$ rpki-client -vvf rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.mft File: 15aZWndnWcQmQxeAAofr7u-0umo.mft (raw, json) Hash identifier: nhPHBrV11mTQKDngUs8pZzJy7gaFsDSU30/ao3CPyDc= Subject key identifier: 28:36:14:E5:16:16:89:7B:6A:31:3F:57:A8:46:E0:49:CD:08:05:EE Authority key identifier: D7:96:99:5A:77:67:59:C4:26:43:17:80:02:87:EB:EE:EF:B4:BA:6A Certificate issuer: /CN=A91C022C/serialNumber=D796995A776759C4264317800287EBEEEFB4BA6A Certificate serial: 7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15aZWndnWcQmQxeAAofr7u-0umo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.mft Manifest number: 76 Signing time: Sat 23 Aug 2025 07:07:22 +0000 Manifest this update: Sat 23 Aug 2025 07:07:21 +0000 Manifest next update: Sat 30 Aug 2025 07:07:21 +0000 Files and hashes: 1: 15aZWndnWcQmQxeAAofr7u-0umo.crl (hash: JcZWhzi3MDHMipCDwlPkSyz7hTR5BxXV/9S0Pa19L9g=) 2: 90405CE2D5DD11EF99075D78C4F9AE02.roa (hash: hTL1z9/ySOlu0XaviOinYnMnBTyzcwAp4EbODVpERNU=) 3: B6CFF1B2D5F911EFB9B1055CC4F9AE02.roa (hash: ZxCbb7cdq/LewtopQIPSnB7gN2Ydt1y4TyGzN7hgTr4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.crl rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15aZWndnWcQmQxeAAofr7u-0umo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:07:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 122 (0x7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C022C, serialNumber=D796995A776759C4264317800287EBEEEFB4BA6A Validity Not Before: Aug 23 07:07:21 2025 GMT Not After : Aug 30 07:07:21 2025 GMT Subject: CN=68a968a9-8f6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:77:ed:ef:d9:89:9e:f9:95:8f:42:78:1e:f7: 41:c4:e5:e6:a1:74:9b:11:31:50:f6:68:fc:ef:e9: 90:92:c3:ab:45:ee:8a:e5:a7:23:29:ab:53:4e:f8: ff:33:80:65:ce:54:00:40:d2:97:f1:26:33:10:ed: 26:8e:32:4b:69:22:ab:e5:6b:2d:16:9c:19:a7:4d: 12:21:68:27:14:6d:78:3a:81:4c:3d:8f:26:9f:db: 82:a5:7c:98:21:91:96:8e:82:f6:f2:39:2b:00:79: 7a:a4:0c:b5:de:87:59:52:b3:f3:d4:0a:84:45:b9: 78:ff:34:3a:64:aa:f5:d2:d0:83:84:ad:11:46:c1: 2b:66:c4:15:f9:72:e2:4b:0f:0b:b0:fc:e4:1c:f0: d2:89:18:b7:1a:27:b4:2b:cf:9e:b8:19:c0:12:ac: e7:77:1c:bd:ec:f3:d2:08:84:7d:98:cb:7d:c9:c9: c2:e8:11:28:ab:26:bd:78:c6:c7:8a:4c:fd:2e:fb: 7b:4f:93:da:c8:e8:0e:e3:d9:36:d1:e3:5b:f7:0f: 44:93:07:25:1c:6f:71:37:eb:e4:62:8a:74:f6:df: be:f5:18:5e:94:bb:ba:bf:a2:a9:4c:4e:df:a8:92: 6d:13:44:87:e8:ca:4a:9a:b9:05:07:8a:aa:1d:0c: 06:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:36:14:E5:16:16:89:7B:6A:31:3F:57:A8:46:E0:49:CD:08:05:EE X509v3 Authority Key Identifier: keyid:D7:96:99:5A:77:67:59:C4:26:43:17:80:02:87:EB:EE:EF:B4:BA:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15aZWndnWcQmQxeAAofr7u-0umo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:6e:51:5f:63:ef:f5:1d:1f:5f:c6:4e:ec:86:8f:b8:8a:2b: d2:1d:ec:47:5d:fe:88:29:20:41:18:23:7e:c4:43:f5:34:da: e6:a6:6f:79:20:e7:d8:77:dc:84:4f:c4:0c:03:fb:87:e5:af: a4:64:a2:da:e4:a3:f2:fd:7a:b7:a9:af:00:25:35:69:3f:e1: d3:e7:ea:79:99:09:69:74:98:85:1b:c0:15:7b:86:b9:60:78: b1:c2:a5:f9:cf:f5:68:e7:3b:50:cd:2f:0b:61:32:3e:ef:77: 4c:be:59:3f:a0:d0:02:64:1a:d6:cd:fd:83:d4:42:53:08:8e: d0:04:e4:86:74:35:14:30:6d:42:fa:cb:14:ea:41:d2:c0:df: 3f:4d:98:ee:c2:6d:23:6a:4e:d6:f6:ce:7d:ea:26:c9:f4:96: d2:2a:43:2d:8b:50:1f:37:3c:37:42:11:cf:01:7e:27:84:ec: 28:3e:ee:fb:21:d0:0e:99:55:4d:ed:ea:58:93:12:0f:64:13: ac:02:c4:25:0d:1e:f5:06:4d:f4:3e:7e:00:7f:be:51:93:03: 36:c5:4b:59:47:3f:31:da:59:fe:95:5e:4d:cb:18:0f:a3:2d: 2b:e1:b7:0a:c0:17:b1:a3:66:47:cc:55:0b:55:f6:ad:95:89: 1f:12:30:e2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBejANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD MDIyQzExMC8GA1UEBRMoRDc5Njk5NUE3NzY3NTlDNDI2NDMxNzgwMDI4N0VCRUVF RkI0QkE2QTAeFw0yNTA4MjMwNzA3MjFaFw0yNTA4MzAwNzA3MjFaMBgxFjAUBgNV BAMTDTY4YTk2OGE5LThmNmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsd+3v2Yme+ZWPQnge90HE5eahdJsRMVD2aPzv6ZCSw6tF7orlpyMpq1NO+P8z gGXOVABA0pfxJjMQ7SaOMktpIqvlay0WnBmnTRIhaCcUbXg6gUw9jyaf24KlfJgh kZaOgvbyOSsAeXqkDLXeh1lSs/PUCoRFuXj/NDpkqvXS0IOErRFGwStmxBX5cuJL Dwuw/OQc8NKJGLcaJ7Qrz564GcASrOd3HL3s89IIhH2Yy33JycLoESirJr14xseK TP0u+3tPk9rI6A7j2TbR41v3D0STByUcb3E36+RiinT23771GF6Uu7q/oqlMTt+o km0TRIfoykqauQUHiqodDAa5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKDYU5RYW iXtqMT9XqEbgSc0IBe4wHwYDVR0jBBgwFoAU15aZWndnWcQmQxeAAofr7u+0umow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMwMjJDL0JBMEYyREYyRDRC OTExRUY5RkE4RTI0RkM0RjlBRTAyLzE1YVpXbmRuV2NRbVF4ZUFBb2ZyN3UtMHVt by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMTVhWlduZG5XY1FtUXhlQUFvZnI3dS0wdW1vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMw MjJDL0JBMEYyREYyRDRCOTExRUY5RkE4RTI0RkM0RjlBRTAyLzE1YVpXbmRuV2NR bVF4ZUFBb2ZyN3UtMHVtby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH1uUV9j7/UdH1/GTuyGj7iKK9Id7Edd/ogpIEEYI37EQ/U02uamb3kg 59h33IRPxAwD+4flr6Rkotrko/L9ereprwAlNWk/4dPn6nmZCWl0mIUbwBV7hrlg eLHCpfnP9WjnO1DNLwthMj7vd0y+WT+g0AJkGtbN/YPUQlMIjtAE5IZ0NRQwbUL6 yxTqQdLA3z9NmO7CbSNqTtb2zn3qJsn0ltIqQy2LUB83PDdCEc8BfieE7Cg+7vsh 0A6ZVU3t6liTEg9kE6wCxCUNHvUGTfQ+fgB/vlGTAzbFS1lHPzHaWf6VXk3LGA+j LSvhtwrAF7GjZkfMVQtV9q2ViR8SMOI= -----END CERTIFICATE-----Generated at Sun Aug 24 06:35:12 2025 by rpki-client