$ rpki-client -vvf rpki.apnic.net/member_repository/A9123059/BBBD802679F611F09CE9C328C4F9AE02/Vx7SVtWPhcYAxkpZ7nsdNq48sJs.mft File: Vx7SVtWPhcYAxkpZ7nsdNq48sJs.mft (raw, json) Hash identifier: ufz6Q2zQZvGIRPGkNJd2jSjynjwn/oue050kNcL8Xy4= Subject key identifier: 0B:93:BF:5E:95:15:17:02:B7:F4:D2:34:21:04:53:F6:7D:61:ED:6F Authority key identifier: 57:1E:D2:56:D5:8F:85:C6:00:C6:4A:59:EE:7B:1D:36:AE:3C:B0:9B Certificate issuer: /CN=A9123059/serialNumber=571ED256D58F85C600C64A59EE7B1D36AE3CB09B Certificate serial: 05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vx7SVtWPhcYAxkpZ7nsdNq48sJs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123059/BBBD802679F611F09CE9C328C4F9AE02/Vx7SVtWPhcYAxkpZ7nsdNq48sJs.mft Manifest number: 05 Signing time: Thu 21 Aug 2025 08:23:50 +0000 Manifest this update: Thu 21 Aug 2025 08:23:49 +0000 Manifest next update: Thu 28 Aug 2025 08:23:49 +0000 Files and hashes: 1: Vx7SVtWPhcYAxkpZ7nsdNq48sJs.crl (hash: CHQcmik5NYF9T8JcS98qDqv5iJ0ed6MY6vPtlaQVZ/A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123059/BBBD802679F611F09CE9C328C4F9AE02/Vx7SVtWPhcYAxkpZ7nsdNq48sJs.crl rsync://rpki.apnic.net/member_repository/A9123059/BBBD802679F611F09CE9C328C4F9AE02/Vx7SVtWPhcYAxkpZ7nsdNq48sJs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vx7SVtWPhcYAxkpZ7nsdNq48sJs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 08:23:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123059, serialNumber=571ED256D58F85C600C64A59EE7B1D36AE3CB09B Validity Not Before: Aug 21 08:23:49 2025 GMT Not After : Aug 28 08:23:49 2025 GMT Subject: CN=68a6d796-2e45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c2:94:85:b6:36:15:b8:c1:c7:90:eb:91:8d: 8f:80:32:a5:3f:25:b3:61:b2:0d:cb:cd:91:57:8a: d0:32:74:98:85:09:c7:2b:51:d2:77:fc:e4:17:4d: cf:fa:ab:7f:3e:92:eb:4d:f9:dc:11:8a:ec:62:ef: 01:76:74:93:e9:5a:3b:a2:5d:fd:ca:43:bc:df:ba: fe:98:86:e3:df:c9:6c:fe:ad:81:6b:24:d3:bf:52: 5a:d4:32:b9:44:8b:7f:0d:b7:d2:77:07:9f:50:51: a6:04:84:f4:94:a5:ec:d9:2f:b8:62:46:4d:12:91: 7d:62:dd:91:83:1f:b1:4f:54:5c:d3:04:c6:47:1c: 6e:14:d1:4c:01:06:18:fd:e6:c6:ac:9f:cc:06:30: 49:e2:90:68:b9:ab:87:77:37:2d:39:27:ea:2a:4d: a5:ea:f0:fe:6c:f2:01:85:31:bc:a1:5a:a6:a0:2f: 51:cf:88:29:b9:b9:68:50:ab:e8:ad:97:cd:40:ee: d6:c7:7f:ee:a9:1e:94:ad:e8:4f:41:3c:66:38:11: 1e:19:6b:af:ed:f1:88:c9:a1:ac:f9:70:61:c2:81: 4d:e4:c3:a0:0f:d0:f1:a1:f5:5f:67:ec:1a:9c:d1: cf:b6:01:11:79:22:3f:74:fb:d0:a0:12:87:aa:a7: c2:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:93:BF:5E:95:15:17:02:B7:F4:D2:34:21:04:53:F6:7D:61:ED:6F X509v3 Authority Key Identifier: