$ rpki-client -vvf rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.mft File: 5rsDqligwnDrZrPq6yQI__q6Xsc.mft (raw, json) Hash identifier: fq9KDyfnvd6KBIzE+eYvqu9FP/mJrq6BDK51P+D9pRE= Subject key identifier: 70:97:84:20:99:84:66:39:2C:F0:2D:7C:C9:B2:96:5C:6B:6D:6A:CC Authority key identifier: E6:BB:03:AA:58:A0:C2:70:EB:66:B3:EA:EB:24:08:FF:FA:BA:5E:C7 Certificate issuer: /CN=A914D2BF/serialNumber=E6BB03AA58A0C270EB66B3EAEB2408FFFABA5EC7 Certificate serial: 01D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rsDqligwnDrZrPq6yQI__q6Xsc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.mft Manifest number: 01CE Signing time: Tue 09 Sep 2025 02:58:48 +0000 Manifest this update: Tue 09 Sep 2025 02:58:47 +0000 Manifest next update: Tue 16 Sep 2025 02:58:47 +0000 Files and hashes: 1: 5rsDqligwnDrZrPq6yQI__q6Xsc.crl (hash: dVcd6iHJGvdDbSrHORo2Tb+svWXL0QLwx8XBicighUY=) 2: AEF266ECD34811EDAD96D95DC4F9AE02.roa (hash: KXSCbuQLHG9xWL+hihrwdJUS/R0sgZW/C4dlIANzg14=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.crl rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rsDqligwnDrZrPq6yQI__q6Xsc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 02:58:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 466 (0x1d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D2BF, serialNumber=E6BB03AA58A0C270EB66B3EAEB2408FFFABA5EC7 Validity Not Before: Sep 9 02:58:47 2025 GMT Not After : Sep 16 02:58:47 2025 GMT Subject: CN=68bf97e8-fa72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:06:b3:ab:01:f0:76:b8:3e:f3:08:cd:a8:35: a5:77:94:0e:97:e6:e8:87:a4:e0:de:11:2f:f1:9b: fb:3d:01:d7:84:41:47:1f:33:f2:34:19:8c:c5:09: 53:28:c4:99:27:6b:6f:dc:51:56:b4:4a:38:af:df: 9a:9f:ca:a2:9e:d9:2a:bc:36:09:e8:be:be:bb:ff: 32:f5:57:ae:7d:b6:9b:a9:24:8f:45:f4:9f:06:96: 30:77:40:13:40:91:da:7d:a1:d2:5f:ee:b3:e9:a2: ed:9f:e7:d5:8a:9a:94:a8:43:56:b3:02:5f:1b:86: f6:dd:96:f2:7f:2b:c8:4a:31:9c:93:a8:46:0d:33: a7:19:e4:99:b6:17:d3:1d:9e:ae:cc:55:a1:4c:44: 9e:9f:d1:dd:aa:ed:d9:e4:73:8f:ee:18:45:86:62: 17:18:ca:b9:90:d1:01:3a:8d:92:4d:39:e0:c8:3a: 2b:fe:63:29:4f:73:73:4a:0b:8b:e8:10:5b:62:39: f3:c6:7e:b7:9e:2d:e6:00:06:98:3e:cf:42:3c:88: a4:25:0f:b8:ad:75:06:31:71:dd:f8:76:bf:ba:81: 09:2b:ad:29:65:8d:83:c6:d6:1b:c6:a5:cd:f6:5d: 02:62:76:8d:d0:ed:a6:48:17:f0:16:55:86:5f:df: bc:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:97:84:20:99:84:66:39:2C:F0:2D:7C:C9:B2:96:5C:6B:6D:6A:CC X509v3 Authority Key Identifier: keyid:E6:BB:03:AA:58:A0:C2:70:EB:66:B3:EA:EB:24:08:FF:FA:BA:5E:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rsDqligwnDrZrPq6yQI__q6Xsc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:02:c6:60:19:52:62:c0:4f:73:d3:dd:20:fc:ac:9e:8d:cd: 62:d5:73:a5:cb:2b:17:bd:9e:0d:22:56:98:31:78:5c:a7:00: 7e:56:7f:66:ff:b6:9c:ab:6b:a7:d1:7b:ed:76:3b:37:e0:72: 4f:0f:b7:f7:41:fa:00:7a:b0:a0:27:50:9d:e0:00:d4:c5:ee: 4c:20:59:16:55:62:a8:b2:34:2f:8b:be:c1:ab:c1:56:64:93: ec:8b:61:d5:6c:e7:96:d9:97:20:1d:31:6e:fa:15:c2:74:a7: 6a:31:39:fa:35:ac:ba:d1:6c:26:6e:b1:f9:cc:24:19:93:0c: 85:d6:a4:4d:28:cf:e8:b9:4c:a3:94:05:dd:27:d0:79:73:85: be:87:a9:be:10:1b:24:32:5f:99:1a:db:89:cc:d7:f5:39:c8: 75:b5:ba:0d:84:02:77:9d:80:10:40:94:9c:aa:b4:ec:07:15: fc:62:04:52:b3:e7:9a:09:4b:9c:c6:71:03:09:ea:32:ae:21: 53:2d:44:8a:22:94:34:eb:a1:ac:74:fa:31:25:99:01:7b:7a: 23:d2:3a:84:bd:80:1d:d8:ba:4d:8b:6c:16:e7:a3:44:48:f9: 49:9b:e4:20:3f:fe:89:ad:18:82:c4:1c:18:f3:82:6b:ba:5a: de:6f:a0:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQyQkYxMTAvBgNVBAUTKEU2QkIwM0FBNThBMEMyNzBFQjY2QjNFQUVCMjQwOEZG RkFCQTVFQzcwHhcNMjUwOTA5MDI1ODQ3WhcNMjUwOTE2MDI1ODQ3WjAYMRYwFAYD VQQDEw02OGJmOTdlOC1mYTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsAazqwHwdrg+8wjNqDWld5QOl+boh6Tg3hEv8Zv7PQHXhEFHHzPyNBmMxQlT KMSZJ2tv3FFWtEo4r9+an8qintkqvDYJ6L6+u/8y9VeufbabqSSPRfSfBpYwd0AT QJHafaHSX+6z6aLtn+fVipqUqENWswJfG4b23ZbyfyvISjGck6hGDTOnGeSZthfT HZ6uzFWhTESen9Hdqu3Z5HOP7hhFhmIXGMq5kNEBOo2STTngyDor/mMpT3NzSguL 6BBbYjnzxn63ni3mAAaYPs9CPIikJQ+4rXUGMXHd+Ha/uoEJK60pZY2DxtYbxqXN 9l0CYnaN0O2mSBfwFlWGX9+8lQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHCXhCCZ hGY5LPAtfMmyllxrbWrMMB8GA1UdIwQYMBaAFOa7A6pYoMJw62az6uskCP/6ul7H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDJCRi8yQTcxRTZCQ0Qz NDQxMUVEOEUyQzU0NjRDNEY5QUUwMi81cnNEcWxpZ3duRHJaclBxNnlRSV9fcTZY c2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVyc0RxbGlnd25EclpyUHE2eVFJX19xNlhzYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDJCRi8yQTcxRTZCQ0QzNDQxMUVEOEUyQzU0NjRDNEY5QUUwMi81cnNEcWxpZ3du RHJaclBxNnlRSV9fcTZYc2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZAsZgGVJiwE9z090g/Kyejc1i1XOlyysXvZ4NIlaYMXhcpwB+Vn9m /7acq2un0Xvtdjs34HJPD7f3QfoAerCgJ1Cd4ADUxe5MIFkWVWKosjQvi77Bq8FW ZJPsi2HVbOeW2ZcgHTFu+hXCdKdqMTn6Nay60WwmbrH5zCQZkwyF1qRNKM/ouUyj lAXdJ9B5c4W+h6m+EBskMl+ZGtuJzNf1Och1tboNhAJ3nYAQQJScqrTsBxX8YgRS s+eaCUucxnEDCeoyriFTLUSKIpQ066GsdPoxJZkBe3oj0jqEvYAd2LpNi2wW56NE SPlJm+QgP/6JrRiCxBwY84Jrulreb6Cx -----END CERTIFICATE-----Generated at Tue Sep 9 13:25:22 2025 by rpki-client