$ rpki-client -vvf rpki.apnic.net/member_repository/A9180DA5/AF885F6673ED11EFB0BA025AC4F9AE02/15v9g5udDgnQQF7QTuUpIOkLesQ.mft File: 15v9g5udDgnQQF7QTuUpIOkLesQ.mft (raw, json) Hash identifier: 9MU0WOSL4OLDWi2VjMmGSLm/ltfg11Nz7UCmVkE3pfY= Subject key identifier: A3:3E:7C:00:CC:2B:E3:C1:E8:CC:8B:EA:57:49:E6:A2:62:F1:40:A0 Authority key identifier: D7:9B:FD:83:9B:9D:0E:09:D0:40:5E:D0:4E:E5:29:20:E9:0B:7A:C4 Certificate issuer: /CN=A9180DA5/serialNumber=D79BFD839B9D0E09D0405ED04EE52920E90B7AC4 Certificate serial: CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15v9g5udDgnQQF7QTuUpIOkLesQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180DA5/AF885F6673ED11EFB0BA025AC4F9AE02/15v9g5udDgnQQF7QTuUpIOkLesQ.mft Manifest number: CC Signing time: Sun 19 Oct 2025 08:47:57 +0000 Manifest this update: Sun 19 Oct 2025 08:47:56 +0000 Manifest next update: Sun 26 Oct 2025 08:47:56 +0000 Files and hashes: 1: 15v9g5udDgnQQF7QTuUpIOkLesQ.crl (hash: IR+ULft8NlG4+fnZqG88SdnWdsamrEevUzsWD/hDuvw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180DA5/AF885F6673ED11EFB0BA025AC4F9AE02/15v9g5udDgnQQF7QTuUpIOkLesQ.crl rsync://rpki.apnic.net/member_repository/A9180DA5/AF885F6673ED11EFB0BA025AC4F9AE02/15v9g5udDgnQQF7QTuUpIOkLesQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15v9g5udDgnQQF7QTuUpIOkLesQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:47:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 204 (0xcc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180DA5, serialNumber=D79BFD839B9D0E09D0405ED04EE52920E90B7AC4 Validity Not Before: Oct 19 08:47:56 2025 GMT Not After : Oct 26 08:47:56 2025 GMT Subject: CN=68f4a5bd-deb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b2:ef:22:d4:2c:5c:48:4b:b4:80:5c:d0:f9: da:d8:f9:24:bc:f0:9c:50:55:39:e9:aa:69:fb:3f: 22:f4:98:a2:53:a2:f6:20:f5:8b:a0:4f:4b:10:c4: cb:3c:df:fc:14:86:3f:b3:de:ca:a4:a6:ad:10:dc: 5f:99:ca:9d:9f:70:3e:8d:b0:4d:9f:c2:74:fd:1f: 52:48:42:a8:f5:de:c9:7b:68:c1:1d:47:75:06:55: 0d:76:29:69:8a:c4:41:a1:a5:58:80:77:f1:13:eb: f6:14:ae:0d:7d:3a:d3:a3:62:ba:4c:d9:f9:82:0c: d3:d7:93:8f:fe:13:3f:28:83:91:64:02:7b:e3:1d: 92:d8:33:f4:24:9c:1a:aa:57:4c:c0:84:d6:0f:5c: ca:2b:82:10:76:6a:52:ce:9f:67:f8:e0:e4:00:85: d2:7b:c7:25:30:bc:58:ee:09:f8:6d:68:9c:e7:d8: a9:af:52:83:75:c1:c7:ff:c3:91:69:3c:a4:2d:34: 7a:97:00:54:90:f4:f7:56:97:2a:c1:34:d6:40:a0: 99:bb:1b:a6:6c:a8:c6:e5:de:1e:ae:b0:10:fc:41: dd:5b:b9:c0:d3:a6:af:b6:1e:dc:42:96:7e:a6:a9: 1b:f2:c6:43:f3:12:39:af:61:00:18:b5:dd:10:3b: d1:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:3E:7C:00:CC:2B:E3:C1:E8:CC:8B:EA:57:49:E6:A2:62:F1:40:A0 X509v3 Authority Key Identifier: keyid:D7:9B:FD:83:9B:9D:0E:09:D0:40:5E:D0:4E:E5:29:20:E9:0B:7A:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180DA5/AF885F6673ED11EFB0BA025AC4F9AE02/15v9g5udDgnQQF7QTuUpIOkLesQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15v9g5udDgnQQF7QTuUpIOkLesQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180DA5/AF885F6673ED11EFB0BA025AC4F9AE02/15v9g5udDgnQQF7QTuUpIOkLesQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:da:99:c0:b4:5a:31:f1:81:ef:89:08:34:69:46:f1:24:8b: e5:dc:19:d3:ed:18:28:96:19:6a:0b:cf:c1:8b:08:00:31:cb: e8:cc:bf:70:6c:90:1e:49:67:79:5e:aa:8e:30:39:21:06:df: 0f:86:05:4e:1d:42:95:ee:ac:9b:b7:30:1e:4b:b4:d1:b4:a0: 59:b4:12:8c:23:56:a7:a1:dd:6b:54:c5:17:7b:c3:bb:c5:d0: 5a:f3:cb:15:38:0f:31:a7:e2:5f:49:0f:b6:58:01:f9:12:7f: 4e:31:2b:03:b4:72:26:29:1a:54:8f:25:85:4d:42:ce:de:2d: 47:86:8a:91:31:9d:ad:33:a3:f9:69:a4:c7:17:7d:75:95:b0: d2:14:80:57:05:2a:e2:d3:49:e9:c1:ce:37:6e:99:13:30:ce: ee:7b:6d:36:4d:31:99:5b:0d:b2:b7:d2:82:3b:32:48:1d:de: 2c:2c:7f:40:75:5d:3a:da:fd:2a:5a:0a:29:7c:2b:8f:4c:c3: 37:49:a2:28:7e:27:ab:64:72:75:89:4c:31:3a:bd:ad:62:33: d0:2d:cb:74:4c:84:ab:8f:dd:a4:65:9a:4a:cd:7c:55:a7:e6: 99:12:99:33:92:4b:0e:d6:36:64:1b:f1:dc:21:ba:8a:c7:fb: 55:54:7c:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODBEQTUxMTAvBgNVBAUTKEQ3OUJGRDgzOUI5RDBFMDlEMDQwNUVEMDRFRTUyOTIw RTkwQjdBQzQwHhcNMjUxMDE5MDg0NzU2WhcNMjUxMDI2MDg0NzU2WjAYMRYwFAYD VQQDEw02OGY0YTViZC1kZWI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyrLvItQsXEhLtIBc0Pna2PkkvPCcUFU56app+z8i9JiiU6L2IPWLoE9LEMTL PN/8FIY/s97KpKatENxfmcqdn3A+jbBNn8J0/R9SSEKo9d7Je2jBHUd1BlUNdilp isRBoaVYgHfxE+v2FK4NfTrTo2K6TNn5ggzT15OP/hM/KIORZAJ74x2S2DP0JJwa qldMwITWD1zKK4IQdmpSzp9n+ODkAIXSe8clMLxY7gn4bWic59ipr1KDdcHH/8OR aTykLTR6lwBUkPT3VpcqwTTWQKCZuxumbKjG5d4errAQ/EHdW7nA06avth7cQpZ+ pqkb8sZD8xI5r2EAGLXdEDvRgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKM+fADM K+PB6MyL6ldJ5qJi8UCgMB8GA1UdIwQYMBaAFNeb/YObnQ4J0EBe0E7lKSDpC3rE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MERBNS9BRjg4NUY2Njcz RUQxMUVGQjBCQTAyNUFDNEY5QUUwMi8xNXY5ZzV1ZERnblFRRjdRVHVVcElPa0xl c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzE1djlnNXVkRGduUVFGN1FUdVVwSU9rTGVzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MERBNS9BRjg4NUY2NjczRUQxMUVGQjBCQTAyNUFDNEY5QUUwMi8xNXY5ZzV1ZERn blFRRjdRVHVVcElPa0xlc1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBb2pnAtFox8YHviQg0aUbxJIvl3BnT7RgolhlqC8/BiwgAMcvozL9w bJAeSWd5XqqOMDkhBt8PhgVOHUKV7qybtzAeS7TRtKBZtBKMI1anod1rVMUXe8O7 xdBa88sVOA8xp+JfSQ+2WAH5En9OMSsDtHImKRpUjyWFTULO3i1HhoqRMZ2tM6P5 aaTHF311lbDSFIBXBSri00npwc43bpkTMM7ue202TTGZWw2yt9KCOzJIHd4sLH9A dV062v0qWgopfCuPTMM3SaIofierZHJ1iUwxOr2tYjPQLct0TISrj92kZZpKzXxV p+aZEpkzkksO1jZkG/HcIbqKx/tVVHwT -----END CERTIFICATE-----Generated at Mon Oct 20 01:45:47 2025 by rpki-client