$ rpki-client -vvf rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.mft File: V5NDbSKpagYTaFEgO7clmE1wsBc.mft (raw, json) Hash identifier: ihpsDJlChPwnTlN0nxcAe5Vxgv+Ndb3ID8egDmSPhzk= Subject key identifier: 35:86:14:69:A9:87:E0:C8:F5:2C:8C:A4:F0:BA:58:94:EA:16:D2:79 Authority key identifier: 57:93:43:6D:22:A9:6A:06:13:68:51:20:3B:B7:25:98:4D:70:B0:17 Certificate issuer: /CN=A9159DCD/serialNumber=5793436D22A96A06136851203BB725984D70B017 Certificate serial: 015D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5NDbSKpagYTaFEgO7clmE1wsBc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.mft Manifest number: 015A Signing time: Sat 31 May 2025 03:43:06 +0000 Manifest this update: Sat 31 May 2025 03:43:06 +0000 Manifest next update: Sat 07 Jun 2025 03:43:06 +0000 Files and hashes: 1: V5NDbSKpagYTaFEgO7clmE1wsBc.crl (hash: tSmZL7Gq2caSr+VgqoU3hCAASM/qZjCm8ulnx7313fE=) 2: 29D600062C3311EEBFF69B6CC4F9AE02.roa (hash: q7jOTproZWiG/PibVmdnyADWbCK3ghnPut/xoR7KaRQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.crl rsync://rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5NDbSKpagYTaFEgO7clmE1wsBc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:43:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 349 (0x15d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159DCD, serialNumber=5793436D22A96A06136851203BB725984D70B017 Validity Not Before: May 31 03:43:06 2025 GMT Not After : Jun 7 03:43:06 2025 GMT Subject: CN=683a7aca-fbb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:95:9c:43:0a:37:82:f6:5f:66:71:f9:05:ed: 07:2f:fb:c9:61:7e:2e:eb:21:55:cc:f6:97:5d:36: ab:ad:3f:d4:21:8c:bf:42:f8:d1:5e:35:51:5d:30: 84:16:28:95:de:70:cb:e8:ec:64:95:b0:3b:88:1b: 1a:5d:d6:3a:a3:f4:0d:4f:34:dc:5d:f3:12:91:e3: 71:be:ba:7a:83:ff:04:4a:6c:91:e7:e2:1f:2a:1e: 7f:3c:87:12:5c:80:c5:48:06:7f:36:16:bb:bc:b8: 01:e2:16:48:f2:74:35:63:72:ca:fd:97:98:dd:51: ef:82:fb:67:b4:94:72:2a:9c:ca:64:0d:6e:0c:a0: d6:b8:b0:65:a3:79:91:59:d3:51:b3:63:c1:fc:d6: a7:8b:1d:90:84:c3:6b:ef:eb:8a:aa:c9:08:62:25: 54:66:a5:f1:39:4c:e7:10:03:bb:1d:51:80:dc:78: e4:60:07:f3:21:66:30:22:f7:53:18:bf:c8:22:f5: b0:10:7f:01:74:4e:67:d9:d7:4a:53:e1:0b:f5:0c: 9e:ad:9f:66:e2:52:96:ce:8d:43:48:50:5d:68:9a: 6a:4c:91:8c:82:ed:7e:4f:e4:9d:b5:c2:fb:55:f9: 30:06:78:3c:c0:bc:35:07:aa:34:e5:9e:d5:8c:40: 8e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:86:14:69:A9:87:E0:C8:F5:2C:8C:A4:F0:BA:58:94:EA:16:D2:79 X509v3 Authority Key Identifier: keyid:57:93:43:6D:22:A9:6A:06:13:68:51:20:3B:B7:25:98:4D:70:B0:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5NDbSKpagYTaFEgO7clmE1wsBc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:4a:81:d9:86:e3:4a:32:55:8a:85:35:58:24:1f:fd:24:4b: d6:27:83:8f:35:fd:20:cb:b1:f9:fb:ee:29:8c:6d:ab:e7:47: 8b:09:bc:d2:89:79:ac:8a:20:22:5e:36:78:89:b6:3f:4e:7d: 16:ad:44:38:7c:99:7f:90:76:ac:c9:97:d2:63:dc:7f:25:b4: 1b:04:56:9b:97:42:30:e1:39:71:51:6e:91:90:70:53:9b:a1: 69:b0:ef:44:b1:12:30:2d:55:e8:2c:dc:b9:78:82:77:e4:65: a2:02:4e:6a:49:99:c9:48:01:7b:da:5e:6e:80:f8:2e:bb:3f: 1a:35:69:54:0a:87:6b:52:3f:b6:82:bf:0a:99:13:1a:ee:28: 12:14:e8:7f:b6:b0:6f:1f:f1:29:5c:7b:2d:fb:88:a8:66:0c: 91:57:da:51:98:b3:78:5e:fd:ae:c0:19:da:eb:c0:e8:cb:9b: e7:38:31:cf:bb:ba:79:17:c2:33:ed:fa:c9:66:01:f7:63:4b: 68:b9:48:4d:f3:9c:c3:4f:8c:28:d0:44:89:ed:6e:ad:b2:27: ce:e4:d7:08:d2:f1:d4:e2:b2:01:7b:e1:c1:71:f5:30:bb:c9: af:90:ab:ed:db:40:c8:83:c1:45:87:4d:a3:e5:ce:94:43:35: fc:c6:18:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTlEQ0QxMTAvBgNVBAUTKDU3OTM0MzZEMjJBOTZBMDYxMzY4NTEyMDNCQjcyNTk4 NEQ3MEIwMTcwHhcNMjUwNTMxMDM0MzA2WhcNMjUwNjA3MDM0MzA2WjAYMRYwFAYD VQQDEw02ODNhN2FjYS1mYmI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArJWcQwo3gvZfZnH5Be0HL/vJYX4u6yFVzPaXXTarrT/UIYy/QvjRXjVRXTCE FiiV3nDL6OxklbA7iBsaXdY6o/QNTzTcXfMSkeNxvrp6g/8ESmyR5+IfKh5/PIcS XIDFSAZ/Nha7vLgB4hZI8nQ1Y3LK/ZeY3VHvgvtntJRyKpzKZA1uDKDWuLBlo3mR WdNRs2PB/Nanix2QhMNr7+uKqskIYiVUZqXxOUznEAO7HVGA3HjkYAfzIWYwIvdT GL/IIvWwEH8BdE5n2ddKU+EL9QyerZ9m4lKWzo1DSFBdaJpqTJGMgu1+T+SdtcL7 VfkwBng8wLw1B6o05Z7VjECOWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDWGFGmp h+DI9SyMpPC6WJTqFtJ5MB8GA1UdIwQYMBaAFFeTQ20iqWoGE2hRIDu3JZhNcLAX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OURDRC9BMDBENzAwNjJD MjQxMUVFQUI5NzhGMEZDNEY5QUUwMi9WNU5EYlNLcGFnWVRhRkVnTzdjbG1FMXdz QmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Y1TkRiU0twYWdZVGFGRWdPN2NsbUUxd3NCYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OURDRC9BMDBENzAwNjJDMjQxMUVFQUI5NzhGMEZDNEY5QUUwMi9WNU5EYlNLcGFn WVRhRkVnTzdjbG1FMXdzQmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUSoHZhuNKMlWKhTVYJB/9JEvWJ4OPNf0gy7H5++4pjG2r50eLCbzS iXmsiiAiXjZ4ibY/Tn0WrUQ4fJl/kHasyZfSY9x/JbQbBFabl0Iw4TlxUW6RkHBT m6FpsO9EsRIwLVXoLNy5eIJ35GWiAk5qSZnJSAF72l5ugPguuz8aNWlUCodrUj+2 gr8KmRMa7igSFOh/trBvH/EpXHst+4ioZgyRV9pRmLN4Xv2uwBna68Doy5vnODHP u7p5F8Iz7frJZgH3Y0touUhN85zDT4wo0ESJ7W6tsifO5NcI0vHU4rIBe+HBcfUw u8mvkKvt20DIg8FFh02j5c6UQzX8xhij -----END CERTIFICATE-----Generated at Sat May 31 16:47:50 2025 by rpki-client