$ rpki-client -vvf rpki.apnic.net/member_repository/A9180DA5/AF885F6673ED11EFB0BA025AC4F9AE02/15v9g5udDgnQQF7QTuUpIOkLesQ.mft File: 15v9g5udDgnQQF7QTuUpIOkLesQ.mft (raw, json) Hash identifier: m7nEOvAOpcdLwROEueKCWqPhdWW0SKuCwHMzOCVr4lU= Subject key identifier: 27:32:79:BD:37:8B:A4:73:77:89:DC:B3:88:9F:BD:48:0F:76:9C:65 Authority key identifier: D7:9B:FD:83:9B:9D:0E:09:D0:40:5E:D0:4E:E5:29:20:E9:0B:7A:C4 Certificate issuer: /CN=A9180DA5/serialNumber=D79BFD839B9D0E09D0405ED04EE52920E90B7AC4 Certificate serial: 8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15v9g5udDgnQQF7QTuUpIOkLesQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180DA5/AF885F6673ED11EFB0BA025AC4F9AE02/15v9g5udDgnQQF7QTuUpIOkLesQ.mft Manifest number: 8E Signing time: Thu 19 Jun 2025 05:48:37 +0000 Manifest this update: Thu 19 Jun 2025 05:48:37 +0000 Manifest next update: Thu 26 Jun 2025 05:48:37 +0000 Files and hashes: 1: 15v9g5udDgnQQF7QTuUpIOkLesQ.crl (hash: 01l3n1DNktewt50nxorA7xQFZmmFW5LOxLNKBXfjz9s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180DA5/AF885F6673ED11EFB0BA025AC4F9AE02/15v9g5udDgnQQF7QTuUpIOkLesQ.crl rsync://rpki.apnic.net/member_repository/A9180DA5/AF885F6673ED11EFB0BA025AC4F9AE02/15v9g5udDgnQQF7QTuUpIOkLesQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15v9g5udDgnQQF7QTuUpIOkLesQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 05:48:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 142 (0x8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180DA5, serialNumber=D79BFD839B9D0E09D0405ED04EE52920E90B7AC4 Validity Not Before: Jun 19 05:48:37 2025 GMT Not After : Jun 26 05:48:37 2025 GMT Subject: CN=6853a4b5-e9a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:01:09:1d:64:c7:32:e5:ef:1a:ac:e5:80:94: cf:6f:99:78:cc:db:fc:dd:7c:2e:dc:59:02:8f:11: 0f:d7:3c:0c:24:66:45:6f:f4:46:b0:a8:78:af:88: f1:25:e4:7c:77:55:aa:c9:c1:3b:ae:31:a8:79:b9: 1b:76:98:03:99:c2:31:a0:72:06:73:3a:80:7b:b4: 5c:57:b5:1d:c7:33:af:42:86:31:58:fb:f9:f7:dc: e4:b1:11:f4:a5:eb:69:a7:44:f4:c1:0f:8a:a1:a6: 67:6c:53:f1:41:62:3e:da:33:82:5b:2e:87:6b:ef: fa:f6:28:f0:aa:85:d9:2e:db:01:26:84:fb:7e:b9: 9c:01:b0:52:c1:dc:a5:8e:a4:0e:ba:a8:79:e6:3d: 18:67:ea:cb:4f:47:83:92:ed:0c:0f:6f:58:ca:14: 56:ce:51:18:2e:94:41:62:26:00:93:d2:07:60:45: bf:05:20:53:7d:8b:01:75:7d:6d:e3:d2:f0:d0:ff: 5b:ba:b6:12:22:ba:d5:4e:c9:0c:92:c6:7f:33:25: a7:08:73:ad:8d:f1:97:11:c8:7d:c7:30:f1:47:82: e9:b6:0d:21:b2:00:a3:73:47:a6:f1:28:33:50:aa: 5f:10:6b:ee:ce:1c:6b:c5:ab:1d:80:c4:78:2b:1c: 85:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:32:79:BD:37:8B:A4:73:77:89:DC:B3:88:9F:BD:48:0F:76:9C:65 X509v3 Authority Key Identifier: keyid:D7:9B:FD:83:9B:9D:0E:09:D0:40:5E:D0:4E:E5:29:20:E9:0B:7A:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180DA5/AF885F6673ED11EFB0BA025AC4F9AE02/15v9g5udDgnQQF7QTuUpIOkLesQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15v9g5udDgnQQF7QTuUpIOkLesQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180DA5/AF885F6673ED11EFB0BA025AC4F9AE02/15v9g5udDgnQQF7QTuUpIOkLesQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:53:41:f3:08:8a:d5:ef:1d:e9:59:e0:f6:91:54:12:79:77: 84:2d:08:2f:04:6d:cb:59:e4:99:8d:40:0b:42:23:9f:eb:a1: d2:d5:e7:f8:75:18:44:85:38:09:bf:73:e2:10:57:72:c2:98: af:b3:6a:4d:8f:ba:6d:ae:64:73:f1:49:62:cb:d6:a8:74:f4: c0:07:3b:c1:af:24:d8:03:fc:18:57:7d:24:1b:2c:02:9f:4c: 66:61:62:cb:08:06:88:81:b7:60:9f:bc:42:d8:25:64:d1:17: 88:c3:99:55:12:22:ad:33:db:d5:de:e4:0e:07:2f:b5:f0:0c: 4e:df:61:9e:f7:06:96:93:65:81:b5:17:a4:e7:94:80:69:04: 9c:e4:81:ba:c9:80:4a:0f:cf:2e:fc:0e:90:66:3f:83:3c:72: cb:1c:e9:74:9a:d6:8c:22:7e:68:4f:89:8f:af:20:b3:49:bc: ce:b7:5b:1d:98:aa:7b:1a:d2:e5:f7:ee:d8:e8:e4:a8:8b:59: 35:c3:48:e8:8c:b4:6e:21:dd:64:54:9a:a3:f8:84:b2:60:9c: 8d:48:de:91:4b:3a:99:a7:27:6b:46:ed:09:c8:b8:89:0c:ec: a8:13:8e:0b:27:9b:60:08:fe:91:62:15:62:0a:63:b2:d9:a4: bb:45:31:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODBEQTUxMTAvBgNVBAUTKEQ3OUJGRDgzOUI5RDBFMDlEMDQwNUVEMDRFRTUyOTIw RTkwQjdBQzQwHhcNMjUwNjE5MDU0ODM3WhcNMjUwNjI2MDU0ODM3WjAYMRYwFAYD VQQDEw02ODUzYTRiNS1lOWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqgEJHWTHMuXvGqzlgJTPb5l4zNv83Xwu3FkCjxEP1zwMJGZFb/RGsKh4r4jx JeR8d1WqycE7rjGoebkbdpgDmcIxoHIGczqAe7RcV7UdxzOvQoYxWPv599zksRH0 petpp0T0wQ+KoaZnbFPxQWI+2jOCWy6Ha+/69ijwqoXZLtsBJoT7frmcAbBSwdyl jqQOuqh55j0YZ+rLT0eDku0MD29YyhRWzlEYLpRBYiYAk9IHYEW/BSBTfYsBdX1t 49Lw0P9burYSIrrVTskMksZ/MyWnCHOtjfGXEch9xzDxR4Lptg0hsgCjc0em8Sgz UKpfEGvuzhxrxasdgMR4KxyF5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCcyeb03 i6Rzd4ncs4ifvUgPdpxlMB8GA1UdIwQYMBaAFNeb/YObnQ4J0EBe0E7lKSDpC3rE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MERBNS9BRjg4NUY2Njcz RUQxMUVGQjBCQTAyNUFDNEY5QUUwMi8xNXY5ZzV1ZERnblFRRjdRVHVVcElPa0xl c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzE1djlnNXVkRGduUVFGN1FUdVVwSU9rTGVzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MERBNS9BRjg4NUY2NjczRUQxMUVGQjBCQTAyNUFDNEY5QUUwMi8xNXY5ZzV1ZERn blFRRjdRVHVVcElPa0xlc1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdU0HzCIrV7x3pWeD2kVQSeXeELQgvBG3LWeSZjUALQiOf66HS1ef4 dRhEhTgJv3PiEFdywpivs2pNj7ptrmRz8Uliy9aodPTABzvBryTYA/wYV30kGywC n0xmYWLLCAaIgbdgn7xC2CVk0ReIw5lVEiKtM9vV3uQOBy+18AxO32Ge9waWk2WB tRek55SAaQSc5IG6yYBKD88u/A6QZj+DPHLLHOl0mtaMIn5oT4mPryCzSbzOt1sd mKp7GtLl9+7Y6OSoi1k1w0jojLRuId1kVJqj+ISyYJyNSN6RSzqZpydrRu0JyLiJ DOyoE44LJ5tgCP6RYhViCmOy2aS7RTE3 -----END CERTIFICATE-----Generated at Fri Jun 20 21:48:07 2025 by rpki-client