$ rpki-client -vvf rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.mft File: pAislKDTNvRzJJBakYrySQLw3os.mft (raw, json) Hash identifier: JiQhwXESbvQEQypE5kA/gdAdK09PGZolyfj77F3hQLk= Subject key identifier: FA:A5:4A:BB:77:5E:73:65:68:67:85:36:49:56:0A:8D:31:11:AB:37 Authority key identifier: A4:08:AC:94:A0:D3:36:F4:73:24:90:5A:91:8A:F2:49:02:F0:DE:8B Certificate issuer: /CN=A9158620/serialNumber=A408AC94A0D336F47324905A918AF24902F0DE8B Certificate serial: 0170 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pAislKDTNvRzJJBakYrySQLw3os.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.mft Manifest number: 015D Signing time: Sat 23 Aug 2025 04:24:07 +0000 Manifest this update: Sat 23 Aug 2025 04:24:07 +0000 Manifest next update: Sat 30 Aug 2025 04:24:07 +0000 Files and hashes: 1: pAislKDTNvRzJJBakYrySQLw3os.crl (hash: JbMTnUBPFB3bsqFHG6hDxFLnRTz7eKGcSyLAhbLdrYg=) 2: 62258D42C93A11EEA1A4CA4FC4F9AE02.roa (hash: TLDnWAlNl4+LlNPMq6EhX78RX8oFwqpDV+CE22BbZbE=) 3: 31A1996898F711EEB7B27877C4F9AE02.roa (hash: inpneUp76nQQX6Q/CpN1dgRfEj/8zpxJb6ddO35TdAM=) 4: 62C61398C93A11EEA1A4CA4FC4F9AE02.roa (hash: jax3qkALNRFMNrAOXKyN2WiovYFpDRlk86jOWinHUwU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.crl rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pAislKDTNvRzJJBakYrySQLw3os.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:24:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 368 (0x170) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158620, serialNumber=A408AC94A0D336F47324905A918AF24902F0DE8B Validity Not Before: Aug 23 04:24:07 2025 GMT Not After : Aug 30 04:24:07 2025 GMT Subject: CN=68a94267-2100 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:09:6d:1b:9e:e0:03:91:1a:07:3f:aa:7b:e7: 73:0d:83:fe:eb:1f:f7:43:28:0a:c0:61:ec:7a:ec: 40:4a:6b:6d:42:d9:39:b4:0b:7c:51:26:e8:96:84: fe:ea:b5:46:f4:51:2a:57:24:bf:6b:a5:7e:c8:56: 6b:61:cb:e4:1a:c4:8e:91:07:79:4d:40:6f:58:7c: 36:e4:5e:5a:21:1c:f7:ba:83:2f:24:37:47:48:40: ad:55:7d:66:cd:8a:bb:84:46:61:26:a8:52:b8:c0: 8d:fd:c8:9c:a9:8c:85:26:0d:d1:9b:dc:d3:7c:f4: 2d:c1:46:74:ea:60:f3:04:ad:3a:82:23:d0:e7:32: ce:24:f3:bb:de:0b:32:e3:b4:07:fa:f1:8f:7b:9a: 58:e8:62:9b:9b:47:ef:6b:1e:19:a4:93:f5:2c:a0: b3:f8:be:9c:0c:78:91:e7:63:8c:ee:a4:be:dc:2a: 9d:fc:3e:6d:31:64:c9:12:a4:8e:a1:39:5f:4a:f6: b1:82:78:3d:fc:b3:23:56:37:d9:36:ce:f0:88:f5: 78:58:cc:a0:28:16:f9:a0:f7:e1:e4:df:34:2e:46: 1a:64:a2:7d:ef:34:aa:1f:c7:94:c9:a3:0a:51:9e: 24:ff:47:7d:f1:33:ed:94:2a:5b:07:83:62:ba:76: 55:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:A5:4A:BB:77:5E:73:65:68:67:85:36:49:56:0A:8D:31:11:AB:37 X509v3 Authority Key Identifier: keyid:A4:08:AC:94:A0:D3:36:F4:73:24:90:5A:91:8A:F2:49:02:F0:DE:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pAislKDTNvRzJJBakYrySQLw3os.