$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.mft File: w5O8331Fpxlv881tMNYjDfT9xX0.mft (raw, json) Hash identifier: 3BWt6joBjDrV7jivlQUHAOdnMjdFlqjghzLlcVryglw= Subject key identifier: C9:2B:25:29:09:D3:49:63:CD:37:20:2C:D8:BA:83:70:FE:2F:69:CB Authority key identifier: C3:93:BC:DF:7D:45:A7:19:6F:F3:CD:6D:30:D6:23:0D:F4:FD:C5:7D Certificate issuer: /CN=A916ED2B/serialNumber=C393BCDF7D45A7196FF3CD6D30D6230DF4FDC57D Certificate serial: D7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w5O8331Fpxlv881tMNYjDfT9xX0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.mft Manifest number: D5 Signing time: Fri 05 Sep 2025 06:01:13 +0000 Manifest this update: Fri 05 Sep 2025 06:01:12 +0000 Manifest next update: Fri 12 Sep 2025 06:01:12 +0000 Files and hashes: 1: w5O8331Fpxlv881tMNYjDfT9xX0.crl (hash: EyZV24olGhwdD0ctjdpM0XrewgOAhpAUCxSfbhn1aZU=) 2: 2B4804B845B211EF9B812019C4F9AE02.roa (hash: nLqd4iOtl1GLw2Gq5WmxNPMWDRnWSTF7f/Jyns3zXvM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.crl rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w5O8331Fpxlv881tMNYjDfT9xX0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 06:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 215 (0xd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916ED2B, serialNumber=C393BCDF7D45A7196FF3CD6D30D6230DF4FDC57D Validity Not Before: Sep 5 06:01:12 2025 GMT Not After : Sep 12 06:01:12 2025 GMT Subject: CN=68ba7ca9-5595 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:07:c6:d8:7c:52:ef:ff:2c:81:29:b3:fa:f1: 87:aa:f7:1e:56:87:38:d7:37:51:a1:50:bc:b4:04: 77:37:a4:56:87:e6:b6:56:80:d7:9e:d4:d2:2b:21: 98:4f:60:da:8c:b2:ac:f7:4c:38:4d:e2:15:b1:01: bf:25:b2:d7:f8:6e:78:1c:49:15:b2:2d:30:c3:61: 90:f3:ca:98:4f:13:ad:e0:c7:4b:49:c7:87:56:13: 87:59:6c:43:4c:74:ec:ac:21:9e:f3:2f:37:32:27: 23:b3:0d:71:02:f8:a7:7c:1d:d3:38:d5:73:09:ab: f7:20:50:c1:dd:c4:3c:63:ae:d2:e7:70:ed:a3:b2: 64:35:74:9d:67:76:d4:4d:29:de:12:21:68:ac:3b: 08:65:83:00:73:20:31:1e:72:0c:3f:cb:77:cc:41: f3:e8:e4:9b:9e:4a:b9:86:41:e5:83:53:ed:4b:77: dc:48:1b:f9:13:16:c5:eb:53:81:76:5c:4b:94:f8: 18:04:2c:a2:e8:11:73:e6:ea:3f:6d:66:bd:17:a4: fc:f1:6a:1d:80:12:cf:45:1d:8c:70:a1:46:27:ba: 2f:81:17:c5:0e:de:55:e1:0a:e9:13:c4:e6:66:e8: cf:c0:7f:1e:d0:90:d6:3a:09:92:62:da:b0:0e:a3: 12:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:2B:25:29:09:D3:49:63:CD:37:20:2C:D8:BA:83:70:FE:2F:69:CB X509v3 Authority Key Identifier: