$ rpki-client -vvf rpki.apnic.net/member_repository/A9186753/721BD31E046711F0857E1763C4F9AE02/P5_J2UIZjEcjNKN-rT3qtQOS6C8.mft File: P5_J2UIZjEcjNKN-rT3qtQOS6C8.mft (raw, json) Hash identifier: BqZlhgKccdq6wZAAVLq2GbIxcjNNNZAi+Jik+QXgnqc= Subject key identifier: 13:A2:0C:2F:33:3C:6B:0E:02:51:A9:55:4F:E2:FE:8B:ED:28:84:1C Authority key identifier: 3F:9F:C9:D9:42:19:8C:47:23:34:A3:7E:AD:3D:EA:B5:03:92:E8:2F Certificate issuer: /CN=A9186753/serialNumber=3F9FC9D942198C472334A37EAD3DEAB50392E82F Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5_J2UIZjEcjNKN-rT3qtQOS6C8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186753/721BD31E046711F0857E1763C4F9AE02/P5_J2UIZjEcjNKN-rT3qtQOS6C8.mft Manifest number: 39 Signing time: Tue 01 Jul 2025 08:22:31 +0000 Manifest this update: Tue 01 Jul 2025 08:22:30 +0000 Manifest next update: Tue 08 Jul 2025 08:22:30 +0000 Files and hashes: 1: P5_J2UIZjEcjNKN-rT3qtQOS6C8.crl (hash: uAmeJkYlOZ2+LDH+rQ6uhVr7SCL5HYwRMrOh1ESxXXs=) 2: 62BBFF4A046A11F081D54156C4F9AE02.roa (hash: pZymfXzsM+oU7Rjr41rJ4omJoS7JHWwRPlAblPbDAXc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186753/721BD31E046711F0857E1763C4F9AE02/P5_J2UIZjEcjNKN-rT3qtQOS6C8.crl rsync://rpki.apnic.net/member_repository/A9186753/721BD31E046711F0857E1763C4F9AE02/P5_J2UIZjEcjNKN-rT3qtQOS6C8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5_J2UIZjEcjNKN-rT3qtQOS6C8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186753, serialNumber=3F9FC9D942198C472334A37EAD3DEAB50392E82F Validity Not Before: Jul 1 08:22:30 2025 GMT Not After : Jul 8 08:22:30 2025 GMT Subject: CN=68639ac7-cebc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e6:39:02:dd:20:8f:08:11:66:fa:68:f6:c0: 0f:08:89:23:2b:6e:41:ae:98:df:27:01:2d:1b:7c: ee:df:62:07:d5:aa:96:e7:1f:83:0b:48:a5:7a:ff: c9:96:02:03:f0:d0:9a:77:9f:8d:73:d8:5e:95:fd: cf:7e:d3:1f:67:61:3d:86:4a:fc:8f:53:c0:0c:4d: b7:3c:7e:17:e2:57:75:7b:df:8f:1b:2a:39:c3:f5: 2c:0a:3e:4b:e3:2d:96:cc:73:b2:bc:cd:ac:20:b0: 04:46:dc:c5:14:f4:eb:65:8d:b1:90:86:ad:32:be: c6:d7:c5:1c:65:24:5d:04:c4:20:be:d2:eb:31:f2: 3f:12:18:58:f1:54:88:f6:a2:cd:9c:9a:f4:59:0f: d9:32:fa:0d:3b:69:cd:c4:17:a9:79:02:45:38:51: 27:50:7f:60:8c:56:a9:50:ed:e8:d9:5c:39:84:5b: 83:64:c4:1b:d9:6a:20:51:02:78:95:de:27:c5:d5: a2:1e:d0:ed:2f:df:84:2a:b0:5e:0f:64:af:0d:d2: ef:be:e2:71:8a:80:21:15:90:b6:cc:0e:ac:bf:f7: ac:56:16:f3:27:46:ed:26:73:a6:76:cb:12:83:c1: 74:13:84:1d:64:78:5f:73:39:c3:29:39:a5:41:33: 29:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:A2:0C:2F:33:3C:6B:0E:02:51:A9:55:4F:E2:FE:8B:ED:28:84:1C X509v3 Authority Key Identifier: