$ rpki-client -vvf rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft File: -KpwkWtspYPANj63qaX38mJ9c2A.mft (raw, json) Hash identifier: TGAXKJ5pLZproU4wmFUu4PajZQxvFK3q7VuV43dIDls= Subject key identifier: D7:99:D9:68:AB:90:E2:FB:25:D9:E8:E0:3E:A9:AC:87:9D:C9:DE:5F Authority key identifier: F8:AA:70:91:6B:6C:A5:83:C0:36:3E:B7:A9:A5:F7:F2:62:7D:73:60 Certificate issuer: /CN=A915EE53/serialNumber=F8AA70916B6CA583C0363EB7A9A5F7F2627D7360 Certificate serial: 2669 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft Manifest number: 2564 Signing time: Sun 10 Aug 2025 15:43:56 +0000 Manifest this update: Sun 10 Aug 2025 15:43:55 +0000 Manifest next update: Sun 17 Aug 2025 15:43:55 +0000 Files and hashes: 1: -KpwkWtspYPANj63qaX38mJ9c2A.crl (hash: 6+SB6tKZ0R9KT8M1OEoYi/95yU+av+t2AnOAPmP8oS0=) 2: 9DBB8670790211EC9EE24885C4F9AE02.roa (hash: HAVp5cljtBnNfexhpbWp3fQD4oxFEGOqIu7ZTxc+Cn0=) 3: 5CCAC7F8528C11ECB6101B10C4F9AE02.roa (hash: RIyr8Ughbt9mob5hXoVNYqj5DjcM8cytuIahFNZG+OY=) 4: 86D13B7E571C11EC81276481C4F9AE02.roa (hash: MOs76+y2ZzpmyQheXk3mTC95IHPkn0FNf96cGXOiX14=) 5: 63C97CBAC49E11EBAC936D7AC4F9AE02.roa (hash: Z5qSs34sPKp/u0MZu0MdqYO0kmHEtkJPsT5iKOnHCCM=) 6: CFF5A20078E011EC8357FA15C4F9AE02.roa (hash: 0lnFnxu0rWa+p9n4oerH1rvUz5x82J6mnvG019TSBpo=) 7: 15812F82C4A111EBAE6C7F49C4F9AE02.roa (hash: lPqoKt6e9WB68QkGqWF9uf0n021O/vJN6Ok+8vPm99E=) 8: 6E042EFCABF011EC92152E22C4F9AE02.roa (hash: nSFw75IcZdLxXGKGRDjDilcmAybSCgLtcoRvUszM+xw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.crl rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9833 (0x2669) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EE53, serialNumber=F8AA70916B6CA583C0363EB7A9A5F7F2627D7360 Validity Not Before: Aug 10 15:43:55 2025 GMT Not After : Aug 17 15:43:55 2025 GMT Subject: CN=6898be3b-9c1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:10:b9:9e:31:40:e7:58:77:5d:60:79:40:de: c7:2a:b9:e7:1b:55:a1:df:75:c2:78:fd:eb:41:f0: 66:b6:31:d9:c5:71:81:60:ec:b2:7f:b7:64:2c:8d: 98:39:cd:14:32:a4:25:55:ad:d4:6d:fe:81:b8:79: b2:82:5c:04:da:1d:a1:67:cf:1b:35:d3:ff:b9:c1: 9a:d8:75:27:ad:44:41:32:41:aa:32:5b:b3:95:90: a8:ef:c6:2a:28:1d:06:7f:2e:fc:76:ef:17:b9:c7: 11:12:c9:6f:c9:18:6c:12:0d:59:c8:b2:5a:43:5c: 85:2b:b5:eb:7d:9c:1c:8a:2d:6f:e4:89:36:ec:e4: 3d:98:ab:7c:ca:a2:85:dc:ad:98:25:0d:37:af:94: d9:bc:eb:fd:ef:96:c7:96:ce:3a:2e:88:42:19:5b: 49:66:70:18:4f:60:67:48:db:d3:ae:d9:4c:00:0f: 8c:cf:74:7c:3f:79:65:53:07:65:cc:05:d9:2c:2d: dc:e8:42:b8:6d:0a:08:d7:3b:f7:a1:f7:b0:91:f3: cb:a0:e7:a6:81:8f:71:89:2d:ea:d9:88:4c:b8:90: 80:02:f4:96:7e:98:9c:7a:7e:38:66:38:79:f0:39: b9:d8:36:77:95:35:3f:e2:c6:8b:41:df:03:86:6f: 