$ rpki-client -vvf rpki.apnic.net/member_repository/A9150B91/76304A785A9311E8B7C2161FC4F9AE02/s1py5W8JAsfhuNgSxdg2VBHdox0.mft File: s1py5W8JAsfhuNgSxdg2VBHdox0.mft (raw, json) Hash identifier: 4nP0JsU/lC2Q2ccP8n2cF11nxMdRqif8Th3ROQAeGxw= Subject key identifier: B8:CF:80:0A:EF:D8:D6:38:81:09:60:8E:C2:74:D0:88:BD:17:2D:E9 Authority key identifier: B3:5A:72:E5:6F:09:02:C7:E1:B8:D8:12:C5:D8:36:54:11:DD:A3:1D Certificate issuer: /CN=A9150B91/serialNumber=B35A72E56F0902C7E1B8D812C5D8365411DDA31D Certificate serial: 14F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s1py5W8JAsfhuNgSxdg2VBHdox0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150B91/76304A785A9311E8B7C2161FC4F9AE02/s1py5W8JAsfhuNgSxdg2VBHdox0.mft Manifest number: 14ED Signing time: Fri 22 Aug 2025 16:57:51 +0000 Manifest this update: Fri 22 Aug 2025 16:57:50 +0000 Manifest next update: Fri 29 Aug 2025 16:57:50 +0000 Files and hashes: 1: s1py5W8JAsfhuNgSxdg2VBHdox0.crl (hash: mNXMbX7tb2dw46f29gafGmw5PsC/vAJOn6eYgUIzTAk=) 2: 4674A74E5DB211E8A30DF983C4F9AE02.roa (hash: N2bOeXWWMqXx3Cr2oJVAhS+4yD+JJsp3ikRjUaNFufQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150B91/76304A785A9311E8B7C2161FC4F9AE02/s1py5W8JAsfhuNgSxdg2VBHdox0.crl rsync://rpki.apnic.net/member_repository/A9150B91/76304A785A9311E8B7C2161FC4F9AE02/s1py5W8JAsfhuNgSxdg2VBHdox0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s1py5W8JAsfhuNgSxdg2VBHdox0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:57:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5367 (0x14f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150B91, serialNumber=B35A72E56F0902C7E1B8D812C5D8365411DDA31D Validity Not Before: Aug 22 16:57:50 2025 GMT Not After : Aug 29 16:57:50 2025 GMT Subject: CN=68a8a18e-a85e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:2f:1d:68:e4:cf:16:dd:c1:7d:e5:5e:d5:2e: 2e:c7:fb:f0:08:4b:ea:71:90:f3:11:b7:c8:12:ad: ec:88:8c:27:40:33:0f:e7:6d:f6:86:0b:0e:e1:37: 82:fe:24:e0:fd:bf:01:51:50:74:9a:f0:18:ae:9b: 04:2e:22:fe:8b:32:0f:65:fe:a0:2e:50:fc:08:03: ff:4b:30:3c:ab:54:7e:e6:c1:d6:e0:23:95:57:0c: 99:0a:62:b5:f3:78:0e:66:b8:a0:da:37:1c:cc:56: 07:3a:bb:19:a9:ab:48:11:bc:ce:18:1d:d3:a0:7d: ea:c6:c8:d1:2f:28:6c:23:a0:88:9c:35:b5:7e:75: 9d:09:3e:c7:a6:5a:70:81:a7:77:db:73:3c:42:99: 4e:e7:ad:64:44:48:7d:19:a8:5b:5f:b5:99:5a:d5: 6a:24:cb:68:9c:49:2e:36:6a:4b:c5:ae:74:9d:1a: 08:24:2f:04:e2:0e:26:d2:22:1f:cb:bb:72:5c:2a: a7:94:72:41:e2:13:2f:65:4c:30:7d:93:d1:bb:9d: 15:98:e2:db:7c:ea:d8:a6:aa:89:f6:3c:9a:ed:0d: 94:3b:c1:32:ce:3a:44:b0:ce:dc:29:e6:f8:b8:0a: 80:2e:2a:bc:99:b3:91:28:06:cc:ea:be:d7:bc:c5: 29:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:CF:80:0A:EF:D8:D6:38:81:09:60:8E:C2:74:D0:88:BD:17:2D:E9 X509v3 Authority Key Identifier: keyid:B3:5A:72:E5:6F:09:02:C7:E1:B8:D8:12:C5:D8:36:54:11:DD:A3:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150B91/76304A785A9311E8B7C2161FC4F9AE02/s1py5W8JAsfhuNgSxdg2VBHdox0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s1py5W8JAsfhuNgSxdg2VBHdox0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150B91/76304A785A9311E8B7C2161FC4F9AE02/s1py5W8JAsfhuNgSxdg2VBHdox0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:64:bd:c0:8e:eb:eb:15:a1:36:5b:4f:24:3d:75:73:c9:fb: 4c:5c:35:bf:c8:4c:e2:ac:67:65:b3:31:af:d5:b0:d5:0a:1f: ad:e6:8a:e3:89:c0:65:f0:0f:ae:72:60:cd:61:56:d4:99:17: 7f:89:06:89:28:ce:99:fe:16:9a:9f:f3:47:2f:d5:d8:a9:a4: 5a:05:96:2d:59:ff:10:30:f2:1d:fb:33:21:78:53:c0:84:06: 4f:19:78:fe:ca:94:7a:14:b9:a8:ca:0e:85:20:71:ca:a8:7c: 3e:cc:40:29:ca:3f:35:59:89:93:e5:b4:85:9f:c6:df:77:99: 61:1b:c5:57:8c:db:3c:60:e7:fb:b4:d1:28:33:93:d0:06:48: fa:75:93:ce:f7:cc:d4:21:c0:81:49:27:bb:e3:ae:2d:d6:6e: 00:61:4c:92:f0:e3:7c:12:f7:35:48:cc:a1:00:b6:99:6f:c0: 9a:0c:8e:2c:12:78:96:2b:4a:0e:9e:65:fb:2a:3d:6c:af:90: 7b:6e:5d:11:75:1d:16:65:2b:c9:5a:d3:20:3e:de:26:80:32: e8:1e:47:77:07:a2:b0:e4:da:80:8a:c7:76:11:b7:4e:eb:fd: 26:23:ef:2c:dd:d5:09:d4:a1:df:50:95:4a:0c:55:e1:57:73: ae:cf:53:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBCOTExMTAvBgNVBAUTKEIzNUE3MkU1NkYwOTAyQzdFMUI4RDgxMkM1RDgzNjU0 MTFEREEzMUQwHhcNMjUwODIyMTY1NzUwWhcNMjUwODI5MTY1NzUwWjAYMRYwFAYD VQQDEw02OGE4YTE4ZS1hODVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5S8daOTPFt3BfeVe1S4ux/vwCEvqcZDzEbfIEq3siIwnQDMP5232hgsO4TeC /iTg/b8BUVB0mvAYrpsELiL+izIPZf6gLlD8CAP/SzA8q1R+5sHW4COVVwyZCmK1 83gOZrig2jcczFYHOrsZqatIEbzOGB3ToH3qxsjRLyhsI6CInDW1fnWdCT7Hplpw gad323M8QplO561kREh9GahbX7WZWtVqJMtonEkuNmpLxa50nRoIJC8E4g4m0iIf y7tyXCqnlHJB4hMvZUwwfZPRu50VmOLbfOrYpqqJ9jya7Q2UO8EyzjpEsM7cKeb4 uAqALiq8mbORKAbM6r7XvMUpPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLjPgArv 2NY4gQlgjsJ00Ii9Fy3pMB8GA1UdIwQYMBaAFLNacuVvCQLH4bjYEsXYNlQR3aMd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEI5MS83NjMwNEE3ODVB OTMxMUU4QjdDMjE2MUZDNEY5QUUwMi9zMXB5NVc4SkFzZmh1TmdTeGRnMlZCSGRv eDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3MxcHk1VzhKQXNmaHVOZ1N4ZGcyVkJIZG94MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MEI5MS83NjMwNEE3ODVBOTMxMUU4QjdDMjE2MUZDNEY5QUUwMi9zMXB5NVc4SkFz Zmh1TmdTeGRnMlZCSGRveDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTZL3AjuvrFaE2W08kPXVzyftMXDW/yEzirGdlszGv1bDVCh+t5orj icBl8A+ucmDNYVbUmRd/iQaJKM6Z/haan/NHL9XYqaRaBZYtWf8QMPId+zMheFPA hAZPGXj+ypR6FLmoyg6FIHHKqHw+zEApyj81WYmT5bSFn8bfd5lhG8VXjNs8YOf7 tNEoM5PQBkj6dZPO98zUIcCBSSe7464t1m4AYUyS8ON8Evc1SMyhALaZb8CaDI4s EniWK0oOnmX7Kj1sr5B7bl0RdR0WZSvJWtMgPt4mgDLoHkd3B6Kw5NqAisd2EbdO 6/0mI+8s3dUJ1KHfUJVKDFXhV3Ouz1M+ -----END CERTIFICATE-----Generated at Sat Aug 23 22:33:55 2025 by rpki-client