$ rpki-client -vvf rpki.apnic.net/member_repository/A918CA0E/8A1164CA807711EB97D94054C4F9AE02/5wLFqnTYyWzI7vVhjk_-79UdN_k.mft File: 5wLFqnTYyWzI7vVhjk_-79UdN_k.mft (raw, json) Hash identifier: 4zYOnpWYw5Mr+yGavBO+iLg27hjDBnMo43sEab10OQY= Subject key identifier: 06:C0:5A:E3:EB:70:17:8F:69:42:5F:4C:D4:9C:EC:F3:02:C3:ED:66 Authority key identifier: E7:02:C5:AA:74:D8:C9:6C:C8:EE:F5:61:8E:4F:FE:EF:D5:1D:37:F9 Certificate issuer: /CN=A918CA0E/serialNumber=E702C5AA74D8C96CC8EEF5618E4FFEEFD51D37F9 Certificate serial: 069F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5wLFqnTYyWzI7vVhjk_-79UdN_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CA0E/8A1164CA807711EB97D94054C4F9AE02/5wLFqnTYyWzI7vVhjk_-79UdN_k.mft Manifest number: 0699 Signing time: Sat 06 Sep 2025 22:33:00 +0000 Manifest this update: Sat 06 Sep 2025 22:33:00 +0000 Manifest next update: Sat 13 Sep 2025 22:33:00 +0000 Files and hashes: 1: 5wLFqnTYyWzI7vVhjk_-79UdN_k.crl (hash: J3s1j8d0G60nrzNgszMCGFgeyV9W3hkHpWbHNbRlv8I=) 2: 98C0AE7E808411EBA15C9251C4F9AE02.roa (hash: zc3Pnw0/OkkjpSp764b1FQtIhHt1L5fn5FeWiUPa5I4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CA0E/8A1164CA807711EB97D94054C4F9AE02/5wLFqnTYyWzI7vVhjk_-79UdN_k.crl rsync://rpki.apnic.net/member_repository/A918CA0E/8A1164CA807711EB97D94054C4F9AE02/5wLFqnTYyWzI7vVhjk_-79UdN_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5wLFqnTYyWzI7vVhjk_-79UdN_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 22:32:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1695 (0x69f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CA0E, serialNumber=E702C5AA74D8C96CC8EEF5618E4FFEEFD51D37F9 Validity Not Before: Sep 6 22:33:00 2025 GMT Not After : Sep 13 22:33:00 2025 GMT Subject: CN=68bcb69c-c253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:51:9d:2c:09:a3:ec:9d:93:2b:15:ef:ee:03: ef:e5:e9:91:18:8c:28:a8:d0:89:55:f9:9d:5f:3c: 8c:bb:fd:8e:14:a6:4a:ca:10:a9:f4:c6:78:92:f1: 05:0c:06:8a:89:c5:82:87:1c:80:b2:0c:ed:af:da: 77:81:a8:8b:09:2d:c7:b5:55:19:70:de:31:9d:57: 4c:2e:84:2f:fe:a2:8d:37:20:10:18:f8:97:fc:5b: 46:86:db:b4:04:e7:91:67:ba:b6:c0:9c:1d:8a:63: 66:85:64:58:19:c3:b3:5f:c3:5e:c3:2d:79:66:0d: 71:b5:78:ec:73:23:bd:31:3e:21:51:22:3b:7f:e7: d3:85:a7:cc:64:ad:a5:74:37:aa:5d:07:ed:4c:92: 2b:47:25:44:65:93:39:da:b5:49:33:ce:d8:6d:87: 50:36:db:0b:54:6f:6a:b7:dd:f9:7c:7e:74:63:4c: 5f:21:4d:af:d6:fd:95:ce:8f:73:ff:b0:1c:4f:26: f1:e7:58:ee:b5:20:1c:3e:c6:f4:e8:fe:21:fc:86: f2:f0:f8:40:0a:4f:99:10:10:c1:65:44:20:f3:f8: e2:d7:94:4f:31:ab:24:66:2c:c3:01:87:97:a0:f1: 90:95:43:76:b2:e4:4c:1d:83:6e:37:d2:0c:67:12: ef:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:C0:5A:E3:EB:70:17:8F:69:42:5F:4C:D4:9C:EC:F3:02:C3:ED:66 X509v3 Authority Key Identifier: keyid:E7:02:C5:AA:74:D8:C9:6C:C8:EE:F5:61:8E:4F:FE:EF:D5:1D:37:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CA0E/8A1164CA807711EB97D94054C4F9AE02/5wLFqnTYyWzI7vVhjk_-79UdN_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5wLFqnTYyWzI7vVhjk_-79UdN_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CA0E/8A1164CA807711EB97D94054C4F9AE02/5wLFqnTYyWzI7vVhjk_-79UdN_k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:6e:58:68:da:fa:0a:4c:3c:14:4a:03:46:1a:f1:3f:89:b5: 8d:f3:30:2a:ec:29:fd:6c:b6:e8:8c:24:8b:f4:7a:a9:bd:c8: ab:14:6c:9d:e6:58:a5:ca:02:d7:65:63:5b:10:e5:4b:e0:43: 11:39:01:6a:1b:1d:96:54:b3:b8:9f:60:1b:e0:74:4b:af:7b: 26:66:1e:eb:5e:8d:e1:26:4c:61:2f:ee:0f:3a:94:60:ab:8a: 41:a5:35:ca:57:a5:02:48:02:42:2f:34:04:ad:e8:93:e7:25: da:dd:89:1a:48:ed:a2:0d:b2:23:7c:94:16:84:99:6b:11:77: 25:41:c6:68:1d:2e:9b:89:90:4d:7a:ab:85:30:f5:9f:60:c1: d7:f4:06:77:a3:f3:24:61:5d:48:2d:09:1c:c4:a8:ee:d9:02: 70:8a:1e:fc:15:1d:3e:fd:b3:1a:a8:24:db:41:cb:86:f5:dc: 95:7b:58:2b:c3:cd:8d:f1:da:40:78:89:a7:19:b0:72:c1:f0: c2:57:f7:ef:95:aa:f8:16:74:c4:de:44:86:50:ea:b2:3c:69: 32:2d:94:3a:70:4a:5f:e6:55:3a:7a:18:ff:9b:e6:cc:4d:7d: 2b:4d:3c:b3:4b:e5:ba:fb:6c:6f:eb:4e:a7:2c:4f:62:4f:ab: 61:f8:db:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBp8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OENBMEUxMTAvBgNVBAUTKEU3MDJDNUFBNzREOEM5NkNDOEVFRjU2MThFNEZGRUVG RDUxRDM3RjkwHhcNMjUwOTA2MjIzMzAwWhcNMjUwOTEzMjIzMzAwWjAYMRYwFAYD VQQDEw02OGJjYjY5Yy1jMjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt1GdLAmj7J2TKxXv7gPv5emRGIwoqNCJVfmdXzyMu/2OFKZKyhCp9MZ4kvEF DAaKicWChxyAsgztr9p3gaiLCS3HtVUZcN4xnVdMLoQv/qKNNyAQGPiX/FtGhtu0 BOeRZ7q2wJwdimNmhWRYGcOzX8Newy15Zg1xtXjscyO9MT4hUSI7f+fThafMZK2l dDeqXQftTJIrRyVEZZM52rVJM87YbYdQNtsLVG9qt935fH50Y0xfIU2v1v2Vzo9z /7AcTybx51jutSAcPsb06P4h/Iby8PhACk+ZEBDBZUQg8/ji15RPMaskZizDAYeX oPGQlUN2suRMHYNuN9IMZxLv4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAbAWuPr cBePaUJfTNSc7PMCw+1mMB8GA1UdIwQYMBaAFOcCxap02MlsyO71YY5P/u/VHTf5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0EwRS84QTExNjRDQTgw NzcxMUVCOTdEOTQwNTRDNEY5QUUwMi81d0xGcW5UWXlXekk3dlZoamtfLTc5VWRO X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV3TEZxblRZeVd6STd2Vmhqa18tNzlVZE5fay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Q0EwRS84QTExNjRDQTgwNzcxMUVCOTdEOTQwNTRDNEY5QUUwMi81d0xGcW5UWXlX ekk3dlZoamtfLTc5VWROX2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDHblho2voKTDwUSgNGGvE/ibWN8zAq7Cn9bLbojCSL9HqpvcirFGyd 5lilygLXZWNbEOVL4EMROQFqGx2WVLO4n2Ab4HRLr3smZh7rXo3hJkxhL+4POpRg q4pBpTXKV6UCSAJCLzQEreiT5yXa3YkaSO2iDbIjfJQWhJlrEXclQcZoHS6biZBN equFMPWfYMHX9AZ3o/MkYV1ILQkcxKju2QJwih78FR0+/bMaqCTbQcuG9dyVe1gr w82N8dpAeImnGbBywfDCV/fvlar4FnTE3kSGUOqyPGkyLZQ6cEpf5lU6ehj/m+bM TX0rTTyzS+W6+2xv606nLE9iT6th+Nva -----END CERTIFICATE-----Generated at Mon Sep 8 14:23:58 2025 by rpki-client