$ rpki-client -vvf rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.mft File: 5G4YncjpEKGrvi42TdCBd1zkhGA.mft (raw, json) Hash identifier: ne+TA1GRKqomp37uZEwjiINSi7zt73I82rLxP1Mm9d0= Subject key identifier: E2:CB:15:7C:33:82:A4:86:34:7E:CC:46:6D:B1:85:6D:82:19:23:FD Authority key identifier: E4:6E:18:9D:C8:E9:10:A1:AB:BE:2E:36:4D:D0:81:77:5C:E4:84:60 Certificate issuer: /CN=A9135B44/serialNumber=E46E189DC8E910A1ABBE2E364DD081775CE48460 Certificate serial: 0237 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G4YncjpEKGrvi42TdCBd1zkhGA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.mft Manifest number: 0232 Signing time: Sat 23 Aug 2025 02:08:21 +0000 Manifest this update: Sat 23 Aug 2025 02:08:20 +0000 Manifest next update: Sat 30 Aug 2025 02:08:20 +0000 Files and hashes: 1: 5G4YncjpEKGrvi42TdCBd1zkhGA.crl (hash: qEHpl7nt7/583lFiqJO6HvBuB2a9XQb2ukyA2Qym7es=) 2: D4B06AAA3A6E11ED8266115DC4F9AE02.roa (hash: rXyXJ/J6rVFIkAmCNmdDPvJdD/VKGdNuveHL3e4vBN4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.crl rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G4YncjpEKGrvi42TdCBd1zkhGA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:08:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 567 (0x237) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135B44, serialNumber=E46E189DC8E910A1ABBE2E364DD081775CE48460 Validity Not Before: Aug 23 02:08:20 2025 GMT Not After : Aug 30 02:08:20 2025 GMT Subject: CN=68a92295-28b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b5:fc:7f:0e:ff:5c:a5:a1:f7:d3:f3:1f:1a: 21:04:b7:f8:4e:99:27:64:16:8a:a9:2e:8b:5f:fe: 37:81:9c:dc:23:18:b1:bf:1d:ef:0d:bd:8c:1c:58: f6:4b:f3:a3:17:37:50:af:a1:d5:67:e2:9f:3e:6b: 71:ee:5b:8a:e7:a9:78:31:64:5a:b7:80:92:67:13: fe:3d:4a:1f:5e:f6:d0:50:83:6c:3b:89:38:6f:55: 46:7c:9f:ce:94:b7:4f:7e:1a:15:30:c7:41:51:35: b5:d5:9e:c5:82:d5:67:71:f1:36:d1:9e:37:cb:95: 67:10:38:11:75:c6:90:39:17:5c:0b:21:b3:d3:16: a2:0d:25:ec:7a:0a:b3:a1:1c:8e:b7:3d:cb:c7:85: 68:db:8e:a1:df:21:41:6d:54:61:a6:a4:70:e7:a3: 3f:0f:4b:ac:f2:92:80:41:86:2e:da:4d:e7:5c:55: ce:29:05:c1:f9:bb:03:9f:d8:c6:b0:9d:b0:52:35: 0d:63:85:2d:1e:d2:0c:f4:c2:6b:ef:fa:19:be:ba: e6:a1:7a:fa:c7:b0:d1:02:da:78:cd:1f:57:1a:d0: 54:01:36:69:f4:3f:3d:63:d3:7d:63:51:b8:65:09: bc:aa:7a:03:11:db:1f:30:1b:b0:8d:e2:5c:6d:43: 6e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:CB:15:7C:33:82:A4:86:34:7E:CC:46:6D:B1:85:6D:82:19:23:FD X509v3 Authority Key Identifier: keyid:E4:6E:18:9D:C8:E9:10:A1:AB:BE:2E:36:4D:D0:81:77:5C:E4:84:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G4YncjpEKGrvi42TdCBd1zkhGA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:9e:b1:f9:75:c5:af:fe:b1:b8:14:ac:f5:8d:e4:7e:27:5c: cc:3e:da:da:39:a9:28:83:77:60:c1:45:a2:6f:65:4b:78:71: 45:d8:8e:3c:47:20:fe:51:43:f0:9b:cb:e8:41:1c:07:d2:f3: 59:fe:cd:4c:3f:a5:77:c5:43:c6:fd:29:ab:11:e4:c3:2b:47: 3c:f6:94:2c:5a:5c:74:78:2e:ed:e4:4b:54:27:6a:79:53:45: 51:8d:c1:81:6a:da:77:23:69:cb:64:d1:4b:76:84:aa:4c:23: 5a:b2:f9:58:32:b6:50:69:63:73:01:50:d1:a3:1f:8e:1f:9a: d5:b1:20:99:3c:51:f5:8e:10:e2:b9:c6:e5:78:23:73:e2:76: de:01:60:c6:30:cb:41:3c:4d:7d:f3:49:46:ce:c5:d9:ea:ef: 90:cf:6a:7d:bb:df:75:83:b4:96:7c:47:85:d1:e3:7a:ed:5b: 9f:09:bc:eb:9a:36:a8:d3:a7:2e:a7:40:3e:60:22:55:d9:2a: 12:9e:78:20:dd:60:83:96:4c:6f:33:c4:18:f2:04:ee:d7:89: fc:db:a1:45:59:89:2a:3e:26:99:0e:3c:fa:89:b2:af:6e:70: 70:bf:1b:21:19:52:79:8c:48:85:d2:b7:d0:d1:32:a9:d6:bf: 6c:de:1d:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzVCNDQxMTAvBgNVBAUTKEU0NkUxODlEQzhFOTEwQTFBQkJFMkUzNjRERDA4MTc3 NUNFNDg0NjAwHhcNMjUwODIzMDIwODIwWhcNMjUwODMwMDIwODIwWjAYMRYwFAYD VQQDEw02OGE5MjI5NS0yOGI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvbX8fw7/XKWh99PzHxohBLf4TpknZBaKqS6LX/43gZzcIxixvx3vDb2MHFj2 S/OjFzdQr6HVZ+KfPmtx7luK56l4MWRat4CSZxP+PUofXvbQUINsO4k4b1VGfJ/O lLdPfhoVMMdBUTW11Z7FgtVncfE20Z43y5VnEDgRdcaQORdcCyGz0xaiDSXsegqz oRyOtz3Lx4Vo246h3yFBbVRhpqRw56M/D0us8pKAQYYu2k3nXFXOKQXB+bsDn9jG sJ2wUjUNY4UtHtIM9MJr7/oZvrrmoXr6x7DRAtp4zR9XGtBUATZp9D89Y9N9Y1G4 ZQm8qnoDEdsfMBuwjeJcbUNufQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOLLFXwz gqSGNH7MRm2xhW2CGSP9MB8GA1UdIwQYMBaAFORuGJ3I6RChq74uNk3QgXdc5IRg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUI0NC9BRDBENjFGODNB NkMxMUVEOTk0MUY1NUNDNEY5QUUwMi81RzRZbmNqcEVLR3J2aTQyVGRDQmQxemto R0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVHNFluY2pwRUtHcnZpNDJUZENCZDF6a2hHQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NUI0NC9BRDBENjFGODNBNkMxMUVEOTk0MUY1NUNDNEY5QUUwMi81RzRZbmNqcEVL R3J2aTQyVGRDQmQxemtoR0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCnrH5dcWv/rG4FKz1jeR+J1zMPtraOakog3dgwUWib2VLeHFF2I48 RyD+UUPwm8voQRwH0vNZ/s1MP6V3xUPG/SmrEeTDK0c89pQsWlx0eC7t5EtUJ2p5 U0VRjcGBatp3I2nLZNFLdoSqTCNasvlYMrZQaWNzAVDRox+OH5rVsSCZPFH1jhDi ucbleCNz4nbeAWDGMMtBPE1980lGzsXZ6u+Qz2p9u991g7SWfEeF0eN67VufCbzr mjao06cup0A+YCJV2SoSnngg3WCDlkxvM8QY8gTu14n826FFWYkqPiaZDjz6ibKv bnBwvxshGVJ5jEiF0rfQ0TKp1r9s3h0F -----END CERTIFICATE-----Generated at Sun Aug 24 21:50:06 2025 by rpki-client