$ rpki-client -vvf rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft File: -9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft (raw, json) Hash identifier: yaA66oHG6Jzos6BnVcKqSL+mfI3MgbJj0emVN8Mk/Ac= Subject key identifier: D2:08:29:EF:81:D5:E1:8F:69:2F:97:68:D6:D4:49:2E:67:18:70:BF Authority key identifier: FB:D4:B4:3B:56:78:F1:A0:6C:C9:07:C4:ED:04:BD:A2:11:D9:DD:2B Certificate issuer: /CN=A915A247/serialNumber=FBD4B43B5678F1A06CC907C4ED04BDA211D9DD2B Certificate serial: 015D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft Manifest number: 015A Signing time: Sat 23 Aug 2025 04:13:55 +0000 Manifest this update: Sat 23 Aug 2025 04:13:55 +0000 Manifest next update: Sat 30 Aug 2025 04:13:55 +0000 Files and hashes: 1: -9S0O1Z48aBsyQfE7QS9ohHZ3Ss.crl (hash: /YpvAT3nuxwn7TpSMMP5yzNm9NS4h9WWruj+rfYxrEw=) 2: B4350DCC6F4B11EEA062D464C4F9AE02.roa (hash: M/8UXHVwrUGREXAw7kPK2rXqXimmSlcdKlYZysm7Xmg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.crl rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:13:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 349 (0x15d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A247, serialNumber=FBD4B43B5678F1A06CC907C4ED04BDA211D9DD2B Validity Not Before: Aug 23 04:13:55 2025 GMT Not After : Aug 30 04:13:55 2025 GMT Subject: CN=68a94003-6afd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:74:aa:bb:b7:2b:43:77:98:16:6f:2f:61:48: 8c:14:30:bb:3a:39:73:61:80:fe:86:66:bf:d5:ca: 68:03:a0:66:9a:c6:0e:20:2b:08:05:d7:68:9d:b3: 82:ba:11:12:19:c8:db:62:b8:7b:03:df:86:9c:67: 52:97:dd:24:5c:ab:84:79:df:fd:03:d7:f1:c5:c7: 7f:f7:66:49:f9:e7:2f:9a:af:2c:4c:bf:21:43:17: 00:00:1a:9e:be:4f:36:39:b5:f5:72:46:31:ee:a3: 4c:30:46:a7:5d:89:6a:66:e5:23:2f:39:77:69:4a: 42:9e:f0:31:78:a0:4c:8b:54:6a:93:8e:94:a5:c6: 1c:c6:32:db:00:1b:f7:b7:b6:35:9e:19:7f:29:87: e8:df:8f:fe:b0:6d:fd:ba:f2:a0:6d:16:1e:b9:a3: 19:b4:97:ec:0f:ec:9c:47:8a:9b:e2:73:45:c9:12: 3a:73:c3:6a:f2:27:ee:72:0f:65:54:12:73:61:4e: 60:71:1f:39:82:25:77:b8:9b:82:7b:90:89:f2:3f: b5:79:39:17:d9:f9:06:27:00:cf:07:20:4b:2c:3e: a1:74:a5:b9:d1:45:aa:92:4c:1e:a4:72:67:8f:0c: 9b:a7:54:87:88:70:6c:7f:ff:58:43:71:2e:94:f6: bc:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:08:29:EF:81:D5:E1:8F:69:2F:97:68:D6:D4:49:2E:67:18:70:BF X509v3 Authority Key Identifier: keyid:FB:D4:B4:3B:56:78:F1:A0:6C:C9:07:C4:ED:04:BD:A2:11:D9:DD:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:39:fe:52:96:20:79:51:08:1b:29:e1:d1:ac:1b:8e:90:8c: e5:83:42:6c:a0:17:c6:ba:7e:61:c0:38:bc:aa:0c:e5:c1:da: 70:97:7d:ed:0b:10:4e:dd:0a:05:1f:d8:a1:ff:1c:47:56:c4: 41:4b:de:ff:e1:e7:e1:1b:2b:19:5d:29:aa:5d:b7:5f:9d:43: ff:04:9a:44:42:dc:34:c9:a7:3a:ee:e4:91:a6:cf:c0:b8:dd: 00:ec:76:74:e0:70:0c:22:7f:9f:d6:43:a1:0c:b3:4d:19:fb: 87:44:bd:e5:23:37:a4:47:28:89:6a:09:7c:bc:4e:78:aa:68: 01:38:b4:69:c4:79:60:e6:ff:9a:c5:ad:a4:c3:69:5e:4d:28: d1:06:aa:03:74:72:b1:89:b5:92:15:b5:6b:15:0d:b3:89:9f: 40:9f:12:80:64:2c:ec:ea:92:22:cc:92:b7:22:58:bb:23:ee: 59:f3:75:94:33:c7:31:c9:75:bc:be:a3:75:28:4c:63:53:0f: 29:20:eb:e0:44:fe:3c:c7:0a:6e:1d:71:b8:8f:2c:65:60:c2: a5:8e:4f:0c:cb:a5:62:5f:13:2a:9b:fa:59:80:02:ab:f8:bf: 14:bd:1e:6c:e1:5f:a1:c7:bb:99:7e:1e:b4:b1:3b:dc:a9:c3: 44:10:47:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEyNDcxMTAvBgNVBAUTKEZCRDRCNDNCNTY3OEYxQTA2Q0M5MDdDNEVEMDRCREEy MTFEOUREMkIwHhcNMjUwODIzMDQxMzU1WhcNMjUwODMwMDQxMzU1WjAYMRYwFAYD VQQDEw02OGE5NDAwMy02YWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA03Squ7crQ3eYFm8vYUiMFDC7OjlzYYD+hma/1cpoA6BmmsYOICsIBddonbOC uhESGcjbYrh7A9+GnGdSl90kXKuEed/9A9fxxcd/92ZJ+ecvmq8sTL8hQxcAABqe vk82ObX1ckYx7qNMMEanXYlqZuUjLzl3aUpCnvAxeKBMi1Rqk46UpcYcxjLbABv3 t7Y1nhl/KYfo34/+sG39uvKgbRYeuaMZtJfsD+ycR4qb4nNFyRI6c8Nq8ifucg9l VBJzYU5gcR85giV3uJuCe5CJ8j+1eTkX2fkGJwDPByBLLD6hdKW50UWqkkwepHJn jwybp1SHiHBsf/9YQ3EulPa8BQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNIIKe+B 1eGPaS+XaNbUSS5nGHC/MB8GA1UdIwQYMBaAFPvUtDtWePGgbMkHxO0EvaIR2d0r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTI0Ny9CMUZDNjQ1QzZG NEExMUVFQTg5RjMzNjNDNEY5QUUwMi8tOVMwTzFaNDhhQnN5UWZFN1FTOW9oSFoz U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy05UzBPMVo0OGFCc3lRZkU3UVM5b2hIWjNTcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTI0Ny9CMUZDNjQ1QzZGNEExMUVFQTg5RjMzNjNDNEY5QUUwMi8tOVMwTzFaNDhh QnN5UWZFN1FTOW9oSFozU3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQOf5SliB5UQgbKeHRrBuOkIzlg0JsoBfGun5hwDi8qgzlwdpwl33t CxBO3QoFH9ih/xxHVsRBS97/4efhGysZXSmqXbdfnUP/BJpEQtw0yac67uSRps/A uN0A7HZ04HAMIn+f1kOhDLNNGfuHRL3lIzekRyiJagl8vE54qmgBOLRpxHlg5v+a xa2kw2leTSjRBqoDdHKxibWSFbVrFQ2ziZ9AnxKAZCzs6pIizJK3Ili7I+5Z83WU M8cxyXW8vqN1KExjUw8pIOvgRP48xwpuHXG4jyxlYMKljk8My6ViXxMqm/pZgAKr +L8UvR5s4V+hx7uZfh60sTvcqcNEEEf/ -----END CERTIFICATE-----Generated at Sat Aug 23 19:35:17 2025 by rpki-client