$ rpki-client -vvf rpki.apnic.net/member_repository/A917429C/0F172DD2302811EE934A8D0CC4F9AE02/P5mfuMEae4Z_G_n5nKHCaglVK34.mft File: P5mfuMEae4Z_G_n5nKHCaglVK34.mft (raw, json) Hash identifier: HvYHkQs8N/akxHdQB6QnMsseWXLqAc4hGvSgr60VkBA= Subject key identifier: 80:75:2F:1D:17:7B:33:0A:80:E2:17:E2:3F:67:2B:B0:7C:D4:8D:04 Authority key identifier: 3F:99:9F:B8:C1:1A:7B:86:7F:1B:F9:F9:9C:A1:C2:6A:09:55:2B:7E Certificate issuer: /CN=A917429C/serialNumber=3F999FB8C11A7B867F1BF9F99CA1C26A09552B7E Certificate serial: 0198 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5mfuMEae4Z_G_n5nKHCaglVK34.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917429C/0F172DD2302811EE934A8D0CC4F9AE02/P5mfuMEae4Z_G_n5nKHCaglVK34.mft Manifest number: 0195 Signing time: Wed 17 Sep 2025 03:59:50 +0000 Manifest this update: Wed 17 Sep 2025 03:59:49 +0000 Manifest next update: Wed 24 Sep 2025 03:59:49 +0000 Files and hashes: 1: P5mfuMEae4Z_G_n5nKHCaglVK34.crl (hash: LILCMNf1jIqMfrvLuLbBiH8IZPBecoeqZqWCtCjR7Eg=) 2: D41F53D48DC011EEB2B3600BC4F9AE02.roa (hash: Q3p56EBz1xC365ZPw62kRQzqXww33xOtvu79Twkm2RE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917429C/0F172DD2302811EE934A8D0CC4F9AE02/P5mfuMEae4Z_G_n5nKHCaglVK34.crl rsync://rpki.apnic.net/member_repository/A917429C/0F172DD2302811EE934A8D0CC4F9AE02/P5mfuMEae4Z_G_n5nKHCaglVK34.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5mfuMEae4Z_G_n5nKHCaglVK34.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 03:59:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 408 (0x198) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917429C, serialNumber=3F999FB8C11A7B867F1BF9F99CA1C26A09552B7E Validity Not Before: Sep 17 03:59:49 2025 GMT Not After : Sep 24 03:59:49 2025 GMT Subject: CN=68ca3235-68a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:b7:c5:b1:f9:3c:02:95:1c:ae:40:09:48:8c: 28:4a:8f:95:24:9a:11:a8:4d:d9:27:9b:4f:9a:83: 93:04:40:39:c5:1a:03:17:18:ea:01:ea:22:22:1e: 33:83:b2:5c:04:36:4e:20:13:5b:a0:c7:ee:3b:25: 33:3f:67:10:18:cb:e3:81:e3:f9:d0:48:85:22:4f: f3:90:f6:b6:48:4e:66:6a:f0:a1:35:68:58:09:6a: be:73:44:a3:3e:77:d6:d0:8f:0e:25:61:60:1d:89: f6:6f:46:af:07:75:4b:e3:c2:3d:85:3b:a2:e4:71: 00:c9:5a:41:16:51:1b:36:60:09:fb:b1:00:35:3c: 50:92:ae:38:e6:5e:c6:f6:ce:cc:c0:9d:80:6d:e4: 39:44:6f:b7:58:a9:68:27:77:99:c3:b2:4a:45:bb: 2d:6a:2f:61:39:fd:6d:f1:79:25:23:bf:7f:83:68: 85:0e:1a:e4:0d:7d:99:92:54:a0:49:e2:58:50:23: d8:0a:e9:d5:59:35:30:db:3e:a1:64:2c:d8:1a:62: 71:ac:d3:0f:35:e4:84:e8:03:b1:f5:9e:b7:6c:4d: 55:f2:e2:b3:57:d3:67:7b:5f:f4:6c:16:0f:c4:44: 28:93:09:1b:d6:e5:20:04:f4:3b:5d:73:b9:b1:8b: b6:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:75:2F:1D:17:7B:33:0A:80:E2:17:E2:3F:67:2B:B0:7C:D4:8D:04 X509v3 Authority Key Identifier: keyid:3F:99:9F:B8:C1:1A:7B:86:7F:1B:F9:F9:9C:A1:C2:6A:09:55:2B:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917429C/0F172DD2302811EE934A8D0CC4F9AE02/P5mfuMEae4Z_G_n5nKHCaglVK34.