$ rpki-client -vvf rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft File: 15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft (raw, json) Hash identifier: YC6le6I+uhQSzHvxgEBK9B1FXpH6by22dKStiR6oJno= Subject key identifier: D4:6E:83:11:2D:5E:D5:06:2F:43:F3:42:0C:C8:78:0B:7C:40:BC:E2 Authority key identifier: D7:90:C2:C4:69:32:BE:9D:25:82:2D:99:12:8E:BB:CF:03:3D:45:C4 Certificate issuer: /CN=A9143F26/serialNumber=D790C2C46932BE9D25822D99128EBBCF033D45C4 Certificate serial: 0194 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15DCxGkyvp0lgi2ZEo67zwM9RcQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft Manifest number: 018D Signing time: Sat 23 Aug 2025 03:42:30 +0000 Manifest this update: Sat 23 Aug 2025 03:42:29 +0000 Manifest next update: Sat 30 Aug 2025 03:42:29 +0000 Files and hashes: 1: 15DCxGkyvp0lgi2ZEo67zwM9RcQ.crl (hash: Tv21brOxQjfu0uPTfolFIIkYTyUp8GIquiTGgUGN+eg=) 2: 9728C64EF10811EE8F128341C4F9AE02.roa (hash: 4J0ORjYm3cW6dunDewDTVLOKNHiY1sO2eutzlceykHU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.crl rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15DCxGkyvp0lgi2ZEo67zwM9RcQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:42:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 404 (0x194) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143F26, serialNumber=D790C2C46932BE9D25822D99128EBBCF033D45C4 Validity Not Before: Aug 23 03:42:29 2025 GMT Not After : Aug 30 03:42:29 2025 GMT Subject: CN=68a938a6-bfc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:cd:ec:34:5d:5e:42:86:1e:52:2e:1f:dd:ec: 94:b2:fc:17:18:84:b7:3a:31:a5:0f:91:e6:22:4b: 29:eb:c3:7d:0b:21:d7:9e:8f:c7:35:f5:a8:55:ed: e0:2c:ab:58:ee:99:56:bc:45:c0:2a:30:8d:bc:88: ad:32:2a:bd:09:76:28:5f:ca:20:fb:f8:58:08:8b: 87:41:b6:b4:b3:79:15:b1:5c:22:39:19:54:c5:0a: e5:68:ba:55:cb:e8:5c:09:36:51:62:c2:7e:f2:b9: 10:38:fe:c6:84:a3:1d:0e:89:a7:2d:82:9e:c9:ae: 17:32:ae:e0:e5:6e:55:43:49:6e:11:e9:5e:e1:4e: c8:b4:37:7b:31:36:8f:60:59:df:dd:1e:63:77:52: c6:e9:32:3b:09:76:a0:eb:c0:ac:92:f5:0e:b0:41: 50:2a:8b:c8:29:31:8a:bd:e1:4d:b4:7e:09:7d:ef: 04:e9:b9:99:30:19:b6:10:b5:57:69:4a:83:7d:c5: 4e:35:21:58:2b:90:69:67:3f:31:f0:0e:48:a8:e4: 79:38:a4:8e:63:4e:71:02:34:f7:77:78:89:1e:e3: fe:f5:e4:ef:84:ce:5c:78:08:59:e2:45:35:da:90: 67:92:95:68:32:3b:ac:1c:88:97:74:0d:d2:cb:2f: be:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:6E:83:11:2D:5E:D5:06:2F:43:F3:42:0C:C8:78:0B:7C:40:BC:E2 X509v3 Authority Key Identifier: keyid:D7:90:C2:C4:69:32:BE:9D:25:82:2D:99:12:8E:BB:CF:03:3D:45:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15DCxGkyvp0lgi2ZEo67zwM9RcQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:b1:d4:83:2b:cb:7c:8e:b8:f7:f1:c4:fa:43:19:b9:56:18: 77:16:d2:64:4d:93:f5:aa:58:01:b0:61:54:9f:3a:0e:a4:f4: e2:a3:97:d9:57:58:ae:c0:1a:30:70:e0:12:a8:68:a1:d7:c0: 07:1f:83:aa:70:1c:80:68:63:21:d7:c2:df:13:4f:c0:47:c7: 18:a9:8b:98:ab:17:37:6d:49:25:8d:9e:a8:63:b5:3d:8c:bb: c4:6a:17:68:ed:ed:86:ac:f6:a5:73:d0:40:f3:47:43:ef:f4: 1b:26:83:ed:6f:a3:29:a4:e9:eb:c6:82:94:b6:a5:fa:7b:46: ba:8c:ab:b6:1a:49:5c:50:e2:8f:3b:a5:b8:f1:57:d2:ff:65: 37:99:db:4b:93:06:f0:aa:f8:8f:0e:60:4b:d8:b4:af:4d:e7: 80:46:6f:12:70:67:67:0d:d0:c1:69:3a:2d:ec:e0:79:e1:e0: 74:03:99:a9:c6:d8:47:ec:a6:7b:fd:59:3a:7c:88:c0:cd:3c: 55:c5:ff:fe:db:18:9e:5f:78:06:db:10:95:0c:bf:76:0e:b7: 6d:81:f9:39:e9:93:2b:cc:5b:ed:d1:5a:81:47:b0:ab:4e:bb: be:52:09:35:87:d6:d3:85:de:7d:9f:42:1d:76:61:80:a4:09: 7c:3b:5a:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNGMjYxMTAvBgNVBAUTKEQ3OTBDMkM0NjkzMkJFOUQyNTgyMkQ5OTEyOEVCQkNG MDMzRDQ1QzQwHhcNMjUwODIzMDM0MjI5WhcNMjUwODMwMDM0MjI5WjAYMRYwFAYD VQQDEw02OGE5MzhhNi1iZmM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAts3sNF1eQoYeUi4f3eyUsvwXGIS3OjGlD5HmIksp68N9CyHXno/HNfWoVe3g LKtY7plWvEXAKjCNvIitMiq9CXYoX8og+/hYCIuHQba0s3kVsVwiORlUxQrlaLpV y+hcCTZRYsJ+8rkQOP7GhKMdDomnLYKeya4XMq7g5W5VQ0luEele4U7ItDd7MTaP YFnf3R5jd1LG6TI7CXag68CskvUOsEFQKovIKTGKveFNtH4Jfe8E6bmZMBm2ELVX aUqDfcVONSFYK5BpZz8x8A5IqOR5OKSOY05xAjT3d3iJHuP+9eTvhM5ceAhZ4kU1 2pBnkpVoMjusHIiXdA3Syy++pwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNRugxEt XtUGL0PzQgzIeAt8QLziMB8GA1UdIwQYMBaAFNeQwsRpMr6dJYItmRKOu88DPUXE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0YyNi83MDNBMDI1NDJE NTUxMUVFODlBQTIwMDlDNEY5QUUwMi8xNURDeEdreXZwMGxnaTJaRW82N3p3TTlS Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzE1REN4R2t5dnAwbGdpMlpFbzY3endNOVJjUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0YyNi83MDNBMDI1NDJENTUxMUVFODlBQTIwMDlDNEY5QUUwMi8xNURDeEdreXZw MGxnaTJaRW82N3p3TTlSY1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpsdSDK8t8jrj38cT6Qxm5Vhh3FtJkTZP1qlgBsGFUnzoOpPTio5fZ V1iuwBowcOASqGih18AHH4OqcByAaGMh18LfE0/AR8cYqYuYqxc3bUkljZ6oY7U9 jLvEahdo7e2GrPalc9BA80dD7/QbJoPtb6MppOnrxoKUtqX6e0a6jKu2GklcUOKP O6W48VfS/2U3mdtLkwbwqviPDmBL2LSvTeeARm8ScGdnDdDBaTot7OB54eB0A5mp xthH7KZ7/Vk6fIjAzTxVxf/+2xieX3gG2xCVDL92Drdtgfk56ZMrzFvt0VqBR7Cr Tru+Ugk1h9bThd59n0IddmGApAl8O1ra -----END CERTIFICATE-----Generated at Sun Aug 24 00:52:28 2025 by rpki-client