$ rpki-client -vvf rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft File: AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft (raw, json) Hash identifier: nK/f9mC5ibkwvJghzZTPYzsuyWzReJEaMaNeOltmCJk= Subject key identifier: 0E:2E:08:3B:B4:09:D3:0D:C6:9F:82:B7:32:5A:E9:5C:31:0E:0B:12 Authority key identifier: 00:8F:5D:06:F0:FE:FC:40:FD:83:0B:26:CD:76:60:A3:83:11:0C:91 Certificate issuer: /CN=A915E678/serialNumber=008F5D06F0FEFC40FD830B26CD7660A383110C91 Certificate serial: 0159 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI9dBvD-_ED9gwsmzXZgo4MRDJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft Manifest number: 0151 Signing time: Sat 09 Aug 2025 04:37:58 +0000 Manifest this update: Sat 09 Aug 2025 04:37:57 +0000 Manifest next update: Sat 16 Aug 2025 04:37:57 +0000 Files and hashes: 1: AI9dBvD-_ED9gwsmzXZgo4MRDJE.crl (hash: 5ZehWBsHqq8h9OTuitUHqJ0RnDddGSPrn+uXEWYGvKE=) 2: D39B04847C4B11EEB4EA3632C4F9AE02.roa (hash: VkMCaNU7sXjTR/CQAkH/z8BpEQbO8jbw+1o8r2q8dPA=) 3: 5694D344791B11EEA64C016BC4F9AE02.roa (hash: cg93R23INGR8fe5V8I1v0XqkWQVYbzGg1oKwaVZnx2Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.crl rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI9dBvD-_ED9gwsmzXZgo4MRDJE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 345 (0x159) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E678, serialNumber=008F5D06F0FEFC40FD830B26CD7660A383110C91 Validity Not Before: Aug 9 04:37:57 2025 GMT Not After : Aug 16 04:37:57 2025 GMT Subject: CN=6896d0a6-a125 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:50:ee:4b:68:13:d3:d0:78:ba:93:03:b4:7d: 2b:3a:98:95:37:c5:ec:49:22:f8:ae:f8:1b:40:ba: ac:7d:c0:0a:74:e3:3e:26:a5:0d:23:66:78:3d:3d: 87:ce:7b:db:c8:94:96:44:90:8b:3c:5c:dc:6f:ec: 14:38:dd:3d:a4:1c:a6:6b:e1:64:92:eb:d8:f1:f2: 44:93:e4:8a:25:3e:39:dd:a4:9b:2f:7c:4a:6e:67: 58:0e:7f:ba:15:8d:3a:2b:cd:3a:1b:32:35:bf:28: de:fe:12:6f:66:52:f3:f0:9d:75:44:a9:d1:26:2e: d6:c4:d5:ee:87:4b:7c:c5:b8:05:f8:86:75:a4:91: b7:76:d7:20:d6:c3:3e:1b:1e:fa:6d:db:9c:dc:ed: 88:9e:c8:cc:3a:2b:c9:86:cb:7e:61:9e:59:e1:b9: e4:52:c5:00:be:12:71:08:71:61:c5:61:38:d6:51: 56:11:c8:c1:f2:ca:3c:61:df:39:61:d4:07:14:5c: c2:0b:e0:3b:46:85:10:61:84:9b:e1:f2:81:29:c7: 43:18:48:21:92:86:f3:0b:05:c7:80:0e:91:e7:e5: 85:81:18:b2:10:0f:d3:24:ed:58:a1:55:7e:0a:2d: 37:c8:e9:37:93:40:4f:a6:17:1e:e7:2c:16:a3:6b: a6:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:2E:08:3B:B4:09:D3:0D:C6:9F:82:B7:32:5A:E9:5C:31:0E:0B:12 X509v3 Authority Key Identifier: keyid:00:8F:5D:06:F0:FE:FC:40:FD:83:0B:26:CD:76:60:A3:83:11:0C:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI9dBvD-_ED9gwsmzXZgo4MRDJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:d8:2a:f9:a0:28:68:ca:89:3c:fb:af:21:30:d6:84:d9:b6: 01:11:3b:f4:47:8d:71:45:a2:53:1c:ad:89:a9:5a:ee:49:4e: 79:6f:c2:a9:6b:e2:dd:18:ba:ff:f6:2f:dd:8c:9e:ec:7e:fe: 69:6b:67:c8:94:33:5e:d4:82:bc:de:d3:8f:65:eb:9c:e2:aa: ef:ab:de:77:c2:8a:af:fe:58:f9:48:61:e9:5d:af:89:b7:14: 4e:1e:44:a9:f8:43:bf:39:88:d7:cd:4c:bf:80:cd:0a:04:84: 70:80:e3:03:2a:23:1a:e9:ca:f5:a4:58:6e:03:d8:0b:f9:23: e6:0c:9d:26:25:ef:1d:03:bc:c3:88:8c:3a:06:b1:60:b0:7a: 83:e5:ed:9b:f9:14:a5:a9:eb:39:5a:af:f2:79:07:72:56:ac: e8:d6:61:d4:35:57:df:53:fe:49:c2:59:01:03:0b:f3:d9:87: cf:6e:6f:83:c0:90:05:73:1a:0c:1e:8e:55:22:d1:5f:73:6f: 7d:e2:3e:fe:3b:d5:19:26:e9:f8:ff:28:d1:1e:44:1d:88:e7: a2:ae:c5:10:fc:6d:d6:8d:06:cb:4f:8d:c2:f7:63:62:a1:bf: 0f:f3:a7:4f:1e:45:7c:9b:d3:ad:7d:0f:43:f6:ea:4e:aa:7a: 28:21:bf:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUU2NzgxMTAvBgNVBAUTKDAwOEY1RDA2RjBGRUZDNDBGRDgzMEIyNkNENzY2MEEz ODMxMTBDOTEwHhcNMjUwODA5MDQzNzU3WhcNMjUwODE2MDQzNzU3WjAYMRYwFAYD VQQDEw02ODk2ZDBhNi1hMTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA41DuS2gT09B4upMDtH0rOpiVN8XsSSL4rvgbQLqsfcAKdOM+JqUNI2Z4PT2H znvbyJSWRJCLPFzcb+wUON09pByma+FkkuvY8fJEk+SKJT453aSbL3xKbmdYDn+6 FY06K806GzI1vyje/hJvZlLz8J11RKnRJi7WxNXuh0t8xbgF+IZ1pJG3dtcg1sM+ Gx76bduc3O2InsjMOivJhst+YZ5Z4bnkUsUAvhJxCHFhxWE41lFWEcjB8so8Yd85 YdQHFFzCC+A7RoUQYYSb4fKBKcdDGEghkobzCwXHgA6R5+WFgRiyEA/TJO1YoVV+ Ci03yOk3k0BPphce5ywWo2umrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA4uCDu0 CdMNxp+CtzJa6VwxDgsSMB8GA1UdIwQYMBaAFACPXQbw/vxA/YMLJs12YKODEQyR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTY3OC83QUVFRDg2Mjc5 MUExMUVFQUNBMUFEMkJDNEY5QUUwMi9BSTlkQnZELV9FRDlnd3NtelhaZ280TVJE SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FJOWRCdkQtX0VEOWd3c216WFpnbzRNUkRKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RTY3OC83QUVFRDg2Mjc5MUExMUVFQUNBMUFEMkJDNEY5QUUwMi9BSTlkQnZELV9F RDlnd3NtelhaZ280TVJESkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBI2Cr5oChoyok8+68hMNaE2bYBETv0R41xRaJTHK2JqVruSU55b8Kp a+LdGLr/9i/djJ7sfv5pa2fIlDNe1IK83tOPZeuc4qrvq953woqv/lj5SGHpXa+J txROHkSp+EO/OYjXzUy/gM0KBIRwgOMDKiMa6cr1pFhuA9gL+SPmDJ0mJe8dA7zD iIw6BrFgsHqD5e2b+RSlqes5Wq/yeQdyVqzo1mHUNVffU/5JwlkBAwvz2YfPbm+D wJAFcxoMHo5VItFfc2994j7+O9UZJun4/yjRHkQdiOeirsUQ/G3WjQbLT43C92Ni ob8P86dPHkV8m9OtfQ9D9upOqnooIb/Q -----END CERTIFICATE-----Generated at Sun Aug 10 16:13:39 2025 by rpki-client