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5mfuMEae4Z_G_n5nKHCaglVK34.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917429C/0F172DD2302811EE934A8D0CC4F9AE02/P5mfuMEae4Z_G_n5nKHCaglVK34.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:7e:0b:94:3d:be:c8:61:fd:3f:39:86:18:86:79:12:4a:c1: d3:f2:2f:97:c0:28:98:82:68:1c:35:ce:d4:70:73:2e:34:95: a8:ca:31:db:82:d3:dc:11:6f:18:a4:af:ce:27:3f:ee:1a:8c: 6c:fc:e6:cc:99:9f:f5:d5:80:b7:73:c5:c8:82:47:56:48:0d: 46:f7:2d:12:64:01:82:84:79:2f:e2:0e:67:2e:38:20:d7:37: 3a:5a:61:ef:08:e5:a0:66:22:6a:d9:cf:38:4f:76:e9:f6:72: 6d:6a:91:8b:a0:ed:fb:9f:e5:83:4b:d3:f3:16:e5:9c:5d:59: d7:68:16:65:a9:3e:1d:f3:0b:bc:07:33:27:70:2e:52:61:68: 42:36:8f:25:75:84:6f:9b:ab:23:3f:74:00:e1:a9:a6:c4:0f: 3f:1c:b3:9c:6c:f3:7b:10:99:76:e5:8c:76:67:83:e8:2d:9e: ee:bf:cc:28:db:46:94:ad:d3:06:93:92:d7:a4:0b:1d:d8:34: 6c:10:d0:04:97:da:e1:6f:8d:2f:a1:4e:37:05:5d:b4:22:f0: e4:39:92:e3:5c:2e:01:14:14:d8:14:2c:46:9b:33:56:4e:0b: 42:f9:f5:b5:63:aa:b6:3a:a1:cc:30:23:02:d5:99:fd:b0:d9: 09:38:a0:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQyOUMxMTAvBgNVBAUTKDNGOTk5RkI4QzExQTdCODY3RjFCRjlGOTlDQTFDMjZB MDk1NTJCN0UwHhcNMjUwOTE3MDM1OTQ5WhcNMjUwOTI0MDM1OTQ5WjAYMRYwFAYD VQQDEw02OGNhMzIzNS02OGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA57fFsfk8ApUcrkAJSIwoSo+VJJoRqE3ZJ5tPmoOTBEA5xRoDFxjqAeoiIh4z g7JcBDZOIBNboMfuOyUzP2cQGMvjgeP50EiFIk/zkPa2SE5mavChNWhYCWq+c0Sj PnfW0I8OJWFgHYn2b0avB3VL48I9hTui5HEAyVpBFlEbNmAJ+7EANTxQkq445l7G 9s7MwJ2AbeQ5RG+3WKloJ3eZw7JKRbstai9hOf1t8XklI79/g2iFDhrkDX2ZklSg SeJYUCPYCunVWTUw2z6hZCzYGmJxrNMPNeSE6AOx9Z63bE1V8uKzV9Nne1/0bBYP xEQokwkb1uUgBPQ7XXO5sYu21QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIB1Lx0X ezMKgOIX4j9nK7B81I0EMB8GA1UdIwQYMBaAFD+Zn7jBGnuGfxv5+ZyhwmoJVSt+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDI5Qy8wRjE3MkREMjMw MjgxMUVFOTM0QThEMENDNEY5QUUwMi9QNW1mdU1FYWU0Wl9HX241bktIQ2FnbFZL MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A1bWZ1TUVhZTRaX0dfbjVuS0hDYWdsVkszNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDI5Qy8wRjE3MkREMjMwMjgxMUVFOTM0QThEMENDNEY5QUUwMi9QNW1mdU1FYWU0 Wl9HX241bktIQ2FnbFZLMzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgfguUPb7IYf0/OYYYhnkSSsHT8i+XwCiYgmgcNc7UcHMuNJWoyjHb gtPcEW8YpK/OJz/uGoxs/ObMmZ/11YC3c8XIgkdWSA1G9y0SZAGChHkv4g5nLjgg 1zc6WmHvCOWgZiJq2c84T3bp9nJtapGLoO37n+WDS9PzFuWcXVnXaBZlqT4d8wu8 BzMncC5SYWhCNo8ldYRvm6sjP3QA4ammxA8/HLOcbPN7EJl25Yx2Z4PoLZ7uv8wo 20aUrdMGk5LXpAsd2DRsENAEl9rhb40voU43BV20IvDkOZLjXC4BFBTYFCxGmzNW TgtC+fW1Y6q2OqHMMCMC1Zn9sNkJOKCW -----END CERTIFICATE-----Generated at Thu Sep 18 23:27:51 2025 by rpki-client