$ rpki-client -vvf rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft File: C5sr_BxrLAlndq91fTrxRUfkPnI.mft (raw, json) Hash identifier: tsschTVd3qJ4uq99Mdm7JC/Q1FI1dLETXh3yNtsNU38= Subject key identifier: 3D:BE:96:23:6C:28:51:61:9C:8A:6A:67:6D:A2:98:5A:F3:92:09:46 Authority key identifier: 0B:9B:2B:FC:1C:6B:2C:09:67:76:AF:75:7D:3A:F1:45:47:E4:3E:72 Certificate issuer: /CN=A918F646/serialNumber=0B9B2BFC1C6B2C096776AF757D3AF14547E43E72 Certificate serial: 1201 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C5sr_BxrLAlndq91fTrxRUfkPnI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft Manifest number: 11EC Signing time: Sat 06 Sep 2025 17:16:45 +0000 Manifest this update: Sat 06 Sep 2025 17:16:44 +0000 Manifest next update: Sat 13 Sep 2025 17:16:44 +0000 Files and hashes: 1: C5sr_BxrLAlndq91fTrxRUfkPnI.crl (hash: OIIbivDIUqlh4igejxIxVBytCrn/7cj0yUjBOWK+Ybo=) 2: 60FCDED2F48F11E89651151FC4F9AE02.roa (hash: TiqURCOWDtFV1lphAi7QXXgszXNq/kYQUGQ1WC3OpiM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.crl rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C5sr_BxrLAlndq91fTrxRUfkPnI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 17:16:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4609 (0x1201) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F646, serialNumber=0B9B2BFC1C6B2C096776AF757D3AF14547E43E72 Validity Not Before: Sep 6 17:16:44 2025 GMT Not After : Sep 13 17:16:44 2025 GMT Subject: CN=68bc6c7c-27d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:24:27:00:c1:85:1f:ec:dc:fc:74:dd:da:6b: 6e:05:df:c9:53:ae:2d:a3:1c:ab:e7:fe:7b:6b:84: 60:f1:7c:11:52:56:d4:90:b4:be:ae:c2:76:1f:c7: 7c:ef:33:60:df:53:e3:18:13:29:ed:c1:33:d1:e0: 61:be:66:79:55:14:03:72:2b:ac:25:71:7e:de:b1: 4f:7f:76:96:c9:8b:f6:e5:17:3d:c1:82:28:a9:fb: 15:1d:b4:99:9d:18:43:3e:5e:e1:c7:fd:21:0d:85: 28:b2:93:a8:79:97:04:0f:7a:0f:32:55:7e:94:61: 16:e8:5e:2a:e6:e2:8d:ae:a1:8f:c5:30:eb:72:57: 07:24:57:33:d4:5f:0a:c6:f6:9d:75:54:4f:db:ba: 9f:2a:56:d7:0a:ef:f7:9a:2f:06:e0:5f:63:b7:80: 8c:68:83:6c:01:ba:46:23:9f:0c:b9:ae:43:01:a1: 4a:67:20:06:83:27:db:5f:a5:0a:3a:8f:20:ec:f0: 93:3e:8f:bf:23:42:2a:cb:e1:b7:54:49:d9:2b:de: 76:26:23:47:fa:db:50:8f:f9:12:a5:ae:c6:6f:03: 3b:7d:94:88:3a:d8:c9:7a:b8:5c:94:c0:17:d2:cb: 67:6e:ea:1b:bd:cd:9e:8f:95:bc:03:08:5d:07:e6: 67:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:BE:96:23:6C:28:51:61:9C:8A:6A:67:6D:A2:98:5A:F3:92:09:46 X509v3 Authority Key Identifier: keyid:0B:9B:2B:FC:1C:6B:2C:09:67:76:AF:75:7D:3A:F1:45:47:E4:3E:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C5sr_BxrLAlndq91fTrxRUfkPnI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:d9:8f:83:ef:72:16:c6:c7:d7:1c:63:9c:78:cf:f6:51:45: 30:b8:90:95:f9:ae:7b:ab:e0:bd:e6:8c:92:29:e4:70:f8:f4: 34:36:f6:ae:59:0e:b9:11:94:db:e1:b6:e9:58:be:1f:80:30: 3c:3a:f7:52:ea:1e:44:73:4c:b3:b4:57:ac:00:4c:09:90:60: 58:47:68:e2:8f:0f:6c:c7:f3:07:d6:89:e2:41:5a:15:80:33: be:ac:37:70:9d:6e:fe:a6:88:eb:70:dd:22:85:99:5a:a2:16: e9:45:3b:71:8e:eb:9f:1e:91:23:ee:ee:a6:41:7e:6e:40:a0: e4:80:bd:09:de:6c:4d:7d:a3:b5:25:09:22:a5:1d:3f:4a:f7: 11:ff:63:35:ff:d8:9f:c0:79:fc:28:4c:24:bf:49:76:3b:c1: 3e:c2:06:1c:fd:58:a7:f5:28:b1:53:53:7e:db:ba:0f:83:c1: 4d:e2:16:c3:99:aa:d0:33:63:a9:86:cd:77:db:35:d8:37:4a: 7c:05:b1:48:20:e2:49:e2:39:4f:ad:e6:dd:f9:f9:a7:f3:65: 71:b0:e6:62:9c:8f:d7:d7:af:9f:38:d6:02:b4:f0:bd:4e:0e: 19:b5:db:56:e4:c1:18:11:db:c6:5c:86:07:cb:00:15:e6:44: bc:a0:ed:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEgEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY2NDYxMTAvBgNVBAUTKDBCOUIyQkZDMUM2QjJDMDk2Nzc2QUY3NTdEM0FGMTQ1 NDdFNDNFNzIwHhcNMjUwOTA2MTcxNjQ0WhcNMjUwOTEzMTcxNjQ0WjAYMRYwFAYD VQQDEw02OGJjNmM3Yy0yN2Q5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtiQnAMGFH+zc/HTd2mtuBd/JU64toxyr5/57a4Rg8XwRUlbUkLS+rsJ2H8d8 7zNg31PjGBMp7cEz0eBhvmZ5VRQDciusJXF+3rFPf3aWyYv25Rc9wYIoqfsVHbSZ nRhDPl7hx/0hDYUospOoeZcED3oPMlV+lGEW6F4q5uKNrqGPxTDrclcHJFcz1F8K xvaddVRP27qfKlbXCu/3mi8G4F9jt4CMaINsAbpGI58Mua5DAaFKZyAGgyfbX6UK Oo8g7PCTPo+/I0Iqy+G3VEnZK952JiNH+ttQj/kSpa7GbwM7fZSIOtjJerhclMAX 0stnbuobvc2ej5W8AwhdB+ZnOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD2+liNs KFFhnIpqZ22imFrzkglGMB8GA1UdIwQYMBaAFAubK/wcaywJZ3avdX068UVH5D5y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjY0Ni9DRUNFOEM5QUY0 OEUxMUU4QjE0QTM0MUVDNEY5QUUwMi9DNXNyX0J4ckxBbG5kcTkxZlRyeFJVZmtQ bkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0M1c3JfQnhyTEFsbmRxOTFmVHJ4UlVma1BuSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjY0Ni9DRUNFOEM5QUY0OEUxMUU4QjE0QTM0MUVDNEY5QUUwMi9DNXNyX0J4ckxB bG5kcTkxZlRyeFJVZmtQbkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCK2Y+D73IWxsfXHGOceM/2UUUwuJCV+a57q+C95oySKeRw+PQ0Nvau WQ65EZTb4bbpWL4fgDA8OvdS6h5Ec0yztFesAEwJkGBYR2jijw9sx/MH1oniQVoV gDO+rDdwnW7+pojrcN0ihZlaohbpRTtxjuufHpEj7u6mQX5uQKDkgL0J3mxNfaO1 JQkipR0/SvcR/2M1/9ifwHn8KEwkv0l2O8E+wgYc/Vin9SixU1N+27oPg8FN4hbD marQM2Ophs132zXYN0p8BbFIIOJJ4jlPrebd+fmn82VxsOZinI/X16+fONYCtPC9 Tg4ZtdtW5MEYEdvGXIYHywAV5kS8oO0s -----END CERTIFICATE-----Generated at Sat Sep 6 21:01:54 2025 by rpki-client