$ rpki-client -vvf rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.mft File: V5NDbSKpagYTaFEgO7clmE1wsBc.mft (raw, json) Hash identifier: /WbNgJ63U+aPbBqeTMe+b8VU3p+76V59dd+pqFveMuE= Subject key identifier: AC:73:26:CC:53:9F:98:62:11:E0:CD:32:A5:1F:43:16:7C:D3:CF:A7 Authority key identifier: 57:93:43:6D:22:A9:6A:06:13:68:51:20:3B:B7:25:98:4D:70:B0:17 Certificate issuer: /CN=A9159DCD/serialNumber=5793436D22A96A06136851203BB725984D70B017 Certificate serial: 018B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5NDbSKpagYTaFEgO7clmE1wsBc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.mft Manifest number: 0187 Signing time: Sat 23 Aug 2025 03:41:37 +0000 Manifest this update: Sat 23 Aug 2025 03:41:37 +0000 Manifest next update: Sat 30 Aug 2025 03:41:37 +0000 Files and hashes: 1: V5NDbSKpagYTaFEgO7clmE1wsBc.crl (hash: n1QAZsg/yPE89AGUfwKghac+L+GY3/smt3SldMQIe3U=) 2: 29D600062C3311EEBFF69B6CC4F9AE02.roa (hash: hskv6e7Ag+5HAqH/N4O5ItTvOGPOLGR+/yJDzJO0d+k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.crl rsync://rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5NDbSKpagYTaFEgO7clmE1wsBc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:41:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 395 (0x18b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159DCD, serialNumber=5793436D22A96A06136851203BB725984D70B017 Validity Not Before: Aug 23 03:41:37 2025 GMT Not After : Aug 30 03:41:37 2025 GMT Subject: CN=68a93871-8985 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f4:65:ef:a6:d9:46:44:4f:02:50:ca:4e:95: d9:3a:37:a9:83:a6:98:65:df:27:e9:4a:21:b2:a7: 01:92:49:ae:cb:3c:b5:86:8b:6c:e3:08:0d:76:ce: c2:e2:3d:d9:e1:ee:ca:42:e9:3a:18:d6:0c:ee:cb: 86:aa:51:a3:59:00:37:a1:f8:a4:c2:c6:51:6a:cd: 39:1f:7f:69:7e:18:ef:04:3c:b7:41:68:3e:46:47: 56:50:31:bc:4e:07:68:24:9c:b0:ae:e2:b0:c2:53: c6:ae:d5:2b:6d:64:48:40:29:76:88:61:62:c1:d7: c8:f1:b8:ed:07:c4:bb:ad:d3:9d:37:af:0f:d4:49: 28:c3:5a:37:ba:37:3b:4c:32:1f:b4:73:25:89:8c: d4:53:9c:06:b1:49:d1:9b:2a:11:6a:7e:ca:71:f8: 01:04:bd:36:6f:2f:0d:70:56:09:04:20:8a:2a:c7: 37:8d:3b:0f:ff:b9:d1:0a:5e:1e:bd:a2:42:60:06: f1:e9:a3:82:15:94:6b:d5:f1:b0:0e:8f:f3:c0:1a: 93:23:72:0a:67:d3:be:c5:1c:11:0e:03:c4:6e:ea: c6:9e:01:c6:9b:62:16:a8:42:50:95:19:76:3a:3e: 1a:93:7e:97:ae:42:4f:84:c3:8d:8a:60:8e:03:ff: 52:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:73:26:CC:53:9F:98:62:11:E0:CD:32:A5:1F:43:16:7C:D3:CF:A7 X509v3 Authority Key Identifier: keyid:57:93:43:6D:22:A9:6A:06:13:68:51:20:3B:B7:25:98:4D:70:B0:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5NDbSKpagYTaFEgO7clmE1wsBc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:b7:5c:f5:a4:16:9d:e6:7c:53:2e:4a:4a:4e:e6:70:9d:85: ad:b0:94:14:dd:24:cf:94:1b:0b:be:23:2b:53:4c:40:87:44: 2d:ed:c2:3e:8e:07:74:ba:1c:f5:53:d9:f4:66:f2:fc:fe:06: 81:e4:d1:e7:70:2d:48:af:33:28:b3:3c:6e:e2:44:e8:24:35: 0d:7c:ef:4b:61:8e:5f:86:08:0c:90:07:a3:9a:3c:3f:6a:ad: a9:6a:d5:14:22:e2:bf:e6:3d:31:c3:d6:d2:3a:a3:da:d1:92: 3c:36:da:40:1d:52:35:d7:d9:8a:d6:1d:96:5c:b9:2a:85:80: 20:03:91:19:81:cc:d3:23:71:14:06:3c:6a:7a:13:ac:a5:da: 8f:45:79:98:48:e2:32:7c:f7:6c:03:77:97:75:bd:68:0a:fe: 33:ba:13:af:fc:46:3f:0b:36:19:f1:14:b3:fc:7e:26:32:64: 5a:d0:35:92:08:98:c9:e0:62:13:6c:62:bb:6c:a7:23:0f:1d: 50:12:f7:39:a1:c1:f3:ff:2a:fa:e0:b3:d3:fa:f4:29:b1:af: 74:f3:17:02:79:47:84:d7:eb:3d:1d:7e:3b:49:9c:aa:6f:cf: f5:ab:5d:da:d2:10:1f:e7:39:00:15:73:a8:a6:f8:d4:77:bb: 1f:6c:f6:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTlEQ0QxMTAvBgNVBAUTKDU3OTM0MzZEMjJBOTZBMDYxMzY4NTEyMDNCQjcyNTk4 NEQ3MEIwMTcwHhcNMjUwODIzMDM0MTM3WhcNMjUwODMwMDM0MTM3WjAYMRYwFAYD VQQDEw02OGE5Mzg3MS04OTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt/Rl76bZRkRPAlDKTpXZOjepg6aYZd8n6UohsqcBkkmuyzy1hots4wgNds7C 4j3Z4e7KQuk6GNYM7suGqlGjWQA3ofikwsZRas05H39pfhjvBDy3QWg+RkdWUDG8 TgdoJJywruKwwlPGrtUrbWRIQCl2iGFiwdfI8bjtB8S7rdOdN68P1Ekow1o3ujc7 TDIftHMliYzUU5wGsUnRmyoRan7KcfgBBL02by8NcFYJBCCKKsc3jTsP/7nRCl4e vaJCYAbx6aOCFZRr1fGwDo/zwBqTI3IKZ9O+xRwRDgPEburGngHGm2IWqEJQlRl2 Oj4ak36XrkJPhMONimCOA/9ShwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKxzJsxT n5hiEeDNMqUfQxZ808+nMB8GA1UdIwQYMBaAFFeTQ20iqWoGE2hRIDu3JZhNcLAX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OURDRC9BMDBENzAwNjJD MjQxMUVFQUI5NzhGMEZDNEY5QUUwMi9WNU5EYlNLcGFnWVRhRkVnTzdjbG1FMXdz QmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Y1TkRiU0twYWdZVGFGRWdPN2NsbUUxd3NCYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OURDRC9BMDBENzAwNjJDMjQxMUVFQUI5NzhGMEZDNEY5QUUwMi9WNU5EYlNLcGFn WVRhRkVnTzdjbG1FMXdzQmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdt1z1pBad5nxTLkpKTuZwnYWtsJQU3STPlBsLviMrU0xAh0Qt7cI+ jgd0uhz1U9n0ZvL8/gaB5NHncC1IrzMoszxu4kToJDUNfO9LYY5fhggMkAejmjw/ aq2patUUIuK/5j0xw9bSOqPa0ZI8NtpAHVI119mK1h2WXLkqhYAgA5EZgczTI3EU BjxqehOspdqPRXmYSOIyfPdsA3eXdb1oCv4zuhOv/EY/CzYZ8RSz/H4mMmRa0DWS CJjJ4GITbGK7bKcjDx1QEvc5ocHz/yr64LPT+vQpsa908xcCeUeE1+s9HX47SZyq b8/1q13a0hAf5zkAFXOopvjUd7sfbPYY -----END CERTIFICATE-----Generated at Sat Aug 23 19:26:11 2025 by rpki-client