$ rpki-client -vvf rpki.apnic.net/member_repository/A9180DA5/AF885F6673ED11EFB0BA025AC4F9AE02/15v9g5udDgnQQF7QTuUpIOkLesQ.mft File: 15v9g5udDgnQQF7QTuUpIOkLesQ.mft (raw, json) Hash identifier: Q5W2l0ZIwNjzmT5d9uY+AR5sfZAU643YT89GYmZdSUM= Subject key identifier: 0E:17:E8:9A:F4:F7:BD:A1:13:55:39:66:16:BF:5F:3C:97:07:78:C7 Authority key identifier: D7:9B:FD:83:9B:9D:0E:09:D0:40:5E:D0:4E:E5:29:20:E9:0B:7A:C4 Certificate issuer: /CN=A9180DA5/serialNumber=D79BFD839B9D0E09D0405ED04EE52920E90B7AC4 Certificate serial: AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15v9g5udDgnQQF7QTuUpIOkLesQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180DA5/AF885F6673ED11EFB0BA025AC4F9AE02/15v9g5udDgnQQF7QTuUpIOkLesQ.mft Manifest number: AF Signing time: Sat 23 Aug 2025 06:17:13 +0000 Manifest this update: Sat 23 Aug 2025 06:17:12 +0000 Manifest next update: Sat 30 Aug 2025 06:17:12 +0000 Files and hashes: 1: 15v9g5udDgnQQF7QTuUpIOkLesQ.crl (hash: OJSSunhWpA1jHedcTGX+7k0Vgu5n4Oa6o7xzsCcN64A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180DA5/AF885F6673ED11EFB0BA025AC4F9AE02/15v9g5udDgnQQF7QTuUpIOkLesQ.crl rsync://rpki.apnic.net/member_repository/A9180DA5/AF885F6673ED11EFB0BA025AC4F9AE02/15v9g5udDgnQQF7QTuUpIOkLesQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15v9g5udDgnQQF7QTuUpIOkLesQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:17:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 175 (0xaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180DA5, serialNumber=D79BFD839B9D0E09D0405ED04EE52920E90B7AC4 Validity Not Before: Aug 23 06:17:12 2025 GMT Not After : Aug 30 06:17:12 2025 GMT Subject: CN=68a95ce9-a3b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:51:3d:30:64:67:17:33:22:17:1e:bc:50:a5: 2f:ac:3d:bc:73:a1:43:ec:23:97:91:b3:19:ae:7a: af:6e:f9:81:af:65:57:7d:f0:84:5b:3d:b3:16:26: 2f:4a:fd:b3:b7:2f:df:f4:3f:66:92:13:21:28:98: 02:0b:cb:20:cc:98:b7:bc:26:20:2b:b7:1a:a6:53: 92:57:84:41:d9:25:23:48:56:c2:5b:b0:89:7c:67: 8d:d5:ba:60:f9:5e:cc:0d:4f:fa:0e:7e:ea:20:3d: cf:55:27:ce:44:00:fc:f8:44:4d:bc:fb:2f:14:a7: 63:d8:5e:e3:21:99:11:34:f0:e9:2f:35:5a:eb:80: bb:5f:72:d1:1a:88:e6:85:b1:36:89:04:58:d4:e6: 1e:24:dc:71:00:ec:2f:06:87:56:04:be:d9:32:f5: 0c:f0:2e:31:60:03:3c:8a:26:9e:e0:90:3b:14:58: 92:c6:cf:e6:61:dd:85:aa:2a:7b:6b:85:a1:8a:0f: ea:2b:7f:d5:3e:bb:a5:f7:6f:62:e9:fa:32:24:da: 3b:7b:96:68:3d:af:6d:1a:01:bf:72:cf:df:83:0b: cb:db:e2:d6:a5:e3:11:51:71:a0:2d:a5:cd:b8:a2: fd:ed:ab:89:8b:f5:01:1d:75:09:0e:fa:e6:db:b1: 3d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:17:E8:9A:F4:F7:BD:A1:13:55:39:66:16:BF:5F:3C:97:07:78:C7 X509v3 Authority Key Identifier: