$ rpki-client -vvf rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/15_6dyN1rrQCGo_1GC_qqjJZKP0.mft File: 15_6dyN1rrQCGo_1GC_qqjJZKP0.mft (raw, json) Hash identifier: vsDx4Kqa7csUWf+2UhDeNQlwlFOw0u5UZTars7UnWgQ= Subject key identifier: 65:58:FE:37:56:14:34:1F:21:FC:4E:AD:F6:06:73:05:BF:88:99:73 Authority key identifier: D7:9F:FA:77:23:75:AE:B4:02:1A:8F:F5:18:2F:EA:AA:32:59:28:FD Certificate issuer: /CN=A91A95AB/serialNumber=D79FFA772375AEB4021A8FF5182FEAAA325928FD Certificate serial: 0886 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_6dyN1rrQCGo_1GC_qqjJZKP0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/15_6dyN1rrQCGo_1GC_qqjJZKP0.mft Manifest number: 3D34 Signing time: Fri 22 Aug 2025 15:14:51 +0000 Manifest this update: Fri 22 Aug 2025 15:14:51 +0000 Manifest next update: Fri 29 Aug 2025 15:14:51 +0000 Files and hashes: 1: 15_6dyN1rrQCGo_1GC_qqjJZKP0.crl (hash: RbkjISMwd1jL/AjHG826gBfSsHVAycrtcmGNjfmRO3U=) 2: D127B58CF8EF11EEA2537576C4F9AE02.roa (hash: bjYMDtpJZNg5Y2L6Uj46FEgAtSCkkttriVFUrF2NgNE=) 3: 355A29B8D6CC11EE99534F6EC4F9AE02.roa (hash: luZqCIjqnlKYbUcpH0XD0h67wo+vIREwLR7SC2P9HUQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/15_6dyN1rrQCGo_1GC_qqjJZKP0.crl rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/15_6dyN1rrQCGo_1GC_qqjJZKP0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_6dyN1rrQCGo_1GC_qqjJZKP0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:14:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2182 (0x886) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A95AB, serialNumber=D79FFA772375AEB4021A8FF5182FEAAA325928FD Validity Not Before: Aug 22 15:14:51 2025 GMT Not After : Aug 29 15:14:51 2025 GMT Subject: CN=68a8896b-9f66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:2e:9e:0c:f2:2e:22:d4:c1:69:0d:87:39:a8: 53:60:4b:96:7d:a1:bc:b6:38:7e:8c:54:10:b5:d6: 73:2f:cd:5e:55:a7:78:5d:d7:ac:94:78:3a:1c:eb: 94:ad:37:02:ed:1c:cc:c2:f1:41:7b:19:60:16:1e: 7e:e2:46:1b:64:7c:93:8a:7e:80:68:25:98:91:4e: 9d:f0:d9:86:af:fd:62:9b:56:86:1f:77:6e:dc:2b: 5f:b7:0f:80:55:1b:b5:bc:f2:31:d0:a3:83:b5:20: 2f:9e:60:99:7a:11:ac:ee:28:04:91:46:ed:b7:46: 2d:38:47:d6:be:ca:05:30:78:4a:c2:eb:a1:b0:1f: d4:16:58:2a:e8:d7:65:e2:46:4d:26:84:e6:ff:a6: b4:f8:a5:d3:ba:56:4a:02:d5:be:2f:65:88:a3:31: bc:96:e5:be:46:af:bb:5a:11:e1:87:a0:8c:81:b9: a1:6a:c8:fe:6b:9f:e5:6c:ff:ef:4e:42:a9:59:13: 70:ae:91:5a:d7:ee:52:37:1c:b8:e3:39:59:b5:ce: 75:b0:d2:50:c3:aa:11:65:53:c9:d8:5a:1c:d9:99: 1f:56:dd:c1:40:13:14:18:15:9f:8a:de:b5:3c:be: e2:b6:a6:09:1c:ed:a4:84:c0:24:61:c9:2b:e6:43: 43:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:58:FE:37:56:14:34:1F:21:FC:4E:AD:F6:06:73:05:BF:88:99:73 X509v3 Authority Key Identifier: keyid:D7:9F:FA:77:23:75:AE:B4:02:1A:8F:F5:18:2F:EA:AA:32:59:28:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/15_6dyN1rrQCGo_1GC_qqjJZKP0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_6dyN1rrQCGo_1GC_qqjJZKP0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/15_6dyN1rrQCGo_1GC_qqjJZKP0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:93:64:e5:55:22:01:ac:f0:6c:26:b7:40:92:6c:3b:6f:33: c7:a9:86:30:b1:74:03:21:ff:45:27:9c:bb:71:5e:40:a9:8d: 22:c4:27:f8:8e:f7:f2:bb:e4:d6:49:22:c0:3f:a9:7f:7d:13: 2b:c5:1f:ce:6c:6c:f8:ec:e9:a0:53:45:20:09:59:57:aa:e0: a2:37:a1:9b:76:a8:2e:dd:ca:f5:11:5b:8b:d9:25:ea:c2:6f: 3d:b7:79:78:b5:9c:8a:62:d2:35:0d:53:36:53:56:78:d4:eb: 89:4e:9d:15:68:09:78:a1:fa:7f:60:5e:d3:2e:f0:9d:fa:a4: 8f:9a:91:34:ea:de:91:2d:f4:e6:5d:6a:c7:a0:f4:5e:26:22: 53:98:ba:2e:d5:c4:c0:fd:50:db:a1:14:29:b4:a8:ce:e3:35: 53:ed:09:9b:51:33:47:13:fa:aa:68:b1:f7:4d:96:8c:bd:e8: 51:6a:59:74:27:22:53:0d:b1:aa:63:1b:5b:1c:24:90:31:b6: 99:2b:57:24:0e:aa:98:0c:3e:13:55:a5:e5:20:ff:03:99:41: 70:91:f6:5d:5a:8c:28:01:9f:a8:2a:6c:fc:c8:41:36:c6:66: b8:98:9e:36:bf:7e:c2:42:31:33:18:82:83:1b:e3:e1:70:19: 2d:e3:58:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTk1QUIxMTAvBgNVBAUTKEQ3OUZGQTc3MjM3NUFFQjQwMjFBOEZGNTE4MkZFQUFB MzI1OTI4RkQwHhcNMjUwODIyMTUxNDUxWhcNMjUwODI5MTUxNDUxWjAYMRYwFAYD VQQDEw02OGE4ODk2Yi05ZjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzy6eDPIuItTBaQ2HOahTYEuWfaG8tjh+jFQQtdZzL81eVad4XdeslHg6HOuU rTcC7RzMwvFBexlgFh5+4kYbZHyTin6AaCWYkU6d8NmGr/1im1aGH3du3Ctftw+A VRu1vPIx0KODtSAvnmCZehGs7igEkUbtt0YtOEfWvsoFMHhKwuuhsB/UFlgq6Ndl 4kZNJoTm/6a0+KXTulZKAtW+L2WIozG8luW+Rq+7WhHhh6CMgbmhasj+a5/lbP/v TkKpWRNwrpFa1+5SNxy44zlZtc51sNJQw6oRZVPJ2Foc2ZkfVt3BQBMUGBWfit61 PL7itqYJHO2khMAkYckr5kND5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGVY/jdW FDQfIfxOrfYGcwW/iJlzMB8GA1UdIwQYMBaAFNef+ncjda60AhqP9Rgv6qoyWSj9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTVBQi8yQUFGRjU3ODFE QTcxMUUyQTFGMkNDQTAwOEIwMkNEMi8xNV82ZHlOMXJyUUNHb18xR0NfcXFqSlpL UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzE1XzZkeU4xcnJRQ0dvXzFHQ19xcWpKWktQMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTVBQi8yQUFGRjU3ODFEQTcxMUUyQTFGMkNDQTAwOEIwMkNEMi8xNV82ZHlOMXJy UUNHb18xR0NfcXFqSlpLUDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3k2TlVSIBrPBsJrdAkmw7bzPHqYYwsXQDIf9FJ5y7cV5AqY0ixCf4 jvfyu+TWSSLAP6l/fRMrxR/ObGz47OmgU0UgCVlXquCiN6Gbdqgu3cr1EVuL2SXq wm89t3l4tZyKYtI1DVM2U1Z41OuJTp0VaAl4ofp/YF7TLvCd+qSPmpE06t6RLfTm XWrHoPReJiJTmLou1cTA/VDboRQptKjO4zVT7QmbUTNHE/qqaLH3TZaMvehRall0 JyJTDbGqYxtbHCSQMbaZK1ckDqqYDD4TVaXlIP8DmUFwkfZdWowoAZ+oKmz8yEE2 xma4mJ42v37CQjEzGIKDG+PhcBkt41jA -----END CERTIFICATE-----Generated at Sat Aug 23 18:13:09 2025 by rpki-client