$ rpki-client -vvf rpki.apnic.net/member_repository/A9155501/2688E30268DF11EF83089E0BC4F9AE02/madm1M-kWp-eN3glBJixJ2jEHho.mft File: madm1M-kWp-eN3glBJixJ2jEHho.mft (raw, json) Hash identifier: KZDanjxlJ5g8Hs23txz+TIHjj5Xw2wu15OVab4Z+tG4= Subject key identifier: 63:6F:6E:B2:5A:AD:01:0B:59:34:71:94:26:39:41:9F:66:5A:44:41 Authority key identifier: 99:A7:66:D4:CF:A4:5A:9F:9E:37:78:25:04:98:B1:27:68:C4:1E:1A Certificate issuer: /CN=A9155501/serialNumber=99A766D4CFA45A9F9E3778250498B12768C41E1A Certificate serial: B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/madm1M-kWp-eN3glBJixJ2jEHho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155501/2688E30268DF11EF83089E0BC4F9AE02/madm1M-kWp-eN3glBJixJ2jEHho.mft Manifest number: B2 Signing time: Sat 09 Aug 2025 06:29:30 +0000 Manifest this update: Sat 09 Aug 2025 06:29:30 +0000 Manifest next update: Sat 16 Aug 2025 06:29:30 +0000 Files and hashes: 1: madm1M-kWp-eN3glBJixJ2jEHho.crl (hash: foEWHRnMZmqTh/VrM4VotMb5VGjC6CZZ8C9fR9Hwy6w=) 2: 4DD8750E69A611EF84A27584C4F9AE02.roa (hash: nmm+UaDTVZk1W14gJbVOSNyGWuVq3wHsOrXGhKoBHSk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155501/2688E30268DF11EF83089E0BC4F9AE02/madm1M-kWp-eN3glBJixJ2jEHho.crl rsync://rpki.apnic.net/member_repository/A9155501/2688E30268DF11EF83089E0BC4F9AE02/madm1M-kWp-eN3glBJixJ2jEHho.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/madm1M-kWp-eN3glBJixJ2jEHho.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 180 (0xb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155501, serialNumber=99A766D4CFA45A9F9E3778250498B12768C41E1A Validity Not Before: Aug 9 06:29:30 2025 GMT Not After : Aug 16 06:29:30 2025 GMT Subject: CN=6896eaca-353b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:ec:16:98:2a:cf:69:a8:43:db:19:18:a4:b0: 3b:01:34:68:24:70:7a:32:1a:72:85:3c:fc:f9:f0: 9d:88:ae:75:23:69:05:1b:10:98:7d:05:54:0d:e5: 09:a6:c2:b3:77:1a:5a:f6:dd:4f:37:7b:58:3a:2f: 7b:df:e0:55:07:a4:8b:b0:65:df:d9:ad:95:0d:14: 9a:a2:f3:6f:81:99:94:a1:a0:73:d9:82:3d:e5:d2: a5:87:7f:c8:bc:ce:f1:68:be:54:5c:2b:d6:86:69: 23:1c:ae:de:5e:c0:a8:df:2b:dd:a0:dc:65:16:2d: 2a:3c:94:6f:07:5b:b0:5e:e6:89:c5:79:f1:03:01: 10:15:43:09:0d:82:4c:e2:d7:34:38:d3:1e:8b:8b: 5f:15:96:8d:2c:6e:2f:f9:28:f3:96:8a:8a:4a:31: c4:d7:2b:dc:6a:a8:0c:3d:e0:49:1b:9b:96:4f:69: 82:fe:77:80:eb:fb:49:0f:58:4f:c6:11:32:1d:93: 9c:3e:1a:e7:a3:0e:d4:19:26:94:48:9f:a7:e3:71: 0f:04:c8:64:a7:65:4d:78:f7:75:b9:fb:17:7b:80: 55:6a:68:c6:55:ea:71:b5:dc:da:ca:3c:05:c4:fe: b4:04:16:f4:7d:2b:f6:50:e4:39:0c:46:e8:97:dd: c4:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:6F:6E:B2:5A:AD:01:0B:59:34:71:94:26:39:41:9F:66:5A:44:41 X509v3 Authority Key Identifier: keyid:99:A7:66:D4:CF:A4:5A:9F:9E:37:78:25:04:98:B1:27:68:C4:1E:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155501/2688E30268DF11EF83089E0BC4F9AE02/madm1M-kWp-eN3glBJixJ2jEHho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/madm1M-kWp-eN3glBJixJ2jEHho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155501/2688E30268DF11EF83089E0BC4F9AE02/madm1M-kWp-eN3glBJixJ2jEHho.