keyid:57:1E:D2:56:D5:8F:85:C6:00:C6:4A:59:EE:7B:1D:36:AE:3C:B0:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123059/BBBD802679F611F09CE9C328C4F9AE02/Vx7SVtWPhcYAxkpZ7nsdNq48sJs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vx7SVtWPhcYAxkpZ7nsdNq48sJs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123059/BBBD802679F611F09CE9C328C4F9AE02/Vx7SVtWPhcYAxkpZ7nsdNq48sJs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:a9:46:bb:32:90:cf:84:ce:f1:cb:e4:a7:ee:57:ef:98:63: 3b:ea:78:02:14:7c:f9:ac:70:86:9f:d5:e5:ad:62:61:ea:ac: 8c:8f:a9:54:b0:2e:1b:52:08:e6:6f:b3:ba:d3:f9:81:80:9f: 72:a2:b6:2c:85:5c:1e:e5:7e:dd:2c:62:df:30:ea:cd:e9:d4: 49:6c:1a:2b:7f:7c:7d:de:fc:90:e1:45:4b:4f:20:18:6c:3a: de:89:b6:b7:51:8a:8b:a9:7a:25:ea:6a:c1:ef:dd:b6:67:7a: 3d:ba:19:27:0e:fc:67:9a:64:83:a5:3f:00:0e:7e:f1:61:aa: 99:bc:cd:59:7a:6f:57:16:e2:24:46:a5:26:78:68:8e:74:ed: af:58:16:ce:97:20:3e:85:ea:e8:51:97:3b:90:b4:ca:9a:06: 9a:7a:e2:ba:bd:1a:5c:87:b9:22:ee:c9:40:e5:68:09:4f:a5: cc:a0:7e:0f:b0:45:0f:98:30:e9:2e:b5:61:6e:9d:25:97:0c: 43:97:57:9f:01:e4:ae:1a:00:7c:f4:c6:c8:59:f9:9c:48:ee: 48:d6:9f:ee:b5:f8:0f:6e:7d:ed:69:42:87:0b:8c:dc:26:17: 6a:45:27:f0:9f:05:37:4c:f2:2d:41:c9:c3:7e:bf:17:53:2d: 73:6e:83:45 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MzA1OTExMC8GA1UEBRMoNTcxRUQyNTZENThGODVDNjAwQzY0QTU5RUU3QjFEMzZB RTNDQjA5QjAeFw0yNTA4MjEwODIzNDlaFw0yNTA4MjgwODIzNDlaMBgxFjAUBgNV BAMTDTY4YTZkNzk2LTJlNDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLwpSFtjYVuMHHkOuRjY+AMqU/JbNhsg3LzZFXitAydJiFCccrUdJ3/OQXTc/6 q38+kutN+dwRiuxi7wF2dJPpWjuiXf3KQ7zfuv6YhuPfyWz+rYFrJNO/UlrUMrlE i38Nt9J3B59QUaYEhPSUpezZL7hiRk0SkX1i3ZGDH7FPVFzTBMZHHG4U0UwBBhj9 5sasn8wGMEnikGi5q4d3Ny05J+oqTaXq8P5s8gGFMbyhWqagL1HPiCm5uWhQq+it l81A7tbHf+6pHpSt6E9BPGY4ER4Za6/t8YjJoaz5cGHCgU3kw6AP0PGh9V9n7Bqc 0c+2ARF5Ij90+9CgEoeqp8KBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUC5O/XpUV FwK39NI0IQRT9n1h7W8wHwYDVR0jBBgwFoAUVx7SVtWPhcYAxkpZ7nsdNq48sJsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIzMDU5L0JCQkQ4MDI2NzlG NjExRjA5Q0U5QzMyOEM0RjlBRTAyL1Z4N1NWdFdQaGNZQXhrcFo3bnNkTnE0OHNK cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVng3U1Z0V1BoY1lBeGtwWjduc2ROcTQ4c0pzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIz MDU5L0JCQkQ4MDI2NzlGNjExRjA5Q0U5QzMyOEM0RjlBRTAyL1Z4N1NWdFdQaGNZ QXhrcFo3bnNkTnE0OHNKcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAapRrsykM+EzvHL5KfuV++YYzvqeAIUfPmscIaf1eWtYmHqrIyPqVSw LhtSCOZvs7rT+YGAn3KitiyFXB7lft0sYt8w6s3p1ElsGit/fH3e/JDhRUtPIBhs Ot6JtrdRioupeiXqasHv3bZnej26GScO/GeaZIOlPwAOfvFhqpm8zVl6b1cW4iRG pSZ4aI507a9YFs6XID6F6uhRlzuQtMqaBpp64rq9GlyHuSLuyUDlaAlPpcygfg+w RQ+YMOkutWFunSWXDEOXV58B5K4aAHz0xshZ+ZxI7kjWn+61+A9ufe1pQocLjNwm F2pFJ/CfBTdM8i1BycN+vxdTLXNug0U= -----END CERTIFICATE-----Generated at Fri Aug 22 16:27:41 2025 by rpki-client