$ rpki-client -vvf rpki.apnic.net/member_repository/A914530B/9E75DDB6B79A11EFA0D6975DC4F9AE02/53p5hBmz84yLAlkKKUx7NffDREw.mft File: 53p5hBmz84yLAlkKKUx7NffDREw.mft (raw, json) Hash identifier: No7CV/ZkMy32OIf+1sQVR/LeCz2cfKtmg1qUJThyS00= Subject key identifier: 85:5F:D2:6A:57:5A:89:BE:0A:80:36:C4:5F:52:C4:33:DB:B0:12:48 Authority key identifier: E7:7A:79:84:19:B3:F3:8C:8B:02:59:0A:29:4C:7B:35:F7:C3:44:4C Certificate issuer: /CN=A914530B/serialNumber=E77A798419B3F38C8B02590A294C7B35F7C3444C Certificate serial: 8E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/53p5hBmz84yLAlkKKUx7NffDREw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914530B/9E75DDB6B79A11EFA0D6975DC4F9AE02/53p5hBmz84yLAlkKKUx7NffDREw.mft Manifest number: 8C Signing time: Fri 05 Sep 2025 07:03:45 +0000 Manifest this update: Fri 05 Sep 2025 07:03:45 +0000 Manifest next update: Fri 12 Sep 2025 07:03:45 +0000 Files and hashes: 1: 53p5hBmz84yLAlkKKUx7NffDREw.crl (hash: zQiYo++fLK0W9McEX835Wgazs+szKer2/JMrUDY4Z5U=) 2: 87A33C66B79D11EF9A384C65C4F9AE02.roa (hash: PmWdGEFbgxUM5JARv+3955i+yLCgnSi8KLnrb7A4Hd0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914530B/9E75DDB6B79A11EFA0D6975DC4F9AE02/53p5hBmz84yLAlkKKUx7NffDREw.crl rsync://rpki.apnic.net/member_repository/A914530B/9E75DDB6B79A11EFA0D6975DC4F9AE02/53p5hBmz84yLAlkKKUx7NffDREw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/53p5hBmz84yLAlkKKUx7NffDREw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 07:03:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 142 (0x8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914530B, serialNumber=E77A798419B3F38C8B02590A294C7B35F7C3444C Validity Not Before: Sep 5 07:03:45 2025 GMT Not After : Sep 12 07:03:45 2025 GMT Subject: CN=68ba8b51-d189 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:54:b9:4b:89:73:be:c1:99:5c:6f:d5:2e:21: 93:ce:10:f9:40:b3:c3:ae:b3:17:ef:fc:22:aa:4c: 3b:fb:8a:63:27:16:39:64:51:cc:eb:cc:d5:48:f6: 92:fa:b8:82:d4:83:7f:52:49:80:de:2a:5f:ed:1d: 5c:23:6a:a0:d6:4d:6b:61:9c:bb:b5:76:a9:a8:48: 67:43:41:67:b4:c7:b3:8d:d6:35:7d:a7:4c:98:f7: af:05:71:f5:ae:77:07:34:a2:09:0d:2c:c1:cd:e1: 98:c6:f2:09:df:2f:14:87:2d:74:92:72:61:99:48: 54:e9:26:72:5a:5e:a7:55:70:d4:89:d2:5a:16:b2: cf:6c:4c:33:4c:d9:6c:8c:3a:d4:67:b9:64:ff:1e: 64:3f:9a:a2:d4:6b:d4:e0:33:5c:ea:b3:15:35:f7: 70:d5:c6:33:2a:3c:e3:83:38:f4:5d:dc:97:f6:22: f2:9d:68:eb:8e:de:94:07:5d:10:f6:b6:a4:50:25: 19:15:d5:b8:bc:5b:46:e0:c5:b8:14:c4:20:c9:fb: c0:3f:f0:3d:e5:b5:3d:35:64:9c:a8:d0:1f:90:8b: e1:c5:a3:ed:05:cd:aa:4f:1f:7b:0d:82:8d:91:7f: 5c:0f:78:f7:92:ce:76:65:ff:a9:37:df:c6:26:90: 1e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:5F:D2:6A:57:5A:89:BE:0A:80:36:C4:5F:52:C4:33:DB:B0:12:48 X509v3 Authority Key Identifier: keyid:E7:7A:79:84:19:B3:F3:8C:8B:02:59:0A:29:4C:7B:35:F7:C3:44:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914530B/9E75DDB6B79A11EFA0D6975DC4F9AE02/53p5hBmz84yLAlkKKUx7NffDREw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/53p5hBmz84yLAlkKKUx7NffDREw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914530B/9E75DDB6B79A11EFA0D6975DC4F9AE02/53p5hBmz84yLAlkKKUx7NffDREw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:ca:32:00:f9:b5:06:e5:18:94:88:9c:ba:aa:70:bd:dd:e1: 1f:6c:5b:7b:d5:68:cb:11:0a:68:0c:55:ea:f2:14:20:69:0c: 02:77:70:ce:27:db:b9:70:e2:66:97:34:cc:79:25:04:9b:9a: ca:f3:da:38:4f:07:e3:c8:6c:c0:4b:1a:73:73:a8:55:5b:1b: 50:98:77:38:e7:4b:6c:de:d7:25:c7:a9:68:86:b8:3e:c5:6c: 92:ad:c7:a3:b2:c8:d3:6c:03:48:17:19:b7:04:1c:68:6b:83: 8b:09:9b:2d:f3:c7:5b:6f:74:06:c2:a1:6c:a1:1f:a7:ec:59: ac:0a:8e:9f:de:2e:f0:59:1f:a3:06:25:8a:56:99:cc:58:44: 03:f6:fe:a5:af:78:8b:f5:91:8a:66:6a:e8:eb:c5:0d:2d:d7: 89:aa:d7:05:f1:1c:9a:47:df:64:1f:a5:7c:ea:27:1c:fa:5a: ed:e4:fd:10:2d:5d:80:aa:72:ba:d0:a5:e4:d2:13:f6:43:21: e3:15:c3:d1:7b:da:94:58:d7:af:a5:bd:55:06:65:44:bb:0a: 80:e2:66:5b:5d:8e:6a:61:cd:5d:df:4d:81:86:58:4b:06:fe: 16:9d:b3:12:7e:db:57:47:98:54:92:90:98:62:b3:30:70:f2: ac:c8:db:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDUzMEIxMTAvBgNVBAUTKEU3N0E3OTg0MTlCM0YzOEM4QjAyNTkwQTI5NEM3QjM1 RjdDMzQ0NEMwHhcNMjUwOTA1MDcwMzQ1WhcNMjUwOTEyMDcwMzQ1WjAYMRYwFAYD VQQDEw02OGJhOGI1MS1kMTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxVS5S4lzvsGZXG/VLiGTzhD5QLPDrrMX7/wiqkw7+4pjJxY5ZFHM68zVSPaS +riC1IN/UkmA3ipf7R1cI2qg1k1rYZy7tXapqEhnQ0FntMezjdY1fadMmPevBXH1 rncHNKIJDSzBzeGYxvIJ3y8Uhy10knJhmUhU6SZyWl6nVXDUidJaFrLPbEwzTNls jDrUZ7lk/x5kP5qi1GvU4DNc6rMVNfdw1cYzKjzjgzj0XdyX9iLynWjrjt6UB10Q 9rakUCUZFdW4vFtG4MW4FMQgyfvAP/A95bU9NWScqNAfkIvhxaPtBc2qTx97DYKN kX9cD3j3ks52Zf+pN9/GJpAesQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIVf0mpX Wom+CoA2xF9SxDPbsBJIMB8GA1UdIwQYMBaAFOd6eYQZs/OMiwJZCilMezX3w0RM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTMwQi85RTc1RERCNkI3 OUExMUVGQTBENjk3NURDNEY5QUUwMi81M3A1aEJtejg0eUxBbGtLS1V4N05mZkRS RXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzUzcDVoQm16ODR5TEFsa0tLVXg3TmZmRFJFdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTMwQi85RTc1RERCNkI3OUExMUVGQTBENjk3NURDNEY5QUUwMi81M3A1aEJtejg0 eUxBbGtLS1V4N05mZkRSRXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9yjIA+bUG5RiUiJy6qnC93eEfbFt71WjLEQpoDFXq8hQgaQwCd3DO J9u5cOJmlzTMeSUEm5rK89o4TwfjyGzASxpzc6hVWxtQmHc450ts3tclx6lohrg+ xWySrcejssjTbANIFxm3BBxoa4OLCZst88dbb3QGwqFsoR+n7FmsCo6f3i7wWR+j BiWKVpnMWEQD9v6lr3iL9ZGKZmro68UNLdeJqtcF8RyaR99kH6V86icc+lrt5P0Q LV2AqnK60KXk0hP2QyHjFcPRe9qUWNevpb1VBmVEuwqA4mZbXY5qYc1d302BhlhL Bv4WnbMSfttXR5hUkpCYYrMwcPKsyNvR -----END CERTIFICATE-----Generated at Sat Sep 6 21:01:23 2025 by rpki-client