$ rpki-client -vvf rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.mft File: C9usFSJfG_m2FLKjR6G5bEoPlpw.mft (raw, json) Hash identifier: 3D2ZDMDfoqPo9VkE5OlU/+5+Y6NHEs3ARI6rSAcdzlI= Subject key identifier: 0A:06:E0:D4:25:BB:AB:34:B5:82:C1:D6:A6:B5:59:A3:74:B9:28:62 Authority key identifier: 0B:DB:AC:15:22:5F:1B:F9:B6:14:B2:A3:47:A1:B9:6C:4A:0F:96:9C Certificate issuer: /CN=A915FDA7/serialNumber=0BDBAC15225F1BF9B614B2A347A1B96C4A0F969C Certificate serial: F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C9usFSJfG_m2FLKjR6G5bEoPlpw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.mft Manifest number: F4 Signing time: Sun 03 Aug 2025 05:36:28 +0000 Manifest this update: Sun 03 Aug 2025 05:36:27 +0000 Manifest next update: Sun 10 Aug 2025 05:36:27 +0000 Files and hashes: 1: C9usFSJfG_m2FLKjR6G5bEoPlpw.crl (hash: Z9lOYS3aE/7qM2iz+aeUOo4mSO1BMjZZVz4KedFNYS4=) 2: 7C3A615CFD2A11EE9030911CC4F9AE02.roa (hash: /piRZvXAAsh1mpg66Okc/aC7aZTe1kUD5ojc4AIc6UQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.crl rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C9usFSJfG_m2FLKjR6G5bEoPlpw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 05:36:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 247 (0xf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FDA7, serialNumber=0BDBAC15225F1BF9B614B2A347A1B96C4A0F969C Validity Not Before: Aug 3 05:36:27 2025 GMT Not After : Aug 10 05:36:27 2025 GMT Subject: CN=688ef55c-4751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8a:e2:22:5b:63:4b:3f:dc:e5:79:3e:1e:60: 2b:4e:05:e0:62:6d:95:94:32:c1:ff:53:fd:6d:3b: b0:16:69:11:a7:d7:e3:13:e7:ab:4a:ee:c5:38:27: be:ed:51:00:ab:32:f5:9a:c5:18:0d:b2:ab:3b:e1: b1:0c:be:c4:f4:c3:1b:e4:f9:2b:d7:eb:2f:5e:87: b2:d0:9c:7a:73:fc:9b:5e:51:ae:49:a9:6b:5c:1a: 42:d0:f1:bc:51:78:aa:de:3e:44:8b:71:03:ce:ea: d9:45:8a:ee:7f:4b:22:22:dd:e2:ca:64:ec:ee:2a: 1d:d4:20:d3:e0:5e:2e:7a:ad:14:f2:40:89:23:28: 73:92:2f:fb:c9:f4:55:eb:5a:2a:54:f8:27:d4:02: a3:38:1e:df:55:84:ee:78:22:e1:fd:73:e4:e4:bb: 40:24:d2:fa:c4:3c:e6:c4:70:d5:7f:2b:48:db:73: 1b:16:91:e9:f4:57:1e:ab:1b:31:37:09:6a:e9:77: 87:cc:e8:ec:d7:69:f0:05:e0:2d:22:b4:5f:13:e7: 52:3b:87:50:37:d4:bb:21:88:f1:48:a7:7c:e7:94: 17:0b:c7:ea:90:35:7b:9e:3f:cc:c8:28:f2:13:8c: e5:ac:d5:18:4e:1d:e0:c3:74:51:9e:69:1d:ef:ae: b9:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:06:E0:D4:25:BB:AB:34:B5:82:C1:D6:A6:B5:59:A3:74:B9:28:62 X509v3 Authority Key Identifier: keyid:0B:DB:AC:15:22:5F:1B:F9:B6:14:B2:A3:47:A1:B9:6C:4A:0F:96:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C9usFSJfG_m2FLKjR6G5bEoPlpw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:0b:94:ef:2d:a1:6c:6e:f7:3b:fe:7d:12:94:a0:f7:4a:93: 04:a2:f8:62:f1:30:da:ba:78:86:9d:79:a7:bf:cb:b4:2b:6e: 87:4e:74:15:f4:a9:62:6e:ae:dd:1b:37:51:70:a9:18:98:b6: 64:53:8a:86:b6:35:bc:ec:d3:bc:54:32:3b:8a:7f:0e:05:c1: a1:14:48:a8:ab:0d:d7:3b:15:93:a7:58:92:d9:b7:34:1b:45: a2:07:d0:0a:a3:b9:57:f9:fa:79:c2:f3:56:84:38:f4:8a:6c: 62:73:e9:7f:8e:fd:21:1e:34:01:8e:fa:77:b5:ca:d0:4d:26: 36:78:aa:db:39:e7:e8:23:4f:20:ba:c9:6b:9b:69:a7:72:fa: 10:91:8e:c8:6f:cf:c7:ca:ca:a8:7c:c2:ad:0a:eb:6e:12:da: 36:3e:38:d7:4c:47:b7:95:ad:d8:71:b3:29:03:15:8f:e3:90: 94:49:5a:74:30:83:08:ba:68:70:ed:02:ce:74:ec:19:0f:aa: 53:ba:ad:51:34:66:76:e6:7e:e7:5f:0a:43:26:d3:be:e6:b3: e6:df:24:ca:06:6d:54:e3:74:bf:95:fc:e8:8e:52:34:8e:5c: 72:40:b9:ae:d3:34:36:b6:b1:94:cd:ec:67:9a:4d:d9:75:b9: fb:99:8e:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZEQTcxMTAvBgNVBAUTKDBCREJBQzE1MjI1RjFCRjlCNjE0QjJBMzQ3QTFCOTZD NEEwRjk2OUMwHhcNMjUwODAzMDUzNjI3WhcNMjUwODEwMDUzNjI3WjAYMRYwFAYD VQQDEw02ODhlZjU1Yy00NzUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv4riIltjSz/c5Xk+HmArTgXgYm2VlDLB/1P9bTuwFmkRp9fjE+erSu7FOCe+ 7VEAqzL1msUYDbKrO+GxDL7E9MMb5Pkr1+svXoey0Jx6c/ybXlGuSalrXBpC0PG8 UXiq3j5Ei3EDzurZRYruf0siIt3iymTs7iod1CDT4F4ueq0U8kCJIyhzki/7yfRV 61oqVPgn1AKjOB7fVYTueCLh/XPk5LtAJNL6xDzmxHDVfytI23MbFpHp9Fceqxsx Nwlq6XeHzOjs12nwBeAtIrRfE+dSO4dQN9S7IYjxSKd855QXC8fqkDV7nj/MyCjy E4zlrNUYTh3gw3RRnmkd7665HwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAoG4NQl u6s0tYLB1qa1WaN0uShiMB8GA1UdIwQYMBaAFAvbrBUiXxv5thSyo0ehuWxKD5ac MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkRBNy80RjQ4MUFDOEZE MjkxMUVFQTYyOUFFNjJDNEY5QUUwMi9DOXVzRlNKZkdfbTJGTEtqUjZHNWJFb1Bs cHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M5dXNGU0pmR19tMkZMS2pSNkc1YkVvUGxwdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkRBNy80RjQ4MUFDOEZEMjkxMUVFQTYyOUFFNjJDNEY5QUUwMi9DOXVzRlNKZkdf bTJGTEtqUjZHNWJFb1BscHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArC5TvLaFsbvc7/n0SlKD3SpMEovhi8TDauniGnXmnv8u0K26HTnQV 9Klibq7dGzdRcKkYmLZkU4qGtjW87NO8VDI7in8OBcGhFEioqw3XOxWTp1iS2bc0 G0WiB9AKo7lX+fp5wvNWhDj0imxic+l/jv0hHjQBjvp3tcrQTSY2eKrbOefoI08g uslrm2mncvoQkY7Ib8/HysqofMKtCutuEto2PjjXTEe3la3YcbMpAxWP45CUSVp0 MIMIumhw7QLOdOwZD6pTuq1RNGZ25n7nXwpDJtO+5rPm3yTKBm1U43S/lfzojlI0 jlxyQLmu0zQ2trGUzexnmk3Zdbn7mY4B -----END CERTIFICATE-----Generated at Mon Aug 4 11:25:03 2025 by rpki-client