:ef:e1:e8:55:86:f9:e6:f2:f1: 6f:9c:28:77:ca:45:f2:47:18:43:10:4d:13:cb:04: 13:ba:12:2b:61:f7:76:47:0a:08:94:8a:cb:3e:8e: 65:4f:71:79:49:31:73:24:9f:75:30:03:8a:af:cd: 2b:29:d9:8e:8c:b8:28:13:bb:10:ce:8d:9d:58:f1: 2b:44:47:38:e2:20:0c:3b:30:90:7e:88:ad:c9:48: 25:77:fa:7d:15:ed:bc:68:34:a5:7f:14:40:be:1c: 4d:c2:fd:87:e3:7b:6b:cd:a4:00:fd:da:0e:cb:44: fc:85:32:5c:2e:47:71:e0:a6:94:a2:de:a0:39:8f: 8d:7a:16:11:b5:d4:b0:2a:8d:6e:f2:11:ae:67:e9: 22:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:08:10:86:63:F7:09:61:0D:90:66:C5:E4:FF:39:02:08:3C:45:C5 X509v3 Authority Key Identifier: keyid:91:E6:79:72:1E:D1:E0:92:7E:BB:7E:46:1C:80:58:0D:23:93:59:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZ5ch7R4JJ-u35GHIBYDSOTWSo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:bb:05:a4:82:d2:60:bd:db:28:af:b7:06:b6:78:3f:26:10: 64:04:18:d3:c2:25:6b:76:7e:30:b2:0f:f3:49:18:ed:23:66: 03:70:23:ef:dc:fc:50:30:d9:8c:cf:ef:8c:de:bf:f4:1e:13: 6d:15:f0:54:ef:7a:95:01:bf:54:b5:e7:4d:b8:62:b4:01:45: 48:ea:c1:87:e5:79:31:19:cc:01:e1:44:33:d6:d0:fa:61:cf: a2:0e:1a:0b:0a:98:0f:16:5d:06:bc:fd:ea:21:fb:37:8a:99: 01:07:0f:f8:75:2a:2c:b3:a8:03:c2:4c:b2:87:14:9c:7e:37: 90:80:96:aa:4c:e8:f4:59:7e:63:93:fd:3c:d7:89:b8:19:2a: 19:c0:a2:6f:9c:76:f9:d3:17:91:b1:da:e9:92:b8:15:fb:db: 0b:39:6a:25:29:b7:e5:f3:16:52:ca:b6:97:0a:1c:2f:aa:d7: cf:85:74:c2:bd:62:d9:6d:fe:61:58:61:fc:b8:66:7a:3e:0d: b3:72:f2:96:52:db:9b:76:e2:1c:c5:c9:40:94:a4:bc:94:0d: 04:7a:51:de:c0:9d:03:82:1e:dc:09:9c:79:2e:4d:97:36:8b: ff:0e:06:9e:75:b7:51:37:a6:3f:90:df:04:d4:ed:b0:f2:41: 80:81:2b:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFDQUMxMTAvBgNVBAUTKDkxRTY3OTcyMUVEMUUwOTI3RUJCN0U0NjFDODA1ODBE MjM5MzU5MkEwHhcNMjUwOTA4MjM1MDM5WhcNMjUwOTE1MjM1MDM5WjAYMRYwFAYD VQQDEw02OGJmNmJjZi1kNzJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu2IQ5fChWyisaIYT11iUlY9f/4Dfx0F4KKOjoXxQoY7hlb0IDedXPX0ruLGi 4PI8PyU2dW9aZf3BNbTYlRk8mQXYEyWC+X5gHfby51MWP5DpqsjBJHq5aSnGhrSD 1C3Z+452aCHvgUTPGnmtOVvv4ehVhvnm8vFvnCh3ykXyRxhDEE0TywQTuhIrYfd2 RwoIlIrLPo5lT3F5STFzJJ91MAOKr80rKdmOjLgoE7sQzo2dWPErREc44iAMOzCQ foityUgld/p9Fe28aDSlfxRAvhxNwv2H43trzaQA/doOy0T8hTJcLkdx4KaUot6g OY+NehYRtdSwKo1u8hGuZ+kiEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEIIEIZj 9wlhDZBmxeT/OQIIPEXFMB8GA1UdIwQYMBaAFJHmeXIe0eCSfrt+RhyAWA0jk1kq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUNBQy9CM0JEQTU2NDMx RDMxMUVDOEQzQkJGMzBDNEY5QUUwMi9rZVo1Y2g3UjRKSi11MzVHSElCWURTT1RX U28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tlWjVjaDdSNEpKLXUzNUdISUJZRFNPVFdTby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUNBQy9CM0JEQTU2NDMxRDMxMUVDOEQzQkJGMzBDNEY5QUUwMi9rZVo1Y2g3UjRK Si11MzVHSElCWURTT1RXU28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzuwWkgtJgvdsor7cGtng/JhBkBBjTwiVrdn4wsg/zSRjtI2YDcCPv 3PxQMNmMz++M3r/0HhNtFfBU73qVAb9UtedNuGK0AUVI6sGH5XkxGcwB4UQz1tD6 Yc+iDhoLCpgPFl0GvP3qIfs3ipkBBw/4dSoss6gDwkyyhxScfjeQgJaqTOj0WX5j k/0814m4GSoZwKJvnHb50xeRsdrpkrgV+9sLOWolKbfl8xZSyraXChwvqtfPhXTC vWLZbf5hWGH8uGZ6Pg2zcvKWUtubduIcxclAlKS8lA0EelHewJ0Dgh7cCZx5Lk2X Nov/DgaedbdRN6Y/kN8E1O2w8kGAgStW -----END CERTIFICATE-----Generated at Tue Sep 9 06:39:27 2025 by rpki-client