$ rpki-client -vvf rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft File: 15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft (raw, json) Hash identifier: w6wC5OB8cRK0xXuLdHeK2B2OMAVBc9p4ijMprRc7WYY= Subject key identifier: 15:6A:C6:FE:88:D6:41:95:51:44:1B:16:13:AD:09:6B:F4:E7:DB:04 Authority key identifier: D7:90:C2:C4:69:32:BE:9D:25:82:2D:99:12:8E:BB:CF:03:3D:45:C4 Certificate issuer: /CN=A9143F26/serialNumber=D790C2C46932BE9D25822D99128EBBCF033D45C4 Certificate serial: 018D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15DCxGkyvp0lgi2ZEo67zwM9RcQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft Manifest number: 0186 Signing time: Sat 09 Aug 2025 04:02:17 +0000 Manifest this update: Sat 09 Aug 2025 04:02:17 +0000 Manifest next update: Sat 16 Aug 2025 04:02:17 +0000 Files and hashes: 1: 15DCxGkyvp0lgi2ZEo67zwM9RcQ.crl (hash: jh3K+ET41g1Jd3A9uT0OxTXXoJ8YDMHQKYikOmXeM70=) 2: 9728C64EF10811EE8F128341C4F9AE02.roa (hash: 4J0ORjYm3cW6dunDewDTVLOKNHiY1sO2eutzlceykHU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.crl rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15DCxGkyvp0lgi2ZEo67zwM9RcQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 397 (0x18d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143F26, serialNumber=D790C2C46932BE9D25822D99128EBBCF033D45C4 Validity Not Before: Aug 9 04:02:17 2025 GMT Not After : Aug 16 04:02:17 2025 GMT Subject: CN=6896c849-c082 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:fa:c2:99:13:4e:dc:b5:73:96:a8:bd:68:9a: 4b:60:f0:ae:4b:9d:05:7e:e5:8f:3c:ba:7e:0d:7b: ce:5b:ce:fd:95:c1:56:f1:a6:75:88:34:6c:6f:8a: 4f:d6:35:12:17:66:f3:ac:68:22:71:cb:98:57:f2: 86:93:0f:52:fe:40:34:28:6a:b5:03:6b:03:c6:73: 5b:2b:a7:02:7e:1d:74:e4:38:1d:64:cb:be:99:c9: 6b:98:c4:32:36:23:97:4f:36:18:0b:6a:6c:5b:87: 06:ed:cf:30:f0:b0:e5:ea:5a:96:8b:fb:2f:30:36: 8b:1e:89:b4:b6:c7:39:bb:fd:b1:04:52:20:21:27: a2:c9:54:09:ed:94:88:69:ac:50:2c:2a:b7:fa:91: 67:48:cc:9d:db:68:03:7c:72:8c:85:48:e0:5e:9b: 1e:9e:81:0a:11:d7:25:a1:e5:45:95:ff:97:49:68: 5a:91:67:70:63:04:dc:a5:b9:cd:e9:59:db:b9:83: da:c3:f5:61:98:ae:a9:11:6e:14:6f:20:ae:99:84: d5:69:f6:3b:f0:b0:86:08:cb:ad:83:cb:d2:26:96: fc:38:57:3c:f1:e8:ff:be:fb:87:2d:af:14:41:28: 8b:63:a4:d7:42:7a:7e:7b:1d:2b:ac:6b:7b:ae:8d: c6:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:6A:C6:FE:88:D6:41:95:51:44:1B:16:13:AD:09:6B:F4:E7:DB:04 X509v3 Authority Key Identifier: