$ rpki-client -vvf rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft File: 5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft (raw, json) Hash identifier: //PeUp9g/RA0/4TxF44RrTL2pTHCvQJzIAIdmRqqooQ= Subject key identifier: B8:5D:1C:34:F6:ED:49:6D:02:25:64:46:C5:D4:ED:6F:69:4F:7F:39 Authority key identifier: E4:21:42:E3:E5:84:57:62:D0:E8:D6:8B:02:FB:10:E8:75:BC:6B:F2 Certificate issuer: /CN=A912DA1D/serialNumber=E42142E3E5845762D0E8D68B02FB10E875BC6BF2 Certificate serial: 0395 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft Manifest number: 0385 Signing time: Sun 07 Sep 2025 01:15:56 +0000 Manifest this update: Sun 07 Sep 2025 01:15:56 +0000 Manifest next update: Sun 14 Sep 2025 01:15:56 +0000 Files and hashes: 1: 5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl (hash: kcoQqmAZkI3tzIeYy+U9SSUw9q4iv1ylLFnnWBjSGgs=) 2: 44B90434DFA011ED8C895F7CC4F9AE02.roa (hash: OB3c0FOnO7U7Cy2O3WKkzCkZvRGF4Swy8zD33qNbalg=) 3: 0589A4B8DF9511EDAAA7E22AC4F9AE02.roa (hash: PCa5nWLR+HuKgmwdVX9BOmG2ZZvLJrtIyJd8CbPbXng=) 4: 36B1CD340A6D11ED89FD3F13C4F9AE02.roa (hash: JCVj+AscF7hWsvaIqNJTPDabzygkqnGZEfVjCkrIsro=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 01:15:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 917 (0x395) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DA1D, serialNumber=E42142E3E5845762D0E8D68B02FB10E875BC6BF2 Validity Not Before: Sep 7 01:15:56 2025 GMT Not After : Sep 14 01:15:56 2025 GMT Subject: CN=68bcdccc-6927 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:e0:80:2f:a2:ae:55:0f:c6:cc:cb:82:14:47: a4:ab:0e:f7:ff:db:69:92:83:fb:e4:88:2d:b1:8d: 72:86:8d:13:d9:4c:dc:f5:0a:7b:70:f0:d1:d8:66: 18:fd:71:03:cb:38:b9:cd:84:0a:b7:55:b1:e4:40: 38:9a:af:d3:9c:6d:da:23:ad:85:d8:67:e1:5f:a9: 8c:72:61:b0:e6:d6:a2:4c:46:55:a4:b4:2f:d7:be: 0a:8e:20:20:b1:d1:eb:65:ff:6a:fe:6d:b9:b4:67: 1d:20:f8:b2:34:f4:d2:b8:b7:34:ba:d2:b0:55:18: 21:20:7f:6e:7b:fe:b4:5c:a8:27:be:5a:22:bb:58: cd:fb:5e:d8:07:97:f4:f5:12:9d:51:01:88:2c:e9: 00:5d:b1:af:3f:2f:f7:36:79:0d:f9:08:da:a6:b1: 7f:33:bb:ff:93:29:04:40:b1:e6:c2:39:5d:d6:fc: 2e:f8:52:12:a2:27:f4:9c:6c:ab:7c:97:c0:c7:48: eb:68:cd:37:8e:44:a2:50:67:51:b7:88:8e:32:3e: c4:3f:7a:77:a9:90:53:8d:e5:c1:6a:26:c9:bf:b5: a9:98:a9:13:fa:06:fe:ed:a3:a0:44:83:e0:f1:63: 2a:a8:56:40:23:00:8c:33:54:4c:86:b5:89:75:1b: 17:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:5D:1C:34:F6:ED:49:6D:02:25:64:46:C5:D4:ED:6F:69:4F:7F:39 X509v3 Authority Key Identifier: