$ rpki-client -vvf rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.mft File: V5NDbSKpagYTaFEgO7clmE1wsBc.mft (raw, json) Hash identifier: 8wtUiCRdFzRzIuvQXHauqvJZY1lCuzNqmdpNWAztN1M= Subject key identifier: 02:E9:DE:1D:77:8C:DD:3C:1C:D8:86:75:4D:0C:7D:9B:40:64:EA:4F Authority key identifier: 57:93:43:6D:22:A9:6A:06:13:68:51:20:3B:B7:25:98:4D:70:B0:17 Certificate issuer: /CN=A9159DCD/serialNumber=5793436D22A96A06136851203BB725984D70B017 Certificate serial: 0198 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5NDbSKpagYTaFEgO7clmE1wsBc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.mft Manifest number: 0194 Signing time: Wed 17 Sep 2025 03:57:59 +0000 Manifest this update: Wed 17 Sep 2025 03:57:58 +0000 Manifest next update: Wed 24 Sep 2025 03:57:58 +0000 Files and hashes: 1: V5NDbSKpagYTaFEgO7clmE1wsBc.crl (hash: XGr+g32H/hwlvFYwFds218T0qhHqu5NP3YACDDcrNoU=) 2: 29D600062C3311EEBFF69B6CC4F9AE02.roa (hash: hskv6e7Ag+5HAqH/N4O5ItTvOGPOLGR+/yJDzJO0d+k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.crl rsync://rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5NDbSKpagYTaFEgO7clmE1wsBc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 03:57:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 408 (0x198) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159DCD, serialNumber=5793436D22A96A06136851203BB725984D70B017 Validity Not Before: Sep 17 03:57:58 2025 GMT Not After : Sep 24 03:57:58 2025 GMT Subject: CN=68ca31c6-becb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:79:6b:8f:ca:8f:3d:c6:27:69:ee:72:f3:cc: 10:d3:2f:d2:1d:96:68:d8:9e:68:64:61:e8:f0:f1: dd:dd:65:7e:2c:0d:cf:53:00:22:80:42:e6:70:c2: 74:bb:df:e4:1f:99:96:76:15:14:b3:15:43:56:f9: b0:0f:32:78:c6:af:70:b9:21:9d:13:94:83:2b:97: 04:1d:76:4b:60:21:d2:af:e2:81:75:06:90:b7:68: 04:c7:99:99:4a:37:66:10:37:a2:fa:39:72:2f:f7: b3:a1:2e:5b:b2:c6:f3:c3:ee:f6:56:13:de:32:da: d1:6b:ae:10:be:cc:75:cd:b9:0c:fa:6a:39:7f:04: cc:69:64:f7:40:28:73:a8:52:15:ba:5a:78:ca:4f: 83:ec:e4:d2:ee:ee:99:39:12:0d:e2:f5:b2:9a:b0: 4c:4a:55:fe:fe:1b:02:d7:07:7f:1c:da:3d:00:b6: 3a:fb:bc:22:e8:d1:be:4b:1c:26:0b:5f:4c:a2:d1: cc:b4:2f:72:56:67:53:50:41:04:fb:86:a8:e1:f1: 19:d9:6f:2e:56:7c:03:4f:1c:1e:53:ae:d9:ad:99: ee:78:3f:16:f3:0d:eb:3b:5a:38:16:78:90:85:bf: 0a:4b:7c:5f:2a:28:63:99:27:e8:35:33:1b:8b:7e: f0:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:E9:DE:1D:77:8C:DD:3C:1C:D8:86:75:4D:0C:7D:9B:40:64:EA:4F X509v3 Authority Key Identifier: keyid:57:93:43:6D:22:A9:6A:06:13:68:51:20:3B:B7:25:98:4D:70:B0:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5NDbSKpagYTaFEgO7clmE1wsBc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:ff:80:df:9c:d2:b8:3d:e1:f0:28:62:3b:25:0f:88:ca:83: 65:82:a4:d9:79:c2:62:c8:8f:7a:fe:8a:65:28:69:87:8f:00: 27:e3:bc:f0:e7:49:a0:7e:0d:e4:66:ff:37:39:73:34:c0:54: e4:8d:7f:84:90:78:31:b3:58:c2:c4:6e:25:83:53:ca:dc:73: d2:5d:cd:f1:08:82:dc:2b:ce:35:f2:c0:25:ce:1d:3b:05:ae: 14:0b:b6:ed:18:61:10:50:27:e0:e3:a6:6c:f3:e2:9e:67:44: 1e:82:7a:07:0a:32:9c:ee:17:5c:c6:5e:91:90:70:88:84:6f: 0d:e7:2e:da:c8:13:fc:64:1c:09:78:5a:34:39:66:4f:b6:52: 7c:0b:8e:f8:9e:55:99:95:de:31:94:d6:41:05:eb:62:2b:c8: 75:c2:49:79:ad:19:23:a7:d2:63:8d:42:5d:20:3c:c9:ca:16: c8:6e:bb:c3:be:65:18:35:c7:61:62:62:21:75:c0:c8:c0:cb: 3f:51:8d:1d:e3:4a:d8:82:2a:ea:7e:06:86:cf:73:17:e2:d8: 1b:b1:6d:ed:c8:2b:0e:12:a5:85:9a:f4:00:9e:d1:1a:85:5c: 16:80:79:da:40:c7:1f:54:42:d0:84:08:ff:92:db:56:56:91: e0:5b:52:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTlEQ0QxMTAvBgNVBAUTKDU3OTM0MzZEMjJBOTZBMDYxMzY4NTEyMDNCQjcyNTk4 NEQ3MEIwMTcwHhcNMjUwOTE3MDM1NzU4WhcNMjUwOTI0MDM1NzU4WjAYMRYwFAYD VQQDEw02OGNhMzFjNi1iZWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA63lrj8qPPcYnae5y88wQ0y/SHZZo2J5oZGHo8PHd3WV+LA3PUwAigELmcMJ0 u9/kH5mWdhUUsxVDVvmwDzJ4xq9wuSGdE5SDK5cEHXZLYCHSr+KBdQaQt2gEx5mZ SjdmEDei+jlyL/ezoS5bssbzw+72VhPeMtrRa64Qvsx1zbkM+mo5fwTMaWT3QChz qFIVulp4yk+D7OTS7u6ZORIN4vWymrBMSlX+/hsC1wd/HNo9ALY6+7wi6NG+Sxwm C19MotHMtC9yVmdTUEEE+4ao4fEZ2W8uVnwDTxweU67ZrZnueD8W8w3rO1o4FniQ hb8KS3xfKihjmSfoNTMbi37wKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFALp3h13 jN08HNiGdU0MfZtAZOpPMB8GA1UdIwQYMBaAFFeTQ20iqWoGE2hRIDu3JZhNcLAX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OURDRC9BMDBENzAwNjJD MjQxMUVFQUI5NzhGMEZDNEY5QUUwMi9WNU5EYlNLcGFnWVRhRkVnTzdjbG1FMXdz QmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Y1TkRiU0twYWdZVGFGRWdPN2NsbUUxd3NCYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OURDRC9BMDBENzAwNjJDMjQxMUVFQUI5NzhGMEZDNEY5QUUwMi9WNU5EYlNLcGFn WVRhRkVnTzdjbG1FMXdzQmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCb/4DfnNK4PeHwKGI7JQ+IyoNlgqTZecJiyI96/oplKGmHjwAn47zw 50mgfg3kZv83OXM0wFTkjX+EkHgxs1jCxG4lg1PK3HPSXc3xCILcK8418sAlzh07 Ba4UC7btGGEQUCfg46Zs8+KeZ0QegnoHCjKc7hdcxl6RkHCIhG8N5y7ayBP8ZBwJ eFo0OWZPtlJ8C474nlWZld4xlNZBBetiK8h1wkl5rRkjp9JjjUJdIDzJyhbIbrvD vmUYNcdhYmIhdcDIwMs/UY0d40rYgirqfgaGz3MX4tgbsW3tyCsOEqWFmvQAntEa hVwWgHnaQMcfVELQhAj/kttWVpHgW1Kg -----END CERTIFICATE-----Generated at Fri Sep 19 02:28:36 2025 by rpki-client