$ rpki-client -vvf rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft File: -9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft (raw, json) Hash identifier: Xsu/xgY2CMkWr2Q5E6iWHOpdEa4vOiG9R7UiSB7LkrI= Subject key identifier: 4E:92:26:5F:D0:14:E1:A1:1F:47:8F:7D:36:C7:FE:BA:FE:D0:DE:81 Authority key identifier: FB:D4:B4:3B:56:78:F1:A0:6C:C9:07:C4:ED:04:BD:A2:11:D9:DD:2B Certificate issuer: /CN=A915A247/serialNumber=FBD4B43B5678F1A06CC907C4ED04BDA211D9DD2B Certificate serial: 0156 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft Manifest number: 0153 Signing time: Sat 09 Aug 2025 04:33:43 +0000 Manifest this update: Sat 09 Aug 2025 04:33:43 +0000 Manifest next update: Sat 16 Aug 2025 04:33:43 +0000 Files and hashes: 1: -9S0O1Z48aBsyQfE7QS9ohHZ3Ss.crl (hash: yIGnU2KGjC7uNOdfXu3DyMz32oevdggX+e5dXEMnWAo=) 2: B4350DCC6F4B11EEA062D464C4F9AE02.roa (hash: M/8UXHVwrUGREXAw7kPK2rXqXimmSlcdKlYZysm7Xmg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.crl rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 342 (0x156) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A247, serialNumber=FBD4B43B5678F1A06CC907C4ED04BDA211D9DD2B Validity Not Before: Aug 9 04:33:43 2025 GMT Not After : Aug 16 04:33:43 2025 GMT Subject: CN=6896cfa7-2344 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:92:9f:9b:f0:f6:26:fa:1f:64:f7:a1:55:c7: e2:7e:55:15:4b:df:e7:b7:df:e4:1a:9f:c3:76:74: a2:e5:6d:75:c3:9d:6c:a4:0d:0e:c0:46:fc:64:9c: c0:9b:68:5d:08:3d:b1:ac:7e:0c:fd:05:5b:61:c7: ba:13:3c:fc:18:88:25:fd:d5:90:c8:23:78:8b:35: 8c:28:fe:3f:8b:65:36:d3:53:f9:98:52:bc:73:f4: 95:50:f1:01:ff:5f:0d:57:71:cd:ad:a8:ac:32:bd: 26:06:42:b2:5b:c6:20:ba:e4:0b:29:82:68:56:51: 16:fe:09:3d:6e:e4:6d:40:dc:12:74:f5:c8:98:3a: 54:3a:94:d2:3d:a5:8c:6b:32:98:cd:38:8d:54:33: 2f:f4:d8:ac:31:31:4a:c9:6f:88:cb:86:ba:5c:2d: 78:b9:0a:f0:f1:72:7a:87:95:ac:58:e7:f5:92:43: ef:cd:d8:6c:74:ba:c9:3b:27:d6:32:e3:ff:71:5a: 5f:bd:72:94:e6:cb:76:64:ef:7c:77:29:40:07:6f: 58:2e:18:66:09:aa:b1:e9:d4:10:88:fb:d6:5c:75: 4e:72:b4:e8:02:3a:9e:94:65:2e:fb:9e:1e:e2:a9: 16:ac:a4:3a:4b:8a:05:02:65:f8:dc:d8:fb:c1:76: bf:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:92:26:5F:D0:14:E1:A1:1F:47:8F:7D:36:C7:FE:BA:FE:D0:DE:81 X509v3 Authority Key Identifier: keyid:FB:D4:B4:3B:56:78:F1:A0:6C:C9:07:C4:ED:04:BD:A2:11:D9:DD:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:fd:e2:d0:63:c5:eb:0a:ee:d2:1d:74:f7:3b:47:6a:45:95: