$ rpki-client -vvf rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft File: 5pLFtgs-8cIERDn8OQrVbcPLzWM.mft (raw, json) Hash identifier: H3/6+R47qhUiv32IkDU4CAQ5tVR+vK/CYainoUu7KQ4= Subject key identifier: 29:95:78:40:C6:5B:08:74:4D:69:88:84:D2:C7:60:40:0C:FA:31:66 Authority key identifier: E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63 Certificate issuer: /CN=A913D1EA/serialNumber=E692C5B60B3EF1C2044439FC390AD56DC3CBCD63 Certificate serial: 0883 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft Manifest number: 0820 Signing time: Mon 08 Sep 2025 21:23:12 +0000 Manifest this update: Mon 08 Sep 2025 21:23:12 +0000 Manifest next update: Mon 15 Sep 2025 21:23:12 +0000 Files and hashes: 1: 5pLFtgs-8cIERDn8OQrVbcPLzWM.crl (hash: fyiRE7nY7l7Z+tiYdBfiFU79tC2m3yQPiOJukdlGN10=) 2: 311C494286CC11F09348D16BC4F9AE02.roa (hash: vA0oNVDaWjIawzpioc1/+h5pmU4v3CZ9kNcOCC/rHLI=) 3: 244B9D1874CB11EEB3C0267DC4F9AE02.roa (hash: 58z0sDsYRtdYBAtwDhNvP7kyEQJboZJS4GpwJLh2ing=) 4: 0DA7D8508C7B11F0BC99F531C4F9AE02.roa (hash: z5ynwic/0OYrIJXB9UAn2mnXwrtcqy7+joS2MDp5Ghs=) 5: 06166DF4DC6D11EFBD34F40EC4F9AE02.roa (hash: zAVhFCx+Y0sm2rtgFn1OnJdCE1tYjDSThjKJO14bltw=) 6: 215A8FDE4B9E11EEBF766C7FC4F9AE02.roa (hash: ewzgLIZLx9Y5nPTQhL+AITVEb8oh3TwTplFpZhdDOMo=) 7: 9765FB988A5D11EE9E6AA223C4F9AE02.roa (hash: gdVUdTDJS2HzCLE0SH5abxwvNMrpuz9i+05KM/O5dKM=) 8: F3643AD6089C11F09BB44535C4F9AE02.roa (hash: d4eF712UMcuWBXICMHSbDq1rVUXEx57Lk10/0qmDX9M=) 9: 79986EE8FE3D11EFB763F62EC4F9AE02.roa (hash: oPWHOSVVHxMTlEOgiAm0tO2SzI3zA9mMs78DXNw+B34=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.crl rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 21:23:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2179 (0x883) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D1EA, serialNumber=E692C5B60B3EF1C2044439FC390AD56DC3CBCD63 Validity Not Before: Sep 8 21:23:12 2025 GMT Not After : Sep 15 21:23:12 2025 GMT Subject: CN=68bf4940-069a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:4d:f0:64:d4:e2:63:86:b3:ab:1e:7a:29:12: a4:35:38:93:e4:85:2b:da:95:b9:ee:00:11:cd:1a: 24:10:16:9a:3e:16:74:6a:71:31:49:6b:21:9f:cd: de:66:8f:6e:6c:fa:4d:89:69:1b:a5:32:87:0d:34: 33:68:79:bc:27:86:5c:7c:5f:ab:d0:b9:e0:02:b1: 95:c4:88:31:f9:db:4d:24:35:0b:7a:0b:a1:f1:17: e6:60:22:8c:0e:47:8e:e1:14:e3:1e:5f:56:89:a9: 2d:2d:98:5b:a1:a3:5c:b7:5d:d1:85:6b:a5:a6:b0: e3:b8:5c:e8:e9:99:f5:a4:7d:9e:e2:32:5b:c7:5e: fd:ce:da:0b:ca:f1:aa:3c:30:d9:2e:42:ee:62:09: 31:9a:47:45:67:a5:78:9d:04:6f:98:c3:0d:ea:6d: ed:5e:17:9e:49:ab:e0:f9:3a:45:e6:1c:cb:0f:70: 8a:c4:ea:74:c7:25:e3:7a:14:28:e3:0b:c9:41:d0: 3b:86:fa:9b:a5:ae:f2:14:8a:a4:2a:6d:73:b2:c7: b7:a0:a3:62:fb:31:ab:51:42:34:62:01:0f:d3:db: 