$ rpki-client -vvf rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.mft File: f95kLEQhft58x2dxm6Z9A20X0Es.mft (raw, json) Hash identifier: 14odwZAVlxbdbDWAgJxyYpQu/Kla2AnOp11DY20UK2I= Subject key identifier: FB:86:3C:B4:47:BA:92:4E:D4:31:FB:3E:C3:64:FB:A0:27:1B:7C:55 Authority key identifier: 7F:DE:64:2C:44:21:7E:DE:7C:C7:67:71:9B:A6:7D:03:6D:17:D0:4B Certificate issuer: /CN=A9189883/serialNumber=7FDE642C44217EDE7CC767719BA67D036D17D04B Certificate serial: 015B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f95kLEQhft58x2dxm6Z9A20X0Es.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.mft Manifest number: 0158 Signing time: Sat 23 Aug 2025 04:14:55 +0000 Manifest this update: Sat 23 Aug 2025 04:14:55 +0000 Manifest next update: Sat 30 Aug 2025 04:14:55 +0000 Files and hashes: 1: f95kLEQhft58x2dxm6Z9A20X0Es.crl (hash: AkftFvlYAH9RePF0uCcUrr+R3g/NrsLHzEg2mnMRNWs=) 2: 166B5FEA727711EEA4209110C4F9AE02.roa (hash: 6XI21Rbox6GrvQ2XIiLWLaxiZEN511Ja5aYkWDlWtkc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.crl rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f95kLEQhft58x2dxm6Z9A20X0Es.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:14:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 347 (0x15b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189883, serialNumber=7FDE642C44217EDE7CC767719BA67D036D17D04B Validity Not Before: Aug 23 04:14:55 2025 GMT Not After : Aug 30 04:14:55 2025 GMT Subject: CN=68a9403f-b1da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:88:84:7f:54:7b:32:56:87:d9:f6:2e:59:9c: a9:2e:b0:ee:b6:c5:8c:de:66:89:b3:f7:f4:47:c3: 17:1e:7a:c4:8b:86:98:19:81:5b:db:0d:2f:92:1c: 2d:9f:0e:ce:03:43:7d:85:3f:e5:a7:2e:be:c5:40: c4:b2:ba:77:a1:fe:fc:cd:97:7c:04:a2:c3:79:74: f4:f1:f8:f9:7e:40:27:d4:8e:f0:b0:ac:6e:d9:f1: 3b:d3:7b:ef:d5:58:5d:a4:1d:1d:e5:42:bd:c7:bd: b5:99:b4:d2:98:45:e5:f4:1a:4f:70:3f:9b:90:c1: 52:18:82:f2:4f:c7:78:4a:35:27:c5:bb:4b:b4:5c: c7:3c:f7:57:f1:7e:86:80:f8:66:7a:15:3c:69:fe: 27:fb:79:4b:5b:20:d7:fe:7c:30:d8:1c:e2:6d:e6: c7:0c:e5:58:d3:70:f8:7d:af:d0:3e:63:58:13:6b: 9a:8a:3e:55:79:3c:ef:86:2f:cd:69:e4:7d:25:8c: d7:53:c2:76:4e:2e:d4:62:fc:71:63:76:a3:88:c8: 42:40:cc:a8:b5:95:ad:8b:2a:88:9c:df:55:47:61: a0:62:79:00:5a:f4:32:29:15:84:7c:50:a6:3a:c5: b2:c4:6b:7e:81:53:c8:9e:a9:43:e4:9b:db:a1:5e: 3f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:86:3C:B4:47:BA:92:4E:D4:31:FB:3E:C3:64:FB:A0:27:1B:7C:55 X509v3 Authority Key Identifier: keyid:7F:DE:64:2C:44:21:7E:DE:7C:C7:67:71:9B:A6:7D:03:6D:17:D0:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f95kLEQhft58x2dxm6Z9A20X0Es.