$ rpki-client -vvf rpki.apnic.net/member_repository/A9150B91/76304A785A9311E8B7C2161FC4F9AE02/s1py5W8JAsfhuNgSxdg2VBHdox0.mft File: s1py5W8JAsfhuNgSxdg2VBHdox0.mft (raw, json) Hash identifier: 1hOlLe2A+A2u3vb9S2fcJZJY73GbPlwqzRJw2ClLlGI= Subject key identifier: DA:58:14:C8:D7:A3:5B:34:7A:8D:1F:76:C9:1E:BB:DC:2A:2A:83:5B Authority key identifier: B3:5A:72:E5:6F:09:02:C7:E1:B8:D8:12:C5:D8:36:54:11:DD:A3:1D Certificate issuer: /CN=A9150B91/serialNumber=B35A72E56F0902C7E1B8D812C5D8365411DDA31D Certificate serial: 14EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s1py5W8JAsfhuNgSxdg2VBHdox0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150B91/76304A785A9311E8B7C2161FC4F9AE02/s1py5W8JAsfhuNgSxdg2VBHdox0.mft Manifest number: 14E5 Signing time: Wed 06 Aug 2025 16:57:08 +0000 Manifest this update: Wed 06 Aug 2025 16:57:08 +0000 Manifest next update: Wed 13 Aug 2025 16:57:08 +0000 Files and hashes: 1: s1py5W8JAsfhuNgSxdg2VBHdox0.crl (hash: mP73bgjBqpvDojfCiYmpiMI7wGD3RoHHDFq+5GtaGWI=) 2: 4674A74E5DB211E8A30DF983C4F9AE02.roa (hash: N2bOeXWWMqXx3Cr2oJVAhS+4yD+JJsp3ikRjUaNFufQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150B91/76304A785A9311E8B7C2161FC4F9AE02/s1py5W8JAsfhuNgSxdg2VBHdox0.crl rsync://rpki.apnic.net/member_repository/A9150B91/76304A785A9311E8B7C2161FC4F9AE02/s1py5W8JAsfhuNgSxdg2VBHdox0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s1py5W8JAsfhuNgSxdg2VBHdox0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 16:57:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5359 (0x14ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150B91, serialNumber=B35A72E56F0902C7E1B8D812C5D8365411DDA31D Validity Not Before: Aug 6 16:57:08 2025 GMT Not After : Aug 13 16:57:08 2025 GMT Subject: CN=68938964-e4e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:92:9a:07:df:92:53:f5:13:88:54:41:15:36: cd:43:aa:b8:fc:fe:6b:b0:b0:72:56:18:f3:84:a6: 2f:a7:36:b7:c0:96:b8:6b:ec:eb:2c:cb:2a:05:ff: fd:2e:32:ba:c1:40:57:1f:00:55:4e:14:5a:71:54: fd:af:d0:e2:3a:40:df:d0:f8:93:dc:11:24:3d:50: 9c:89:63:57:86:2d:c3:b8:97:24:6a:60:23:5a:13: fc:b7:44:af:61:98:f7:86:92:ea:a0:53:53:c7:e9: 70:9c:9c:09:54:ff:04:d5:50:83:a6:ec:5f:00:2c: 1c:f8:b1:14:98:74:94:61:3c:97:a2:33:6f:9f:6a: a9:55:e0:a9:60:79:27:9b:95:86:cc:c4:87:d9:0a: 15:79:c3:af:a8:83:2b:66:e4:74:a7:47:1c:7c:30: f5:2f:4f:c6:eb:f8:da:46:2e:23:62:d6:93:bc:23: 8e:f8:44:cb:ef:21:a0:e7:e6:49:9e:37:ed:52:58: 5f:12:0c:22:bf:24:f1:71:a5:ce:18:3c:4a:29:29: c6:3e:ea:2e:83:c3:b3:7a:b4:cf:31:95:fb:38:c9: 2a:59:64:7f:8e:3d:b2:4c:60:da:62:0d:28:1b:99: b3:a1:15:d3:35:b8:a8:43:1f:f0:37:be:9e:fc:5b: 14:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:58:14:C8:D7:A3:5B:34:7A:8D:1F:76:C9:1E:BB:DC:2A:2A:83:5B X509v3 Authority Key Identifier: keyid:B3:5A:72:E5:6F:09:02:C7:E1:B8:D8:12:C5:D8:36:54:11:DD:A3:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150B91/76304A785A9311E8B7C2161FC4F9AE02/s1py5W8JAsfhuNgSxdg2VBHdox0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s1py5W8JAsfhuNgSxdg2VBHdox0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150B91/76304A785A9311E8B7C2161FC4F9AE02/s1py5W8JAsfhuNgSxdg2VBHdox0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:9a:dc:f4:f3:c5:c0:97:36:8d:6b:fb:e2:a7:d3:be:2f:94: 58:f6:95:6b:52:4f:49:07:08:bb:1f:62:2a:a4:4d:84:29:9b: 7d:e1:13:c9:7d:13:ff:2d:f0:3b:ed:c8:37:64:50:8e:bd:a2: b4:8d:ff:77:21:d2:65:30:d9:f4:8e:7d:c3:f5:b9:b9:89:42: e4:5b:a2:da:02:1c:45:b2:64:00:83:20:9c:2c:0d:37:0a:cd: 30:c2:ea:57:46:5c:10:c9:4c:1f:0d:c6:c1:7a:80:3f:74:49: c4:d5:39:ae:c9:ea:2e:e9:47:15:fb:f0:ec:47:10:72:a1:e0: 79:3c:bd:ba:1c:84:99:de:f1:bb:bf:fd:01:2a:0c:0d:62:d4: 29:f6:a8:0a:64:dc:51:e9:6b:c2:a1:60:d8:bc:e3:dd:8f:ed: b8:51:e1:dc:80:94:30:6d:7d:f7:56:9e:ef:62:af:ba:ac:6b: 66:09:e5:7c:5d:7e:0f:f2:8f:88:e0:c4:91:48:fc:14:b2:67: 7b:64:72:99:12:8a:ea:e8:ad:86:27:ef:f9:12:d5:56:45:21: 55:51:49:d3:fe:fc:c6:5c:18:79:38:22:48:51:22:3f:7f:5c: af:e6:f4:29:6c:b3:62:75:eb:4b:ff:df:d3:fc:55:75:52:f7: 4b:aa:b6:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBCOTExMTAvBgNVBAUTKEIzNUE3MkU1NkYwOTAyQzdFMUI4RDgxMkM1RDgzNjU0 MTFEREEzMUQwHhcNMjUwODA2MTY1NzA4WhcNMjUwODEzMTY1NzA4WjAYMRYwFAYD VQQDEw02ODkzODk2NC1lNGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtpKaB9+SU/UTiFRBFTbNQ6q4/P5rsLByVhjzhKYvpza3wJa4a+zrLMsqBf/9 LjK6wUBXHwBVThRacVT9r9DiOkDf0PiT3BEkPVCciWNXhi3DuJckamAjWhP8t0Sv YZj3hpLqoFNTx+lwnJwJVP8E1VCDpuxfACwc+LEUmHSUYTyXojNvn2qpVeCpYHkn m5WGzMSH2QoVecOvqIMrZuR0p0ccfDD1L0/G6/jaRi4jYtaTvCOO+ETL7yGg5+ZJ njftUlhfEgwivyTxcaXOGDxKKSnGPuoug8OzerTPMZX7OMkqWWR/jj2yTGDaYg0o G5mzoRXTNbioQx/wN76e/FsUUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNpYFMjX o1s0eo0fdskeu9wqKoNbMB8GA1UdIwQYMBaAFLNacuVvCQLH4bjYEsXYNlQR3aMd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEI5MS83NjMwNEE3ODVB OTMxMUU4QjdDMjE2MUZDNEY5QUUwMi9zMXB5NVc4SkFzZmh1TmdTeGRnMlZCSGRv eDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3MxcHk1VzhKQXNmaHVOZ1N4ZGcyVkJIZG94MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MEI5MS83NjMwNEE3ODVBOTMxMUU4QjdDMjE2MUZDNEY5QUUwMi9zMXB5NVc4SkFz Zmh1TmdTeGRnMlZCSGRveDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADmtz088XAlzaNa/vip9O+L5RY9pVrUk9JBwi7H2IqpE2EKZt94RPJ fRP/LfA77cg3ZFCOvaK0jf93IdJlMNn0jn3D9bm5iULkW6LaAhxFsmQAgyCcLA03 Cs0wwupXRlwQyUwfDcbBeoA/dEnE1Tmuyeou6UcV+/DsRxByoeB5PL26HISZ3vG7 v/0BKgwNYtQp9qgKZNxR6WvCoWDYvOPdj+24UeHcgJQwbX33Vp7vYq+6rGtmCeV8 XX4P8o+I4MSRSPwUsmd7ZHKZEorq6K2GJ+/5EtVWRSFVUUnT/vzGXBh5OCJIUSI/ f1yv5vQpbLNidetL/9/T/FV1UvdLqrYs -----END CERTIFICATE-----Generated at Thu Aug 7 05:07:21 2025 by rpki-client