$ rpki-client -vvf rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft File: 5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft (raw, json) Hash identifier: YKDG9ibG/uYHtsh9oBPMy8zhmrKv4cW9VRyu02PCt8E= Subject key identifier: D1:80:BF:75:A1:2C:C3:FE:66:AE:2B:6F:1D:88:E6:47:96:4C:DA:0F Authority key identifier: E6:1B:EC:13:92:86:32:83:DC:99:E2:FF:93:15:75:A3:18:1C:28:18 Certificate issuer: /CN=A91367E0/serialNumber=E61BEC1392863283DC99E2FF931575A3181C2818 Certificate serial: 0185 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hvsE5KGMoPcmeL_kxV1oxgcKBg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft Manifest number: 017F Signing time: Sun 07 Sep 2025 04:02:25 +0000 Manifest this update: Sun 07 Sep 2025 04:02:24 +0000 Manifest next update: Sun 14 Sep 2025 04:02:24 +0000 Files and hashes: 1: 5hvsE5KGMoPcmeL_kxV1oxgcKBg.crl (hash: XvkHLH4HsepHPnOJH1eMQTxvA4YZQ3TD6WHsNlLosos=) 2: 444EB35A459D11EEA8758641C4F9AE02.roa (hash: HxWrs2XE/yxdbhgHCsYXC3cP1Nukb/SzqytOwhYHUgs=) 3: 57F3935045A011EEA9A5215EC4F9AE02.roa (hash: zhWHaUx74UFv//O6sI95zwvuuZgRyOVSokAfykLA4G4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.crl rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hvsE5KGMoPcmeL_kxV1oxgcKBg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 04:02:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 389 (0x185) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91367E0, serialNumber=E61BEC1392863283DC99E2FF931575A3181C2818 Validity Not Before: Sep 7 04:02:24 2025 GMT Not After : Sep 14 04:02:24 2025 GMT Subject: CN=68bd03d1-53cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:85:84:22:b7:85:a2:e9:49:0d:15:6b:94:e4: 20:86:7e:39:8f:22:b5:4c:ce:2b:9b:2f:b9:10:33: e9:e8:29:ba:bc:c5:1d:8a:7b:c7:3e:27:ff:a5:fd: aa:27:fd:0b:3d:c2:65:e5:c3:89:51:fd:37:c1:e7: 90:c6:1a:5c:f0:8e:b5:20:be:91:8d:d2:f5:ff:47: 62:42:63:53:13:0a:ed:67:73:56:33:9a:66:58:17: 22:cf:fd:8a:20:39:e5:30:94:30:4b:34:77:3f:e5: ac:ab:49:eb:d7:87:70:44:53:1d:91:29:54:d5:62: 89:39:13:74:77:ed:84:a6:64:c9:86:30:6a:28:90: ff:f6:26:c4:0c:e0:03:54:c3:c8:bd:d5:b1:c2:bd: a7:a9:1a:fd:08:f7:2a:15:0b:0b:17:c1:4d:46:5c: 49:01:f4:6e:b0:c2:71:48:05:13:ce:9a:65:e6:b4: c5:f6:1e:f5:79:09:11:17:69:ed:92:25:a0:0e:8e: 0c:d7:02:03:90:c9:e8:7b:55:1e:b1:64:f9:f5:77: 94:5e:fc:de:63:6b:83:51:95:56:81:5d:0b:20:2d: b5:12:a3:47:d2:ed:c6:e3:8a:ec:37:b4:a5:dc:93: 63:22:41:6e:30:f8:4d:33:a5:c0:82:f8:62:9b:b0: 44:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:80:BF:75:A1:2C:C3:FE:66:AE:2B:6F:1D:88:E6:47:96:4C:DA:0F X509v3 Authority Key Identifier: keyid:E6:1B:EC:13:92:86:32:83:DC:99:E2:FF:93:15:75:A3:18:1C:28:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hvsE5KGMoPcmeL_kxV1oxgcKBg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:8a:c3:52:57:98:00:c8:e8:46:6f:72:93:eb:ec:8b:05:a5: 1c:4e:43:c9:b6:38:61:18:de:29:56:e4:68:40:5b:08:be:73: af:2b:53:7c:b9:ac:39:9c:38:e8:1b:00:36:e5:e3:dd:e3:ef: df:9e:f0:21:44:49:f0:73:76:07:4e:f0:23:7e:81:da:68:79: 5e:dd:5e:c8:90:40:3c:d1:c7:6d:f9:d9:40:a3:71:12:aa:6a: 9c:76:9e:9d:d5:c6:1e:c3:b0:ab:37:fa:b7:f3:4c:d4:14:24: 60:0e:6f:7b:b3:d0:09:ba:dd:04:b5:7b:47:ed:3d:75:ee:c5: 35:e6:55:04:c6:67:75:ef:46:0d:19:cf:ea:c7:c0:33:56:09: 8e:68:98:c5:53:9c:b3:11:c5:17:89:14:35:7b:04:49:8c:ad: 72:1c:0b:91:77:5f:4f:ff:96:6b:41:20:7f:f3:93:46:d5:53: 1b:53:8e:ab:c3:0a:91:f3:6c:38:a2:7a:6e:c1:e9:7b:04:0e: 83:7e:cf:80:12:66:98:a4:e0:0f:5b:b7:82:5c:55:7d:5a:60: d9:cd:c5:b5:5a:ad:49:0a:c0:90:be:5b:0e:24:bf:cd:cf:49: 1d:1f:c2:50:f5:04:db:21:1c:86:41:b6:a9:48:45:60:8d:77: 86:44:81:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzY3RTAxMTAvBgNVBAUTKEU2MUJFQzEzOTI4NjMyODNEQzk5RTJGRjkzMTU3NUEz MTgxQzI4MTgwHhcNMjUwOTA3MDQwMjI0WhcNMjUwOTE0MDQwMjI0WjAYMRYwFAYD VQQDEw02OGJkMDNkMS01M2NkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvIWEIreFoulJDRVrlOQghn45jyK1TM4rmy+5EDPp6Cm6vMUdinvHPif/pf2q J/0LPcJl5cOJUf03weeQxhpc8I61IL6RjdL1/0diQmNTEwrtZ3NWM5pmWBciz/2K IDnlMJQwSzR3P+Wsq0nr14dwRFMdkSlU1WKJORN0d+2EpmTJhjBqKJD/9ibEDOAD VMPIvdWxwr2nqRr9CPcqFQsLF8FNRlxJAfRusMJxSAUTzppl5rTF9h71eQkRF2nt kiWgDo4M1wIDkMnoe1UesWT59XeUXvzeY2uDUZVWgV0LIC21EqNH0u3G44rsN7Sl 3JNjIkFuMPhNM6XAgvhim7BE5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNGAv3Wh LMP+Zq4rbx2I5keWTNoPMB8GA1UdIwQYMBaAFOYb7BOShjKD3Jni/5MVdaMYHCgY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjdFMC9FNDE4OTkxMDQ1 OUMxMUVFQjY5RDY4MzFDNEY5QUUwMi81aHZzRTVLR01vUGNtZUxfa3hWMW94Z2NL QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVodnNFNUtHTW9QY21lTF9reFYxb3hnY0tCZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjdFMC9FNDE4OTkxMDQ1OUMxMUVFQjY5RDY4MzFDNEY5QUUwMi81aHZzRTVLR01v UGNtZUxfa3hWMW94Z2NLQmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVisNSV5gAyOhGb3KT6+yLBaUcTkPJtjhhGN4pVuRoQFsIvnOvK1N8 uaw5nDjoGwA25ePd4+/fnvAhREnwc3YHTvAjfoHaaHle3V7IkEA80cdt+dlAo3ES qmqcdp6d1cYew7CrN/q380zUFCRgDm97s9AJut0EtXtH7T117sU15lUExmd170YN Gc/qx8AzVgmOaJjFU5yzEcUXiRQ1ewRJjK1yHAuRd19P/5ZrQSB/85NG1VMbU46r wwqR82w4onpuwel7BA6Dfs+AEmaYpOAPW7eCXFV9WmDZzcW1Wq1JCsCQvlsOJL/N z0kdH8JQ9QTbIRyGQbapSEVgjXeGRIFJ -----END CERTIFICATE-----Generated at Mon Sep 8 14:07:50 2025 by rpki-client