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:7c:2a:52:7e:87:42:f3:99:1b:d0:24:58:99:ad:0a:90:ed: 9f:5f:6a:72:39:c6:ef:5c:9c:fb:30:1d:d9:b1:98:ac:33:4c: 95:c6:73:b2:ed:2f:56:da:a0:d2:6c:c0:e6:b9:0b:7d:24:b1: d6:51:ec:87:fd:3c:3d:74:2d:11:0a:ad:14:9d:c4:17:dc:cd: 7d:50:86:39:2e:3f:e1:90:09:ba:63:27:f1:ba:96:ee:d6:bd: 26:bc:c2:18:00:38:4e:62:a5:fa:16:0c:47:b4:de:69:85:c3: a4:ee:40:01:9f:96:50:b0:46:85:07:20:34:c9:9b:d8:6a:8c: cf:45:57:de:a3:92:5d:33:7a:47:56:c5:74:c1:68:fa:f6:95: 87:7a:b4:16:bd:51:28:e7:18:19:46:34:19:54:b7:38:bd:b4: 5a:3f:86:5d:84:95:a8:30:ed:49:b8:56:3e:1d:5e:fd:c1:f4: f2:29:e7:cb:41:43:16:8d:a0:38:d4:42:b3:3a:02:2c:f2:02: 3b:c1:66:67:63:d7:6b:c0:08:48:a8:74:fe:81:4e:13:dd:ce: 22:7d:52:1d:92:30:30:6d:f4:ce:1d:cf:be:66:c3:b5:d9:63: 77:8a:6c:d1:2b:df:2f:76:c0:be:d5:be:7e:4a:8c:08:83:1b: 35:d2:bb:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk4ODMxMTAvBgNVBAUTKDdGREU2NDJDNDQyMTdFREU3Q0M3Njc3MTlCQTY3RDAz NkQxN0QwNEIwHhcNMjUwODIzMDQxNDU1WhcNMjUwODMwMDQxNDU1WjAYMRYwFAYD VQQDEw02OGE5NDAzZi1iMWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwYiEf1R7MlaH2fYuWZypLrDutsWM3maJs/f0R8MXHnrEi4aYGYFb2w0vkhwt nw7OA0N9hT/lpy6+xUDEsrp3of78zZd8BKLDeXT08fj5fkAn1I7wsKxu2fE703vv 1VhdpB0d5UK9x721mbTSmEXl9BpPcD+bkMFSGILyT8d4SjUnxbtLtFzHPPdX8X6G gPhmehU8af4n+3lLWyDX/nww2BzibebHDOVY03D4fa/QPmNYE2uaij5VeTzvhi/N aeR9JYzXU8J2Ti7UYvxxY3ajiMhCQMyotZWtiyqInN9VR2GgYnkAWvQyKRWEfFCm OsWyxGt+gVPInqlD5JvboV4/TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPuGPLRH upJO1DH7PsNk+6AnG3xVMB8GA1UdIwQYMBaAFH/eZCxEIX7efMdncZumfQNtF9BL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTg4My9DMzdFQzhCMjcy NzYxMUVFODQ2MDI5MERDNEY5QUUwMi9mOTVrTEVRaGZ0NTh4MmR4bTZaOUEyMFgw RXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Y5NWtMRVFoZnQ1OHgyZHhtNlo5QTIwWDBFcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTg4My9DMzdFQzhCMjcyNzYxMUVFODQ2MDI5MERDNEY5QUUwMi9mOTVrTEVRaGZ0 NTh4MmR4bTZaOUEyMFgwRXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLfCpSfodC85kb0CRYma0KkO2fX2pyOcbvXJz7MB3ZsZisM0yVxnOy 7S9W2qDSbMDmuQt9JLHWUeyH/Tw9dC0RCq0UncQX3M19UIY5Lj/hkAm6Yyfxupbu 1r0mvMIYADhOYqX6FgxHtN5phcOk7kABn5ZQsEaFByA0yZvYaozPRVfeo5JdM3pH VsV0wWj69pWHerQWvVEo5xgZRjQZVLc4vbRaP4ZdhJWoMO1JuFY+HV79wfTyKefL QUMWjaA41EKzOgIs8gI7wWZnY9drwAhIqHT+gU4T3c4ifVIdkjAwbfTOHc++ZsO1 2WN3imzRK98vdsC+1b5+SowIgxs10rsB -----END CERTIFICATE-----Generated at Sat Aug 23 17:16:09 2025 by rpki-client