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:7b:db:39:5e:df:99:3e:89:df:c8:c5:7d:06:a2:5c:39:85: 15:6a:27:19:d5:22:a1:ee:99:f4:c7:37:13:59:3d:1d:6b:8c: 6c:41:52:d2:a0:40:09:d8:de:7f:bd:05:ee:44:24:8a:83:87: d4:71:b3:60:84:f0:de:80:74:c1:b4:a2:a0:cf:42:95:6e:f1: a0:f0:25:87:04:35:fd:73:cb:39:f5:d7:35:d2:0b:ba:fd:a8: 68:3c:2e:90:c8:7d:1e:92:8b:97:91:51:2e:bc:b5:33:e4:65: ed:88:0b:10:ab:53:ea:28:7a:83:c1:d6:84:22:d3:71:15:cb: 0f:bd:76:87:72:2e:08:4e:75:ae:fe:61:8c:0b:d1:de:56:60: 02:c4:23:0a:76:67:e5:34:da:5b:e9:c7:b6:a3:5d:a7:e0:44: be:5d:a1:c3:c4:ed:27:7f:ec:e4:19:93:e8:0e:40:e4:6a:10: fa:fd:7c:87:77:9f:4c:16:4d:47:d2:9c:e8:06:5c:d8:8a:cb: 68:3e:86:fb:8c:9b:53:00:dc:72:c8:c8:0a:6c:47:7e:79:e0: 22:c6:81:3c:d9:5d:b2:5a:28:41:90:f5:df:4d:96:ca:5c:20: 35:45:48:8f:d7:50:06:a5:3d:a8:a7:32:21:d2:7b:2e:c3:c4: 81:b6:7c:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU1MDExMTAvBgNVBAUTKDk5QTc2NkQ0Q0ZBNDVBOUY5RTM3NzgyNTA0OThCMTI3 NjhDNDFFMUEwHhcNMjUwODA5MDYyOTMwWhcNMjUwODE2MDYyOTMwWjAYMRYwFAYD VQQDEw02ODk2ZWFjYS0zNTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9uwWmCrPaahD2xkYpLA7ATRoJHB6MhpyhTz8+fCdiK51I2kFGxCYfQVUDeUJ psKzdxpa9t1PN3tYOi973+BVB6SLsGXf2a2VDRSaovNvgZmUoaBz2YI95dKlh3/I vM7xaL5UXCvWhmkjHK7eXsCo3yvdoNxlFi0qPJRvB1uwXuaJxXnxAwEQFUMJDYJM 4tc0ONMei4tfFZaNLG4v+SjzloqKSjHE1yvcaqgMPeBJG5uWT2mC/neA6/tJD1hP xhEyHZOcPhrnow7UGSaUSJ+n43EPBMhkp2VNePd1ufsXe4BVamjGVepxtdzayjwF xP60BBb0fSv2UOQ5DEbol93EHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGNvbrJa rQELWTRxlCY5QZ9mWkRBMB8GA1UdIwQYMBaAFJmnZtTPpFqfnjd4JQSYsSdoxB4a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTUwMS8yNjg4RTMwMjY4 REYxMUVGODMwODlFMEJDNEY5QUUwMi9tYWRtMU0ta1dwLWVOM2dsQkppeEoyakVI aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21hZG0xTS1rV3AtZU4zZ2xCSml4SjJqRUhoby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTUwMS8yNjg4RTMwMjY4REYxMUVGODMwODlFMEJDNEY5QUUwMi9tYWRtMU0ta1dw LWVOM2dsQkppeEoyakVIaG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBe9s5Xt+ZPonfyMV9BqJcOYUVaicZ1SKh7pn0xzcTWT0da4xsQVLS oEAJ2N5/vQXuRCSKg4fUcbNghPDegHTBtKKgz0KVbvGg8CWHBDX9c8s59dc10gu6 /ahoPC6QyH0ekouXkVEuvLUz5GXtiAsQq1PqKHqDwdaEItNxFcsPvXaHci4ITnWu /mGMC9HeVmACxCMKdmflNNpb6ce2o12n4ES+XaHDxO0nf+zkGZPoDkDkahD6/XyH d59MFk1H0pzoBlzYistoPob7jJtTANxyyMgKbEd+eeAixoE82V2yWihBkPXfTZbK XCA1RUiP11AGpT2opzIh0nsuw8SBtnwO -----END CERTIFICATE-----Generated at Sun Aug 10 21:11:58 2025 by rpki-client