$ rpki-client -vvf rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft File: vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft (raw, json) Hash identifier: Qynvn1Vlveq3RHRBBDZrxlFBpvnWlbv15GeUEwwchcw= Subject key identifier: 2A:77:70:2B:D1:AB:F5:57:59:B1:66:23:61:A2:CF:CE:6C:C6:6C:84 Authority key identifier: BD:1E:7E:64:1F:FD:96:D5:74:61:55:FC:42:1B:17:DD:C1:AA:77:62 Certificate issuer: /CN=A9186B80/serialNumber=BD1E7E641FFD96D5746155FC421B17DDC1AA7762 Certificate serial: 0535 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft Manifest number: 052B Signing time: Thu 04 Sep 2025 23:49:37 +0000 Manifest this update: Thu 04 Sep 2025 23:49:36 +0000 Manifest next update: Thu 11 Sep 2025 23:49:36 +0000 Files and hashes: 1: vR5-ZB_9ltV0YVX8QhsX3cGqd2I.crl (hash: 25s+56EYzgyiOxX3YLEa5NFsICbu8doe2XTwwzqUnpk=) 2: 9B741CFE0C3411EDB8619843C4F9AE02.roa (hash: oJYEoaEThRMxBGvil27GsNiveOB+RhewFzQDnOZyafM=) 3: 37FE553E5CAB11F08FCD0029C4F9AE02.roa (hash: FBJc9DSyKZ6Ne+I8xOG24hHo29YCYkNNRXvDi6lkdSE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.crl rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 23:49:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1333 (0x535) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186B80, serialNumber=BD1E7E641FFD96D5746155FC421B17DDC1AA7762 Validity Not Before: Sep 4 23:49:36 2025 GMT Not After : Sep 11 23:49:36 2025 GMT Subject: CN=68ba2591-43bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:6e:3e:ac:58:87:e5:f9:ae:96:25:99:d0:43: b5:ea:60:de:f2:15:2e:af:81:be:e3:c2:1a:a6:df: 6b:65:80:3b:58:96:0e:5d:7c:59:2b:a0:bf:fa:fa: cd:41:50:2d:86:c7:57:b9:bd:53:a2:4c:3a:4b:e9: 75:8a:02:79:cf:bd:7e:bd:f9:e0:02:8e:51:40:3a: b3:ef:3b:4f:e7:37:42:d6:4e:93:d0:f7:66:0f:fe: 1d:af:16:d6:37:5d:fb:70:61:5f:b1:6c:4b:74:56: 1b:61:d2:99:01:24:15:85:28:64:74:4d:0c:6a:e5: 09:ec:1a:45:01:e9:4d:7d:9d:ea:1d:70:9d:9d:4e: 0f:ae:57:6b:cb:b0:d8:f3:49:d2:1b:55:4c:72:ab: f9:01:c9:9e:9c:fe:6d:6b:08:05:4a:80:b5:27:b7: 80:ea:c8:6e:07:0d:ca:b3:43:3d:35:fc:b7:97:99: 2b:ac:ea:ac:7a:eb:d2:9d:1f:a0:be:7a:5d:b0:7c: 39:cd:c5:f6:2d:75:1a:47:94:fb:79:b7:cb:e7:92: cb:01:81:11:25:dc:de:c1:e3:8c:82:3f:8c:25:c2: 25:39:53:80:1e:a4:fa:71:84:f2:b9:c4:06:56:58: ba:15:b9:ae:49:d9:37:e7:05:c1:40:a3:00:0c:f8: 0a:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:77:70:2B:D1:AB:F5:57:59:B1:66:23:61:A2:CF:CE:6C:C6:6C:84 X509v3 Authority Key Identifier: keyid:BD:1E:7E:64:1F:FD:96:D5:74:61:55:FC:42:1B:17:DD:C1:AA:77:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:d1:30:65:bd:33:c8:9a:56:a4:77:ff:db:67:1d:47:0d:10: f5:e3:88:50:f5:30:b1:f9:fc:30:b4:b6:44:4c:6e:29:a0:46: 5e:47:b6:3c:f3:4c:2f:1e:30:8e:0b:4d:14:1c:d2:ec:07:7e: 1b:87:08:12:ef:62:48:0f:df:d9:09:02:45:f1:6c:af:da:42: 26:fd:16:42:17:22:9b:09:d2:7b:1e:7c:0c:b2:6e:c0:c5:90: 69:b3:bc:1c:9c:bf:ec:79:5b:a3:4d:bc:a1:f3:a6:cc:ee:3a: 84:5c:6f:13:86:b6:65:33:21:51:b4:df:ae:47:43:6f:bb:70: 84:73:4f:eb:0f:8c:57:74:da:1c:62:7c:1d:d2:08:a1:36:2f: 83:f2:14:37:6b:e7:2c:a3:53:41:bc:9b:9d:b6:6c:3f:a7:f1: b3:9b:cf:74:91:06:00:ba:bb:65:1c:73:63:d2:5d:62:4a:a1: c6:ea:29:a7:98:0f:78:61:86:f8:3e:e1:53:14:16:f3:44:c5: 92:0a:17:58:84:16:ca:b8:9b:2d:53:65:65:cb:a7:8c:91:e7: f2:84:57:1e:20:41:04:b1:40:ff:ae:fa:21:d6:62:00:0e:cc: c7:d6:7b:78:b7:2a:9a:d5:3c:b0:52:14:9a:2a:e0:01:b3:6c: 2f:a6:82:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZCODAxMTAvBgNVBAUTKEJEMUU3RTY0MUZGRDk2RDU3NDYxNTVGQzQyMUIxN0RE QzFBQTc3NjIwHhcNMjUwOTA0MjM0OTM2WhcNMjUwOTExMjM0OTM2WjAYMRYwFAYD VQQDEw02OGJhMjU5MS00M2JiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmW4+rFiH5fmuliWZ0EO16mDe8hUur4G+48Iapt9rZYA7WJYOXXxZK6C/+vrN QVAthsdXub1Tokw6S+l1igJ5z71+vfngAo5RQDqz7ztP5zdC1k6T0PdmD/4drxbW N137cGFfsWxLdFYbYdKZASQVhShkdE0MauUJ7BpFAelNfZ3qHXCdnU4Prldry7DY 80nSG1VMcqv5AcmenP5tawgFSoC1J7eA6shuBw3Ks0M9Nfy3l5krrOqseuvSnR+g vnpdsHw5zcX2LXUaR5T7ebfL55LLAYERJdzeweOMgj+MJcIlOVOAHqT6cYTyucQG Vli6FbmuSdk35wXBQKMADPgK4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCp3cCvR q/VXWbFmI2Giz85sxmyEMB8GA1UdIwQYMBaAFL0efmQf/ZbVdGFV/EIbF93Bqndi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkI4MC9BRTZBQTFCNDEy M0IxMUVDOEExMzVGNDJDNEY5QUUwMi92UjUtWkJfOWx0VjBZVlg4UWhzWDNjR3Fk MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZSNS1aQl85bHRWMFlWWDhRaHNYM2NHcWQySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkI4MC9BRTZBQTFCNDEyM0IxMUVDOEExMzVGNDJDNEY5QUUwMi92UjUtWkJfOWx0 VjBZVlg4UWhzWDNjR3FkMkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAE0TBlvTPImlakd//bZx1HDRD144hQ9TCx+fwwtLZETG4poEZeR7Y8 80wvHjCOC00UHNLsB34bhwgS72JID9/ZCQJF8Wyv2kIm/RZCFyKbCdJ7HnwMsm7A xZBps7wcnL/seVujTbyh86bM7jqEXG8ThrZlMyFRtN+uR0Nvu3CEc0/rD4xXdNoc Ynwd0gihNi+D8hQ3a+cso1NBvJudtmw/p/Gzm890kQYAurtlHHNj0l1iSqHG6imn mA94YYb4PuFTFBbzRMWSChdYhBbKuJstU2Vly6eMkefyhFceIEEEsUD/rvoh1mIA DszH1nt4tyqa1TywUhSaKuABs2wvpoJT -----END CERTIFICATE-----Generated at Sat Sep 6 21:07:27 2025 by rpki-client