keyid:D7:90:C2:C4:69:32:BE:9D:25:82:2D:99:12:8E:BB:CF:03:3D:45:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15DCxGkyvp0lgi2ZEo67zwM9RcQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:2a:a3:7e:95:8a:28:b5:8b:94:09:c7:91:08:15:d9:a5:ff: 03:ca:f3:fc:bb:70:ff:22:81:d9:cb:9a:25:fe:96:ca:e1:f3: 4b:af:14:3d:3a:5c:32:f1:34:4d:23:34:58:27:2a:8f:83:f2: e2:5e:a5:50:10:59:67:f2:9e:8f:f1:40:d6:9c:4a:30:e6:d9: b6:f4:2d:6b:b3:c6:03:0b:89:fe:d1:cf:54:37:83:18:45:77: 0a:d5:73:ab:c9:4c:bc:a3:f8:91:06:c1:80:57:7c:d1:79:bc: e7:c2:f0:9f:a0:08:30:58:c4:80:35:d2:44:c2:0c:ce:ba:17: aa:34:b0:cd:6d:d3:0d:6e:2a:c2:fa:b6:9e:d9:36:81:53:cb: d5:07:20:2f:e0:87:35:e6:e1:99:38:ce:59:18:49:3c:d9:39: 7e:1b:c1:c0:7c:5b:ca:4d:f6:9e:58:8a:7a:1b:6f:5f:69:c1: 1a:5b:b5:4d:02:b9:2c:3f:41:f5:f3:56:ca:f0:f1:c5:f2:39: 97:3e:4d:36:b7:73:cf:2e:15:58:71:67:ad:2e:d8:ba:b3:af: d1:3e:51:8a:f0:95:21:99:34:86:a7:ea:f5:a4:20:7f:57:73: 19:8b:5e:ef:b7:ce:ee:cd:c2:2e:28:06:52:a6:63:5b:31:0e: fb:3e:09:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNGMjYxMTAvBgNVBAUTKEQ3OTBDMkM0NjkzMkJFOUQyNTgyMkQ5OTEyOEVCQkNG MDMzRDQ1QzQwHhcNMjUwODA5MDQwMjE3WhcNMjUwODE2MDQwMjE3WjAYMRYwFAYD VQQDEw02ODk2Yzg0OS1jMDgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1PrCmRNO3LVzlqi9aJpLYPCuS50FfuWPPLp+DXvOW879lcFW8aZ1iDRsb4pP 1jUSF2bzrGgiccuYV/KGkw9S/kA0KGq1A2sDxnNbK6cCfh105DgdZMu+mclrmMQy NiOXTzYYC2psW4cG7c8w8LDl6lqWi/svMDaLHom0tsc5u/2xBFIgISeiyVQJ7ZSI aaxQLCq3+pFnSMyd22gDfHKMhUjgXpsenoEKEdcloeVFlf+XSWhakWdwYwTcpbnN 6VnbuYPaw/VhmK6pEW4UbyCumYTVafY78LCGCMutg8vSJpb8OFc88ej/vvuHLa8U QSiLY6TXQnp+ex0rrGt7ro3GoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBVqxv6I 1kGVUUQbFhOtCWv059sEMB8GA1UdIwQYMBaAFNeQwsRpMr6dJYItmRKOu88DPUXE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0YyNi83MDNBMDI1NDJE NTUxMUVFODlBQTIwMDlDNEY5QUUwMi8xNURDeEdreXZwMGxnaTJaRW82N3p3TTlS Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzE1REN4R2t5dnAwbGdpMlpFbzY3endNOVJjUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0YyNi83MDNBMDI1NDJENTUxMUVFODlBQTIwMDlDNEY5QUUwMi8xNURDeEdreXZw MGxnaTJaRW82N3p3TTlSY1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATKqN+lYootYuUCceRCBXZpf8DyvP8u3D/IoHZy5ol/pbK4fNLrxQ9 Olwy8TRNIzRYJyqPg/LiXqVQEFln8p6P8UDWnEow5tm29C1rs8YDC4n+0c9UN4MY RXcK1XOryUy8o/iRBsGAV3zRebznwvCfoAgwWMSANdJEwgzOuheqNLDNbdMNbirC +rae2TaBU8vVByAv4Ic15uGZOM5ZGEk82Tl+G8HAfFvKTfaeWIp6G29facEaW7VN ArksP0H181bK8PHF8jmXPk02t3PPLhVYcWetLti6s6/RPlGK8JUhmTSGp+r1pCB/ V3MZi17vt87uzcIuKAZSpmNbMQ77Pgld -----END CERTIFICATE-----Generated at Mon Aug 11 04:30:41 2025 by rpki-client