$ rpki-client -vvf rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft File: vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft (raw, json) Hash identifier: /Va0BqoC6uBXryWAX/Y9VuRMR5y87wsY+lS35aopuqs= Subject key identifier: 04:EB:6D:30:28:72:52:2E:BB:19:4F:39:39:AD:56:36:AE:AB:BB:2B Authority key identifier: BD:1E:7E:64:1F:FD:96:D5:74:61:55:FC:42:1B:17:DD:C1:AA:77:62 Certificate issuer: /CN=A9186B80/serialNumber=BD1E7E641FFD96D5746155FC421B17DDC1AA7762 Certificate serial: 052E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft Manifest number: 0524 Signing time: Fri 22 Aug 2025 23:45:52 +0000 Manifest this update: Fri 22 Aug 2025 23:45:52 +0000 Manifest next update: Fri 29 Aug 2025 23:45:52 +0000 Files and hashes: 1: vR5-ZB_9ltV0YVX8QhsX3cGqd2I.crl (hash: K9NJWPif5KbdQfHpBpIfZ2deT0v7Ts98Oqeyu+6rdyA=) 2: 9B741CFE0C3411EDB8619843C4F9AE02.roa (hash: oJYEoaEThRMxBGvil27GsNiveOB+RhewFzQDnOZyafM=) 3: 37FE553E5CAB11F08FCD0029C4F9AE02.roa (hash: FBJc9DSyKZ6Ne+I8xOG24hHo29YCYkNNRXvDi6lkdSE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.crl rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:45:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1326 (0x52e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186B80, serialNumber=BD1E7E641FFD96D5746155FC421B17DDC1AA7762 Validity Not Before: Aug 22 23:45:52 2025 GMT Not After : Aug 29 23:45:52 2025 GMT Subject: CN=68a90130-8c1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:66:06:78:d7:0d:02:55:c8:ad:be:4a:93:59: 83:fe:99:64:39:4f:37:2a:d2:fb:60:79:8d:52:3d: 79:dd:30:76:1b:e2:87:12:19:2f:95:57:27:0d:fc: 0a:e9:6d:8b:ef:59:d9:d2:89:d2:12:63:e3:83:84: 39:83:01:11:f6:52:e4:5b:62:21:a8:6b:f0:d3:04: b2:f6:f2:77:eb:48:6d:15:7d:4a:bb:8a:9f:39:c4: b9:04:25:48:e8:ff:94:37:47:13:cb:02:86:0e:73: 93:ab:10:19:5d:37:5e:3b:3e:d1:89:87:6c:85:05: ad:6b:0b:c7:40:e3:6d:f8:9b:fc:45:b9:0f:f8:b4: 44:07:e9:21:b5:fd:20:65:3a:73:52:8c:23:62:19: 83:f9:9b:b3:a5:18:b8:76:bc:f3:ed:01:eb:67:a9: 9e:5f:40:2d:de:66:0d:29:0d:a2:d7:d8:ef:53:ff: 93:93:2a:e5:63:b3:4f:77:39:79:47:29:a6:88:8e: 88:31:7c:12:5d:0f:61:0f:fc:01:fc:bf:e1:fa:0f: c8:53:42:c3:bf:0a:b9:d0:68:dd:f1:e8:c5:ed:0a: 49:e5:8a:fa:69:66:cb:06:5f:67:d2:80:52:93:a5: 67:34:dd:da:a4:ee:01:71:20:33:93:01:87:1a:f1: 53:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:EB:6D:30:28:72:52:2E:BB:19:4F:39:39:AD:56:36:AE:AB:BB:2B X509v3 Authority Key Identifier: