$ rpki-client -vvf rpki.apnic.net/member_repository/A9181C75/903CE126909511EA8292085FC4F9AE02/15fpHhsnQJH3397fpbABL-m1roc.mft File: 15fpHhsnQJH3397fpbABL-m1roc.mft (raw, json) Hash identifier: ZVA+Hb5Rfmb1HGhqQtDfvbeAthTV8/hLK0Xe7m9TdeM= Subject key identifier: 6A:60:80:F7:6C:12:A3:D6:E7:BD:93:A9:D4:35:42:DD:84:3B:A5:E1 Authority key identifier: D7:97:E9:1E:1B:27:40:91:F7:DF:DE:DF:A5:B0:01:2F:E9:B5:AE:87 Certificate issuer: /CN=A9181C75/serialNumber=D797E91E1B274091F7DFDEDFA5B0012FE9B5AE87 Certificate serial: 0995 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15fpHhsnQJH3397fpbABL-m1roc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9181C75/903CE126909511EA8292085FC4F9AE02/15fpHhsnQJH3397fpbABL-m1roc.mft Manifest number: 098C Signing time: Mon 30 Jun 2025 20:17:15 +0000 Manifest this update: Mon 30 Jun 2025 20:17:15 +0000 Manifest next update: Mon 07 Jul 2025 20:17:15 +0000 Files and hashes: 1: 15fpHhsnQJH3397fpbABL-m1roc.crl (hash: Qw9h0rpERdXuoi5yb0aTXHDpHraATrXU2Jn+iSzcg9c=) 2: 1EC631B2FFB211ECA2EBD652C4F9AE02.roa (hash: 9yZSRRj+c0xUC0wLONS1pajEgEnXcu6/+H0zYnjOy0o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9181C75/903CE126909511EA8292085FC4F9AE02/15fpHhsnQJH3397fpbABL-m1roc.crl rsync://rpki.apnic.net/member_repository/A9181C75/903CE126909511EA8292085FC4F9AE02/15fpHhsnQJH3397fpbABL-m1roc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15fpHhsnQJH3397fpbABL-m1roc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 20:17:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2453 (0x995) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181C75, serialNumber=D797E91E1B274091F7DFDEDFA5B0012FE9B5AE87 Validity Not Before: Jun 30 20:17:15 2025 GMT Not After : Jul 7 20:17:15 2025 GMT Subject: CN=6862f0cb-3269 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:70:22:c0:75:2b:e2:53:53:05:78:00:54:31: 3d:27:3b:95:ee:44:15:fc:e8:c6:94:96:40:62:55: a8:96:85:7f:2f:48:c0:eb:a2:a2:94:b7:22:0e:3e: 6a:d2:45:a2:96:8f:a6:60:7b:a6:6b:16:a5:33:eb: e1:0a:04:f6:52:e9:9b:1a:de:59:a9:c3:16:4f:72: 37:ae:1c:f8:79:95:59:1d:7d:7b:1a:78:8b:ec:15: eb:cc:11:43:52:ad:7b:92:14:d1:08:0c:0f:51:4d: 51:d5:13:aa:f9:f8:b1:28:32:c7:19:35:40:01:6a: 9f:94:c8:42:60:d3:f7:9d:ac:ee:27:b7:7c:41:04: 27:98:2b:15:23:8d:de:46:e0:95:f5:e2:b3:e8:74: 76:71:c7:5c:4d:32:37:86:af:a4:78:ad:93:a5:06: 3d:d3:83:5b:32:c9:08:49:1e:04:99:29:56:a2:d7: 61:aa:da:4d:d1:a9:60:83:94:59:2a:59:22:a5:2d: 56:80:cd:f9:43:63:c0:ec:0e:80:69:e4:84:05:87: 7e:9d:76:11:14:0f:bb:7f:b8:cf:16:e3:da:52:4d: af:cb:ce:80:21:a3:fb:85:53:a4:a8:66:a2:9a:ef: f6:e7:53:f4:a9:44:71:05:88:c5:db:dd:b1:91:a1: c9:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:60:80:F7:6C:12:A3:D6:E7:BD:93:A9:D4:35:42:DD:84:3B:A5:E1 X509v3 Authority Key Identifier: