$ rpki-client -vvf rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.mft File: 5WcrvxjEz-vT9HLRO0h3E3LTTt8.mft (raw, json) Hash identifier: zqE7Bd30Tn3e9Cbt5CByhSwY7XwzCGElIehiOu5JRKE= Subject key identifier: A0:F2:FA:FB:99:AF:AB:09:27:10:91:89:CB:BD:34:AC:3C:75:63:B8 Authority key identifier: E5:67:2B:BF:18:C4:CF:EB:D3:F4:72:D1:3B:48:77:13:72:D3:4E:DF Certificate issuer: /CN=A9187313/serialNumber=E5672BBF18C4CFEBD3F472D13B48771372D34EDF Certificate serial: 196D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5WcrvxjEz-vT9HLRO0h3E3LTTt8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.mft Manifest number: 1951 Signing time: Fri 20 Jun 2025 16:26:22 +0000 Manifest this update: Fri 20 Jun 2025 16:26:22 +0000 Manifest next update: Fri 27 Jun 2025 16:26:22 +0000 Files and hashes: 1: 5WcrvxjEz-vT9HLRO0h3E3LTTt8.crl (hash: I9uj4FZrCmdp9HdQrQ+H3rgd4QZk7fzjcx98riaeweg=) 2: 98E572FC777011E7BF7EED10C4F9AE02.roa (hash: VHhU4T6PraaYgh0OKYxnF9YbskELwSN55WdyN/nVdKY=) 3: 9787989A777011E7BF7EED10C4F9AE02.roa (hash: y3ghXyFRCacdpqDozL1dHnRn5VnIW5O8UMNzKQMsfws=) 4: 97F31854777011E7BF7EED10C4F9AE02.roa (hash: MvSNDQCHIjbtKn6qI3pyzYR56RR/J9dUO091dvxUIn4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.crl rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5WcrvxjEz-vT9HLRO0h3E3LTTt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Jun 2025 16:26:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6509 (0x196d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187313, serialNumber=E5672BBF18C4CFEBD3F472D13B48771372D34EDF Validity Not Before: Jun 20 16:26:22 2025 GMT Not After : Jun 27 16:26:22 2025 GMT Subject: CN=68558bae-9a85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:47:a7:c2:5d:a3:96:ff:4e:8e:a6:24:ae:2c: 5d:13:b8:f4:64:e5:61:d7:e5:4d:4d:9e:d3:ce:a8: a9:c6:8a:eb:19:99:fb:ff:34:94:7e:f8:46:90:8e: 76:27:61:28:80:04:b4:25:34:69:27:94:b4:16:65: a5:91:df:24:22:74:2f:48:b8:3e:ff:6a:84:56:21: 47:3c:90:2f:16:97:e5:2b:26:45:78:06:ed:af:01: 82:67:00:ac:45:72:06:a8:63:ec:cc:6c:e6:71:f1: b0:85:4c:38:dc:6b:69:ea:f0:32:6f:17:ed:6c:37: f0:75:e9:ec:48:33:b2:45:2d:39:eb:88:a6:82:8c: de:af:dc:3f:07:ef:49:8e:c7:bd:db:3a:1d:e8:b9: 2c:5d:ec:41:5e:91:52:15:43:34:02:ac:c0:6e:5c: 4a:dd:22:8e:6a:12:9a:3d:6d:6f:bc:4c:c0:d8:49: fb:05:54:d3:9c:af:51:67:2a:09:c9:ea:74:87:85: 58:49:2a:af:89:81:a4:b7:e6:20:82:79:ef:3d:b2: 25:c7:e4:a6:c0:24:64:1f:e5:ba:36:74:5a:83:a6: e9:bd:b3:a0:af:d3:b2:4b:ec:67:70:1d:42:47:b2: a2:59:3b:77:9f:17:d7:a9:eb:f9:8d:c1:4a:35:e3: 2e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:F2:FA:FB:99:AF:AB:09:27:10:91:89:CB:BD:34:AC:3C:75:63:B8 