$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.mft File: ll15uIln4ofmpRU6EE_BTsEYWxE.mft (raw, json) Hash identifier: 8zv4lfPI6iByA8YgEhM/nNFaZEj/h5eC3SBCUiBfIVg= Subject key identifier: 59:2F:B1:59:35:20:65:1C:5A:AA:19:47:5F:94:DF:14:F5:CB:8B:CB Authority key identifier: 96:5D:79:B8:89:67:E2:87:E6:A5:15:3A:10:4F:C1:4E:C1:18:5B:11 Certificate issuer: /CN=A91DF859/serialNumber=965D79B88967E287E6A5153A104FC14EC1185B11 Certificate serial: 03A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ll15uIln4ofmpRU6EE_BTsEYWxE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.mft Manifest number: 0397 Signing time: Sat 23 Aug 2025 01:02:08 +0000 Manifest this update: Sat 23 Aug 2025 01:02:07 +0000 Manifest next update: Sat 30 Aug 2025 01:02:07 +0000 Files and hashes: 1: ll15uIln4ofmpRU6EE_BTsEYWxE.crl (hash: ulkLw0/kibf+39iAO/lX8zYIWhY627KgMYrb7wTK3hY=) 2: 1CDBD11CAE3711ECB61BED46C4F9AE02.roa (hash: 2gg461BffUf/xT7BkrRnrVM5ZugLJyBnhbCMdi11J1w=) 3: 1C43D57EAE3711ECB61BED46C4F9AE02.roa (hash: ZnO5JlWoEl5dNZhohsJyvbgouMlAXBiHwRW5x4khv3w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.crl rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ll15uIln4ofmpRU6EE_BTsEYWxE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:02:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 929 (0x3a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF859, serialNumber=965D79B88967E287E6A5153A104FC14EC1185B11 Validity Not Before: Aug 23 01:02:07 2025 GMT Not After : Aug 30 01:02:07 2025 GMT Subject: CN=68a91310-c83b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:38:a2:df:db:13:e4:9c:fa:ee:cc:fd:dc:c0: 0d:27:67:ec:97:d8:7c:64:34:a5:8e:11:52:f5:13: d8:03:bd:df:fa:ae:73:fb:f0:33:db:f3:8d:b5:49: 9a:51:03:fd:4a:66:b6:68:7f:d3:2f:15:c0:af:c5: f5:5f:9a:63:9a:d1:9b:84:02:31:ca:28:e8:72:1c: 5d:0a:df:e3:7e:39:d4:ac:00:41:f9:95:14:9c:e5: 40:d0:2d:70:cf:a5:60:79:08:90:ab:06:5e:ea:ce: 79:7a:f5:d9:be:6f:be:19:ff:d6:b6:c9:cf:87:87: 25:7c:93:11:93:81:29:d1:c2:fa:ce:59:70:e5:8c: 63:68:b8:11:51:e4:b0:6c:90:2e:20:d0:91:06:a2: a1:f9:c7:15:b0:d0:74:81:6b:d0:55:d9:4c:72:79: 80:0f:e1:e0:41:64:40:f6:0a:eb:85:30:55:13:09: 41:70:e1:ac:42:b5:dd:de:c9:1f:3c:37:5e:60:5c: d6:d4:dc:55:99:be:20:91:c8:50:5b:75:13:e9:81: 63:45:fb:dd:e5:56:81:87:86:73:a7:8c:92:bf:e4: 7f:27:f7:ba:c7:51:27:7f:72:e1:0b:0a:96:3f:45: 89:ca:96:8b:13:78:71:8f:8c:14:a6:dc:b4:26:cb: bb:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:2F:B1:59:35:20:65:1C:5A:AA:19:47:5F:94:DF:14:F5:CB:8B:CB X509v3 Authority Key Identifier: