$ rpki-client -vvf rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.mft File: 5iRBKkJ5WJuewvqzIiurBibTElo.mft (raw, json) Hash identifier: jcZ/cduFix0Zq86eqTklmz36mViD8wqbhkcdr56iL+g= Subject key identifier: F2:1A:25:31:97:47:A7:C8:89:25:7B:CB:C7:7D:7D:6B:31:0D:0C:BB Authority key identifier: E6:24:41:2A:42:79:58:9B:9E:C2:FA:B3:22:2B:AB:06:26:D3:12:5A Certificate issuer: /CN=A9168336/serialNumber=E624412A4279589B9EC2FAB3222BAB0626D3125A Certificate serial: 0CB5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iRBKkJ5WJuewvqzIiurBibTElo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.mft Manifest number: 0CA4 Signing time: Thu 18 Sep 2025 20:58:25 +0000 Manifest this update: Thu 18 Sep 2025 20:58:25 +0000 Manifest next update: Thu 25 Sep 2025 20:58:25 +0000 Files and hashes: 1: 5iRBKkJ5WJuewvqzIiurBibTElo.crl (hash: 0SqICWW1hwcdDMPh1THATDLqkNhb+KFfcDL1RgtyFAw=) 2: 6B6223B294D011F08FAC1420C4F9AE02.roa (hash: wGiVNJvu1x0mb0lcvq6ZfLuhvFHz/xsUR50FVj7sl+Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.crl rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iRBKkJ5WJuewvqzIiurBibTElo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 20:58:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3253 (0xcb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168336, serialNumber=E624412A4279589B9EC2FAB3222BAB0626D3125A Validity Not Before: Sep 18 20:58:25 2025 GMT Not After : Sep 25 20:58:25 2025 GMT Subject: CN=68cc7271-7c16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a4:94:82:ce:a0:89:6e:0d:77:8d:f5:ed:d7: 01:1f:6a:32:2d:0e:11:0c:b5:df:69:04:6c:d7:0e: b9:10:44:d0:e3:be:17:fd:b4:cc:06:1f:00:59:59: 8f:ea:37:1b:7a:6d:ee:69:bd:a9:eb:f7:af:16:0f: 46:04:e1:e3:eb:bc:07:a3:d7:cf:92:7c:79:ee:b8: 70:d0:12:2a:47:1a:26:6f:79:65:4e:0c:87:bd:b1: dd:8b:55:91:77:e6:92:24:72:06:de:ae:bd:7d:03: ef:3f:40:fd:cf:e0:cc:34:2c:eb:96:41:31:93:9a: f0:a5:04:6f:a7:7e:9e:80:d8:3e:0e:1e:2c:dc:91: a0:b7:a7:d8:7e:3e:bc:1d:20:eb:63:f7:91:6e:87: 61:27:9a:32:f6:fc:48:cc:2d:c4:e2:ff:ef:32:40: d6:dc:01:b3:b5:0e:06:31:43:50:06:f1:ac:d6:09: 8a:b0:eb:d6:af:72:d4:8a:e0:5a:bb:00:7b:0f:d0: 88:06:73:cb:45:d2:4b:93:27:49:7d:9b:90:51:44: 22:b3:04:ec:fc:5b:12:10:2d:00:7a:19:54:21:17: c3:93:ed:85:b2:07:b5:2b:7e:8b:50:0f:e9:e4:3d: c5:92:66:e1:3d:04:02:e0:ff:35:55:7d:4e:a0:c7: 44:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:1A:25:31:97:47:A7:C8:89:25:7B:CB:C7:7D:7D:6B:31:0D:0C:BB X509v3 Authority Key Identifier: keyid:E6:24:41:2A:42:79:58:9B:9E:C2:FA:B3:22:2B:AB:06:26:D3:12:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iRBKkJ5WJuewvqzIiurBibTElo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:00:42:fc:2a:4c:76:82:59:cb:ef:0d:f6:8e:c5:66:1d:89: 33:f3:11:cd:51:e6:25:e2:13:df:3f:de:ef:4d:b4:4f:11:5d: be:82:bd:df:ec:15:2e:45:d8:eb:30:f6:ee:b0:59:96:26:a2: a2:92:f5:aa:12:66:f8:83:78:86:9e:05:ce:d8:2e:79:43:99: 99:0b:98:3a:23:0c:db:d0:5f:e6:06:f6:b0:56:d8:6d:11:1d: 63:7e:d8:5d:2e:d6:ce:80:39:37:70:8f:b4:00:2f:14:8a:42: ca:56:ce:bd:fa:a5:74:20:70:03:3a:a2:19:e0:fd:27:bd:7a: 46:6a:e1:04:31:93:83:28:04:e1:6c:73:ca:8c:98:56:be:93: 38:d7:dc:a8:69:d8:31:ee:02:d8:ba:17:c8:1c:9e:6a:a9:3c: 69:dd:1a:62:42:29:28:1c:06:a7:da:12:6a:10:a3:db:34:73: e5:f0:76:0f:cf:c8:11:a6:60:06:48:82:ea:0b:b9:3a:17:0a: 6a:12:5d:b5:46:39:dc:02:79:2c:3e:86:86:c2:86:cd:8c:ab: b9:ff:39:01:83:3f:38:2b:51:d2:65:05:03:4f:2b:c9:4e:97: 72:a6:b9:6e:97:c6:35:4b:ea:0e:67:1f:39:1e:e4:fb:82:ee: 23:24:b5:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgzMzYxMTAvBgNVBAUTKEU2MjQ0MTJBNDI3OTU4OUI5RUMyRkFCMzIyMkJBQjA2 MjZEMzEyNUEwHhcNMjUwOTE4MjA1ODI1WhcNMjUwOTI1MjA1ODI1WjAYMRYwFAYD VQQDEw02OGNjNzI3MS03YzE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx6SUgs6giW4Nd4317dcBH2oyLQ4RDLXfaQRs1w65EETQ474X/bTMBh8AWVmP 6jcbem3uab2p6/evFg9GBOHj67wHo9fPknx57rhw0BIqRxomb3llTgyHvbHdi1WR d+aSJHIG3q69fQPvP0D9z+DMNCzrlkExk5rwpQRvp36egNg+Dh4s3JGgt6fYfj68 HSDrY/eRbodhJ5oy9vxIzC3E4v/vMkDW3AGztQ4GMUNQBvGs1gmKsOvWr3LUiuBa uwB7D9CIBnPLRdJLkydJfZuQUUQiswTs/FsSEC0AehlUIRfDk+2Fsge1K36LUA/p 5D3FkmbhPQQC4P81VX1OoMdEaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPIaJTGX R6fIiSV7y8d9fWsxDQy7MB8GA1UdIwQYMBaAFOYkQSpCeVibnsL6syIrqwYm0xJa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODMzNi8xOUY3NUE2NjAx Q0QxMUVBQjg2NUVBMjJDNEY5QUUwMi81aVJCS2tKNVdKdWV3dnF6SWl1ckJpYlRF bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVpUkJLa0o1V0p1ZXd2cXpJaXVyQmliVEVsby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODMzNi8xOUY3NUE2NjAxQ0QxMUVBQjg2NUVBMjJDNEY5QUUwMi81aVJCS2tKNVdK dWV3dnF6SWl1ckJpYlRFbG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFAEL8Kkx2glnL7w32jsVmHYkz8xHNUeYl4hPfP97vTbRPEV2+gr3f 7BUuRdjrMPbusFmWJqKikvWqEmb4g3iGngXO2C55Q5mZC5g6Iwzb0F/mBvawVtht ER1jfthdLtbOgDk3cI+0AC8UikLKVs69+qV0IHADOqIZ4P0nvXpGauEEMZODKATh bHPKjJhWvpM419yoadgx7gLYuhfIHJ5qqTxp3RpiQikoHAan2hJqEKPbNHPl8HYP z8gRpmAGSILqC7k6FwpqEl21RjncAnksPoaGwobNjKu5/zkBgz84K1HSZQUDTyvJ Tpdyprlul8Y1S+oOZx85HuT7gu4jJLVY -----END CERTIFICATE-----Generated at Fri Sep 19 10:20:45 2025 by rpki-client