keyid:3F:9F:C9:D9:42:19:8C:47:23:34:A3:7E:AD:3D:EA:B5:03:92:E8:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186753/721BD31E046711F0857E1763C4F9AE02/P5_J2UIZjEcjNKN-rT3qtQOS6C8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5_J2UIZjEcjNKN-rT3qtQOS6C8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186753/721BD31E046711F0857E1763C4F9AE02/P5_J2UIZjEcjNKN-rT3qtQOS6C8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:52:50:1f:8b:2d:70:b3:59:8b:f9:63:12:27:d3:5b:ad:1b: a4:dd:18:57:5f:91:66:b1:43:ab:45:6e:ee:e9:9a:7d:7d:5f: ed:ba:44:e8:ae:3b:6f:7b:52:7d:6f:db:9c:a5:14:a4:dc:86: f4:35:65:04:db:bf:8f:1d:d5:20:75:35:94:21:a0:21:d5:48: dd:4b:22:70:a9:4c:74:14:e5:a9:27:6e:b2:f3:f2:48:1a:73: 12:82:25:a4:71:d6:56:e7:4a:a8:5d:9d:22:cc:a6:5f:48:83: 10:b7:a2:d6:59:c0:ec:87:4b:3f:80:6c:33:0e:fd:85:4d:83: 13:88:cc:66:d3:0e:5c:bc:d8:39:19:19:83:69:39:a1:ae:ff: c8:d4:e6:c2:9e:0f:fd:f7:af:42:0e:f9:76:5f:5e:7b:f4:95: 93:fa:15:15:b9:4f:41:77:40:9a:fe:1a:05:b5:83:81:3c:c2: 34:16:a8:14:ce:0f:c0:8b:6c:1c:5d:5e:7b:ad:9f:17:a0:3d: 4f:00:a3:85:86:5f:d4:c1:d7:df:ca:f1:25:fa:72:c5:a0:7d: ee:91:9c:e7:7c:5f:d3:36:6e:98:9c:d0:89:6d:f3:0b:9e:67: 5f:b9:06:88:d6:18:4e:7c:46:6b:27:25:35:26:09:ca:af:74: 34:07:5d:03 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 Njc1MzExMC8GA1UEBRMoM0Y5RkM5RDk0MjE5OEM0NzIzMzRBMzdFQUQzREVBQjUw MzkyRTgyRjAeFw0yNTA3MDEwODIyMzBaFw0yNTA3MDgwODIyMzBaMBgxFjAUBgNV BAMTDTY4NjM5YWM3LWNlYmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC35jkC3SCPCBFm+mj2wA8IiSMrbkGumN8nAS0bfO7fYgfVqpbnH4MLSKV6/8mW AgPw0Jp3n41z2F6V/c9+0x9nYT2GSvyPU8AMTbc8fhfiV3V7348bKjnD9SwKPkvj LZbMc7K8zawgsARG3MUU9OtljbGQhq0yvsbXxRxlJF0ExCC+0usx8j8SGFjxVIj2 os2cmvRZD9ky+g07ac3EF6l5AkU4USdQf2CMVqlQ7ejZXDmEW4NkxBvZaiBRAniV 3ifF1aIe0O0v34QqsF4PZK8N0u++4nGKgCEVkLbMDqy/96xWFvMnRu0mc6Z2yxKD wXQThB1keF9zOcMpOaVBMyllAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUE6IMLzM8 aw4CUalVT+L+i+0ohBwwHwYDVR0jBBgwFoAUP5/J2UIZjEcjNKN+rT3qtQOS6C8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg2NzUzLzcyMUJEMzFFMDQ2 NzExRjA4NTdFMTc2M0M0RjlBRTAyL1A1X0oyVUlaakVjak5LTi1yVDNxdFFPUzZD OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUDVfSjJVSVpqRWNqTktOLXJUM3F0UU9TNkM4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg2 NzUzLzcyMUJEMzFFMDQ2NzExRjA4NTdFMTc2M0M0RjlBRTAyL1A1X0oyVUlaakVj ak5LTi1yVDNxdFFPUzZDOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALdSUB+LLXCzWYv5YxIn01utG6TdGFdfkWaxQ6tFbu7pmn19X+26ROiu O297Un1v25ylFKTchvQ1ZQTbv48d1SB1NZQhoCHVSN1LInCpTHQU5aknbrLz8kga cxKCJaRx1lbnSqhdnSLMpl9IgxC3otZZwOyHSz+AbDMO/YVNgxOIzGbTDly82DkZ GYNpOaGu/8jU5sKeD/33r0IO+XZfXnv0lZP6FRW5T0F3QJr+GgW1g4E8wjQWqBTO D8CLbBxdXnutnxegPU8Ao4WGX9TB19/K8SX6csWgfe6RnOd8X9M2bpic0Ilt8wue Z1+5BojWGE58RmsnJTUmCcqvdDQHXQM= -----END CERTIFICATE-----Generated at Thu Jul 3 00:00:41 2025 by rpki-client