$ rpki-client -vvf rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5EL5lVmsG6h-4TSLL8evCiL_smE.mft File: 5EL5lVmsG6h-4TSLL8evCiL_smE.mft (raw, json) Hash identifier: 58Lyge9Qg13esUNSP+H1EecLuSCeaoXjkji5navrEyE= Subject key identifier: 5F:E5:F7:22:33:6E:67:B3:3B:8E:17:5E:D6:8F:A7:8A:F8:34:89:86 Authority key identifier: E4:42:F9:95:59:AC:1B:A8:7E:E1:34:8B:2F:C7:AF:0A:22:FF:B2:61 Certificate issuer: /CN=A9143336/serialNumber=E442F99559AC1BA87EE1348B2FC7AF0A22FFB261 Certificate serial: 2B24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5EL5lVmsG6h-4TSLL8evCiL_smE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5EL5lVmsG6h-4TSLL8evCiL_smE.mft Manifest number: 2B14 Signing time: Thu 04 Sep 2025 15:37:08 +0000 Manifest this update: Thu 04 Sep 2025 15:37:08 +0000 Manifest next update: Thu 11 Sep 2025 15:37:08 +0000 Files and hashes: 1: 5EL5lVmsG6h-4TSLL8evCiL_smE.crl (hash: TTkfusBnhVSQlVPlu3H3mAZexoxrMHwpmjmFAn9Z8jo=) 2: 5452AC309B4911EB9952394CC4F9AE02.roa (hash: 3EBZNTlM2pSnC9HcQ0kJddDB9AhHcVhBduQrWy64qKQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5EL5lVmsG6h-4TSLL8evCiL_smE.crl rsync://rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5EL5lVmsG6h-4TSLL8evCiL_smE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5EL5lVmsG6h-4TSLL8evCiL_smE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 15:37:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11044 (0x2b24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143336, serialNumber=E442F99559AC1BA87EE1348B2FC7AF0A22FFB261 Validity Not Before: Sep 4 15:37:08 2025 GMT Not After : Sep 11 15:37:08 2025 GMT Subject: CN=68b9b224-987a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c8:f9:90:4e:f2:63:dc:91:bf:a0:d0:c2:92: e1:95:57:0b:7f:42:35:53:a7:95:61:0d:47:2d:bb: 84:05:95:bb:a5:7d:f8:22:b5:cd:4c:e1:b1:de:15: 3e:2a:32:0e:b8:cf:29:e9:0e:96:97:22:84:a9:0a: 03:b6:bf:e1:3e:67:13:09:78:f6:1e:48:ae:b5:45: c7:fb:e4:2c:e4:2b:25:5f:eb:15:9c:c6:96:b1:c7: 4a:9f:6c:28:0e:fd:ab:d4:15:b3:b5:7d:1d:ed:f7: d1:b2:f2:0a:4a:85:36:c0:6f:e8:9a:f5:93:9e:52: 9d:6e:c8:db:11:71:37:82:29:b0:bf:fb:96:f7:7b: 30:ec:48:dc:da:0e:5f:8a:22:0e:ef:4c:a4:62:9a: 83:96:9d:16:e2:de:18:d4:e4:27:7f:85:3f:8e:6e: d5:d7:d0:44:0c:09:04:a6:74:85:48:69:90:3f:3a: 0a:60:e8:1a:8b:6f:b7:65:32:5c:4d:4b:7b:5b:69: a2:1e:80:77:39:5f:2e:23:4e:30:58:f8:cf:03:e7: 5c:f4:29:20:74:4e:ec:8d:db:49:ec:f9:d2:69:51: bb:67:9d:7d:ef:26:d6:41:26:c9:f0:2c:87:4a:d8: 22:b1:d2:79:30:75:a6:ee:8a:fc:5b:90:eb:97:13: 73:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:E5:F7:22:33:6E:67:B3:3B:8E:17:5E:D6:8F:A7:8A:F8:34:89:86 X509v3 Authority Key Identifier: