$ rpki-client -vvf rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.mft File: XVXxUJtvA0JNKUT4Efhpk4CZu7w.mft (raw, json) Hash identifier: CNi6ML0jBYwQMlpsXw8NV5hKhS9uI0pLNB8TU4JntJ4= Subject key identifier: 5B:21:8B:C7:54:3D:C5:1F:86:4A:BC:04:4A:FC:A7:9D:05:DE:6E:2E Authority key identifier: 5D:55:F1:50:9B:6F:03:42:4D:29:44:F8:11:F8:69:93:80:99:BB:BC Certificate issuer: /CN=A914F870/serialNumber=5D55F1509B6F03424D2944F811F869938099BBBC Certificate serial: 5F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XVXxUJtvA0JNKUT4Efhpk4CZu7w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.mft Manifest number: 5E Signing time: Wed 23 Jul 2025 07:27:48 +0000 Manifest this update: Wed 23 Jul 2025 07:27:47 +0000 Manifest next update: Wed 30 Jul 2025 07:27:47 +0000 Files and hashes: 1: XVXxUJtvA0JNKUT4Efhpk4CZu7w.crl (hash: 33fX9UbGkNjwkcacKpb7yHUQolCvnq+jwWz/3ieQWh0=) 2: 212A832AD7E311EF86266212C4F9AE02.roa (hash: OADH0Zf3ANJ0fVSGo4++5SGmG3UFA33H5Jy/cHOt0/k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.crl rsync://rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XVXxUJtvA0JNKUT4Efhpk4CZu7w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 07:27:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 95 (0x5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F870, serialNumber=5D55F1509B6F03424D2944F811F869938099BBBC Validity Not Before: Jul 23 07:27:47 2025 GMT Not After : Jul 30 07:27:47 2025 GMT Subject: CN=68808ef3-ccb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c5:56:e4:08:14:09:21:5f:b9:37:81:08:ff: a1:c5:7f:7d:99:5b:f9:fe:79:a0:4a:95:47:6d:73: 47:5c:ff:22:7b:50:6f:8f:f7:de:f5:d4:c1:d3:94: 3a:6d:1d:38:27:37:5d:c5:3e:ee:47:26:88:d9:d5: 14:92:3f:a2:ba:2f:9d:fe:dc:3c:47:aa:38:81:cc: 8f:98:42:46:63:cd:37:48:9b:2f:d4:d4:fc:d5:c5: 7a:32:52:72:c3:30:13:56:d1:98:d4:43:ec:da:7c: 9e:3d:5b:4b:6c:34:59:a8:42:16:82:c1:c5:24:b5: 5c:7d:4c:81:a2:e2:08:64:15:4f:b3:66:6f:f7:f4: 59:1f:c7:d4:3a:e3:55:df:cc:54:9f:c4:31:3b:83: 54:9f:cf:27:1d:49:c3:d3:64:32:d7:68:22:ff:1f: cf:8b:02:da:4c:a0:5d:3e:ec:48:97:32:40:c2:dd: b2:77:7a:29:dd:3b:2d:51:80:f8:5a:4e:ea:4b:2d: 40:27:4f:fb:0f:94:78:b8:7a:31:2b:0c:31:ea:2f: d2:91:5f:74:f7:d7:1e:3f:d8:35:33:8e:ed:68:3f: 3e:96:01:be:eb:b9:76:97:e7:6b:6c:01:b7:15:88: b2:23:a8:bf:9a:99:48:fb:e2:ca:d4:87:59:a0:0c: ce:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:21:8B:C7:54:3D:C5:1F:86:4A:BC:04:4A:FC:A7:9D:05:DE:6E:2E X509v3 Authority Key Identifier: keyid:5D:55:F1:50:9B:6F:03:42:4D:29:44:F8:11:F8:69:93:80:99:BB:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XVXxUJtvA0JNKUT4Efhpk4CZu7w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:50:79:8a:b2:61:b0:5e:76:7b:63:36:45:6b:a6:c1:d5:a1: a3:0a:34:60:c6:b6:e7:69:c5:f3:ae:56:e8:3d:74:96:59:f9: 5f:27:73:98:fb:c7:36:eb:9b:d4:a2:85:74:7b:e1:88:9d:01: f1:98:4d:7f:5f:6e:3a:a1:9f:7e:59:51:c0:a0:05:65:f2:15: 9f:27:9f:61:81:8b:b8:82:40:2e:b5:6c:4a:7c:bc:86:ed:95: ac:ad:04:d5:0e:70:32:ce:9e:bb:72:06:63:0d:9e:5e:ae:6e: 9e:bb:ee:d5:b1:c5:18:4e:aa:8e:bd:0d:5b:c6:c6:44:48:00: 56:df:a1:39:24:49:d1:ea:86:55:3d:7f:ba:df:fa:b2:ec:f2: 2d:43:2e:f7:40:d8:57:19:4f:4d:89:e4:b4:a6:43:53:c8:3c: d8:7f:09:3f:14:2f:26:96:b9:dd:41:7a:fc:24:e8:95:fd:16: 14:54:e4:68:1b:f1:74:c1:ab:9f:cb:f0:93:25:39:da:e9:be: fa:8c:a4:14:50:b2:15:6d:d8:c9:ab:bc:dd:20:01:91:d4:e3: 96:b2:8a:4c:c7:0a:05:e2:6e:b2:08:16:af:be:25:96:30:99: 9c:fd:c2:7c:f5:27:af:f7:ee:76:46:af:5f:a8:83:ab:d4:1c: da:92:c8:81 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 Rjg3MDExMC8GA1UEBRMoNUQ1NUYxNTA5QjZGMDM0MjREMjk0NEY4MTFGODY5OTM4 MDk5QkJCQzAeFw0yNTA3MjMwNzI3NDdaFw0yNTA3MzAwNzI3NDdaMBgxFjAUBgNV BAMTDTY4ODA4ZWYzLWNjYjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCgxVbkCBQJIV+5N4EI/6HFf32ZW/n+eaBKlUdtc0dc/yJ7UG+P99711MHTlDpt HTgnN13FPu5HJojZ1RSSP6K6L53+3DxHqjiBzI+YQkZjzTdImy/U1PzVxXoyUnLD MBNW0ZjUQ+zafJ49W0tsNFmoQhaCwcUktVx9TIGi4ghkFU+zZm/39Fkfx9Q641Xf zFSfxDE7g1SfzycdScPTZDLXaCL/H8+LAtpMoF0+7EiXMkDC3bJ3eindOy1RgPha TupLLUAnT/sPlHi4ejErDDHqL9KRX3T31x4/2DUzju1oPz6WAb7ruXaX52tsAbcV iLIjqL+amUj74srUh1mgDM7JAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWyGLx1Q9 xR+GSrwESvynnQXebi4wHwYDVR0jBBgwFoAUXVXxUJtvA0JNKUT4Efhpk4CZu7ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRGODcwL0M5MjQyNDZBRDdF MjExRUZBRjBCM0I3REM0RjlBRTAyL1hWWHhVSnR2QTBKTktVVDRFZmhwazRDWnU3 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWFZYeFVKdHZBMEpOS1VUNEVmaHBrNENadTd3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRG ODcwL0M5MjQyNDZBRDdFMjExRUZBRjBCM0I3REM0RjlBRTAyL1hWWHhVSnR2QTBK TktVVDRFZmhwazRDWnU3dy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEtQeYqyYbBedntjNkVrpsHVoaMKNGDGtudpxfOuVug9dJZZ+V8nc5j7 xzbrm9SihXR74YidAfGYTX9fbjqhn35ZUcCgBWXyFZ8nn2GBi7iCQC61bEp8vIbt laytBNUOcDLOnrtyBmMNnl6ubp677tWxxRhOqo69DVvGxkRIAFbfoTkkSdHqhlU9 f7rf+rLs8i1DLvdA2FcZT02J5LSmQ1PIPNh/CT8ULyaWud1Bevwk6JX9FhRU5Ggb 8XTBq5/L8JMlOdrpvvqMpBRQshVt2MmrvN0gAZHU45ayikzHCgXibrIIFq++JZYw mZz9wnz1J6/37nZGr1+og6vUHNqSyIE= -----END CERTIFICATE-----Generated at Thu Jul 24 05:04:37 2025 by rpki-client