keyid:96:5D:79:B8:89:67:E2:87:E6:A5:15:3A:10:4F:C1:4E:C1:18:5B:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ll15uIln4ofmpRU6EE_BTsEYWxE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:48:32:06:c5:67:37:57:ab:f0:b0:65:6e:30:36:18:13:dc: cb:1b:59:eb:22:b1:a3:11:62:69:38:e2:ef:20:3d:f4:d1:36: fc:ac:6c:f8:6b:98:4a:73:37:02:a2:cf:71:c5:1b:dd:92:04: bc:b6:b9:a2:95:f5:58:2d:4e:ea:95:0b:ee:a5:87:bb:f7:ab: a9:7d:28:1b:31:0f:83:04:06:fa:05:7d:82:d7:c7:dc:86:3c: 23:63:60:8f:a8:f6:ea:4b:8a:02:8c:03:90:d3:58:24:20:c0: 49:4e:55:f6:5e:49:74:14:65:f1:60:de:63:b2:3b:b6:cf:25: 46:97:12:de:14:62:bc:c7:8f:8c:b1:0b:24:4d:63:10:25:43: 4a:be:55:a3:1a:47:4d:ba:ce:3c:c6:37:80:93:43:ab:45:28: 66:8b:b8:9a:7f:09:3b:24:4a:09:d6:52:22:b7:77:3e:f0:f5: ab:bd:83:75:f1:a2:fd:ec:92:78:6f:76:30:d1:08:d5:a2:7b: 71:90:6f:ca:53:e3:fc:bb:97:f2:7a:6c:38:8d:c9:73:47:f3: 1b:65:e5:bf:07:75:3d:f6:f5:29:79:25:0c:32:61:0a:1a:53: ad:8f:f5:e3:9a:84:b2:c3:44:56:2f:31:63:74:4d:69:aa:0e: 20:78:0a:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY4NTkxMTAvBgNVBAUTKDk2NUQ3OUI4ODk2N0UyODdFNkE1MTUzQTEwNEZDMTRF QzExODVCMTEwHhcNMjUwODIzMDEwMjA3WhcNMjUwODMwMDEwMjA3WjAYMRYwFAYD VQQDEw02OGE5MTMxMC1jODNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxTii39sT5Jz67sz93MANJ2fsl9h8ZDSljhFS9RPYA73f+q5z+/Az2/ONtUma UQP9Sma2aH/TLxXAr8X1X5pjmtGbhAIxyijochxdCt/jfjnUrABB+ZUUnOVA0C1w z6VgeQiQqwZe6s55evXZvm++Gf/WtsnPh4clfJMRk4Ep0cL6zllw5YxjaLgRUeSw bJAuINCRBqKh+ccVsNB0gWvQVdlMcnmAD+HgQWRA9grrhTBVEwlBcOGsQrXd3skf PDdeYFzW1NxVmb4gkchQW3UT6YFjRfvd5VaBh4Zzp4ySv+R/J/e6x1Enf3LhCwqW P0WJypaLE3hxj4wUpty0Jsu7AwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFkvsVk1 IGUcWqoZR1+U3xT1y4vLMB8GA1UdIwQYMBaAFJZdebiJZ+KH5qUVOhBPwU7BGFsR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjg1OS9DMTRGNTVDRUFF MzMxMUVDOUZBNjBGNDNDNEY5QUUwMi9sbDE1dUlsbjRvZm1wUlU2RUVfQlRzRVlX eEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xsMTV1SWxuNG9mbXBSVTZFRV9CVHNFWVd4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Rjg1OS9DMTRGNTVDRUFFMzMxMUVDOUZBNjBGNDNDNEY5QUUwMi9sbDE1dUlsbjRv Zm1wUlU2RUVfQlRzRVlXeEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzSDIGxWc3V6vwsGVuMDYYE9zLG1nrIrGjEWJpOOLvID300Tb8rGz4 a5hKczcCos9xxRvdkgS8trmilfVYLU7qlQvupYe796upfSgbMQ+DBAb6BX2C18fc hjwjY2CPqPbqS4oCjAOQ01gkIMBJTlX2Xkl0FGXxYN5jsju2zyVGlxLeFGK8x4+M sQskTWMQJUNKvlWjGkdNus48xjeAk0OrRShmi7iafwk7JEoJ1lIit3c+8PWrvYN1 8aL97JJ4b3Yw0QjVontxkG/KU+P8u5fyemw4jclzR/MbZeW/B3U99vUpeSUMMmEK GlOtj/XjmoSyw0RWLzFjdE1pqg4geApa -----END CERTIFICATE-----Generated at Sun Aug 24 05:01:49 2025 by rpki-client