95:49:cd:c9:54:6e:5f:68:90:3c:c7:d1:99:5b:a4: 38:c2:df:bd:c5:24:8c:4e:01:6e:19:98:4e:19:35: 15:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:95:78:40:C6:5B:08:74:4D:69:88:84:D2:C7:60:40:0C:FA:31:66 X509v3 Authority Key Identifier: keyid:E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:60:66:a2:e4:8e:a5:60:c5:a1:7f:9d:e0:c1:c5:12:94:b5: 0c:e3:90:97:50:d0:9d:78:d8:7d:0c:5f:bd:57:37:04:25:5f: 88:ea:53:8b:8e:2c:44:0f:19:64:b1:17:00:26:ba:81:63:31: 67:28:8d:c1:50:89:9c:cd:c4:e1:a0:b4:98:df:32:73:e3:70: a5:4e:5b:96:88:26:f2:15:1d:96:5a:46:16:cc:ea:39:c5:08: 5d:16:16:0c:2a:1a:4f:e0:ab:bf:67:23:5b:99:04:35:54:97: fc:00:5a:25:b3:37:0d:63:d5:47:51:2d:8e:19:54:6e:2a:fc: 36:f7:ed:98:a2:ef:41:7b:ed:2b:96:ac:80:f3:ad:54:9a:46: 6c:a6:44:f4:02:d4:4a:59:e6:a2:34:cc:15:d4:fd:23:4f:f5: dd:b7:fb:23:62:1c:75:27:e3:bf:a5:2e:59:8c:9a:3d:4d:4a: 77:37:19:0d:d4:02:8b:b8:d1:a4:0a:1b:58:4c:49:6a:3a:84: ed:e9:17:7c:d2:db:dd:cf:b8:04:fd:a1:dc:62:19:ce:e0:34: d6:8d:36:d9:39:df:b5:49:b7:5c:31:ec:e1:19:0b:67:b1:28: 9c:36:6c:90:4f:09:98:03:cf:f4:1f:50:20:2f:35:83:81:57: b5:b6:c1:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0QxRUExMTAvBgNVBAUTKEU2OTJDNUI2MEIzRUYxQzIwNDQ0MzlGQzM5MEFENTZE QzNDQkNENjMwHhcNMjUwOTA4MjEyMzEyWhcNMjUwOTE1MjEyMzEyWjAYMRYwFAYD VQQDEw02OGJmNDk0MC0wNjlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA403wZNTiY4azqx56KRKkNTiT5IUr2pW57gARzRokEBaaPhZ0anExSWshn83e Zo9ubPpNiWkbpTKHDTQzaHm8J4ZcfF+r0LngArGVxIgx+dtNJDULeguh8RfmYCKM DkeO4RTjHl9WiaktLZhboaNct13RhWulprDjuFzo6Zn1pH2e4jJbx179ztoLyvGq PDDZLkLuYgkxmkdFZ6V4nQRvmMMN6m3tXheeSavg+TpF5hzLD3CKxOp0xyXjehQo 4wvJQdA7hvqbpa7yFIqkKm1zsse3oKNi+zGrUUI0YgEP09uVSc3JVG5faJA8x9GZ W6Q4wt+9xSSMTgFuGZhOGTUV7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCmVeEDG Wwh0TWmIhNLHYEAM+jFmMB8GA1UdIwQYMBaAFOaSxbYLPvHCBEQ5/DkK1W3Dy81j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDFFQS85QzkzMkI0ODE3 M0ExMUVCQTNCOTdFN0ZDNEY5QUUwMi81cExGdGdzLThjSUVSRG44T1FyVmJjUEx6 V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVwTEZ0Z3MtOGNJRVJEbjhPUXJWYmNQTHpXTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDFFQS85QzkzMkI0ODE3M0ExMUVCQTNCOTdFN0ZDNEY5QUUwMi81cExGdGdzLThj SUVSRG44T1FyVmJjUEx6V00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKYGai5I6lYMWhf53gwcUSlLUM45CXUNCdeNh9DF+9VzcEJV+I6lOL jixEDxlksRcAJrqBYzFnKI3BUImczcThoLSY3zJz43ClTluWiCbyFR2WWkYWzOo5 xQhdFhYMKhpP4Ku/ZyNbmQQ1VJf8AFolszcNY9VHUS2OGVRuKvw29+2You9Be+0r lqyA861UmkZspkT0AtRKWeaiNMwV1P0jT/Xdt/sjYhx1J+O/pS5ZjJo9TUp3NxkN 1AKLuNGkChtYTElqOoTt6Rd80tvdz7gE/aHcYhnO4DTWjTbZOd+1SbdcMezhGQtn sSicNmyQTwmYA8/0H1AgLzWDgVe1tsFU -----END CERTIFICATE-----Generated at Tue Sep 9 09:19:45 2025 by rpki-client