$ rpki-client -vvf rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.mft File: N5vU53MvGo0cOyItt3c8HBVBn0I.mft (raw, json) Hash identifier: FfnETrcZICTXslhRBYBqiWWeT6YXVbccz4pzI1AweCI= Subject key identifier: 5F:CC:FF:C7:EC:17:3D:48:4C:B8:A1:19:85:04:E7:2A:0E:49:EB:FD Authority key identifier: 37:9B:D4:E7:73:2F:1A:8D:1C:3B:22:2D:B7:77:3C:1C:15:41:9F:42 Certificate issuer: /CN=A912527F/serialNumber=379BD4E7732F1A8D1C3B222DB7773C1C15419F42 Certificate serial: 02A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5vU53MvGo0cOyItt3c8HBVBn0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.mft Manifest number: 02A2 Signing time: Tue 09 Sep 2025 01:39:52 +0000 Manifest this update: Tue 09 Sep 2025 01:39:51 +0000 Manifest next update: Tue 16 Sep 2025 01:39:51 +0000 Files and hashes: 1: N5vU53MvGo0cOyItt3c8HBVBn0I.crl (hash: tBVn+4WL6T2zPBMNVi+RGwrRT0On63sv7dCYGjA78Mw=) 2: BE0481A4EFA111ED87AD1F0BC4F9AE02.roa (hash: NQf56Uj9m/23kHcMdcevpS6JxvdYxcKJxC0qqxSbed4=) 3: 2C257150DBCA11EF920CC12BC4F9AE02.roa (hash: bsnKJQWxF5UUZ+STFoaUleWe8G1krXm9q3cPKIQEWa4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.crl rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5vU53MvGo0cOyItt3c8HBVBn0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 01:39:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 678 (0x2a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912527F, serialNumber=379BD4E7732F1A8D1C3B222DB7773C1C15419F42 Validity Not Before: Sep 9 01:39:51 2025 GMT Not After : Sep 16 01:39:51 2025 GMT Subject: CN=68bf8567-d4d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:af:be:06:e7:e5:54:82:24:94:bb:be:14:f1: 91:2a:6c:73:32:5d:d7:9e:07:48:ad:ff:85:96:0d: fa:9e:4c:0f:7c:c0:0d:17:e0:7d:24:cc:fa:33:0b: 6e:0d:ce:5d:d7:55:99:64:7f:55:ae:7f:d5:aa:6d: fa:ea:81:57:1d:6c:e5:45:06:84:40:12:b4:48:5c: 9f:b3:91:75:2d:71:e1:98:9f:30:f0:74:33:43:a3: c6:05:a0:57:23:a1:c4:52:39:cb:a4:8d:2b:c1:73: 4e:4d:81:40:fb:08:b2:86:67:99:01:a9:14:4a:2f: 97:f5:92:8a:85:f3:55:43:0b:85:46:18:00:14:17: b6:93:15:88:10:02:e8:88:83:43:31:ba:73:31:8e: 5a:e1:9c:7b:7c:e5:eb:53:f9:e5:79:25:1f:3c:f5: 4c:cd:40:f2:35:e7:06:47:c5:7a:c4:31:9e:25:d9: a9:40:b4:05:e1:18:80:35:17:12:0f:61:ae:0d:d0: 05:45:56:1a:8d:e4:29:04:65:ff:ae:fe:42:3f:d9: 96:ab:6f:8a:a6:8b:c1:9c:ad:f8:3f:70:bc:3e:bb: 3d:02:05:b0:23:4a:25:ef:c9:e9:eb:ed:30:7f:b4: 92:b6:6a:11:25:38:60:4e:3c:82:36:08:b2:2b:43: cb:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:CC:FF:C7:EC:17:3D:48:4C:B8:A1:19:85:04:E7:2A:0E:49:EB:FD X509v3 Authority Key Identifier: keyid:37:9B:D4:E7:73:2F:1A:8D:1C:3B:22:2D:B7:77:3C:1C:15:41:9F:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5vU53MvGo0cOyItt3c8HBVBn0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:24:de:7e:fb:1c:6e:75:6d:af:18:75:eb:6b:e4:b4:94:e7: ae:be:69:41:b4:40:94:f1:b9:7f:6b:02:38:23:dc:3d:4b:59: e6:2d:26:61:d9:4e:2e:9d:8c:12:80:3e:19:43:8e:98:0d:8d: 2c:fe:65:59:0a:f3:ed:3f:5c:84:c8:67:2a:d9:75:c0:a4:68: ac:a9:f7:57:ec:53:db:0f:5d:e2:ed:0e:9b:9c:a8:e7:b5:ab: 31:bb:c8:2a:58:12:ad:1c:c4:67:93:ae:f0:31:26:74:39:c5: 39:79:14:71:07:5d:8a:52:87:c0:04:30:db:c9:3d:87:7d:7f: 19:92:02:1a:9e:df:75:93:79:cd:eb:26:37:32:18:8e:d0:48: d2:71:c6:7b:c6:38:c4:6f:23:d9:3f:b9:c7:e8:cb:73:66:84: 8a:1d:92:19:71:f7:8c:44:90:9d:d8:db:62:5a:8b:d7:32:0c: 94:11:0f:6c:93:4e:02:c9:a2:8a:cf:7d:f7:81:87:07:da:52: cc:82:96:ef:b8:54:45:9b:79:22:33:aa:c3:99:cf:16:01:65: b8:93:88:e7:53:65:b4:10:cf:58:28:44:3e:b3:f5:f3:54:13: 77:80:7b:29:10:23:a0:ac:02:37:4d:f3:86:df:a1:17:45:e7: 90:09:a6:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjUyN0YxMTAvBgNVBAUTKDM3OUJENEU3NzMyRjFBOEQxQzNCMjIyREI3NzczQzFD MTU0MTlGNDIwHhcNMjUwOTA5MDEzOTUxWhcNMjUwOTE2MDEzOTUxWjAYMRYwFAYD VQQDEw02OGJmODU2Ny1kNGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAya++BuflVIIklLu+FPGRKmxzMl3XngdIrf+Flg36nkwPfMANF+B9JMz6Mwtu Dc5d11WZZH9Vrn/Vqm366oFXHWzlRQaEQBK0SFyfs5F1LXHhmJ8w8HQzQ6PGBaBX I6HEUjnLpI0rwXNOTYFA+wiyhmeZAakUSi+X9ZKKhfNVQwuFRhgAFBe2kxWIEALo iINDMbpzMY5a4Zx7fOXrU/nleSUfPPVMzUDyNecGR8V6xDGeJdmpQLQF4RiANRcS D2GuDdAFRVYajeQpBGX/rv5CP9mWq2+KpovBnK34P3C8Prs9AgWwI0ol78np6+0w f7SStmoRJThgTjyCNgiyK0PLeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF/M/8fs Fz1ITLihGYUE5yoOSev9MB8GA1UdIwQYMBaAFDeb1OdzLxqNHDsiLbd3PBwVQZ9C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTI3Ri9CQ0ZEQUZDQzEw REQxMUVEODBBQTI0ODVDNEY5QUUwMi9ONXZVNTNNdkdvMGNPeUl0dDNjOEhCVkJu MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL041dlU1M012R28wY095SXR0M2M4SEJWQm4wSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTI3Ri9CQ0ZEQUZDQzEwREQxMUVEODBBQTI0ODVDNEY5QUUwMi9ONXZVNTNNdkdv MGNPeUl0dDNjOEhCVkJuMEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMJN5++xxudW2vGHXra+S0lOeuvmlBtECU8bl/awI4I9w9S1nmLSZh 2U4unYwSgD4ZQ46YDY0s/mVZCvPtP1yEyGcq2XXApGisqfdX7FPbD13i7Q6bnKjn tasxu8gqWBKtHMRnk67wMSZ0OcU5eRRxB12KUofABDDbyT2HfX8ZkgIant91k3nN 6yY3MhiO0EjSccZ7xjjEbyPZP7nH6MtzZoSKHZIZcfeMRJCd2NtiWovXMgyUEQ9s k04CyaKKz333gYcH2lLMgpbvuFRFm3kiM6rDmc8WAWW4k4jnU2W0EM9YKEQ+s/Xz VBN3gHspECOgrAI3TfOG36EXReeQCabQ -----END CERTIFICATE-----Generated at Tue Sep 9 13:18:06 2025 by rpki-client