ee:32:6c:44:6f:0c:27:4e:cc:7d:76:3d:42:d6:b8:60:4f:af: 45:35:3f:b8:61:53:9a:1a:f3:90:6e:2d:6b:2e:4e:d5:1f:48: af:24:d1:c2:9d:4e:2f:08:65:12:50:84:69:42:fe:da:95:6e: 57:af:09:c3:59:67:d4:e1:4d:8a:9b:4e:27:1a:28:3d:d3:72: dd:4d:80:cd:f2:19:f7:48:63:ed:83:60:6c:0b:57:2c:28:f2: 0e:fb:9e:2a:79:6c:40:e9:92:33:9e:88:6f:1d:a3:6e:62:6e: c4:9d:0d:bc:0b:7c:12:94:9d:f8:1c:da:3a:40:37:88:5f:5b: 0d:7d:17:23:58:84:98:b0:c8:3f:83:11:87:43:d1:56:9c:42: d5:d5:e0:9e:ee:2e:f0:5a:b1:77:df:c0:53:85:d4:18:b7:cb: 2f:f7:56:1b:7a:10:ac:f5:e6:b4:84:6b:b7:e9:03:3b:19:15: af:e6:db:60:b1:79:b1:e5:fa:e1:6c:fc:cc:ad:46:6f:e2:c3: 81:08:78:0d:36:3a:e9:04:af:57:e3:e9:cc:d4:74:30:58:0e: 54:31:a7:21:0c:b6:39:6b:8c:9f:95:96:a0:28:50:64:be:eb: cc:be:fb:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEyNDcxMTAvBgNVBAUTKEZCRDRCNDNCNTY3OEYxQTA2Q0M5MDdDNEVEMDRCREEy MTFEOUREMkIwHhcNMjUwODA5MDQzMzQzWhcNMjUwODE2MDQzMzQzWjAYMRYwFAYD VQQDEw02ODk2Y2ZhNy0yMzQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv5Kfm/D2JvofZPehVcfiflUVS9/nt9/kGp/DdnSi5W11w51spA0OwEb8ZJzA m2hdCD2xrH4M/QVbYce6Ezz8GIgl/dWQyCN4izWMKP4/i2U201P5mFK8c/SVUPEB /18NV3HNraisMr0mBkKyW8YguuQLKYJoVlEW/gk9buRtQNwSdPXImDpUOpTSPaWM azKYzTiNVDMv9NisMTFKyW+Iy4a6XC14uQrw8XJ6h5WsWOf1kkPvzdhsdLrJOyfW MuP/cVpfvXKU5st2ZO98dylAB29YLhhmCaqx6dQQiPvWXHVOcrToAjqelGUu+54e 4qkWrKQ6S4oFAmX43Nj7wXa/lwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE6SJl/Q FOGhH0ePfTbH/rr+0N6BMB8GA1UdIwQYMBaAFPvUtDtWePGgbMkHxO0EvaIR2d0r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTI0Ny9CMUZDNjQ1QzZG NEExMUVFQTg5RjMzNjNDNEY5QUUwMi8tOVMwTzFaNDhhQnN5UWZFN1FTOW9oSFoz U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy05UzBPMVo0OGFCc3lRZkU3UVM5b2hIWjNTcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTI0Ny9CMUZDNjQ1QzZGNEExMUVFQTg5RjMzNjNDNEY5QUUwMi8tOVMwTzFaNDhh QnN5UWZFN1FTOW9oSFozU3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAT/eLQY8XrCu7SHXT3O0dqRZXuMmxEbwwnTsx9dj1C1rhgT69FNT+4 YVOaGvOQbi1rLk7VH0ivJNHCnU4vCGUSUIRpQv7alW5XrwnDWWfU4U2Km04nGig9 03LdTYDN8hn3SGPtg2BsC1csKPIO+54qeWxA6ZIznohvHaNuYm7EnQ28C3wSlJ34 HNo6QDeIX1sNfRcjWISYsMg/gxGHQ9FWnELV1eCe7i7wWrF338BThdQYt8sv91Yb ehCs9ea0hGu36QM7GRWv5ttgsXmx5frhbPzMrUZv4sOBCHgNNjrpBK9X4+nM1HQw WA5UMachDLY5a4yflZagKFBkvuvMvvsP -----END CERTIFICATE-----Generated at Sun Aug 10 16:13:27 2025 by rpki-client