$ rpki-client -vvf rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft File: 15_gsJykSoRmkoOPxCvPQ9KjKtI.mft (raw, json) Hash identifier: ldlSV1w7ST5EmO6xVaCh0fcxApPL86iBtryz48WE6aM= Subject key identifier: 69:C6:BA:2D:54:82:0A:65:23:0B:E4:22:03:E8:C3:0E:E6:36:CA:48 Authority key identifier: D7:9F:E0:B0:9C:A4:4A:84:66:92:83:8F:C4:2B:CF:43:D2:A3:2A:D2 Certificate issuer: /CN=A9127DE3/serialNumber=D79FE0B09CA44A846692838FC42BCF43D2A32AD2 Certificate serial: 5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_gsJykSoRmkoOPxCvPQ9KjKtI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft Manifest number: 58 Signing time: Sat 23 Aug 2025 07:27:20 +0000 Manifest this update: Sat 23 Aug 2025 07:27:19 +0000 Manifest next update: Sat 30 Aug 2025 07:27:19 +0000 Files and hashes: 1: 15_gsJykSoRmkoOPxCvPQ9KjKtI.crl (hash: JJUxZErtlHMREyOqhWMlgO+2YsfsBPvBjbKSIfrRfro=) 2: AA99F49CFC3711EFA9688687C4F9AE02.roa (hash: 970zffhkVpQStk3jgKgrN42mDxhaIFK4aP3YfXR8LM0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.crl rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_gsJykSoRmkoOPxCvPQ9KjKtI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:27:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 90 (0x5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127DE3, serialNumber=D79FE0B09CA44A846692838FC42BCF43D2A32AD2 Validity Not Before: Aug 23 07:27:19 2025 GMT Not After : Aug 30 07:27:19 2025 GMT Subject: CN=68a96d57-72a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e0:eb:45:24:6b:63:2e:40:4a:5b:4c:57:df: bb:6d:88:09:6e:cc:ba:7d:4c:94:ff:e8:15:f8:26: 4e:3d:03:3e:d5:44:b9:74:9b:a2:e7:a4:7e:57:4c: 19:8e:5e:84:77:03:cd:b8:f4:dd:e6:be:68:01:2f: f7:72:ae:a5:cf:5c:95:91:45:77:44:ff:30:05:cd: 25:d5:52:98:57:90:05:b7:00:82:28:ac:07:c0:2d: 2d:82:91:81:fe:1a:49:60:cf:91:b6:b4:bb:6e:78: 77:86:87:97:8a:42:cf:67:a5:5f:40:67:68:e8:a4: 6b:08:2e:7d:d5:34:fa:6b:0c:56:70:78:92:b0:27: d0:41:c2:38:e5:e3:8e:f0:a6:a1:64:02:89:42:67: 9f:ff:a3:35:e0:d9:79:3c:94:a4:c7:5d:7b:73:ae: 87:83:bb:61:3a:bb:0c:6a:6b:eb:44:93:13:5e:96: 20:12:b1:f2:26:e9:2e:1b:38:10:a4:b0:00:30:af: e8:2c:a7:21:51:64:46:8e:26:71:6f:a5:dd:21:32: aa:05:76:38:e0:0c:d9:e3:17:ca:63:ac:01:84:44: a8:86:34:95:08:05:ad:31:b9:69:22:3f:ea:fc:2c: 54:bd:0e:46:69:f7:d3:e4:72:35:14:24:ad:2d:76: aa:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:C6:BA:2D:54:82:0A:65:23:0B:E4:22:03:E8:C3:0E:E6:36:CA:48 X509v3 Authority Key Identifier: keyid:D7:9F:E0:B0:9C:A4:4A:84:66:92:83:8F:C4:2B:CF:43:D2:A3:2A:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_gsJykSoRmkoOPxCvPQ9KjKtI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:56:de:80:e9:21:df:dc:b6:a8:97:80:ab:17:b9:83:3c:8f: ed:b2:e7:7c:3a:c4:31:ae:6b:9d:30:5c:77:7f:f4:be:f9:0e: 10:0e:9b:58:97:86:b7:91:38:bc:bf:2a:df:70:da:96:a4:62: 02:bb:3d:01:65:37:f2:07:6c:4f:5e:00:a5:11:65:85:65:42: b5:57:a9:4e:1b:99:2e:77:2d:0d:0d:d9:dc:3e:3b:0d:68:0f: d6:ea:c7:1c:99:4c:83:36:3b:50:2b:4b:b4:fa:bd:bc:ce:c6: 7a:23:be:0e:f4:22:6a:4e:05:26:c0:c5:6b:e2:e1:ef:e7:d6: ac:11:1f:74:b1:38:1c:d6:c8:3d:ed:72:5c:ec:c4:32:06:ec: 0e:a1:27:39:74:35:75:50:7a:f1:61:fb:f0:d4:69:b9:0c:7b: 78:e7:6d:fc:be:57:93:65:0d:6e:03:ee:a9:5f:fa:ed:8f:b2: c8:31:83:3b:3e:76:32:0a:ff:c4:95:5c:14:41:76:98:8c:66: 58:f4:f9:81:4e:13:bd:95:1d:5a:e7:8c:7d:cc:4c:54:e8:01: 04:9b:02:ba:b9:35:ff:81:60:96:e2:26:1a:56:90:d3:25:97: 9a:e7:3a:82:62:53:14:f9:af:b1:67:93:7d:f3:0f:d8:79:3f: d1:56:73:a9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy N0RFMzExMC8GA1UEBRMoRDc5RkUwQjA5Q0E0NEE4NDY2OTI4MzhGQzQyQkNGNDNE MkEzMkFEMjAeFw0yNTA4MjMwNzI3MTlaFw0yNTA4MzAwNzI3MTlaMBgxFjAUBgNV BAMTDTY4YTk2ZDU3LTcyYTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCt4OtFJGtjLkBKW0xX37ttiAluzLp9TJT/6BX4Jk49Az7VRLl0m6LnpH5XTBmO XoR3A8249N3mvmgBL/dyrqXPXJWRRXdE/zAFzSXVUphXkAW3AIIorAfALS2CkYH+ Gklgz5G2tLtueHeGh5eKQs9npV9AZ2jopGsILn3VNPprDFZweJKwJ9BBwjjl447w pqFkAolCZ5//ozXg2Xk8lKTHXXtzroeDu2E6uwxqa+tEkxNeliASsfIm6S4bOBCk sAAwr+gspyFRZEaOJnFvpd0hMqoFdjjgDNnjF8pjrAGERKiGNJUIBa0xuWkiP+r8 LFS9DkZp99PkcjUUJK0tdqpPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUaca6LVSC CmUjC+QiA+jDDuY2ykgwHwYDVR0jBBgwFoAU15/gsJykSoRmkoOPxCvPQ9KjKtIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3REUzLzRFMUVFQUJBRkMz NzExRUZCMUMwNzI4NkM0RjlBRTAyLzE1X2dzSnlrU29SbWtvT1B4Q3ZQUTlLakt0 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMTVfZ3NKeWtTb1Jta29PUHhDdlBROUtqS3RJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3 REUzLzRFMUVFQUJBRkMzNzExRUZCMUMwNzI4NkM0RjlBRTAyLzE1X2dzSnlrU29S bWtvT1B4Q3ZQUTlLakt0SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADdW3oDpId/ctqiXgKsXuYM8j+2y53w6xDGua50wXHd/9L75DhAOm1iX hreROLy/Kt9w2pakYgK7PQFlN/IHbE9eAKURZYVlQrVXqU4bmS53LQ0N2dw+Ow1o D9bqxxyZTIM2O1ArS7T6vbzOxnojvg70ImpOBSbAxWvi4e/n1qwRH3SxOBzWyD3t clzsxDIG7A6hJzl0NXVQevFh+/DUabkMe3jnbfy+V5NlDW4D7qlf+u2Pssgxgzs+ djIK/8SVXBRBdpiMZlj0+YFOE72VHVrnjH3MTFToAQSbArq5Nf+BYJbiJhpWkNMl l5rnOoJiUxT5r7Fnk33zD9h5P9FWc6k= -----END CERTIFICATE-----Generated at Sat Aug 23 20:44:24 2025 by rpki-client