$ rpki-client -vvf rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft File: 15_gsJykSoRmkoOPxCvPQ9KjKtI.mft (raw, json) Hash identifier: wl54XrF7wiuIxmAPhQzrH8pcnvdwPIbpNCAWZYAhf3Y= Subject key identifier: 1A:DE:28:6E:EB:09:D1:26:B9:B9:79:B5:C0:AC:A7:55:A5:A8:B3:66 Authority key identifier: D7:9F:E0:B0:9C:A4:4A:84:66:92:83:8F:C4:2B:CF:43:D2:A3:2A:D2 Certificate issuer: /CN=A9127DE3/serialNumber=D79FE0B09CA44A846692838FC42BCF43D2A32AD2 Certificate serial: 61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_gsJykSoRmkoOPxCvPQ9KjKtI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft Manifest number: 5F Signing time: Fri 05 Sep 2025 07:37:13 +0000 Manifest this update: Fri 05 Sep 2025 07:37:13 +0000 Manifest next update: Fri 12 Sep 2025 07:37:13 +0000 Files and hashes: 1: 15_gsJykSoRmkoOPxCvPQ9KjKtI.crl (hash: KeFV1W50j0IhxRtXdf9l7rKfi3gIP6DNZMsEfZGgC2Q=) 2: AA99F49CFC3711EFA9688687C4F9AE02.roa (hash: 970zffhkVpQStk3jgKgrN42mDxhaIFK4aP3YfXR8LM0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.crl rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_gsJykSoRmkoOPxCvPQ9KjKtI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 07:37:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 97 (0x61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127DE3, serialNumber=D79FE0B09CA44A846692838FC42BCF43D2A32AD2 Validity Not Before: Sep 5 07:37:13 2025 GMT Not After : Sep 12 07:37:13 2025 GMT Subject: CN=68ba9329-401a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:de:5f:39:a8:4a:d2:23:19:a3:78:90:70:cf: d8:09:1d:5e:d6:96:85:f5:69:92:d9:a4:40:96:8a: a2:ef:12:0f:31:f5:cc:7c:8e:e3:2c:6b:5c:73:90: 62:f6:c4:45:55:68:6d:d0:2b:62:87:30:78:7a:f1: 8d:2a:02:8d:4d:82:35:19:7a:c4:2c:50:62:dd:d6: 35:7d:a4:4d:93:73:b1:ff:72:d7:3a:d8:ef:b8:e9: 44:59:ba:52:c2:03:ae:6b:92:ef:37:7f:91:a9:a9: c7:ea:34:8f:9d:ec:0a:32:de:47:77:5b:7e:07:62: f4:60:8b:d6:22:6d:c7:1a:f8:6e:90:7b:00:8b:d2: 3e:7e:5b:e8:03:c8:39:d7:3b:5e:b4:72:fd:d5:1c: de:8c:be:cb:d1:9d:01:d9:a1:c4:c7:c9:11:62:fd: 04:7d:07:f5:34:7a:5a:d2:4b:54:4e:a8:d1:7a:1a: a4:6a:56:64:19:14:4e:7d:c5:82:5a:f8:71:5f:85: aa:8f:11:80:3b:fe:e1:55:1c:42:b0:06:71:7f:9b: ac:e1:73:28:77:1f:5b:82:ba:14:19:21:58:66:e6: 6a:d5:48:a9:62:d9:64:93:61:49:4e:85:05:4e:c8: 60:16:c3:83:50:22:d0:00:10:bb:a5:48:98:90:d9: 1d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:DE:28:6E:EB:09:D1:26:B9:B9:79:B5:C0:AC:A7:55:A5:A8:B3:66 X509v3 Authority Key Identifier: keyid:D7:9F:E0:B0:9C:A4:4A:84:66:92:83:8F:C4:2B:CF:43:D2:A3:2A:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_gsJykSoRmkoOPxCvPQ9KjKtI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:41:4e:b1:eb:d8:3f:96:f7:c1:03:e5:14:d5:8c:ee:b1:25: cf:3c:25:13:d4:97:a5:2a:39:bf:4f:66:53:a8:4c:95:dd:37: 0e:a9:6f:a5:a7:2e:36:3a:d9:87:5e:06:9f:3c:ef:a8:5f:1b: 9c:d4:39:8c:5f:53:88:a6:d2:2e:c0:26:42:15:63:cf:8a:42: 9a:b7:8b:33:e2:ac:82:90:ab:1b:dc:98:58:dc:30:a6:32:72: 73:3d:84:0c:7d:30:ff:7c:ed:76:5f:e8:04:87:37:c9:c6:b2: 26:3e:60:f1:46:7b:a1:21:33:1f:97:ba:d8:be:09:22:13:e8: 8a:aa:97:08:4e:8b:a2:bf:b2:24:4c:63:a8:dd:da:2c:ab:30: ab:cf:7f:df:d0:ac:db:55:97:3b:d6:e8:6d:5b:fc:d5:8b:b5: 49:95:2b:a4:28:26:76:54:d2:e3:81:25:77:7e:14:b5:bf:b1: ad:56:bc:d8:da:9c:ac:7f:98:72:ce:66:e4:68:2c:ce:1e:5b: d3:ed:e4:58:be:28:dc:68:38:f2:49:47:8e:44:8a:dc:87:a4: 7d:ee:ab:fc:93:bc:b7:16:6c:42:38:da:ec:22:56:c0:64:8e: 23:f7:0a:da:7f:c1:76:75:ff:6c:80:38:74:90:c0:ca:bf:69: 36:a0:66:3c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy N0RFMzExMC8GA1UEBRMoRDc5RkUwQjA5Q0E0NEE4NDY2OTI4MzhGQzQyQkNGNDNE MkEzMkFEMjAeFw0yNTA5MDUwNzM3MTNaFw0yNTA5MTIwNzM3MTNaMBgxFjAUBgNV BAMTDTY4YmE5MzI5LTQwMWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDv3l85qErSIxmjeJBwz9gJHV7WloX1aZLZpECWiqLvEg8x9cx8juMsa1xzkGL2 xEVVaG3QK2KHMHh68Y0qAo1NgjUZesQsUGLd1jV9pE2Tc7H/ctc62O+46URZulLC A65rku83f5GpqcfqNI+d7Aoy3kd3W34HYvRgi9Yibcca+G6QewCL0j5+W+gDyDnX O160cv3VHN6MvsvRnQHZocTHyRFi/QR9B/U0elrSS1ROqNF6GqRqVmQZFE59xYJa +HFfhaqPEYA7/uFVHEKwBnF/m6zhcyh3H1uCuhQZIVhm5mrVSKli2WSTYUlOhQVO yGAWw4NQItAAELulSJiQ2R3xAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUGt4obusJ 0Sa5uXm1wKynVaWos2YwHwYDVR0jBBgwFoAU15/gsJykSoRmkoOPxCvPQ9KjKtIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3REUzLzRFMUVFQUJBRkMz NzExRUZCMUMwNzI4NkM0RjlBRTAyLzE1X2dzSnlrU29SbWtvT1B4Q3ZQUTlLakt0 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMTVfZ3NKeWtTb1Jta29PUHhDdlBROUtqS3RJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3 REUzLzRFMUVFQUJBRkMzNzExRUZCMUMwNzI4NkM0RjlBRTAyLzE1X2dzSnlrU29S bWtvT1B4Q3ZQUTlLakt0SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFpBTrHr2D+W98ED5RTVjO6xJc88JRPUl6UqOb9PZlOoTJXdNw6pb6Wn LjY62YdeBp8876hfG5zUOYxfU4im0i7AJkIVY8+KQpq3izPirIKQqxvcmFjcMKYy cnM9hAx9MP987XZf6ASHN8nGsiY+YPFGe6EhMx+Xuti+CSIT6IqqlwhOi6K/siRM Y6jd2iyrMKvPf9/QrNtVlzvW6G1b/NWLtUmVK6QoJnZU0uOBJXd+FLW/sa1WvNja nKx/mHLOZuRoLM4eW9Pt5Fi+KNxoOPJJR45EityHpH3uq/yTvLcWbEI42uwiVsBk jiP3Ctp/wXZ1/2yAOHSQwMq/aTagZjw= -----END CERTIFICATE-----Generated at Sat Sep 6 16:53:51 2025 by rpki-client