$ rpki-client -vvf rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft File: 5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft (raw, json) Hash identifier: 627UTZ3eLHB3gq7PUV5AVooaar12NS2hcavO47/rLls= Subject key identifier: CB:DF:76:99:54:DA:06:D5:2E:05:5B:D1:5C:24:34:2A:08:FB:18:D9 Authority key identifier: E6:B5:4D:02:7C:E3:49:8B:F3:5E:4D:06:5B:C4:78:A9:36:C1:61:69 Certificate issuer: /CN=A9170DD8/serialNumber=E6B54D027CE3498BF35E4D065BC478A936C16169 Certificate serial: B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rVNAnzjSYvzXk0GW8R4qTbBYWk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft Manifest number: B5 Signing time: Mon 11 Aug 2025 06:14:22 +0000 Manifest this update: Mon 11 Aug 2025 06:14:21 +0000 Manifest next update: Mon 18 Aug 2025 06:14:21 +0000 Files and hashes: 1: 5rVNAnzjSYvzXk0GW8R4qTbBYWk.crl (hash: ZGQ2tImXTWb0swodUM31ublCIzdzi50LuT3QtgdszYw=) 2: 4D06CD2C667411EF8E723587C4F9AE02.roa (hash: 4PdtbIsL2ZotyQ7lOujn962oNOjC34OWUPtAk2nb5/I=) 3: 4CA4BE8E667411EF8E723587C4F9AE02.roa (hash: 8qwHnAzkWpQMSqbxW4gRTYW6uWniUVjWaHfJJJJlxJ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.crl rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rVNAnzjSYvzXk0GW8R4qTbBYWk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 185 (0xb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170DD8, serialNumber=E6B54D027CE3498BF35E4D065BC478A936C16169 Validity Not Before: Aug 11 06:14:21 2025 GMT Not After : Aug 18 06:14:21 2025 GMT Subject: CN=68998a3d-caf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:5a:ef:9b:fc:07:61:8c:62:9e:51:84:ea:63: 33:c4:50:64:03:d4:9e:64:e7:75:a2:1c:d3:c5:ed: af:e8:1d:83:e0:86:16:8b:fa:0a:a0:51:b8:5d:1d: 5e:95:e6:4b:16:ef:5e:25:1b:e6:ee:79:ce:81:f8: 31:b3:54:05:c9:b9:4c:db:e6:96:55:85:5a:82:04: d3:92:93:5f:42:a6:56:bd:b4:7a:b9:6c:c8:6a:1a: 09:f7:ed:6f:11:d3:b5:e3:01:31:e0:30:09:8c:42: 48:ba:a3:fc:6b:1b:d9:53:34:d9:be:e9:55:09:bc: 01:61:9e:57:13:27:b1:32:d6:40:bb:24:8a:8d:76: c6:ab:1c:f9:ca:9b:21:4a:9c:32:51:c1:31:83:eb: 02:03:f7:0b:f6:c2:f6:f1:b5:a9:32:6c:7e:9a:0c: e4:ce:e1:b4:45:95:f7:9d:e8:11:57:fc:1e:f0:20: ec:ad:ed:53:1b:92:d4:81:dd:a9:ee:2a:05:a0:ca: 3b:19:9e:36:5d:06:32:14:5c:04:3b:d9:5e:a1:9c: c0:79:5e:49:f3:f2:0e:5e:68:f6:7b:d7:f1:9f:ae: f2:d7:c7:8d:fd:1a:4e:14:36:ce:fe:56:8a:27:16: 43:52:7a:07:64:04:39:34:1c:0f:ac:08:0a:fd:74: e5:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:DF:76:99:54:DA:06:D5:2E:05:5B:D1:5C:24:34:2A:08:FB:18:D9 X509v3 Authority Key Identifier: keyid:E6:B5:4D:02:7C:E3:49:8B:F3:5E:4D:06:5B:C4:78:A9:36:C1:61:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rVNAnzjSYvzXk0GW8R4qTbBYWk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:08:d9:fd:ff:5a:03:1d:e2:71:1e:83:ab:0c:3b:b0:31:0e: b5:47:29:cf:0d:71:ea:c9:a2:ab:51:13:37:5a:0e:68:40:b3: ce:59:1b:4c:dc:62:7a:35:a6:d6:4f:d0:3a:cf:71:73:27:65: 36:4a:1f:6a:a6:b6:2c:8b:d3:55:14:2a:bc:08:7c:47:04:9a: f4:1f:2f:91:02:f6:0e:bc:4d:53:94:e8:03:a6:cb:68:9d:84: 1a:7c:fe:03:61:c9:53:41:4f:f4:d1:e4:10:2e:5d:5f:19:fd: 72:7b:20:cd:0a:2d:be:ce:95:88:97:c6:5e:57:2b:91:a5:df: 44:72:a9:65:c3:a9:fc:8e:fc:f3:d9:fc:2b:80:4e:38:fd:21: 77:71:57:f0:36:b9:c1:10:54:97:d1:85:b0:13:23:50:e2:71: 7d:af:d1:05:a5:fc:67:86:8e:9b:32:76:c6:37:46:1e:ea:a2: 93:df:48:ac:d5:bd:ac:4d:ca:df:4d:f6:d1:74:f0:d2:ea:fb: 80:c9:12:18:61:33:54:2b:53:4c:5c:d8:25:6a:09:7c:b2:2c: 7d:9b:04:ec:87:6c:bb:5c:c4:66:ea:a2:8d:b2:e2:2a:64:35: be:f0:7d:bc:44:a3:ca:a2:f9:3e:41:22:2d:5a:2f:bb:8a:7b: 69:24:3f:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBERDgxMTAvBgNVBAUTKEU2QjU0RDAyN0NFMzQ5OEJGMzVFNEQwNjVCQzQ3OEE5 MzZDMTYxNjkwHhcNMjUwODExMDYxNDIxWhcNMjUwODE4MDYxNDIxWjAYMRYwFAYD VQQDEw02ODk5OGEzZC1jYWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzVrvm/wHYYxinlGE6mMzxFBkA9SeZOd1ohzTxe2v6B2D4IYWi/oKoFG4XR1e leZLFu9eJRvm7nnOgfgxs1QFyblM2+aWVYVaggTTkpNfQqZWvbR6uWzIahoJ9+1v EdO14wEx4DAJjEJIuqP8axvZUzTZvulVCbwBYZ5XEyexMtZAuySKjXbGqxz5ypsh SpwyUcExg+sCA/cL9sL28bWpMmx+mgzkzuG0RZX3negRV/we8CDsre1TG5LUgd2p 7ioFoMo7GZ42XQYyFFwEO9leoZzAeV5J8/IOXmj2e9fxn67y18eN/RpOFDbO/laK JxZDUnoHZAQ5NBwPrAgK/XTlQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMvfdplU 2gbVLgVb0VwkNCoI+xjZMB8GA1UdIwQYMBaAFOa1TQJ840mL815NBlvEeKk2wWFp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEREOC9BNjZBNzVFRTY1 QkIxMUVGQUZBMzJGODJDNEY5QUUwMi81clZOQW56alNZdnpYazBHVzhSNHFUYkJZ V2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVyVk5BbnpqU1l2elhrMEdXOFI0cVRiQllXay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEREOC9BNjZBNzVFRTY1QkIxMUVGQUZBMzJGODJDNEY5QUUwMi81clZOQW56alNZ dnpYazBHVzhSNHFUYkJZV2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtCNn9/1oDHeJxHoOrDDuwMQ61RynPDXHqyaKrURM3Wg5oQLPOWRtM 3GJ6NabWT9A6z3FzJ2U2Sh9qprYsi9NVFCq8CHxHBJr0Hy+RAvYOvE1TlOgDpsto nYQafP4DYclTQU/00eQQLl1fGf1yeyDNCi2+zpWIl8ZeVyuRpd9Ecqllw6n8jvzz 2fwrgE44/SF3cVfwNrnBEFSX0YWwEyNQ4nF9r9EFpfxnho6bMnbGN0Ye6qKT30is 1b2sTcrfTfbRdPDS6vuAyRIYYTNUK1NMXNglagl8six9mwTsh2y7XMRm6qKNsuIq ZDW+8H28RKPKovk+QSItWi+7intpJD+T -----END CERTIFICATE-----Generated at Mon Aug 11 13:14:11 2025 by rpki-client