$ rpki-client -vvf rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/L5rGimsA32BW9wq8WqxtuSCrGx0.mft File: L5rGimsA32BW9wq8WqxtuSCrGx0.mft (raw, json) Hash identifier: Ih1VCplJYTaIvkb2Kwr1DIuSj1jqmnEnxQHYbIqFiZs= Subject key identifier: 3C:8A:98:89:2A:05:AB:E0:EF:46:02:BA:89:F4:BA:08:2D:E9:C0:2E Authority key identifier: 2F:9A:C6:8A:6B:00:DF:60:56:F7:0A:BC:5A:AC:6D:B9:20:AB:1B:1D Certificate issuer: /CN=A9144266/serialNumber=2F9AC68A6B00DF6056F70ABC5AAC6DB920AB1B1D Certificate serial: 0549 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L5rGimsA32BW9wq8WqxtuSCrGx0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/L5rGimsA32BW9wq8WqxtuSCrGx0.mft Manifest number: 0541 Signing time: Wed 20 Aug 2025 23:35:26 +0000 Manifest this update: Wed 20 Aug 2025 23:35:25 +0000 Manifest next update: Wed 27 Aug 2025 23:35:25 +0000 Files and hashes: 1: L5rGimsA32BW9wq8WqxtuSCrGx0.crl (hash: BoxFX+/3BYsJUQs3QnYoXuz5cuUvjk6Cotjl/dBQr8M=) 2: 85EAFFD806F911EC9558C827C4F9AE02.roa (hash: 9v3EHVS6OF29hHJXAC8+0BpNbFO1DRfm0tNrOjvIm8c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/L5rGimsA32BW9wq8WqxtuSCrGx0.crl rsync://rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/L5rGimsA32BW9wq8WqxtuSCrGx0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L5rGimsA32BW9wq8WqxtuSCrGx0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 23:35:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1353 (0x549) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144266, serialNumber=2F9AC68A6B00DF6056F70ABC5AAC6DB920AB1B1D Validity Not Before: Aug 20 23:35:25 2025 GMT Not After : Aug 27 23:35:25 2025 GMT Subject: CN=68a65bbe-9f09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:99:61:a1:fc:08:74:04:d7:b2:9f:a5:0b:d2: 11:47:fb:e1:1b:95:a7:00:58:68:ac:42:ba:8b:e8: cc:b9:c9:63:38:fa:0f:be:50:3e:78:64:38:39:48: 92:33:44:5d:a3:27:2b:c5:9c:82:69:34:0a:6c:64: 62:d9:ec:d7:41:cb:db:3e:a6:be:21:81:04:7f:8e: f1:af:b0:36:d8:69:70:34:00:15:33:64:ed:9c:5c: fe:83:87:15:05:18:49:d0:dc:90:ec:6d:94:75:08: e1:3a:88:07:5b:ab:1c:39:13:46:52:06:43:64:75: e6:34:bc:47:7d:99:c2:31:3a:f8:27:15:27:3d:e0: 91:b3:42:0e:f6:be:38:0f:5b:5b:1a:dd:94:9f:04: 11:6b:cd:4f:9e:dd:99:75:15:0b:c4:fb:7f:4b:e8: 97:7e:a6:d8:3d:84:fb:dd:0d:62:b4:48:49:bb:00: 08:6b:d1:55:0f:3f:e9:8f:2c:88:28:8b:95:ae:08: 8a:b7:fb:d2:ff:b6:f2:a6:23:e9:2d:bc:e9:10:1c: 29:de:63:4b:54:5b:83:37:b5:74:a3:ef:c1:5a:15: ce:da:5e:3b:ec:10:ee:f3:d8:7b:98:fb:76:70:bc: 4e:61:8f:ba:e8:f9:1d:90:0c:d0:08:41:ec:1b:cc: 60:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:8A:98:89:2A:05:AB:E0:EF:46:02:BA:89:F4:BA:08:2D:E9:C0:2E X509v3 Authority Key Identifier: keyid:2F:9A:C6:8A:6B:00:DF:60:56:F7:0A:BC:5A:AC:6D:B9:20:AB:1B:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/L5rGimsA32BW9wq8WqxtuSCrGx0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L5rGimsA32BW9wq8WqxtuSCrGx0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/L5rGimsA32BW9wq8WqxtuSCrGx0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:5e:c3:77:79:87:df:5c:07:5c:3c:bd:d7:8d:3a:88:a2:ba: 65:d6:97:b5:dc:e6:a8:dc:53:3f:be:2c:3c:cc:1e:2a:03:89: 48:30:36:7d:df:c7:8d:92:23:99:4f:b0:82:29:97:25:b2:7a: e7:9a:d9:ff:ab:05:69:29:56:09:fa:05:87:a0:7b:96:a3:25: 18:4e:4d:39:40:bd:1e:a5:ac:5c:c0:13:29:4d:ee:58:cc:0e: 1c:18:fb:8b:9f:0f:85:f1:b6:e7:6b:20:ea:2f:a5:b2:33:77: 61:9e:5c:27:73:b3:8f:5b:7d:74:a0:2f:23:76:eb:a7:8d:66: 3a:ac:86:fc:76:9a:20:31:db:c2:37:05:50:d7:f9:2e:9b:75: 83:ae:5e:8e:07:57:b8:34:1f:c2:48:43:20:81:b6:c9:3f:ae: ac:f5:9c:4f:9c:47:f0:59:f1:19:8f:f7:8f:f7:17:0a:0f:42: a4:4c:f6:f1:26:74:55:af:f1:7b:34:1e:e1:96:c7:e9:5d:b8: 2d:4f:5c:28:4f:ca:ce:65:12:ed:63:c8:cd:5b:17:d1:80:39: d0:c8:db:19:a4:17:ee:66:dd:c6:db:67:0d:95:8d:21:d4:30: fb:14:30:51:3e:0a:77:30:a7:a8:c8:8f:11:c2:83:bc:d5:79: a0:05:dd:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQyNjYxMTAvBgNVBAUTKDJGOUFDNjhBNkIwMERGNjA1NkY3MEFCQzVBQUM2REI5 MjBBQjFCMUQwHhcNMjUwODIwMjMzNTI1WhcNMjUwODI3MjMzNTI1WjAYMRYwFAYD VQQDEw02OGE2NWJiZS05ZjA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvplhofwIdATXsp+lC9IRR/vhG5WnAFhorEK6i+jMucljOPoPvlA+eGQ4OUiS M0RdoycrxZyCaTQKbGRi2ezXQcvbPqa+IYEEf47xr7A22GlwNAAVM2TtnFz+g4cV BRhJ0NyQ7G2UdQjhOogHW6scORNGUgZDZHXmNLxHfZnCMTr4JxUnPeCRs0IO9r44 D1tbGt2UnwQRa81Pnt2ZdRULxPt/S+iXfqbYPYT73Q1itEhJuwAIa9FVDz/pjyyI KIuVrgiKt/vS/7bypiPpLbzpEBwp3mNLVFuDN7V0o+/BWhXO2l477BDu89h7mPt2 cLxOYY+66PkdkAzQCEHsG8xgEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDyKmIkq Bavg70YCuon0uggt6cAuMB8GA1UdIwQYMBaAFC+axoprAN9gVvcKvFqsbbkgqxsd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDI2Ni8wRTg1OEUyODA2 Q0IxMUVDOTlCMEVBM0JDNEY5QUUwMi9MNXJHaW1zQTMyQlc5d3E4V3F4dHVTQ3JH eDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0w1ckdpbXNBMzJCVzl3cThXcXh0dVNDckd4MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDI2Ni8wRTg1OEUyODA2Q0IxMUVDOTlCMEVBM0JDNEY5QUUwMi9MNXJHaW1zQTMy Qlc5d3E4V3F4dHVTQ3JHeDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbXsN3eYffXAdcPL3XjTqIorpl1pe13Oao3FM/viw8zB4qA4lIMDZ9 38eNkiOZT7CCKZclsnrnmtn/qwVpKVYJ+gWHoHuWoyUYTk05QL0epaxcwBMpTe5Y zA4cGPuLnw+F8bbnayDqL6WyM3dhnlwnc7OPW310oC8jduunjWY6rIb8dpogMdvC NwVQ1/kum3WDrl6OB1e4NB/CSEMggbbJP66s9ZxPnEfwWfEZj/eP9xcKD0KkTPbx JnRVr/F7NB7hlsfpXbgtT1woT8rOZRLtY8jNWxfRgDnQyNsZpBfuZt3G22cNlY0h 1DD7FDBRPgp3MKeoyI8RwoO81XmgBd17 -----END CERTIFICATE-----Generated at Fri Aug 22 16:28:45 2025 by rpki-client