$ rpki-client -vvf rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.mft File: 5eXRaKDhCW6hw_m3-OjXWOrqI_M.mft (raw, json) Hash identifier: 3tU4HcccC5FKT8lsiF/lGlv9Dgpogtxkwzd8/HMxsiE= Subject key identifier: 1C:E1:1A:AB:7F:51:19:E1:5F:5F:1D:5B:95:BE:90:AC:53:3F:62:09 Authority key identifier: E5:E5:D1:68:A0:E1:09:6E:A1:C3:F9:B7:F8:E8:D7:58:EA:EA:23:F3 Certificate issuer: /CN=A9165362/serialNumber=E5E5D168A0E1096EA1C3F9B7F8E8D758EAEA23F3 Certificate serial: 057A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eXRaKDhCW6hw_m3-OjXWOrqI_M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.mft Manifest number: 0557 Signing time: Mon 08 Sep 2025 23:35:27 +0000 Manifest this update: Mon 08 Sep 2025 23:35:27 +0000 Manifest next update: Mon 15 Sep 2025 23:35:27 +0000 Files and hashes: 1: 5eXRaKDhCW6hw_m3-OjXWOrqI_M.crl (hash: SGq4dWEmuocj7cRgZZ5Kk3lfCbvRWQUwIA5/Cncdy6M=) 2: 2C4993AA271B11EF97731F0BC4F9AE02.roa (hash: 510AYYtfzA2GESknsDswoMnwkXlbF/avHNUhiFeIBXA=) 3: 9CB324BA273111EF9F5B0860C4F9AE02.roa (hash: tuypvpB5BqOqFONJHnNDkY9wl1Vyxr2l9hApI1MYGj0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.crl rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eXRaKDhCW6hw_m3-OjXWOrqI_M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 23:35:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1402 (0x57a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165362, serialNumber=E5E5D168A0E1096EA1C3F9B7F8E8D758EAEA23F3 Validity Not Before: Sep 8 23:35:27 2025 GMT Not After : Sep 15 23:35:27 2025 GMT Subject: CN=68bf683f-25dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:2d:6a:2b:78:ec:a2:18:29:d6:b5:36:d7:de: cb:b8:46:90:1d:e1:03:ec:b8:d4:52:bc:a5:bf:c8: 46:85:2c:55:fe:5c:69:18:f7:b2:18:c1:b0:ef:1f: 30:1b:b3:d2:61:d6:71:1b:aa:89:ee:f9:c1:1a:ef: d1:73:a9:f2:c6:cf:0a:ee:5b:28:57:30:eb:ff:0d: e9:ef:ab:88:00:51:b7:ea:5b:e1:dd:17:bc:5a:e5: d1:e5:95:f1:e4:43:2e:e6:f5:7a:61:36:b8:dc:5b: e1:0c:db:66:7e:a0:ba:c0:1d:6b:2c:b9:83:86:73: ca:12:47:59:d1:e2:d0:5e:e3:c8:ec:6e:7d:05:5c: bb:83:eb:cd:b1:56:b9:b7:9f:70:41:89:65:54:34: 87:32:7e:dd:04:6f:78:3d:fc:bd:f4:88:41:a7:8b: f2:7b:54:f4:15:50:f7:d7:d9:e2:4d:af:74:fb:24: 81:22:ce:73:e9:32:0b:d4:68:3d:1b:46:d2:61:c8: 8d:0b:ca:48:82:ea:7c:3c:27:8d:93:d7:74:1b:d6: de:2a:ff:af:53:d7:a8:7c:92:9e:63:b3:15:a2:0d: 13:80:a5:f5:77:65:62:06:29:53:db:e8:b4:11:0c: 28:3d:65:e9:93:51:bd:63:4f:02:88:1f:15:5c:6d: 0c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:E1:1A:AB:7F:51:19:E1:5F:5F:1D:5B:95:BE:90:AC:53:3F:62:09 X509v3 Authority Key Identifier: keyid:E5:E5:D1:68:A0:E1:09:6E:A1:C3:F9:B7:F8:E8:D7:58:EA:EA:23:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eXRaKDhCW6hw_m3-OjXWOrqI_M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:36:bf:84:55:09:6f:68:40:0f:57:4e:1c:25:fe:96:51:08: 4b:f1:58:ec:c2:0f:ac:f8:4a:51:9b:9d:81:7a:b8:b7:3f:51: 5f:28:47:aa:49:df:20:ca:68:6f:3f:69:d5:4b:3f:95:8f:66: aa:73:48:60:0d:68:ed:48:e8:cd:c0:29:7d:1a:21:cc:fc:50: 4a:77:9d:3a:b2:2c:6b:cd:b2:f6:c7:81:a8:c1:55:f7:9a:75: 1b:4e:fc:24:bc:27:8a:d4:63:d5:94:65:9b:94:68:79:09:27: 4f:b3:be:0f:19:41:a4:92:95:df:92:da:dc:69:33:fa:c3:fb: ee:47:11:c2:e3:02:e3:cf:29:5c:da:df:99:ca:73:ef:77:19: ea:55:99:14:38:62:8f:67:4a:91:21:ed:74:2b:93:06:e6:55: c4:96:5a:22:83:aa:6e:46:d3:74:45:f7:a9:c2:03:5f:95:fa: 96:12:a3:40:c8:ec:aa:16:07:b4:be:36:3f:3c:8a:fe:94:d3: c5:03:e4:0a:70:d0:3e:f9:f6:dc:eb:b1:32:9f:01:95:4b:60: 8e:f8:03:42:28:67:e1:4a:c4:e0:78:14:4f:a8:4a:29:d5:ab: a3:d7:e4:1a:82:eb:04:aa:49:01:e4:85:84:ca:b5:55:9d:ec: 3e:3d:4e:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBXowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjUzNjIxMTAvBgNVBAUTKEU1RTVEMTY4QTBFMTA5NkVBMUMzRjlCN0Y4RThENzU4 RUFFQTIzRjMwHhcNMjUwOTA4MjMzNTI3WhcNMjUwOTE1MjMzNTI3WjAYMRYwFAYD VQQDEw02OGJmNjgzZi0yNWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3S1qK3jsohgp1rU2197LuEaQHeED7LjUUrylv8hGhSxV/lxpGPeyGMGw7x8w G7PSYdZxG6qJ7vnBGu/Rc6nyxs8K7lsoVzDr/w3p76uIAFG36lvh3Re8WuXR5ZXx 5EMu5vV6YTa43FvhDNtmfqC6wB1rLLmDhnPKEkdZ0eLQXuPI7G59BVy7g+vNsVa5 t59wQYllVDSHMn7dBG94Pfy99IhBp4vye1T0FVD319niTa90+ySBIs5z6TIL1Gg9 G0bSYciNC8pIgup8PCeNk9d0G9beKv+vU9eofJKeY7MVog0TgKX1d2ViBilT2+i0 EQwoPWXpk1G9Y08CiB8VXG0MsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBzhGqt/ URnhX18dW5W+kKxTP2IJMB8GA1UdIwQYMBaAFOXl0Wig4QluocP5t/jo11jq6iPz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTM2Mi9EOUNCRjgwQTEw QjMxMUVDQTMxREY4MkNDNEY5QUUwMi81ZVhSYUtEaENXNmh3X20zLU9qWFdPcnFJ X00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVlWFJhS0RoQ1c2aHdfbTMtT2pYV09ycUlfTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTM2Mi9EOUNCRjgwQTEwQjMxMUVDQTMxREY4MkNDNEY5QUUwMi81ZVhSYUtEaENX Nmh3X20zLU9qWFdPcnFJX00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATNr+EVQlvaEAPV04cJf6WUQhL8Vjswg+s+EpRm52Beri3P1FfKEeq Sd8gymhvP2nVSz+Vj2aqc0hgDWjtSOjNwCl9GiHM/FBKd506sixrzbL2x4GowVX3 mnUbTvwkvCeK1GPVlGWblGh5CSdPs74PGUGkkpXfktrcaTP6w/vuRxHC4wLjzylc 2t+ZynPvdxnqVZkUOGKPZ0qRIe10K5MG5lXElloig6puRtN0RfepwgNflfqWEqNA yOyqFge0vjY/PIr+lNPFA+QKcNA++fbc67EynwGVS2CO+ANCKGfhSsTgeBRPqEop 1auj1+QagusEqkkB5IWEyrVVnew+PU4W -----END CERTIFICATE-----Generated at Tue Sep 9 17:13:22 2025 by rpki-client