$ rpki-client -vvf rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.mft File: 15aZWndnWcQmQxeAAofr7u-0umo.mft (raw, json) Hash identifier: zzaaPlIl0bDLKekXa0bjYN74iHXvfd0GUoA7Cn+kB9o= Subject key identifier: 97:D9:05:E1:19:5F:A8:DD:A9:5B:7F:80:DE:E3:0D:E1:76:82:80:42 Authority key identifier: D7:96:99:5A:77:67:59:C4:26:43:17:80:02:87:EB:EE:EF:B4:BA:6A Certificate issuer: /CN=A91C022C/serialNumber=D796995A776759C4264317800287EBEEEFB4BA6A Certificate serial: 5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15aZWndnWcQmQxeAAofr7u-0umo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.mft Manifest number: 5B Signing time: Tue 01 Jul 2025 07:58:53 +0000 Manifest this update: Tue 01 Jul 2025 07:58:53 +0000 Manifest next update: Tue 08 Jul 2025 07:58:52 +0000 Files and hashes: 1: 15aZWndnWcQmQxeAAofr7u-0umo.crl (hash: dpo1fyaQTHfqvOp354u1ngercM8yr6PNBw9J+2eBU/k=) 2: 90405CE2D5DD11EF99075D78C4F9AE02.roa (hash: hTL1z9/ySOlu0XaviOinYnMnBTyzcwAp4EbODVpERNU=) 3: B6CFF1B2D5F911EFB9B1055CC4F9AE02.roa (hash: ZxCbb7cdq/LewtopQIPSnB7gN2Ydt1y4TyGzN7hgTr4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.crl rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15aZWndnWcQmQxeAAofr7u-0umo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 07:58:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 95 (0x5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C022C, serialNumber=D796995A776759C4264317800287EBEEEFB4BA6A Validity Not Before: Jul 1 07:58:53 2025 GMT Not After : Jul 8 07:58:52 2025 GMT Subject: CN=6863953d-e340 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ff:f7:a9:c1:70:fd:d5:0a:f9:d2:64:b7:49: db:02:e8:43:4b:9a:a8:72:d8:75:10:02:e1:4b:81: 17:d0:e3:e9:10:cf:77:a2:8a:5d:ea:72:d9:f1:f0: a2:c6:5d:6b:cc:d2:4f:a6:95:25:dc:3a:b9:02:e5: 30:36:d1:0a:8f:6c:68:61:cd:f0:75:d4:19:6d:a9: 98:95:97:91:4f:7c:f4:27:f4:55:58:98:2e:7d:1d: 08:fc:c3:ee:bf:58:c6:59:3e:8e:f5:82:57:2b:23: c3:0a:ed:dd:fc:ba:f5:48:ea:9a:03:bf:c6:f3:53: d5:20:6c:f4:bf:c1:90:ad:f1:d9:52:ef:e2:7f:66: fb:cc:58:96:14:e7:0a:c2:b1:a4:66:8a:99:e0:ef: 8d:db:91:01:f1:95:ae:c8:c3:76:36:b9:36:8c:e6: 2a:67:82:83:0b:5c:bd:b9:af:09:93:89:d5:e0:60: 31:ed:10:bf:8e:9a:00:22:62:b5:70:68:95:17:b5: 8f:3d:29:ab:06:32:df:a6:52:30:77:f9:3f:9e:d0: f1:fa:3a:33:7a:21:77:5b:48:4c:bd:f0:bb:c5:29: 2c:af:0b:43:b0:62:bb:93:53:fd:3a:c8:a6:fe:5a: 71:96:3d:44:a5:6a:9a:39:bc:33:4b:55:55:48:a8: b4:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:D9:05:E1:19:5F:A8:DD:A9:5B:7F:80:DE:E3:0D:E1:76:82:80:42 X509v3 Authority Key Identifier: keyid:D7:96:99:5A:77:67:59:C4:26:43:17:80:02:87:EB:EE:EF:B4:BA:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15aZWndnWcQmQxeAAofr7u-0umo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:7d:a1:b6:95:95:10:b4:5a:d3:6e:55:7d:72:21:e9:fd:17: 75:45:20:bb:da:2f:f6:47:6e:b2:6c:73:cf:77:bb:b1:1b:a1: 88:29:03:20:e0:23:9e:8d:6b:32:d7:0d:28:f3:ef:a5:dc:87: 8e:dc:d7:3c:6a:72:79:13:0d:ec:6e:b5:4b:b1:56:15:1e:7b: dd:ef:ea:38:8b:f0:84:50:d1:6c:4e:f3:36:a7:88:f0:88:2b: 2c:9e:f8:66:eb:5b:b4:aa:13:0e:2d:be:7d:57:15:88:dc:e3: 49:4e:54:bd:5b:ae:5c:b9:87:ad:f6:1e:b5:fa:68:58:e4:02: 32:67:3f:ec:d4:96:13:54:fd:c9:ac:36:f7:7d:00:e2:7d:12: 96:40:c3:64:0b:d7:02:f2:b8:c6:83:7a:76:c5:88:e6:47:5e: f4:f7:ea:43:6d:c5:2f:e5:91:96:ad:38:e8:91:ff:a8:0e:b9: 0f:6e:cc:e8:c5:29:87:1a:c6:60:0c:70:30:7a:72:2f:cc:eb: 4a:ba:a6:40:9f:d5:81:d7:7e:6f:2e:a4:a1:dc:86:0c:88:05: be:35:7c:ea:4a:77:63:26:3d:07:46:0d:80:e0:00:c0:76:18: 3e:4d:fd:fe:e6:eb:40:e7:ec:1b:12:1f:98:41:f8:fc:1f:0f: e2:54:34:d2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD MDIyQzExMC8GA1UEBRMoRDc5Njk5NUE3NzY3NTlDNDI2NDMxNzgwMDI4N0VCRUVF RkI0QkE2QTAeFw0yNTA3MDEwNzU4NTNaFw0yNTA3MDgwNzU4NTJaMBgxFjAUBgNV BAMTDTY4NjM5NTNkLWUzNDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDN//epwXD91Qr50mS3SdsC6ENLmqhy2HUQAuFLgRfQ4+kQz3eiil3qctnx8KLG XWvM0k+mlSXcOrkC5TA20QqPbGhhzfB11BltqZiVl5FPfPQn9FVYmC59HQj8w+6/ WMZZPo71glcrI8MK7d38uvVI6poDv8bzU9UgbPS/wZCt8dlS7+J/ZvvMWJYU5wrC saRmipng743bkQHxla7Iw3Y2uTaM5ipngoMLXL25rwmTidXgYDHtEL+OmgAiYrVw aJUXtY89KasGMt+mUjB3+T+e0PH6OjN6IXdbSEy98LvFKSyvC0OwYruTU/06yKb+ WnGWPUSlapo5vDNLVVVIqLQpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUl9kF4Rlf qN2pW3+A3uMN4XaCgEIwHwYDVR0jBBgwFoAU15aZWndnWcQmQxeAAofr7u+0umow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMwMjJDL0JBMEYyREYyRDRC OTExRUY5RkE4RTI0RkM0RjlBRTAyLzE1YVpXbmRuV2NRbVF4ZUFBb2ZyN3UtMHVt by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMTVhWlduZG5XY1FtUXhlQUFvZnI3dS0wdW1vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMw MjJDL0JBMEYyREYyRDRCOTExRUY5RkE4RTI0RkM0RjlBRTAyLzE1YVpXbmRuV2NR bVF4ZUFBb2ZyN3UtMHVtby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIV9obaVlRC0WtNuVX1yIen9F3VFILvaL/ZHbrJsc893u7EboYgpAyDg I56NazLXDSjz76Xch47c1zxqcnkTDexutUuxVhUee93v6jiL8IRQ0WxO8zaniPCI Kyye+GbrW7SqEw4tvn1XFYjc40lOVL1brly5h632HrX6aFjkAjJnP+zUlhNU/cms Nvd9AOJ9EpZAw2QL1wLyuMaDenbFiOZHXvT36kNtxS/lkZatOOiR/6gOuQ9uzOjF KYcaxmAMcDB6ci/M60q6pkCf1YHXfm8upKHchgyIBb41fOpKd2MmPQdGDYDgAMB2 GD5N/f7m60Dn7BsSH5hB+PwfD+JUNNI= -----END CERTIFICATE-----Generated at Thu Jul 3 05:07:39 2025 by rpki-client