keyid:D7:9B:FD:83:9B:9D:0E:09:D0:40:5E:D0:4E:E5:29:20:E9:0B:7A:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180DA5/AF885F6673ED11EFB0BA025AC4F9AE02/15v9g5udDgnQQF7QTuUpIOkLesQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15v9g5udDgnQQF7QTuUpIOkLesQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180DA5/AF885F6673ED11EFB0BA025AC4F9AE02/15v9g5udDgnQQF7QTuUpIOkLesQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:62:8f:77:9b:28:62:78:94:b3:97:2c:55:7f:b6:c0:4a:9e: 55:3c:74:10:18:bb:dc:6d:7b:96:61:e7:b6:20:9f:c3:2e:7e: 69:78:a7:a5:25:c9:be:49:af:c6:5d:67:c1:ee:3d:76:72:c9: be:aa:3f:d9:ca:70:f6:86:0c:5c:87:9d:62:06:ed:0a:07:5b: 31:df:5c:66:1c:fd:d3:ee:3c:94:44:b6:9e:3d:af:10:4c:b1: f2:f2:f2:31:37:61:97:d7:b1:f9:67:6d:c9:ca:6b:3a:1e:fa: f0:df:2c:95:fc:f2:75:50:04:03:1f:33:1a:5e:34:7f:c3:bb: 2c:54:bb:f1:6c:a2:96:18:39:f7:d2:1f:37:c9:0f:4f:b8:c1: 65:2c:9f:57:8c:95:7e:91:19:df:c2:d9:08:ff:3f:89:79:5b: 48:56:8d:2b:40:cb:96:6e:92:15:15:f6:80:1b:ab:c0:94:73: 31:8c:f2:3a:65:cf:8d:5c:d6:df:16:cb:6d:83:fa:f5:fa:75: 19:d1:05:b7:ca:36:67:54:ee:a9:34:41:0b:0e:0b:7e:35:a0: f5:ec:87:87:5e:11:23:ac:5b:2a:82:da:22:2f:df:30:ef:1d: 0a:f5:57:e2:75:3c:cd:0c:5f:d7:5d:f3:05:6f:f4:c3:2e:fb: ff:c3:a8:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODBEQTUxMTAvBgNVBAUTKEQ3OUJGRDgzOUI5RDBFMDlEMDQwNUVEMDRFRTUyOTIw RTkwQjdBQzQwHhcNMjUwODIzMDYxNzEyWhcNMjUwODMwMDYxNzEyWjAYMRYwFAYD VQQDEw02OGE5NWNlOS1hM2IxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs1E9MGRnFzMiFx68UKUvrD28c6FD7COXkbMZrnqvbvmBr2VXffCEWz2zFiYv Sv2zty/f9D9mkhMhKJgCC8sgzJi3vCYgK7caplOSV4RB2SUjSFbCW7CJfGeN1bpg +V7MDU/6Dn7qID3PVSfORAD8+ERNvPsvFKdj2F7jIZkRNPDpLzVa64C7X3LRGojm hbE2iQRY1OYeJNxxAOwvBodWBL7ZMvUM8C4xYAM8iiae4JA7FFiSxs/mYd2Fqip7 a4Whig/qK3/VPrul929i6foyJNo7e5ZoPa9tGgG/cs/fgwvL2+LWpeMRUXGgLaXN uKL97auJi/UBHXUJDvrm27E9JQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA4X6Jr0 972hE1U5Zha/XzyXB3jHMB8GA1UdIwQYMBaAFNeb/YObnQ4J0EBe0E7lKSDpC3rE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MERBNS9BRjg4NUY2Njcz RUQxMUVGQjBCQTAyNUFDNEY5QUUwMi8xNXY5ZzV1ZERnblFRRjdRVHVVcElPa0xl c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzE1djlnNXVkRGduUVFGN1FUdVVwSU9rTGVzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MERBNS9BRjg4NUY2NjczRUQxMUVGQjBCQTAyNUFDNEY5QUUwMi8xNXY5ZzV1ZERn blFRRjdRVHVVcElPa0xlc1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMYo93myhieJSzlyxVf7bASp5VPHQQGLvcbXuWYee2IJ/DLn5peKel Jcm+Sa/GXWfB7j12csm+qj/ZynD2hgxch51iBu0KB1sx31xmHP3T7jyURLaePa8Q TLHy8vIxN2GX17H5Z23Jyms6Hvrw3yyV/PJ1UAQDHzMaXjR/w7ssVLvxbKKWGDn3 0h83yQ9PuMFlLJ9XjJV+kRnfwtkI/z+JeVtIVo0rQMuWbpIVFfaAG6vAlHMxjPI6 Zc+NXNbfFsttg/r1+nUZ0QW3yjZnVO6pNEELDgt+NaD17IeHXhEjrFsqgtoiL98w 7x0K9VfidTzNDF/XXfMFb/TDLvv/w6hr -----END CERTIFICATE-----Generated at Sat Aug 23 19:32:53 2025 by rpki-client