$ rpki-client -vvf rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.mft File: 5VbchrlOkc-bLilEqF9xaS2glNI.mft (raw, json) Hash identifier: wH7buqGEOvLunzwF+yoeycdbj4nfhl3WGYHB7SSnED0= Subject key identifier: 34:74:30:94:61:60:8E:54:DD:59:D8:D1:97:97:55:83:99:BC:36:14 Authority key identifier: E5:56:DC:86:B9:4E:91:CF:9B:2E:29:44:A8:5F:71:69:2D:A0:94:D2 Certificate issuer: /CN=A919B20D/serialNumber=E556DC86B94E91CF9B2E2944A85F71692DA094D2 Certificate serial: 0139 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VbchrlOkc-bLilEqF9xaS2glNI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.mft Manifest number: 0134 Signing time: Sat 19 Jul 2025 04:47:19 +0000 Manifest this update: Sat 19 Jul 2025 04:47:18 +0000 Manifest next update: Sat 26 Jul 2025 04:47:18 +0000 Files and hashes: 1: 5VbchrlOkc-bLilEqF9xaS2glNI.crl (hash: DVY8FNB2eEc7nPz1G2HeVHpDYR3KtqVl/MWwQ0N1yrM=) 2: 4B3E4A0693DE11EE81D1045FC4F9AE02.roa (hash: Lg11zjVs27vb2oJIfdyoCpLaTBOQjwIoy8A24z6T1mQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.crl rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VbchrlOkc-bLilEqF9xaS2glNI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 04:47:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 313 (0x139) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B20D, serialNumber=E556DC86B94E91CF9B2E2944A85F71692DA094D2 Validity Not Before: Jul 19 04:47:18 2025 GMT Not After : Jul 26 04:47:18 2025 GMT Subject: CN=687b2356-5834 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:33:5e:61:87:f3:16:e7:7a:a0:81:ed:af:db: 0f:e0:cc:87:78:57:39:e7:ce:f5:ff:74:82:01:9e: 82:e4:27:71:55:d0:b2:c5:37:cb:28:d9:eb:82:24: db:fc:1f:c5:e0:29:26:94:ef:58:c3:fe:55:10:16: 22:6f:32:8a:e9:c8:c4:54:e3:ef:59:fe:06:bd:34: 56:14:e0:a9:05:cb:9c:fa:43:36:0a:ac:f0:08:43: 28:07:31:59:e7:e8:19:b0:fa:9f:54:16:6f:06:28: c8:50:9f:35:d7:c5:ed:5f:4d:b0:a5:95:e5:e6:d6: 37:6f:c8:5b:e2:ec:04:8d:8d:c2:04:af:4d:2d:3d: 0b:35:98:2c:9a:b4:1f:55:0a:b3:87:73:5a:42:17: e6:42:59:fc:d0:52:30:35:63:18:6f:8a:6a:89:e2: 3c:d1:44:cf:66:17:98:4f:46:0d:36:b2:d1:fc:b9: 11:dd:9c:10:3b:42:3b:27:79:20:d1:97:6a:e5:b0: 7a:39:bf:dd:b0:82:5a:be:a4:6b:d1:16:f4:df:f7: b1:35:50:8e:63:e6:02:d0:c2:50:d1:e6:31:ca:de: 5c:17:ae:8f:3f:4c:39:d0:0c:d0:e6:c6:1b:12:bb: 72:76:c8:34:2e:e2:82:1b:9f:3b:ff:ba:6c:fb:0f: 9f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:74:30:94:61:60:8E:54:DD:59:D8:D1:97:97:55:83:99:BC:36:14 X509v3 Authority Key Identifier: keyid:E5:56:DC:86:B9:4E:91:CF:9B:2E:29:44:A8:5F:71:69:2D:A0:94:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VbchrlOkc-bLilEqF9xaS2glNI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:1a:4f:2d:93:61:f2:fb:6d:8c:37:a8:05:44:27:39:9a:bf: 9c:29:0b:cf:0c:7d:a3:27:4b:7b:4f:db:1f:49:c9:dc:ba:21: c6:2a:d4:f8:bf:23:41:d5:fd:01:ce:d2:65:38:b9:ac:af:0a: f7:37:8a:ce:31:fe:81:79:e8:84:12:85:2f:17:52:69:3a:83: 05:7f:f6:fa:0a:7e:1a:71:c3:ca:c6:51:85:5e:c3:15:f9:74: c8:11:05:97:c3:5b:17:05:69:a8:90:53:0d:fc:22:b1:62:28: a4:92:9c:98:be:f5:1e:0e:2e:07:85:aa:bb:bb:59:4b:17:80: a7:ec:59:e3:7b:d6:e0:1a:07:c5:de:f5:a0:c0:db:1f:bd:96: 82:74:7d:2d:4e:71:de:7d:12:31:1d:44:bc:e6:99:ac:ec:67: 40:81:da:38:74:1c:be:54:b1:57:0b:4a:5f:fc:e6:55:6a:f8: bd:45:ce:91:75:b3:fd:8c:f8:6d:1a:b0:fb:3d:1e:57:9e:d6: 1d:32:ed:d2:2b:02:b0:87:98:a1:00:4c:87:4b:f2:16:90:f1: e0:cf:80:64:22:40:8c:4c:0f:8c:ad:d0:31:e6:15:3a:5e:95: 1e:da:15:0e:7d:f9:21:14:b9:29:2b:61:ac:d3:8a:04:27:12: a1:dd:ed:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUIyMEQxMTAvBgNVBAUTKEU1NTZEQzg2Qjk0RTkxQ0Y5QjJFMjk0NEE4NUY3MTY5 MkRBMDk0RDIwHhcNMjUwNzE5MDQ0NzE4WhcNMjUwNzI2MDQ0NzE4WjAYMRYwFAYD VQQDEw02ODdiMjM1Ni01ODM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAojNeYYfzFud6oIHtr9sP4MyHeFc55871/3SCAZ6C5CdxVdCyxTfLKNnrgiTb /B/F4CkmlO9Yw/5VEBYibzKK6cjEVOPvWf4GvTRWFOCpBcuc+kM2CqzwCEMoBzFZ 5+gZsPqfVBZvBijIUJ8118XtX02wpZXl5tY3b8hb4uwEjY3CBK9NLT0LNZgsmrQf VQqzh3NaQhfmQln80FIwNWMYb4pqieI80UTPZheYT0YNNrLR/LkR3ZwQO0I7J3kg 0Zdq5bB6Ob/dsIJavqRr0Rb03/exNVCOY+YC0MJQ0eYxyt5cF66PP0w50AzQ5sYb Ertydsg0LuKCG587/7ps+w+ffQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDR0MJRh YI5U3VnY0ZeXVYOZvDYUMB8GA1UdIwQYMBaAFOVW3Ia5TpHPmy4pRKhfcWktoJTS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjIwRC82MUFDQkY0Njkz QTkxMUVFOTE0OUUzNTRDNEY5QUUwMi81VmJjaHJsT2tjLWJMaWxFcUY5eGFTMmds TkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVWYmNocmxPa2MtYkxpbEVxRjl4YVMyZ2xOSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjIwRC82MUFDQkY0NjkzQTkxMUVFOTE0OUUzNTRDNEY5QUUwMi81VmJjaHJsT2tj LWJMaWxFcUY5eGFTMmdsTkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACGk8tk2Hy+22MN6gFRCc5mr+cKQvPDH2jJ0t7T9sfScncuiHGKtT4 vyNB1f0BztJlOLmsrwr3N4rOMf6BeeiEEoUvF1JpOoMFf/b6Cn4accPKxlGFXsMV +XTIEQWXw1sXBWmokFMN/CKxYiikkpyYvvUeDi4Hhaq7u1lLF4Cn7Fnje9bgGgfF 3vWgwNsfvZaCdH0tTnHefRIxHUS85pms7GdAgdo4dBy+VLFXC0pf/OZVavi9Rc6R dbP9jPhtGrD7PR5XntYdMu3SKwKwh5ihAEyHS/IWkPHgz4BkIkCMTA+MrdAx5hU6 XpUe2hUOffkhFLkpK2Gs04oEJxKh3e0C -----END CERTIFICATE-----Generated at Sun Jul 20 11:32:57 2025 by rpki-client