X509v3 Authority Key Identifier: keyid:E5:67:2B:BF:18:C4:CF:EB:D3:F4:72:D1:3B:48:77:13:72:D3:4E:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5WcrvxjEz-vT9HLRO0h3E3LTTt8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:14:db:d6:62:c5:e7:49:d6:74:82:d0:d9:c9:1b:50:ad:f5: 43:9b:7d:79:6c:e5:4d:e5:22:e0:4d:7c:fa:1c:07:a7:b7:0e: 3f:b4:29:56:0a:85:57:57:c2:dc:a0:6c:87:75:58:6d:71:3e: 95:32:91:e5:1b:aa:f7:53:cf:6d:5f:43:a7:d9:a6:d7:1e:54: 04:eb:03:d7:9d:b9:91:16:19:47:87:60:bc:7d:f8:24:e5:69: 47:03:5a:9c:ce:b1:ae:bd:8b:6e:21:a2:f6:bf:0b:d2:dd:78: c1:76:f0:58:70:11:a3:78:8b:27:08:dc:4c:3d:e4:de:72:94: f3:d8:51:98:48:63:64:a0:e3:8c:6f:b0:1d:9c:a9:84:fb:55: 47:ca:fd:0c:ef:90:93:27:fa:47:12:3e:d6:a6:16:9f:89:7b: 1d:26:72:b1:3e:85:1c:89:1e:2b:ea:97:42:08:96:bf:99:38: 6f:73:b4:ae:4e:75:b6:e0:c9:2c:e5:4e:ef:3a:4f:20:02:80: e1:d3:9b:60:e2:a9:5e:14:7c:17:a5:ad:99:43:ed:cc:55:78: 44:3c:c0:50:2d:21:e5:f4:11:fa:cd:fe:8e:a4:b0:5c:fc:ca: c4:85:b6:78:c5:d6:c4:92:a5:f9:28:19:59:91:02:18:aa:1b: 4e:7d:c0:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODczMTMxMTAvBgNVBAUTKEU1NjcyQkJGMThDNENGRUJEM0Y0NzJEMTNCNDg3NzEz NzJEMzRFREYwHhcNMjUwNjIwMTYyNjIyWhcNMjUwNjI3MTYyNjIyWjAYMRYwFAYD VQQDEw02ODU1OGJhZS05YTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq0enwl2jlv9OjqYkrixdE7j0ZOVh1+VNTZ7TzqipxorrGZn7/zSUfvhGkI52 J2EogAS0JTRpJ5S0FmWlkd8kInQvSLg+/2qEViFHPJAvFpflKyZFeAbtrwGCZwCs RXIGqGPszGzmcfGwhUw43Gtp6vAybxftbDfwdensSDOyRS0564imgozer9w/B+9J jse92zod6LksXexBXpFSFUM0AqzAblxK3SKOahKaPW1vvEzA2En7BVTTnK9RZyoJ yep0h4VYSSqviYGkt+YggnnvPbIlx+SmwCRkH+W6NnRag6bpvbOgr9OyS+xncB1C R7KiWTt3nxfXqev5jcFKNeMuywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKDy+vuZ r6sJJxCRicu9NKw8dWO4MB8GA1UdIwQYMBaAFOVnK78YxM/r0/Ry0TtIdxNy007f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzMxMy8zQzM0RUMwQTc3 NkYxMUU3ODJBRDZEMEVDNEY5QUUwMi81V2NydnhqRXotdlQ5SExSTzBoM0UzTFRU dDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVXY3J2eGpFei12VDlITFJPMGgzRTNMVFR0OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzMxMy8zQzM0RUMwQTc3NkYxMUU3ODJBRDZEMEVDNEY5QUUwMi81V2NydnhqRXot dlQ5SExSTzBoM0UzTFRUdDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtFNvWYsXnSdZ0gtDZyRtQrfVDm315bOVN5SLgTXz6HAentw4/tClW CoVXV8LcoGyHdVhtcT6VMpHlG6r3U89tX0On2abXHlQE6wPXnbmRFhlHh2C8ffgk 5WlHA1qczrGuvYtuIaL2vwvS3XjBdvBYcBGjeIsnCNxMPeTecpTz2FGYSGNkoOOM b7AdnKmE+1VHyv0M75CTJ/pHEj7WphafiXsdJnKxPoUciR4r6pdCCJa/mThvc7Su TnW24Mks5U7vOk8gAoDh05tg4qleFHwXpa2ZQ+3MVXhEPMBQLSHl9BH6zf6OpLBc /MrEhbZ4xdbEkqX5KBlZkQIYqhtOfcAQ -----END CERTIFICATE-----Generated at Sat Jun 21 07:40:12 2025 by rpki-client