$ rpki-client -vvf rpki.apnic.net/member_repository/A919D3C2/72D7CFD623F811E79589D752C4F9AE02/5wYdsiKDjeaKk84h7ykbBVQthyY.mft File: 5wYdsiKDjeaKk84h7ykbBVQthyY.mft (raw, json) Hash identifier: H9V+vg2gakoVJGXb8zoMlBw4I7agALgIjIKsQe4N4p0= Subject key identifier: 50:2D:70:F0:7D:AD:27:FA:01:0A:25:B7:CC:6B:8F:26:0D:3E:5F:F9 Authority key identifier: E7:06:1D:B2:22:83:8D:E6:8A:93:CE:21:EF:29:1B:05:54:2D:87:26 Certificate issuer: /CN=A919D3C2/serialNumber=E7061DB222838DE68A93CE21EF291B05542D8726 Certificate serial: 1B35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5wYdsiKDjeaKk84h7ykbBVQthyY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D3C2/72D7CFD623F811E79589D752C4F9AE02/5wYdsiKDjeaKk84h7ykbBVQthyY.mft Manifest number: 1B2A Signing time: Thu 18 Sep 2025 16:24:27 +0000 Manifest this update: Thu 18 Sep 2025 16:24:27 +0000 Manifest next update: Thu 25 Sep 2025 16:24:27 +0000 Files and hashes: 1: 5wYdsiKDjeaKk84h7ykbBVQthyY.crl (hash: BQ2tAiRAJOHGd7I3gyQmxkpz7W8vvDvGKT2Rnd0PaP0=) 2: A6B5F55C23F911E79BE44454C4F9AE02.roa (hash: F2ak73nonVZ20QRrcSfPPZHYy8EZQeLDHTDgpyvlwUk=) 3: EE4AB71024A211F085E5B916C4F9AE02.roa (hash: J7B5RwF0Uei6GB3vuCg/6lhHS2a4ATOJhVhMlxzGnKM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D3C2/72D7CFD623F811E79589D752C4F9AE02/5wYdsiKDjeaKk84h7ykbBVQthyY.crl rsync://rpki.apnic.net/member_repository/A919D3C2/72D7CFD623F811E79589D752C4F9AE02/5wYdsiKDjeaKk84h7ykbBVQthyY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5wYdsiKDjeaKk84h7ykbBVQthyY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 16:24:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6965 (0x1b35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D3C2, serialNumber=E7061DB222838DE68A93CE21EF291B05542D8726 Validity Not Before: Sep 18 16:24:27 2025 GMT Not After : Sep 25 16:24:27 2025 GMT Subject: CN=68cc323b-7d59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:bd:39:7f:49:7e:2e:a8:bc:52:f3:fe:19:27: 6e:d6:3f:08:15:d0:81:18:6d:16:ba:12:3f:05:35: d8:ba:3f:b1:e2:fc:46:95:eb:13:7d:23:52:dd:ac: e3:c1:0b:18:b1:75:a7:85:7a:24:d1:57:ed:22:f3: 09:cb:b9:1f:89:89:ba:7d:4a:17:18:76:4e:aa:be: 1e:2b:08:72:99:50:d8:4d:53:ee:59:58:93:60:a7: e2:18:1e:54:72:bb:4b:37:05:9a:f6:5f:00:fc:58: 93:a5:8a:b1:53:c5:35:7a:9e:4b:7b:3d:60:6c:90: 8f:a9:c2:52:59:ac:a0:5c:0d:0e:c6:9e:79:7c:49: 52:d9:d1:f3:e3:80:0e:8d:f6:a7:31:07:6d:ec:d7: 82:28:c2:fd:52:69:c7:6b:f2:63:94:c1:2e:fa:9c: c8:58:67:c9:a5:26:fe:50:05:a7:28:09:22:47:3c: 54:f6:9f:f5:a3:eb:5a:22:3d:f4:1a:b0:11:b5:ed: 32:18:c5:d6:51:e9:13:69:76:23:e3:1a:ff:5f:d4: bc:c9:45:3d:c5:e0:d7:05:c4:69:e7:1b:a7:a1:09: b5:bb:31:81:41:27:e6:c5:f9:11:20:0d:f1:df:f1: b4:cb:ec:1f:33:07:3f:a8:8e:0c:7a:0e:b5:b1:82: c1:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:2D:70:F0:7D:AD:27:FA:01:0A:25:B7:CC:6B:8F:26:0D:3E:5F:F9 X509v3 Authority Key Identifier: keyid:E7:06:1D:B2:22:83:8D:E6:8A:93:CE:21:EF:29:1B:05:54:2D:87:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D3C2/72D7CFD623F811E79589D752C4F9AE02/5wYdsiKDjeaKk84h7ykbBVQthyY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5wYdsiKDjeaKk84h7ykbBVQthyY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D3C2/72D7CFD623F811E79589D752C4F9AE02/5wYdsiKDjeaKk84h7ykbBVQthyY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:60:c2:f4:69:ee:39:ee:79:f2:9c:c1:68:de:e5:17:58:ee: 7c:2a:31:27:04:fa:e0:a9:00:e6:ac:ba:8f:6e:71:3c:1f:b1: b2:a7:07:46:d0:95:c5:07:b3:84:61:db:1a:80:95:ee:50:58: 51:0f:be:2b:ef:2c:b1:68:3d:6b:d0:eb:90:cd:74:c8:18:2e: 71:43:53:bb:fa:7f:61:4d:5b:b0:e9:38:00:fd:dc:97:86:92: 04:21:8c:bd:62:a4:a4:7e:83:50:8c:d0:d4:85:63:16:06:00: 15:0c:75:f1:44:b8:84:4a:73:19:5a:37:84:f1:83:09:4c:b1: 92:a2:30:3c:de:40:fd:7e:25:12:3b:8f:e7:09:f2:e0:2b:7d: f9:e3:e5:82:2b:0d:b8:85:22:7e:af:d0:16:e8:c0:29:e9:5b: 6f:97:e9:29:80:c9:60:58:ee:59:a7:93:0b:fb:c0:ed:62:ff: a9:91:e0:7c:ab:53:77:98:31:c1:58:5b:58:db:dd:8d:4f:12: 1c:85:b4:ad:b7:9e:d2:b1:b4:e7:19:50:fc:9e:5d:9f:13:94: ec:c6:a4:25:ed:c1:3a:14:42:97:bd:ce:1a:ad:ff:13:4f:d3: 67:c9:27:53:24:d1:e2:4e:75:18:40:0e:29:a3:7a:c3:1f:81: 3a:34:51:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGzUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQzQzIxMTAvBgNVBAUTKEU3MDYxREIyMjI4MzhERTY4QTkzQ0UyMUVGMjkxQjA1 NTQyRDg3MjYwHhcNMjUwOTE4MTYyNDI3WhcNMjUwOTI1MTYyNDI3WjAYMRYwFAYD VQQDEw02OGNjMzIzYi03ZDU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1L05f0l+Lqi8UvP+GSdu1j8IFdCBGG0WuhI/BTXYuj+x4vxGlesTfSNS3azj wQsYsXWnhXok0VftIvMJy7kfiYm6fUoXGHZOqr4eKwhymVDYTVPuWViTYKfiGB5U crtLNwWa9l8A/FiTpYqxU8U1ep5Lez1gbJCPqcJSWaygXA0Oxp55fElS2dHz44AO jfanMQdt7NeCKML9UmnHa/JjlMEu+pzIWGfJpSb+UAWnKAkiRzxU9p/1o+taIj30 GrARte0yGMXWUekTaXYj4xr/X9S8yUU9xeDXBcRp5xunoQm1uzGBQSfmxfkRIA3x 3/G0y+wfMwc/qI4Meg61sYLBsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFAtcPB9 rSf6AQolt8xrjyYNPl/5MB8GA1UdIwQYMBaAFOcGHbIig43mipPOIe8pGwVULYcm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDNDMi83MkQ3Q0ZENjIz RjgxMUU3OTU4OUQ3NTJDNEY5QUUwMi81d1lkc2lLRGplYUtrODRoN3lrYkJWUXRo eVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV3WWRzaUtEamVhS2s4NGg3eWtiQlZRdGh5WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDNDMi83MkQ3Q0ZENjIzRjgxMUU3OTU4OUQ3NTJDNEY5QUUwMi81d1lkc2lLRGpl YUtrODRoN3lrYkJWUXRoeVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtYML0ae457nnynMFo3uUXWO58KjEnBPrgqQDmrLqPbnE8H7GypwdG 0JXFB7OEYdsagJXuUFhRD74r7yyxaD1r0OuQzXTIGC5xQ1O7+n9hTVuw6TgA/dyX hpIEIYy9YqSkfoNQjNDUhWMWBgAVDHXxRLiESnMZWjeE8YMJTLGSojA83kD9fiUS O4/nCfLgK3354+WCKw24hSJ+r9AW6MAp6Vtvl+kpgMlgWO5Zp5ML+8DtYv+pkeB8 q1N3mDHBWFtY292NTxIchbStt57SsbTnGVD8nl2fE5TsxqQl7cE6FEKXvc4arf8T T9NnySdTJNHiTnUYQA4po3rDH4E6NFGS -----END CERTIFICATE-----Generated at Fri Sep 19 03:00:07 2025 by rpki-client