keyid:E4:21:42:E3:E5:84:57:62:D0:E8:D6:8B:02:FB:10:E8:75:BC:6B:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:f1:6d:c9:98:1f:a7:ee:43:ce:16:f8:28:71:a9:eb:a4:3c: 0f:46:33:9c:f9:dc:cb:29:c9:8f:b3:6d:62:bb:6e:42:fd:f3: 60:96:2b:3b:82:74:72:a9:f6:2e:9d:b8:24:01:3a:3e:7a:45: e6:49:b6:58:0d:f6:f6:8f:f7:0c:b2:50:33:50:17:0f:a0:75: fe:72:df:ef:a3:22:1a:41:bf:3b:e8:38:82:7f:b7:c2:ab:4f: 12:e7:7a:ef:f3:b8:21:0d:61:da:83:f8:bd:0b:f3:51:e0:bd: b3:72:01:ce:52:1f:ba:17:7d:a5:c1:88:27:24:00:7d:8c:4c: d7:d7:96:75:97:52:06:a1:12:bd:4f:fc:69:7d:dc:3b:59:53: c9:49:96:db:2f:d7:dc:d7:8d:99:cd:50:53:b6:f6:62:47:a7: 12:33:56:95:f6:88:ca:a0:5c:d1:97:20:73:eb:2f:6a:ab:a5: 6b:ae:f4:da:4c:34:9f:0e:6e:12:22:d7:32:76:14:d9:76:64: ff:aa:5d:d0:9a:4c:d7:97:7d:14:5a:8e:7d:00:a2:99:69:25: 32:8c:4f:e4:42:75:fe:54:e5:53:59:42:14:71:48:27:b7:25: 60:78:6b:91:95:6f:f5:fe:38:8a:8e:a5:2f:e8:30:5f:1e:49: da:ba:07:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRBMUQxMTAvBgNVBAUTKEU0MjE0MkUzRTU4NDU3NjJEMEU4RDY4QjAyRkIxMEU4 NzVCQzZCRjIwHhcNMjUwOTA3MDExNTU2WhcNMjUwOTE0MDExNTU2WjAYMRYwFAYD VQQDEw02OGJjZGNjYy02OTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9+CAL6KuVQ/GzMuCFEekqw73/9tpkoP75IgtsY1yho0T2Uzc9Qp7cPDR2GYY /XEDyzi5zYQKt1Wx5EA4mq/TnG3aI62F2GfhX6mMcmGw5taiTEZVpLQv174KjiAg sdHrZf9q/m25tGcdIPiyNPTSuLc0utKwVRghIH9ue/60XKgnvloiu1jN+17YB5f0 9RKdUQGILOkAXbGvPy/3NnkN+QjaprF/M7v/kykEQLHmwjld1vwu+FISoif0nGyr fJfAx0jraM03jkSiUGdRt4iOMj7EP3p3qZBTjeXBaibJv7WpmKkT+gb+7aOgRIPg 8WMqqFZAIwCMM1RMhrWJdRsX2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLhdHDT2 7UltAiVkRsXU7W9pT385MB8GA1UdIwQYMBaAFOQhQuPlhFdi0OjWiwL7EOh1vGvy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREExRC9CNDZFNDJEQUJC MUIxMUVDQjBBQzBGMTRDNEY5QUUwMi81Q0ZDNC1XRVYyTFE2TmFMQXZzUTZIVzhh X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVDRkM0LVdFVjJMUTZOYUxBdnNRNkhXOGFfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REExRC9CNDZFNDJEQUJCMUIxMUVDQjBBQzBGMTRDNEY5QUUwMi81Q0ZDNC1XRVYy TFE2TmFMQXZzUTZIVzhhX0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBd8W3JmB+n7kPOFvgocanrpDwPRjOc+dzLKcmPs21iu25C/fNglis7 gnRyqfYunbgkATo+ekXmSbZYDfb2j/cMslAzUBcPoHX+ct/voyIaQb876DiCf7fC q08S53rv87ghDWHag/i9C/NR4L2zcgHOUh+6F32lwYgnJAB9jEzX15Z1l1IGoRK9 T/xpfdw7WVPJSZbbL9fc142ZzVBTtvZiR6cSM1aV9ojKoFzRlyBz6y9qq6VrrvTa TDSfDm4SItcydhTZdmT/ql3QmkzXl30UWo59AKKZaSUyjE/kQnX+VOVTWUIUcUgn tyVgeGuRlW/1/jiKjqUv6DBfHknaugfK -----END CERTIFICATE-----Generated at Mon Sep 8 20:26:40 2025 by rpki-client