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:fc:53:6b:10:a8:d9:d5:bf:73:5c:a7:0f:d3:78:ea:6d:53: 12:a4:08:32:8d:3e:76:64:a7:e2:f3:35:bc:fb:f8:83:f4:06: 64:07:e4:ed:3e:c8:50:ab:7d:63:01:7f:6f:c9:13:80:af:6f: e3:94:62:64:8f:cc:78:d9:08:3f:b3:a9:ed:0f:44:f4:63:1d: 5a:30:f7:8a:c0:d3:3c:61:4c:9f:42:5e:0b:12:ec:f8:6e:97: 0d:03:96:57:5b:cb:94:1b:9f:71:45:12:29:2c:a6:64:0c:d6: a5:d1:b3:53:ec:f4:d6:92:83:38:24:ad:4d:df:f8:8c:fd:90: 47:5d:15:d7:cf:df:bb:8a:cf:10:99:34:63:9f:d4:57:30:08: b7:1f:bd:bb:8e:c3:2d:09:32:4b:03:83:2c:30:a1:db:49:5a: 2d:78:6c:c9:ed:b9:27:34:be:c7:a9:e6:f0:58:28:8c:c5:cc: 7b:8f:a2:b9:0a:f5:19:04:d3:b5:f3:99:22:2b:9e:1e:c2:0a: db:20:f5:40:ce:47:da:c3:f3:bb:7f:66:35:0f:69:0f:e3:27: 75:b9:3b:e3:8f:6e:02:a1:b6:2e:65:78:13:50:f6:54:ff:26: 08:5a:58:96:74:72:38:eb:b8:80:52:03:2a:3a:ca:0d:86:66: cf:bd:bc:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg2MjAxMTAvBgNVBAUTKEE0MDhBQzk0QTBEMzM2RjQ3MzI0OTA1QTkxOEFGMjQ5 MDJGMERFOEIwHhcNMjUwODIzMDQyNDA3WhcNMjUwODMwMDQyNDA3WjAYMRYwFAYD VQQDEw02OGE5NDI2Ny0yMTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9AltG57gA5EaBz+qe+dzDYP+6x/3QygKwGHseuxASmttQtk5tAt8USboloT+ 6rVG9FEqVyS/a6V+yFZrYcvkGsSOkQd5TUBvWHw25F5aIRz3uoMvJDdHSECtVX1m zYq7hEZhJqhSuMCN/cicqYyFJg3Rm9zTfPQtwUZ06mDzBK06giPQ5zLOJPO73gsy 47QH+vGPe5pY6GKbm0fvax4ZpJP1LKCz+L6cDHiR52OM7qS+3Cqd/D5tMWTJEqSO oTlfSvaxgng9/LMjVjfZNs7wiPV4WMygKBb5oPfh5N80LkYaZKJ97zSqH8eUyaMK UZ4k/0d98TPtlCpbB4NiunZVKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPqlSrt3 XnNlaGeFNklWCo0xEas3MB8GA1UdIwQYMBaAFKQIrJSg0zb0cySQWpGK8kkC8N6L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODYyMC8wRTkxOTkzNDg4 NDIxMUVFQTdEOEM4MTRDNEY5QUUwMi9wQWlzbEtEVE52UnpKSkJha1lyeVNRTHcz b3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BBaXNsS0RUTnZSekpKQmFrWXJ5U1FMdzNvcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODYyMC8wRTkxOTkzNDg4NDIxMUVFQTdEOEM4MTRDNEY5QUUwMi9wQWlzbEtEVE52 UnpKSkJha1lyeVNRTHczb3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBt/FNrEKjZ1b9zXKcP03jqbVMSpAgyjT52ZKfi8zW8+/iD9AZkB+Tt PshQq31jAX9vyROAr2/jlGJkj8x42Qg/s6ntD0T0Yx1aMPeKwNM8YUyfQl4LEuz4 bpcNA5ZXW8uUG59xRRIpLKZkDNal0bNT7PTWkoM4JK1N3/iM/ZBHXRXXz9+7is8Q mTRjn9RXMAi3H727jsMtCTJLA4MsMKHbSVoteGzJ7bknNL7HqebwWCiMxcx7j6K5 CvUZBNO185kiK54ewgrbIPVAzkfaw/O7f2Y1D2kP4yd1uTvjj24CobYuZXgTUPZU /yYIWliWdHI467iAUgMqOsoNhmbPvbx5 -----END CERTIFICATE-----Generated at Sat Aug 23 15:05:29 2025 by rpki-client