$ rpki-client -vvf rpki.apnic.net/member_repository/A9181C93/6D0F640E619711EEA62A3676C4F9AE02/5zsrW0iY5HX_6GmyTTSFzsh90Us.mft File: 5zsrW0iY5HX_6GmyTTSFzsh90Us.mft (raw, json) Hash identifier: 7EM77f5zt0Yn/2bRO+mc6wNffcLP7iC6mdU8klUBLik= Subject key identifier: AE:1A:6D:56:E3:35:F3:18:B0:A8:67:06:41:9D:16:83:95:6F:8A:25 Authority key identifier: E7:3B:2B:5B:48:98:E4:75:FF:E8:69:B2:4D:34:85:CE:C8:7D:D1:4B Certificate issuer: /CN=A9181C93/serialNumber=E73B2B5B4898E475FFE869B24D3485CEC87DD14B Certificate serial: 014C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zsrW0iY5HX_6GmyTTSFzsh90Us.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9181C93/6D0F640E619711EEA62A3676C4F9AE02/5zsrW0iY5HX_6GmyTTSFzsh90Us.mft Manifest number: 0148 Signing time: Tue 01 Jul 2025 04:44:15 +0000 Manifest this update: Tue 01 Jul 2025 04:44:14 +0000 Manifest next update: Tue 08 Jul 2025 04:44:14 +0000 Files and hashes: 1: 5zsrW0iY5HX_6GmyTTSFzsh90Us.crl (hash: prFa4H7NNYmShRPa6ue/H2YHcr1tcfH3uy04JEyEUe8=) 2: A2ED9CA2619D11EE8699DD20C4F9AE02.roa (hash: nKra6kgkDLZMACl29cue2PgvN/WmZ6IhO1y9ruMhiD4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9181C93/6D0F640E619711EEA62A3676C4F9AE02/5zsrW0iY5HX_6GmyTTSFzsh90Us.crl rsync://rpki.apnic.net/member_repository/A9181C93/6D0F640E619711EEA62A3676C4F9AE02/5zsrW0iY5HX_6GmyTTSFzsh90Us.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zsrW0iY5HX_6GmyTTSFzsh90Us.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 04:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 332 (0x14c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181C93, serialNumber=E73B2B5B4898E475FFE869B24D3485CEC87DD14B Validity Not Before: Jul 1 04:44:14 2025 GMT Not After : Jul 8 04:44:14 2025 GMT Subject: CN=6863679e-471a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:7a:66:63:a1:78:0a:17:04:dd:01:f5:55:01: 24:da:30:67:ed:55:d9:d6:5d:c2:57:c9:d3:f3:df: 10:80:13:9f:51:cc:a9:6b:13:49:d4:53:a6:fa:6c: 98:f3:d6:bd:7b:fc:db:a7:4a:03:f8:b9:7a:25:2e: b5:a0:47:be:16:ab:72:e7:ae:89:9e:c5:47:9d:98: 79:da:b8:19:24:41:f2:73:f1:b3:a3:7f:68:1d:f4: 1b:53:23:66:d8:71:12:51:99:a1:f4:7d:09:1f:2c: 1b:1e:f5:a3:50:9a:36:18:53:f8:ea:ba:51:49:a3: ed:6a:8e:b5:db:4a:fa:fd:37:ca:ac:ff:d1:73:3e: d6:59:f8:58:38:13:19:0c:1a:b0:30:92:02:5e:fd: 47:38:85:1e:cf:35:55:5a:63:4f:4d:8c:69:26:7c: 7f:84:5f:cb:3d:a8:17:7f:ae:12:24:31:c2:e2:fa: 67:47:ca:37:ed:3a:f8:45:5a:ab:7a:06:f5:36:22: 71:9f:89:59:77:3f:50:15:ee:48:7f:61:1c:ea:52: da:00:30:1e:38:15:36:98:7d:dc:3f:ca:07:e5:32: 01:72:43:32:cf:8a:50:d7:db:80:37:d7:78:30:ef: a2:94:23:ab:f0:3d:48:46:bc:ef:e3:f0:d8:c6:18: 25:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:1A:6D:56:E3:35:F3:18:B0:A8:67:06:41:9D:16:83:95:6F:8A:25 X509v3 Authority Key Identifier: keyid:E7:3B:2B:5B:48:98:E4:75:FF:E8:69:B2:4D:34:85:CE:C8:7D:D1:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9181C93/6D0F640E619711EEA62A3676C4F9AE02/5zsrW0iY5HX_6GmyTTSFzsh90Us.