$ rpki-client -vvf rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.mft File: V5NDbSKpagYTaFEgO7clmE1wsBc.mft (raw, json) Hash identifier: kKa0lLH0NVrOAWvFoHDfMJSGYMnzBUHnMDbTamLUuAQ= Subject key identifier: 31:78:BE:5B:CA:5E:02:D9:15:6E:E1:02:20:53:CD:D0:B1:29:01:85 Authority key identifier: 57:93:43:6D:22:A9:6A:06:13:68:51:20:3B:B7:25:98:4D:70:B0:17 Certificate issuer: /CN=A9159DCD/serialNumber=5793436D22A96A06136851203BB725984D70B017 Certificate serial: 0179 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5NDbSKpagYTaFEgO7clmE1wsBc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.mft Manifest number: 0175 Signing time: Sat 19 Jul 2025 03:57:37 +0000 Manifest this update: Sat 19 Jul 2025 03:57:37 +0000 Manifest next update: Sat 26 Jul 2025 03:57:37 +0000 Files and hashes: 1: V5NDbSKpagYTaFEgO7clmE1wsBc.crl (hash: NzzGeazJtjv5f41r2C1NLKi3LlXfFzN8BGhqmQKZnGE=) 2: 29D600062C3311EEBFF69B6CC4F9AE02.roa (hash: hskv6e7Ag+5HAqH/N4O5ItTvOGPOLGR+/yJDzJO0d+k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.crl rsync://rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5NDbSKpagYTaFEgO7clmE1wsBc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 03:57:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 377 (0x179) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159DCD, serialNumber=5793436D22A96A06136851203BB725984D70B017 Validity Not Before: Jul 19 03:57:37 2025 GMT Not After : Jul 26 03:57:37 2025 GMT Subject: CN=687b17b1-d996 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:8a:f2:1a:1b:a3:cf:51:79:c6:59:6e:a4:54: 95:2d:90:f8:e3:96:7e:1c:ec:97:90:68:c8:2e:de: 00:82:37:1b:6b:77:36:da:7f:4b:23:cb:ce:fd:64: 2b:66:86:ce:78:ba:b4:da:85:4c:21:fc:e0:eb:a5: 60:da:a8:f5:45:e9:27:64:af:77:56:cd:89:c1:5e: 6b:96:99:aa:e2:9d:08:43:58:b4:85:d9:d3:1f:0f: a0:3f:ca:41:96:cd:7b:24:6c:54:24:37:ea:7d:e2: e7:4d:df:dd:40:82:1e:9c:1c:53:cb:92:07:b0:da: 6f:49:e0:43:ce:1b:2e:53:8a:19:4f:4e:1a:4a:b5: 72:91:bf:7d:25:65:bd:18:f6:e2:54:ca:2a:1e:77: 6f:99:98:e4:a2:59:7d:2b:27:4e:1e:c6:fe:ad:14: 5a:1a:d7:f1:80:9c:3f:6e:fd:0e:a3:5a:45:23:e9: ef:93:a8:6d:30:62:d6:a4:e9:b6:17:9b:bb:30:03: 42:e0:d0:fb:71:65:e6:b0:fb:b4:9f:bc:c6:b6:e9: a7:b7:09:aa:b2:f6:0b:a7:a0:bb:b9:7c:e8:85:94: 0e:17:80:8b:a9:ca:6f:b8:fe:48:23:32:c4:dd:c0: 2d:ad:8d:c5:8f:33:95:11:d8:c4:10:15:4e:a4:aa: 5c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:78:BE:5B:CA:5E:02:D9:15:6E:E1:02:20:53:CD:D0:B1:29:01:85 X509v3 Authority Key Identifier: keyid:57:93:43:6D:22:A9:6A:06:13:68:51:20:3B:B7:25:98:4D:70:B0:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5NDbSKpagYTaFEgO7clmE1wsBc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:28:14:e6:f3:e5:c8:ce:39:30:52:4d:52:37:7b:00:7a:db: 20:60:52:41:87:11:c2:d2:ed:94:fb:f8:3a:41:81:64:20:be: 33:9e:c9:33:46:40:33:a9:e3:85:97:e3:53:47:8c:7a:cc:e4: 52:c4:19:90:25:9e:93:35:fd:22:88:5b:a6:8f:df:80:a0:9e: 7e:25:22:b1:ac:57:1e:8c:c8:df:48:ef:e2:e6:36:84:af:9a: 7e:e9:81:03:d5:30:04:ae:94:c3:45:f8:81:16:b9:8e:dc:b1: c6:f9:d8:cc:63:03:b2:24:b7:b4:1f:b6:88:4c:a7:bf:f3:12: e1:5c:6f:7a:e5:bb:08:d6:04:ca:33:cd:2e:28:3d:9b:d6:5a: 90:89:4c:05:14:63:af:34:66:55:47:7f:65:12:a0:c1:a1:e7: 17:bd:ec:d1:10:47:e6:ec:a0:8f:1e:bf:f4:1d:b4:28:f4:55: 8b:40:e3:bb:56:4b:13:f8:7c:d4:17:77:14:43:5e:a3:e0:fa: 00:e3:81:2f:a5:f3:63:b5:2a:f1:6c:71:9e:08:ee:30:7f:ad: e3:3d:2b:ee:0c:38:b8:58:99:0f:7e:58:0c:e2:1e:d2:54:7b: 19:1f:b6:13:3d:8c:69:11:e1:1d:37:e8:7c:5a:1e:26:e9:a9: 93:7f:db:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTlEQ0QxMTAvBgNVBAUTKDU3OTM0MzZEMjJBOTZBMDYxMzY4NTEyMDNCQjcyNTk4 NEQ3MEIwMTcwHhcNMjUwNzE5MDM1NzM3WhcNMjUwNzI2MDM1NzM3WjAYMRYwFAYD VQQDEw02ODdiMTdiMS1kOTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxYryGhujz1F5xllupFSVLZD445Z+HOyXkGjILt4Agjcba3c22n9LI8vO/WQr ZobOeLq02oVMIfzg66Vg2qj1ReknZK93Vs2JwV5rlpmq4p0IQ1i0hdnTHw+gP8pB ls17JGxUJDfqfeLnTd/dQIIenBxTy5IHsNpvSeBDzhsuU4oZT04aSrVykb99JWW9 GPbiVMoqHndvmZjkoll9KydOHsb+rRRaGtfxgJw/bv0Oo1pFI+nvk6htMGLWpOm2 F5u7MANC4ND7cWXmsPu0n7zGtumntwmqsvYLp6C7uXzohZQOF4CLqcpvuP5IIzLE 3cAtrY3FjzOVEdjEEBVOpKpcJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDF4vlvK XgLZFW7hAiBTzdCxKQGFMB8GA1UdIwQYMBaAFFeTQ20iqWoGE2hRIDu3JZhNcLAX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OURDRC9BMDBENzAwNjJD MjQxMUVFQUI5NzhGMEZDNEY5QUUwMi9WNU5EYlNLcGFnWVRhRkVnTzdjbG1FMXdz QmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Y1TkRiU0twYWdZVGFGRWdPN2NsbUUxd3NCYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OURDRC9BMDBENzAwNjJDMjQxMUVFQUI5NzhGMEZDNEY5QUUwMi9WNU5EYlNLcGFn WVRhRkVnTzdjbG1FMXdzQmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+KBTm8+XIzjkwUk1SN3sAetsgYFJBhxHC0u2U+/g6QYFkIL4znskz RkAzqeOFl+NTR4x6zORSxBmQJZ6TNf0iiFumj9+AoJ5+JSKxrFcejMjfSO/i5jaE r5p+6YED1TAErpTDRfiBFrmO3LHG+djMYwOyJLe0H7aITKe/8xLhXG965bsI1gTK M80uKD2b1lqQiUwFFGOvNGZVR39lEqDBoecXvezREEfm7KCPHr/0HbQo9FWLQOO7 VksT+HzUF3cUQ16j4PoA44EvpfNjtSrxbHGeCO4wf63jPSvuDDi4WJkPflgM4h7S VHsZH7YTPYxpEeEdN+h8Wh4m6amTf9vH -----END CERTIFICATE-----Generated at Sun Jul 20 06:23:19 2025 by rpki-client