$ rpki-client -vvf rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft File: vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft (raw, json) Hash identifier: jEqfPjkZ2223ctE5IMUBitsyCawBvBJCGUajN/pKKYY= Subject key identifier: B5:38:C8:40:77:FB:00:BC:83:1D:A8:D6:8C:EA:E3:EA:96:F1:B6:A9 Authority key identifier: BD:1E:7E:64:1F:FD:96:D5:74:61:55:FC:42:1B:17:DD:C1:AA:77:62 Certificate issuer: /CN=A9186B80/serialNumber=BD1E7E641FFD96D5746155FC421B17DDC1AA7762 Certificate serial: 0512 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft Manifest number: 0509 Signing time: Wed 02 Jul 2025 23:58:49 +0000 Manifest this update: Wed 02 Jul 2025 23:58:49 +0000 Manifest next update: Wed 09 Jul 2025 23:58:49 +0000 Files and hashes: 1: vR5-ZB_9ltV0YVX8QhsX3cGqd2I.crl (hash: ph+lBifu8iqCE6H9h1Sl39W2U3OmcgLLzcfIXffpRI8=) 2: 84FBDFD219ED11ECB996CC4FC4F9AE02.roa (hash: gwgFiEpnmvWDubyXGZfYc9G6qjC4Kh/nDliGbejgryA=) 3: 9B741CFE0C3411EDB8619843C4F9AE02.roa (hash: oJYEoaEThRMxBGvil27GsNiveOB+RhewFzQDnOZyafM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.crl rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 23:58:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1298 (0x512) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186B80, serialNumber=BD1E7E641FFD96D5746155FC421B17DDC1AA7762 Validity Not Before: Jul 2 23:58:49 2025 GMT Not After : Jul 9 23:58:49 2025 GMT Subject: CN=6865c7b9-9985 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:db:fc:d8:e6:12:83:0d:da:be:52:98:c4:1d: fa:32:5b:4d:a7:c9:7c:71:07:f9:86:c4:98:0f:68: 9c:64:c1:fb:da:f6:2e:89:9b:49:49:52:d4:4e:db: 66:17:16:69:e8:b5:c2:b6:d0:4c:ec:dc:8c:5d:a4: 7e:68:3e:2d:c8:97:a0:68:14:a8:6e:5e:20:41:ed: 75:d4:e7:be:ec:92:9e:73:a9:6e:c9:33:80:04:fd: ea:fc:65:64:a2:4c:29:9e:6e:db:63:cc:b8:df:76: 8c:ee:ff:34:f3:61:4f:ca:30:d2:5b:8c:a6:0b:5d: dc:14:7e:f5:1a:28:7b:8e:22:69:63:58:f6:61:4c: 42:c8:ec:15:58:86:18:48:9f:e9:46:5f:1f:2e:52: 23:b9:25:e9:e2:d6:36:b2:3a:cf:0f:50:c6:4d:93: b9:25:c6:c1:41:06:96:94:f4:34:e9:18:fd:a6:b7: 62:8b:73:e4:fb:27:df:b1:2b:0d:fa:07:13:6c:14: 85:7d:2a:63:84:2d:f4:f9:e5:96:16:ce:5d:00:76: 52:86:ad:f6:d5:ad:54:29:1f:47:d7:03:a4:e1:7d: 40:0f:cd:13:42:a7:f9:17:ce:4f:0e:f1:77:a4:d9: c3:8d:d6:2e:95:70:69:7c:60:6f:98:6e:5e:68:70: 73:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:38:C8:40:77:FB:00:BC:83:1D:A8:D6:8C:EA:E3:EA:96:F1:B6:A9 X509v3 Authority Key Identifier: keyid:BD:1E:7E:64:1F:FD:96:D5:74:61:55:FC:42:1B:17:DD:C1:AA:77:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:57:ed:83:29:50:ea:2c:80:ea:69:c5:85:ca:1e:07:9c:1c: eb:a7:98:2f:1d:11:98:33:c2:6b:c9:d2:04:60:14:5b:69:19: fb:74:a6:31:da:30:eb:04:13:33:55:54:68:96:4c:f6:17:a2: 1c:10:d0:8a:bf:1c:00:7b:0a:44:c9:f9:bc:8f:61:63:ea:e9: f8:60:58:44:83:4e:21:e1:3e:e5:4a:ac:c8:52:5d:ee:ff:d1: 31:40:6a:aa:d3:b6:69:f8:a7:a9:23:d0:8d:d7:a0:be:93:93: 4f:1d:80:f8:6c:93:22:d6:6a:2e:19:dc:21:f2:ba:af:29:b4: b1:60:bf:42:22:70:9c:0e:a4:29:ac:d3:c3:15:d3:b9:d0:48: b8:e1:76:7b:94:99:1b:89:af:c7:eb:d1:f7:a2:b9:a4:51:9d: f8:8e:ad:b9:14:62:36:2a:2a:0b:cd:4f:e7:65:2e:4a:f4:e6: 92:e0:63:47:1e:7a:6b:eb:ef:af:64:f0:b8:c5:dc:45:53:15: b2:b7:51:a4:bb:49:c9:2f:eb:08:c4:4d:84:15:ec:41:4a:0f: 4c:ff:8a:32:2e:fd:3f:ca:58:75:81:42:36:21:70:b7:8f:8b: db:f0:92:55:4c:12:91:36:c7:70:44:e7:ae:4a:e0:4a:24:76: 85:69:a5:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBRIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZCODAxMTAvBgNVBAUTKEJEMUU3RTY0MUZGRDk2RDU3NDYxNTVGQzQyMUIxN0RE QzFBQTc3NjIwHhcNMjUwNzAyMjM1ODQ5WhcNMjUwNzA5MjM1ODQ5WjAYMRYwFAYD VQQDEw02ODY1YzdiOS05OTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmtv82OYSgw3avlKYxB36MltNp8l8cQf5hsSYD2icZMH72vYuiZtJSVLUTttm FxZp6LXCttBM7NyMXaR+aD4tyJegaBSobl4gQe111Oe+7JKec6luyTOABP3q/GVk okwpnm7bY8y433aM7v8082FPyjDSW4ymC13cFH71Gih7jiJpY1j2YUxCyOwVWIYY SJ/pRl8fLlIjuSXp4tY2sjrPD1DGTZO5JcbBQQaWlPQ06Rj9prdii3Pk+yffsSsN +gcTbBSFfSpjhC30+eWWFs5dAHZShq321a1UKR9H1wOk4X1AD80TQqf5F85PDvF3 pNnDjdYulXBpfGBvmG5eaHBz3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLU4yEB3 +wC8gx2o1ozq4+qW8bapMB8GA1UdIwQYMBaAFL0efmQf/ZbVdGFV/EIbF93Bqndi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkI4MC9BRTZBQTFCNDEy M0IxMUVDOEExMzVGNDJDNEY5QUUwMi92UjUtWkJfOWx0VjBZVlg4UWhzWDNjR3Fk MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZSNS1aQl85bHRWMFlWWDhRaHNYM2NHcWQySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkI4MC9BRTZBQTFCNDEyM0IxMUVDOEExMzVGNDJDNEY5QUUwMi92UjUtWkJfOWx0 VjBZVlg4UWhzWDNjR3FkMkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPV+2DKVDqLIDqacWFyh4HnBzrp5gvHRGYM8JrydIEYBRbaRn7dKYx 2jDrBBMzVVRolkz2F6IcENCKvxwAewpEyfm8j2Fj6un4YFhEg04h4T7lSqzIUl3u /9ExQGqq07Zp+KepI9CN16C+k5NPHYD4bJMi1mouGdwh8rqvKbSxYL9CInCcDqQp rNPDFdO50Ei44XZ7lJkbia/H69H3ormkUZ34jq25FGI2KioLzU/nZS5K9OaS4GNH Hnpr6++vZPC4xdxFUxWyt1Gku0nJL+sIxE2EFexBSg9M/4oyLv0/ylh1gUI2IXC3 j4vb8JJVTBKRNsdwROeuSuBKJHaFaaWI -----END CERTIFICATE-----Generated at Fri Jul 4 14:50:48 2025 by rpki-client