$ rpki-client -vvf rpki.apnic.net/member_repository/A914C4D7/99D9153AB79011E9BEE8DD34C4F9AE02/5viFuMHmNK45nsq4FzoD245MEpQ.mft File: 5viFuMHmNK45nsq4FzoD245MEpQ.mft (raw, json) Hash identifier: qpnxWfqLyOmlz3PPtPz+Ins7QYQ+X2HUQJKWQ5pVhOk= Subject key identifier: 39:30:CF:3A:5D:58:55:49:6C:ED:41:50:9F:1B:1D:6A:31:5F:C3:46 Authority key identifier: E6:F8:85:B8:C1:E6:34:AE:39:9E:CA:B8:17:3A:03:DB:8E:4C:12:94 Certificate issuer: /CN=A914C4D7/serialNumber=E6F885B8C1E634AE399ECAB8173A03DB8E4C1294 Certificate serial: 0E0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5viFuMHmNK45nsq4FzoD245MEpQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C4D7/99D9153AB79011E9BEE8DD34C4F9AE02/5viFuMHmNK45nsq4FzoD245MEpQ.mft Manifest number: 0E05 Signing time: Thu 18 Sep 2025 18:01:19 +0000 Manifest this update: Thu 18 Sep 2025 18:01:18 +0000 Manifest next update: Thu 25 Sep 2025 18:01:18 +0000 Files and hashes: 1: 5viFuMHmNK45nsq4FzoD245MEpQ.crl (hash: 9FzBgdQSx3MaaMRM6K6p2KuAArkD/M/nazhw/TZN83s=) 2: 1801797EB79211E986129837C4F9AE02.roa (hash: I7CEbkBg9Av7yOv0PNqj77FDrgxZjjIl1US16C5a7sQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C4D7/99D9153AB79011E9BEE8DD34C4F9AE02/5viFuMHmNK45nsq4FzoD245MEpQ.crl rsync://rpki.apnic.net/member_repository/A914C4D7/99D9153AB79011E9BEE8DD34C4F9AE02/5viFuMHmNK45nsq4FzoD245MEpQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5viFuMHmNK45nsq4FzoD245MEpQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 18:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3598 (0xe0e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C4D7, serialNumber=E6F885B8C1E634AE399ECAB8173A03DB8E4C1294 Validity Not Before: Sep 18 18:01:18 2025 GMT Not After : Sep 25 18:01:18 2025 GMT Subject: CN=68cc48ee-df03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:71:db:8e:7e:80:4e:5d:83:22:ef:85:91:d6: 36:83:fc:b1:c0:31:4b:f1:30:78:82:87:a8:a5:cc: e7:94:86:c5:6a:e1:88:fd:57:1c:f4:a3:09:92:9b: 9f:dd:e2:60:0d:44:d3:63:cb:85:f1:54:17:7c:4e: de:e3:6f:f3:c6:7a:b5:fa:8e:47:78:86:fa:91:ee: 20:0d:49:e1:b5:01:28:d4:38:73:92:8e:34:6b:cf: 3d:15:25:72:c1:3e:00:55:cb:5b:6f:ec:18:01:e4: 08:4f:e9:9a:f2:91:aa:2d:77:a0:1b:5c:1e:7c:53: a7:e7:a5:92:bb:8f:fd:69:85:9e:71:a6:1c:a7:aa: d9:bb:29:ed:d8:88:b9:e5:13:e7:9f:8f:36:dd:5f: c2:75:95:50:f6:1d:29:95:be:e0:bf:f1:63:aa:8f: 4c:59:8f:85:b6:27:91:fb:e3:8b:0b:cf:40:28:8b: 5c:53:51:b5:4c:e5:e7:4c:6e:14:37:f5:86:9c:95: 6f:e9:e8:95:50:3c:af:6b:21:4f:c0:7a:ed:bd:47: 10:9d:a1:68:5c:8d:44:1b:43:3d:18:43:cc:ef:54: b5:49:68:7c:62:7a:7f:a2:d5:85:6d:e4:0d:86:c5: c9:6e:fa:8b:2f:4d:9e:2a:4a:6a:50:0a:3c:d8:23: e1:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:30:CF:3A:5D:58:55:49:6C:ED:41:50:9F:1B:1D:6A:31:5F:C3:46 X509v3 Authority Key Identifier: keyid:E6:F8:85:B8:C1:E6:34:AE:39:9E:CA:B8:17:3A:03:DB:8E:4C:12:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C4D7/99D9153AB79011E9BEE8DD34C4F9AE02/5viFuMHmNK45nsq4FzoD245MEpQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5viFuMHmNK45nsq4FzoD245MEpQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C4D7/99D9153AB79011E9BEE8DD34C4F9AE02/5viFuMHmNK45nsq4FzoD245MEpQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:27:8d:cc:fc:ea:10:0b:89:84:14:e7:df:fc:3c:ab:23:d7: 29:08:5a:e3:3a:44:2a:b1:fb:7a:a4:4f:16:2d:eb:dc:22:ea: 52:2e:74:5d:0a:c5:cd:67:10:c9:1e:f9:88:ba:80:cb:6e:f8: 42:8b:05:e6:f1:88:88:72:ae:3d:2e:e2:7f:76:d4:ab:8c:ae: 39:8a:be:a5:e9:a0:97:60:7e:0e:aa:d9:24:e8:5e:e8:26:d6: 6d:ca:b6:a5:0d:9c:8e:60:a3:87:2b:62:a1:38:5e:9f:4b:d3: 75:9c:d2:ec:ca:74:31:5b:5e:c8:79:a8:be:ab:25:7e:75:30: 17:2a:51:68:3f:49:33:ae:e2:a8:48:be:8d:5e:9f:7d:70:c6: 88:8d:f7:f5:c2:48:70:30:4c:42:eb:0b:e3:0b:65:10:61:4d: b0:7a:9f:68:ad:e6:56:51:5f:14:49:2f:65:94:d6:5f:b4:43: 3c:78:0a:16:8e:a1:9d:09:8c:e1:63:61:8e:33:4d:42:30:66: f7:5b:46:79:b5:39:23:49:75:53:de:61:70:da:03:56:36:8b: a4:e5:33:aa:13:e1:3d:f1:1d:d6:64:cf:f5:41:2c:88:7c:63: 3e:5d:7c:99:cd:11:b6:11:c0:aa:35:f8:46:5f:14:df:8e:08: 09:bf:9a:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDg4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM0RDcxMTAvBgNVBAUTKEU2Rjg4NUI4QzFFNjM0QUUzOTlFQ0FCODE3M0EwM0RC OEU0QzEyOTQwHhcNMjUwOTE4MTgwMTE4WhcNMjUwOTI1MTgwMTE4WjAYMRYwFAYD VQQDEw02OGNjNDhlZS1kZjAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtnHbjn6ATl2DIu+FkdY2g/yxwDFL8TB4goeopcznlIbFauGI/Vcc9KMJkpuf 3eJgDUTTY8uF8VQXfE7e42/zxnq1+o5HeIb6ke4gDUnhtQEo1Dhzko40a889FSVy wT4AVctbb+wYAeQIT+ma8pGqLXegG1wefFOn56WSu4/9aYWecaYcp6rZuynt2Ii5 5RPnn4823V/CdZVQ9h0plb7gv/Fjqo9MWY+FtieR++OLC89AKItcU1G1TOXnTG4U N/WGnJVv6eiVUDyvayFPwHrtvUcQnaFoXI1EG0M9GEPM71S1SWh8Ynp/otWFbeQN hsXJbvqLL02eKkpqUAo82CPhjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDkwzzpd WFVJbO1BUJ8bHWoxX8NGMB8GA1UdIwQYMBaAFOb4hbjB5jSuOZ7KuBc6A9uOTBKU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzRENy85OUQ5MTUzQUI3 OTAxMUU5QkVFOEREMzRDNEY5QUUwMi81dmlGdU1IbU5LNDVuc3E0RnpvRDI0NU1F cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV2aUZ1TUhtTks0NW5zcTRGem9EMjQ1TUVwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzRENy85OUQ5MTUzQUI3OTAxMUU5QkVFOEREMzRDNEY5QUUwMi81dmlGdU1IbU5L NDVuc3E0RnpvRDI0NU1FcFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDBJ43M/OoQC4mEFOff/DyrI9cpCFrjOkQqsft6pE8WLevcIupSLnRd CsXNZxDJHvmIuoDLbvhCiwXm8YiIcq49LuJ/dtSrjK45ir6l6aCXYH4Oqtkk6F7o JtZtyralDZyOYKOHK2KhOF6fS9N1nNLsynQxW17Ieai+qyV+dTAXKlFoP0kzruKo SL6NXp99cMaIjff1wkhwMExC6wvjC2UQYU2wep9oreZWUV8USS9llNZftEM8eAoW jqGdCYzhY2GOM01CMGb3W0Z5tTkjSXVT3mFw2gNWNouk5TOqE+E98R3WZM/1QSyI fGM+XXyZzRG2EcCqNfhGXxTfjggJv5pQ -----END CERTIFICATE-----Generated at Fri Sep 19 00:40:19 2025 by rpki-client