1c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:99:D9:68:AB:90:E2:FB:25:D9:E8:E0:3E:A9:AC:87:9D:C9:DE:5F X509v3 Authority Key Identifier: keyid:F8:AA:70:91:6B:6C:A5:83:C0:36:3E:B7:A9:A5:F7:F2:62:7D:73:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:e1:0e:eb:e9:26:1d:5f:5c:04:09:96:18:02:40:e1:44:3b: c6:f8:62:72:41:70:0e:2f:f9:95:ab:fc:9e:49:8e:df:de:53: ac:28:a7:f5:79:d9:ab:e3:0f:bf:05:37:5b:00:7b:ff:58:9b: 03:9b:cd:a3:06:be:f4:35:ec:1d:86:6a:19:e9:b6:2c:f7:f5: 49:4c:90:0a:c2:1a:d1:9d:29:9e:3f:7c:36:54:76:4a:73:1a: a5:0d:db:f9:41:42:cd:16:ba:9e:a8:87:de:e0:cc:ce:94:7a: 42:a8:bf:d2:10:90:0a:17:2a:1d:9b:7e:9f:72:2c:49:a9:5b: 4b:bc:f4:df:90:95:69:aa:af:66:b9:4b:8f:9e:26:8e:e7:1c: cc:c7:cb:f0:2e:82:55:0b:26:72:13:d5:07:04:12:40:38:41: 60:9b:85:42:eb:c7:1f:f7:95:85:ab:5d:c3:94:8e:58:1c:85: 2a:1a:dc:cb:3f:ca:b1:e2:90:92:8b:c5:85:09:20:de:e6:4e: 50:2d:ad:15:dd:1b:b1:9c:83:8d:36:44:94:d3:3f:81:a5:35: 86:52:13:4b:ce:df:f8:6b:34:d0:87:0a:72:c7:af:4c:7c:d5: 74:d0:ba:cd:90:85:7b:3c:8f:ae:77:61:39:24:76:f2:2c:78: 0f:ec:54:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJmkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUVFNTMxMTAvBgNVBAUTKEY4QUE3MDkxNkI2Q0E1ODNDMDM2M0VCN0E5QTVGN0Yy NjI3RDczNjAwHhcNMjUwODEwMTU0MzU1WhcNMjUwODE3MTU0MzU1WjAYMRYwFAYD VQQDEw02ODk4YmUzYi05YzFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsRC5njFA51h3XWB5QN7HKrnnG1Wh33XCeP3rQfBmtjHZxXGBYOyyf7dkLI2Y Oc0UMqQlVa3Ubf6BuHmyglwE2h2hZ88bNdP/ucGa2HUnrURBMkGqMluzlZCo78Yq KB0Gfy78du8XuccREslvyRhsEg1ZyLJaQ1yFK7XrfZwcii1v5Ik27OQ9mKt8yqKF 3K2YJQ03r5TZvOv975bHls46LohCGVtJZnAYT2BnSNvTrtlMAA+Mz3R8P3llUwdl zAXZLC3c6EK4bQoI1zv3ofewkfPLoOemgY9xiS3q2YhMuJCAAvSWfpicen44Zjh5 8Dm52DZ3lTU/4saLQd8Dhm8cqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNeZ2Wir kOL7Jdno4D6prIedyd5fMB8GA1UdIwQYMBaAFPiqcJFrbKWDwDY+t6ml9/JifXNg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUU1My8zODUxMTg0MDQ1 ODgxMUU1OUIyRDgzNzFDNEY5QUUwMi8tS3B3a1d0c3BZUEFOajYzcWFYMzhtSjlj MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1LcHdrV3RzcFlQQU5qNjNxYVgzOG1KOWMyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RUU1My8zODUxMTg0MDQ1ODgxMUU1OUIyRDgzNzFDNEY5QUUwMi8tS3B3a1d0c3BZ UEFOajYzcWFYMzhtSjljMkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBW4Q7r6SYdX1wECZYYAkDhRDvG+GJyQXAOL/mVq/yeSY7f3lOsKKf1 edmr4w+/BTdbAHv/WJsDm82jBr70NewdhmoZ6bYs9/VJTJAKwhrRnSmeP3w2VHZK cxqlDdv5QULNFrqeqIfe4MzOlHpCqL/SEJAKFyodm36fcixJqVtLvPTfkJVpqq9m uUuPniaO5xzMx8vwLoJVCyZyE9UHBBJAOEFgm4VC68cf95WFq13DlI5YHIUqGtzL P8qx4pCSi8WFCSDe5k5QLa0V3RuxnIONNkSU0z+BpTWGUhNLzt/4azTQhwpyx69M fNV00LrNkIV7PI+ud2E5JHbyLHgP7FSE -----END CERTIFICATE-----Generated at Mon Aug 11 07:41:54 2025 by rpki-client