keyid:C3:93:BC:DF:7D:45:A7:19:6F:F3:CD:6D:30:D6:23:0D:F4:FD:C5:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w5O8331Fpxlv881tMNYjDfT9xX0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:1c:88:bb:96:cc:8f:c7:9c:ff:fd:2e:59:5f:b1:d6:94:24: db:8f:50:07:5f:cc:af:c9:a3:46:79:2e:50:50:8d:ab:16:20: 8d:2d:c3:c1:d2:d2:80:31:f5:5b:89:9d:63:78:81:7d:bd:5b: 36:3d:76:82:d7:ee:75:76:c6:7d:cc:42:5c:2d:24:c0:01:b6: 1c:4a:5a:ef:3c:a9:0e:09:02:30:69:81:33:b1:eb:f2:9a:3c: d8:1d:3b:b8:52:93:18:cb:e1:29:d1:4e:fd:3b:72:14:d4:21: 63:21:70:72:63:de:d5:3c:b3:fa:e5:1a:22:9b:fa:d5:ad:d4: 07:f5:96:2b:c0:5c:a9:47:53:96:86:0b:28:2a:ce:54:a7:85: d6:7a:8a:28:51:06:51:92:bf:bd:02:31:ea:53:18:2e:ec:59: 22:9f:8d:28:f2:3f:8f:c3:ad:9b:7a:62:1a:27:82:6f:86:47: 72:fe:06:38:eb:14:df:bb:d8:68:65:2c:2f:e8:2a:e4:4a:e4: b0:6b:bf:09:fd:31:58:d7:e7:c1:fb:21:24:e5:cb:e8:7d:cc: 63:2b:61:cf:d0:89:74:f9:43:cb:7b:2c:03:cc:6b:b4:58:91: ad:14:32:92:ae:bb:f0:26:18:77:bd:d4:0f:07:ff:6f:ae:20: f3:7c:35:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVEMkIxMTAvBgNVBAUTKEMzOTNCQ0RGN0Q0NUE3MTk2RkYzQ0Q2RDMwRDYyMzBE RjRGREM1N0QwHhcNMjUwOTA1MDYwMTEyWhcNMjUwOTEyMDYwMTEyWjAYMRYwFAYD VQQDEw02OGJhN2NhOS01NTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0AfG2HxS7/8sgSmz+vGHqvceVoc41zdRoVC8tAR3N6RWh+a2VoDXntTSKyGY T2DajLKs90w4TeIVsQG/JbLX+G54HEkVsi0ww2GQ88qYTxOt4MdLSceHVhOHWWxD THTsrCGe8y83Micjsw1xAvinfB3TONVzCav3IFDB3cQ8Y67S53Dto7JkNXSdZ3bU TSneEiForDsIZYMAcyAxHnIMP8t3zEHz6OSbnkq5hkHlg1PtS3fcSBv5ExbF61OB dlxLlPgYBCyi6BFz5uo/bWa9F6T88WodgBLPRR2McKFGJ7ovgRfFDt5V4QrpE8Tm ZujPwH8e0JDWOgmSYtqwDqMSZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMkrJSkJ 00ljzTcgLNi6g3D+L2nLMB8GA1UdIwQYMBaAFMOTvN99RacZb/PNbTDWIw30/cV9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUQyQi9GQzExQkZEMjQ1 QjAxMUVGQkQ1OThCNzdDNEY5QUUwMi93NU84MzMxRnB4bHY4ODF0TU5ZakRmVDl4 WDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3c1TzgzMzFGcHhsdjg4MXRNTllqRGZUOXhYMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUQyQi9GQzExQkZEMjQ1QjAxMUVGQkQ1OThCNzdDNEY5QUUwMi93NU84MzMxRnB4 bHY4ODF0TU5ZakRmVDl4WDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBHIi7lsyPx5z//S5ZX7HWlCTbj1AHX8yvyaNGeS5QUI2rFiCNLcPB 0tKAMfVbiZ1jeIF9vVs2PXaC1+51dsZ9zEJcLSTAAbYcSlrvPKkOCQIwaYEzsevy mjzYHTu4UpMYy+Ep0U79O3IU1CFjIXByY97VPLP65Roim/rVrdQH9ZYrwFypR1OW hgsoKs5Up4XWeoooUQZRkr+9AjHqUxgu7Fkin40o8j+Pw62bemIaJ4Jvhkdy/gY4 6xTfu9hoZSwv6CrkSuSwa78J/TFY1+fB+yEk5cvofcxjK2HP0Il0+UPLeywDzGu0 WJGtFDKSrrvwJhh3vdQPB/9vriDzfDW3 -----END CERTIFICATE-----Generated at Sat Sep 6 21:04:34 2025 by rpki-client