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zsrW0iY5HX_6GmyTTSFzsh90Us.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181C93/6D0F640E619711EEA62A3676C4F9AE02/5zsrW0iY5HX_6GmyTTSFzsh90Us.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:9c:7b:06:23:08:d9:4b:f2:2b:eb:ea:03:a7:28:a2:60:80: 74:85:ee:72:7c:3e:d0:63:01:52:d0:e4:14:20:4a:89:14:05: aa:eb:a0:58:e9:d9:f8:5d:a2:0b:23:e5:5d:a9:57:e2:4d:a9: 94:9c:38:df:d7:26:c2:4c:48:1e:72:03:55:04:4a:ca:6e:8e: 16:e4:c6:7e:af:2b:97:aa:69:fd:4d:f3:7a:a2:01:85:8c:e3: dd:8f:c3:3c:d0:d0:2f:2d:fc:ea:ab:51:ec:55:68:28:74:2f: c4:79:d7:85:77:06:3b:e5:35:13:51:50:7c:6c:53:10:b5:dc: d7:5a:b6:77:15:2f:81:f8:9b:62:9a:4f:78:97:7b:4c:b0:bc: 32:4b:00:0c:d0:e9:7d:46:fa:13:e8:0e:99:2d:95:f3:e8:d0: 0e:ce:43:23:b7:c5:f0:a7:30:9a:75:4c:7a:38:df:00:8f:29: 2f:c1:67:79:b9:98:3e:45:42:4c:d5:e9:71:c5:f3:c7:ca:17: 80:9c:f8:0b:53:f4:4e:ff:4c:1d:2a:b2:86:f2:63:b4:93:74: e8:fa:b8:a1:1c:78:a2:33:08:5f:db:18:2d:9f:94:0b:e4:23: 48:78:c7:5e:01:8a:ad:40:dd:b3:f2:9d:d5:ea:ce:e6:2a:eb: ec:1c:30:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODFDOTMxMTAvBgNVBAUTKEU3M0IyQjVCNDg5OEU0NzVGRkU4NjlCMjREMzQ4NUNF Qzg3REQxNEIwHhcNMjUwNzAxMDQ0NDE0WhcNMjUwNzA4MDQ0NDE0WjAYMRYwFAYD VQQDEw02ODYzNjc5ZS00NzFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA33pmY6F4ChcE3QH1VQEk2jBn7VXZ1l3CV8nT898QgBOfUcypaxNJ1FOm+myY 89a9e/zbp0oD+Ll6JS61oEe+Fqty566JnsVHnZh52rgZJEHyc/Gzo39oHfQbUyNm 2HESUZmh9H0JHywbHvWjUJo2GFP46rpRSaPtao6120r6/TfKrP/Rcz7WWfhYOBMZ DBqwMJICXv1HOIUezzVVWmNPTYxpJnx/hF/LPagXf64SJDHC4vpnR8o37Tr4RVqr egb1NiJxn4lZdz9QFe5If2Ec6lLaADAeOBU2mH3cP8oH5TIBckMyz4pQ19uAN9d4 MO+ilCOr8D1IRrzv4/DYxhglzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK4abVbj NfMYsKhnBkGdFoOVb4olMB8GA1UdIwQYMBaAFOc7K1tImOR1/+hpsk00hc7IfdFL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MUM5My82RDBGNjQwRTYx OTcxMUVFQTYyQTM2NzZDNEY5QUUwMi81enNyVzBpWTVIWF82R215VFRTRnpzaDkw VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV6c3JXMGlZNUhYXzZHbXlUVFNGenNoOTBVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MUM5My82RDBGNjQwRTYxOTcxMUVFQTYyQTM2NzZDNEY5QUUwMi81enNyVzBpWTVI WF82R215VFRTRnpzaDkwVXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5nHsGIwjZS/Ir6+oDpyiiYIB0he5yfD7QYwFS0OQUIEqJFAWq66BY 6dn4XaILI+VdqVfiTamUnDjf1ybCTEgecgNVBErKbo4W5MZ+ryuXqmn9TfN6ogGF jOPdj8M80NAvLfzqq1HsVWgodC/EedeFdwY75TUTUVB8bFMQtdzXWrZ3FS+B+Jti mk94l3tMsLwySwAM0Ol9RvoT6A6ZLZXz6NAOzkMjt8XwpzCadUx6ON8AjykvwWd5 uZg+RUJM1elxxfPHyheAnPgLU/RO/0wdKrKG8mO0k3To+rihHHiiMwhf2xgtn5QL 5CNIeMdeAYqtQN2z8p3V6s7mKuvsHDA8 -----END CERTIFICATE-----Generated at Wed Jul 2 13:16:04 2025 by rpki-client