$ rpki-client -vvf rpki.apnic.net/member_repository/A9180DA5/AF885F6673ED11EFB0BA025AC4F9AE02/15v9g5udDgnQQF7QTuUpIOkLesQ.mft File: 15v9g5udDgnQQF7QTuUpIOkLesQ.mft (raw, json) Hash identifier: uIGYEdFK8e6s+y9Vw6NN0i+eG3pL92smCwc0AJr+gEw= Subject key identifier: CB:95:46:99:76:B2:FC:15:26:54:60:50:05:11:86:75:84:06:36:E5 Authority key identifier: D7:9B:FD:83:9B:9D:0E:09:D0:40:5E:D0:4E:E5:29:20:E9:0B:7A:C4 Certificate issuer: /CN=A9180DA5/serialNumber=D79BFD839B9D0E09D0405ED04EE52920E90B7AC4 Certificate serial: A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15v9g5udDgnQQF7QTuUpIOkLesQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180DA5/AF885F6673ED11EFB0BA025AC4F9AE02/15v9g5udDgnQQF7QTuUpIOkLesQ.mft Manifest number: A8 Signing time: Sat 09 Aug 2025 06:35:22 +0000 Manifest this update: Sat 09 Aug 2025 06:35:22 +0000 Manifest next update: Sat 16 Aug 2025 06:35:22 +0000 Files and hashes: 1: 15v9g5udDgnQQF7QTuUpIOkLesQ.crl (hash: uEiCWQ+g5uNzi4SpcIuWInZzEKxjMCejpLjT/iTKInA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180DA5/AF885F6673ED11EFB0BA025AC4F9AE02/15v9g5udDgnQQF7QTuUpIOkLesQ.crl rsync://rpki.apnic.net/member_repository/A9180DA5/AF885F6673ED11EFB0BA025AC4F9AE02/15v9g5udDgnQQF7QTuUpIOkLesQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15v9g5udDgnQQF7QTuUpIOkLesQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 168 (0xa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180DA5, serialNumber=D79BFD839B9D0E09D0405ED04EE52920E90B7AC4 Validity Not Before: Aug 9 06:35:22 2025 GMT Not After : Aug 16 06:35:22 2025 GMT Subject: CN=6896ec2a-20cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1c:2c:80:c8:b1:ce:7c:af:29:f8:97:66:ba: 89:61:48:3e:3a:fc:5b:c4:47:60:08:b0:bd:ba:50: d2:6d:91:7e:e5:78:95:be:7a:29:77:f4:85:91:c3: 6e:f5:2c:0e:e0:b1:21:0f:58:81:30:cb:b2:c9:37: 7d:0b:13:8d:6c:94:5b:b9:ee:ea:77:d5:d7:03:4b: 60:b5:a5:3d:37:05:dd:47:60:67:63:3d:bd:d8:e7: fb:67:ff:8f:64:b5:c6:f2:35:b7:8b:95:bc:f6:4d: 2d:c4:e2:95:e9:9e:ab:60:01:f4:72:41:07:ab:63: 2e:e2:22:85:e7:09:76:eb:88:4c:b6:0c:a4:f3:67: a9:82:61:6b:18:87:42:8e:85:40:83:e7:68:80:c0: 0c:ed:f1:1d:1c:ee:df:cf:d7:d0:ef:3d:9b:64:46: 1e:01:72:ea:b9:ba:79:0d:d8:93:27:c9:a5:f7:f6: 1f:19:31:32:9a:1c:44:51:24:73:31:a8:93:dd:6d: f3:6f:6c:44:e6:f9:6c:b7:a0:bd:c8:fc:5a:12:c0: 26:0a:2f:34:cd:56:5f:59:c3:a1:3e:06:02:4d:1e: 9e:72:7f:5b:3c:c0:2c:2c:63:2b:8b:fe:16:11:7c: d1:b3:87:bb:47:69:0c:b4:b8:0b:62:10:da:eb:eb: 4f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:95:46:99:76:B2:FC:15:26:54:60:50:05:11:86:75:84:06:36:E5 X509v3 Authority Key Identifier: keyid:D7:9B:FD:83:9B:9D:0E:09:D0:40:5E:D0:4E:E5:29:20:E9:0B:7A:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180DA5/AF885F6673ED11EFB0BA025AC4F9AE02/15v9g5udDgnQQF7QTuUpIOkLesQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15v9g5udDgnQQF7QTuUpIOkLesQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180DA5/AF885F6673ED11EFB0BA025AC4F9AE02/15v9g5udDgnQQF7QTuUpIOkLesQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:51:1b:7a:f9:11:55:29:b7:4f:99:72:cf:85:9d:ec:c4:c1: 65:c1:48:65:3f:9e:85:3e:f8:16:42:ea:db:7b:d3:af:0c:1e: 83:d5:b2:0e:76:0a:5d:cd:cd:3a:0b:9d:b6:3f:43:63:8b:78: e9:c7:5c:e3:fc:ac:bc:f2:2b:73:b5:2a:e6:b1:c3:06:72:39: cc:80:c5:a1:c8:b7:8f:19:7d:91:3b:a1:7a:d0:da:3b:e1:91: 87:fb:6d:ae:d1:28:f8:7e:c4:30:d8:2d:07:8b:be:74:ef:5d: 18:f4:2a:79:c0:6a:c2:84:f6:50:12:09:e5:20:5d:45:54:2e: 3f:c9:af:f3:2b:d7:28:40:5a:6b:52:20:ea:74:b5:09:5d:4f: 94:42:ff:03:a8:04:96:d6:8f:4f:b7:ad:22:fe:ff:a7:6c:c7: 10:64:69:db:ac:79:ad:7c:5d:13:54:e8:6b:0f:26:c0:3a:1e: a4:1e:3c:4b:7a:b6:70:33:0e:0c:19:fb:10:99:fb:7c:e5:1b: 2d:58:d5:70:74:e3:12:8c:99:8e:f8:e5:29:d3:16:0b:5c:8a: 6a:9a:20:de:38:09:7c:f7:3c:f7:6a:39:e1:cd:1e:1f:85:2d: 90:26:d6:4b:a6:c8:37:55:00:97:64:5b:bd:7e:cb:d3:15:f3: d4:b1:5b:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODBEQTUxMTAvBgNVBAUTKEQ3OUJGRDgzOUI5RDBFMDlEMDQwNUVEMDRFRTUyOTIw RTkwQjdBQzQwHhcNMjUwODA5MDYzNTIyWhcNMjUwODE2MDYzNTIyWjAYMRYwFAYD VQQDEw02ODk2ZWMyYS0yMGNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyBwsgMixznyvKfiXZrqJYUg+OvxbxEdgCLC9ulDSbZF+5XiVvnopd/SFkcNu 9SwO4LEhD1iBMMuyyTd9CxONbJRbue7qd9XXA0tgtaU9NwXdR2BnYz292Of7Z/+P ZLXG8jW3i5W89k0txOKV6Z6rYAH0ckEHq2Mu4iKF5wl264hMtgyk82epgmFrGIdC joVAg+dogMAM7fEdHO7fz9fQ7z2bZEYeAXLqubp5DdiTJ8ml9/YfGTEymhxEUSRz MaiT3W3zb2xE5vlst6C9yPxaEsAmCi80zVZfWcOhPgYCTR6ecn9bPMAsLGMri/4W EXzRs4e7R2kMtLgLYhDa6+tPZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMuVRpl2 svwVJlRgUAURhnWEBjblMB8GA1UdIwQYMBaAFNeb/YObnQ4J0EBe0E7lKSDpC3rE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MERBNS9BRjg4NUY2Njcz RUQxMUVGQjBCQTAyNUFDNEY5QUUwMi8xNXY5ZzV1ZERnblFRRjdRVHVVcElPa0xl c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzE1djlnNXVkRGduUVFGN1FUdVVwSU9rTGVzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MERBNS9BRjg4NUY2NjczRUQxMUVGQjBCQTAyNUFDNEY5QUUwMi8xNXY5ZzV1ZERn blFRRjdRVHVVcElPa0xlc1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMURt6+RFVKbdPmXLPhZ3sxMFlwUhlP56FPvgWQurbe9OvDB6D1bIO dgpdzc06C522P0Nji3jpx1zj/Ky88itztSrmscMGcjnMgMWhyLePGX2RO6F60No7 4ZGH+22u0Sj4fsQw2C0Hi750710Y9Cp5wGrChPZQEgnlIF1FVC4/ya/zK9coQFpr UiDqdLUJXU+UQv8DqASW1o9Pt60i/v+nbMcQZGnbrHmtfF0TVOhrDybAOh6kHjxL erZwMw4MGfsQmft85RstWNVwdOMSjJmO+OUp0xYLXIpqmiDeOAl89zz3ajnhzR4f hS2QJtZLpsg3VQCXZFu9fsvTFfPUsVtW -----END CERTIFICATE-----Generated at Sat Aug 9 14:28:38 2025 by rpki-client