keyid:E4:42:F9:95:59:AC:1B:A8:7E:E1:34:8B:2F:C7:AF:0A:22:FF:B2:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5EL5lVmsG6h-4TSLL8evCiL_smE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5EL5lVmsG6h-4TSLL8evCiL_smE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5EL5lVmsG6h-4TSLL8evCiL_smE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:3e:86:32:0c:94:97:85:b2:fa:d2:a6:e0:d1:cf:17:31:69: f3:cf:5e:1e:02:6c:49:2f:be:68:1b:09:96:ee:eb:dc:ca:cb: a8:3d:29:2e:be:1f:fd:af:76:6c:f6:4a:71:f0:cc:7d:eb:83: 46:4d:3c:db:e9:f1:f8:ae:10:da:c4:5f:83:0a:e0:63:6d:a7: e4:74:60:e3:d3:4b:6d:34:02:2e:fd:34:9d:eb:6d:5e:d1:02: 7e:97:47:7c:60:d3:02:90:1c:97:98:78:50:84:4b:56:55:26: e3:65:65:45:0c:12:82:f8:de:91:8a:4f:98:5f:de:1f:9e:f8: e8:79:02:d6:9e:8a:8e:62:cb:c2:ee:c9:f4:39:ec:3d:75:8b: c8:a7:96:8d:df:95:6e:6f:87:7d:b0:56:fb:e9:3d:c9:ae:65: b7:2f:7a:77:c3:aa:10:13:72:82:fe:e2:eb:65:74:49:55:0d: 35:6f:6f:11:4b:00:1e:06:f1:38:a5:29:0d:2f:2d:5e:3b:a8: 45:02:35:ce:c8:28:8e:ec:8e:3f:ca:4a:d9:2b:66:77:8a:21: cb:ed:76:50:40:24:26:c6:e5:a9:dc:c8:12:2f:08:ce:97:2a: 71:a0:eb:95:51:19:95:e1:eb:f8:01:ea:6f:3d:9b:2f:db:04: 9c:fe:d4:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKyQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDMzMzYxMTAvBgNVBAUTKEU0NDJGOTk1NTlBQzFCQTg3RUUxMzQ4QjJGQzdBRjBB MjJGRkIyNjEwHhcNMjUwOTA0MTUzNzA4WhcNMjUwOTExMTUzNzA4WjAYMRYwFAYD VQQDEw02OGI5YjIyNC05ODdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzsj5kE7yY9yRv6DQwpLhlVcLf0I1U6eVYQ1HLbuEBZW7pX34IrXNTOGx3hU+ KjIOuM8p6Q6WlyKEqQoDtr/hPmcTCXj2HkiutUXH++Qs5CslX+sVnMaWscdKn2wo Dv2r1BWztX0d7ffRsvIKSoU2wG/omvWTnlKdbsjbEXE3gimwv/uW93sw7Ejc2g5f iiIO70ykYpqDlp0W4t4Y1OQnf4U/jm7V19BEDAkEpnSFSGmQPzoKYOgai2+3ZTJc TUt7W2miHoB3OV8uI04wWPjPA+dc9CkgdE7sjdtJ7PnSaVG7Z5197ybWQSbJ8CyH StgisdJ5MHWm7or8W5DrlxNzlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF/l9yIz bmezO44XXtaPp4r4NImGMB8GA1UdIwQYMBaAFORC+ZVZrBuofuE0iy/Hrwoi/7Jh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzMzNi84RUU3RkMxRTA4 NTMxMUU0QjAyMzlFNjFDNEY5QUUwMi81RUw1bFZtc0c2aC00VFNMTDhldkNpTF9z bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVFTDVsVm1zRzZoLTRUU0xMOGV2Q2lMX3NtRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzMzNi84RUU3RkMxRTA4NTMxMUU0QjAyMzlFNjFDNEY5QUUwMi81RUw1bFZtc0c2 aC00VFNMTDhldkNpTF9zbUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATPoYyDJSXhbL60qbg0c8XMWnzz14eAmxJL75oGwmW7uvcysuoPSku vh/9r3Zs9kpx8Mx964NGTTzb6fH4rhDaxF+DCuBjbafkdGDj00ttNAIu/TSd621e 0QJ+l0d8YNMCkByXmHhQhEtWVSbjZWVFDBKC+N6Rik+YX94fnvjoeQLWnoqOYsvC 7sn0Oew9dYvIp5aN35Vub4d9sFb76T3JrmW3L3p3w6oQE3KC/uLrZXRJVQ01b28R SwAeBvE4pSkNLy1eO6hFAjXOyCiO7I4/ykrZK2Z3iiHL7XZQQCQmxuWp3MgSLwjO lypxoOuVURmV4ev4AepvPZsv2wSc/tRx -----END CERTIFICATE-----Generated at Sat Sep 6 08:09:47 2025 by rpki-client