keyid:D7:97:E9:1E:1B:27:40:91:F7:DF:DE:DF:A5:B0:01:2F:E9:B5:AE:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9181C75/903CE126909511EA8292085FC4F9AE02/15fpHhsnQJH3397fpbABL-m1roc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15fpHhsnQJH3397fpbABL-m1roc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181C75/903CE126909511EA8292085FC4F9AE02/15fpHhsnQJH3397fpbABL-m1roc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:2a:15:79:1d:5e:e8:06:fe:da:a9:31:cb:77:33:38:a7:df: c4:05:7c:ac:a9:5f:28:5e:50:8a:e5:ea:32:69:55:99:cf:4d: e8:e8:36:4d:f5:ff:f3:3b:6c:b1:cb:77:cc:2b:c0:12:4f:75: fc:19:28:14:b3:e8:b6:12:b4:72:fb:96:16:f0:24:ad:ef:22: 53:4e:51:c3:a5:87:6a:0b:e4:f5:d1:29:87:23:81:66:03:24: 98:b8:4a:32:87:4f:54:86:fb:15:c5:38:a0:34:94:5f:0a:06: bc:9d:16:95:de:29:6c:ca:d2:76:b4:5e:fc:c4:34:7e:e3:c0: 14:70:75:fb:dd:c5:e8:ad:40:99:43:59:1f:d8:b4:19:1e:fc: 0a:84:73:67:23:25:85:3e:d7:94:aa:39:b3:83:b6:a6:3d:e9: 38:24:1b:88:ba:83:7d:79:85:56:e1:cb:29:ee:fd:d2:47:42: 58:42:ba:d9:ab:7f:04:62:e0:a9:25:7d:b8:ed:d1:86:ed:1f: ba:d8:0f:a8:bc:af:93:e6:57:63:14:81:57:0a:62:07:80:dc: bd:65:a1:98:69:2b:f5:e8:39:b1:fb:34:08:b2:66:8e:63:18: b6:fc:87:fc:a0:be:ac:7a:35:ed:ed:47:10:4c:57:ed:94:01: ff:4a:6c:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODFDNzUxMTAvBgNVBAUTKEQ3OTdFOTFFMUIyNzQwOTFGN0RGREVERkE1QjAwMTJG RTlCNUFFODcwHhcNMjUwNjMwMjAxNzE1WhcNMjUwNzA3MjAxNzE1WjAYMRYwFAYD VQQDEw02ODYyZjBjYi0zMjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArXAiwHUr4lNTBXgAVDE9JzuV7kQV/OjGlJZAYlWoloV/L0jA66KilLciDj5q 0kWilo+mYHumaxalM+vhCgT2UumbGt5ZqcMWT3I3rhz4eZVZHX17GniL7BXrzBFD Uq17khTRCAwPUU1R1ROq+fixKDLHGTVAAWqflMhCYNP3nazuJ7d8QQQnmCsVI43e RuCV9eKz6HR2ccdcTTI3hq+keK2TpQY904NbMskISR4EmSlWotdhqtpN0algg5RZ KlkipS1WgM35Q2PA7A6AaeSEBYd+nXYRFA+7f7jPFuPaUk2vy86AIaP7hVOkqGai mu/251P0qURxBYjF292xkaHJkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGpggPds EqPW572TqdQ1Qt2EO6XhMB8GA1UdIwQYMBaAFNeX6R4bJ0CR99/e36WwAS/pta6H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MUM3NS85MDNDRTEyNjkw OTUxMUVBODI5MjA4NUZDNEY5QUUwMi8xNWZwSGhzblFKSDMzOTdmcGJBQkwtbTFy b2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzE1ZnBIaHNuUUpIMzM5N2ZwYkFCTC1tMXJvYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MUM3NS85MDNDRTEyNjkwOTUxMUVBODI5MjA4NUZDNEY5QUUwMi8xNWZwSGhzblFK SDMzOTdmcGJBQkwtbTFyb2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhKhV5HV7oBv7aqTHLdzM4p9/EBXysqV8oXlCK5eoyaVWZz03o6DZN 9f/zO2yxy3fMK8AST3X8GSgUs+i2ErRy+5YW8CSt7yJTTlHDpYdqC+T10SmHI4Fm AySYuEoyh09UhvsVxTigNJRfCga8nRaV3ilsytJ2tF78xDR+48AUcHX73cXorUCZ Q1kf2LQZHvwKhHNnIyWFPteUqjmzg7amPek4JBuIuoN9eYVW4csp7v3SR0JYQrrZ q38EYuCpJX247dGG7R+62A+ovK+T5ldjFIFXCmIHgNy9ZaGYaSv16Dmx+zQIsmaO Yxi2/If8oL6sejXt7UcQTFftlAH/SmzN -----END CERTIFICATE-----Generated at Wed Jul 2 01:10:24 2025 by rpki-client