keyid:BD:1E:7E:64:1F:FD:96:D5:74:61:55:FC:42:1B:17:DD:C1:AA:77:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:fc:5c:ec:68:0d:46:ea:0b:ec:4b:f2:b0:d3:ab:8b:89:2b: 50:62:f6:82:6e:34:f3:84:67:fd:35:ae:1e:9e:f8:f1:69:32: cd:66:ed:b1:6f:1e:23:6b:61:a3:b2:93:db:0d:fe:d9:07:35: 0f:ec:21:62:8c:f2:b5:d1:b4:bb:b1:73:4e:94:c6:3d:93:69: 52:39:66:75:bb:58:13:7f:16:33:bd:95:c3:9a:fc:74:8b:b4: 1e:7f:01:ac:33:a6:d5:47:00:72:f0:de:93:7b:47:1d:0e:52: 07:f1:45:bb:71:b2:36:db:9d:b3:75:80:93:69:60:02:66:fc: f5:6b:8c:6f:f9:da:13:51:89:ad:e0:87:ac:fe:6a:ed:b3:70: a9:b1:2d:18:8f:89:fa:53:91:97:a8:54:99:91:e9:63:87:ec: 59:25:7a:92:7e:d0:83:6d:65:f7:78:e1:ee:8f:d8:50:6d:65: 08:a9:cb:2b:74:77:7d:ad:42:13:c2:16:09:2d:ef:70:24:ab: 77:23:a1:4f:77:07:43:41:34:1d:08:03:db:c5:3e:d7:fe:5f: 17:ca:b5:1f:a5:72:86:ce:60:c4:6c:57:d4:55:9c:1d:a1:b6: f3:da:4e:fe:aa:7e:41:2e:08:3f:5a:91:4d:c3:1a:a0:17:92: 6e:ae:a4:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZCODAxMTAvBgNVBAUTKEJEMUU3RTY0MUZGRDk2RDU3NDYxNTVGQzQyMUIxN0RE QzFBQTc3NjIwHhcNMjUwODIyMjM0NTUyWhcNMjUwODI5MjM0NTUyWjAYMRYwFAYD VQQDEw02OGE5MDEzMC04YzFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvmYGeNcNAlXIrb5Kk1mD/plkOU83KtL7YHmNUj153TB2G+KHEhkvlVcnDfwK 6W2L71nZ0onSEmPjg4Q5gwER9lLkW2IhqGvw0wSy9vJ360htFX1Ku4qfOcS5BCVI 6P+UN0cTywKGDnOTqxAZXTdeOz7RiYdshQWtawvHQONt+Jv8RbkP+LREB+khtf0g ZTpzUowjYhmD+ZuzpRi4drzz7QHrZ6meX0At3mYNKQ2i19jvU/+TkyrlY7NPdzl5 RymmiI6IMXwSXQ9hD/wB/L/h+g/IU0LDvwq50Gjd8ejF7QpJ5Yr6aWbLBl9n0oBS k6VnNN3apO4BcSAzkwGHGvFTsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFATrbTAo clIuuxlPOTmtVjauq7srMB8GA1UdIwQYMBaAFL0efmQf/ZbVdGFV/EIbF93Bqndi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkI4MC9BRTZBQTFCNDEy M0IxMUVDOEExMzVGNDJDNEY5QUUwMi92UjUtWkJfOWx0VjBZVlg4UWhzWDNjR3Fk MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZSNS1aQl85bHRWMFlWWDhRaHNYM2NHcWQySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkI4MC9BRTZBQTFCNDEyM0IxMUVDOEExMzVGNDJDNEY5QUUwMi92UjUtWkJfOWx0 VjBZVlg4UWhzWDNjR3FkMkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCu/FzsaA1G6gvsS/Kw06uLiStQYvaCbjTzhGf9Na4envjxaTLNZu2x bx4ja2GjspPbDf7ZBzUP7CFijPK10bS7sXNOlMY9k2lSOWZ1u1gTfxYzvZXDmvx0 i7QefwGsM6bVRwBy8N6Te0cdDlIH8UW7cbI2252zdYCTaWACZvz1a4xv+doTUYmt 4Ies/mrts3CpsS0Yj4n6U5GXqFSZkeljh+xZJXqSftCDbWX3eOHuj9hQbWUIqcsr dHd9rUITwhYJLe9wJKt3I6FPdwdDQTQdCAPbxT7X/l8XyrUfpXKGzmDEbFfUVZwd obbz2k7+qn5BLgg/WpFNwxqgF5JurqRM -----END CERTIFICATE-----Generated at Sat Aug 23 12:43:18 2025 by rpki-client