$ rpki-client -vvf rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft File: 15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft (raw, json) Hash identifier: P8G1GjzByOslcvxtbKObOWF/DZz/I4Icm0wdtA0fx1s= Subject key identifier: 10:AC:F4:1E:1E:69:A6:CA:84:79:AF:9B:93:2A:AD:3E:6D:FF:58:E6 Authority key identifier: D7:90:C2:C4:69:32:BE:9D:25:82:2D:99:12:8E:BB:CF:03:3D:45:C4 Certificate issuer: /CN=A9143F26/serialNumber=D790C2C46932BE9D25822D99128EBBCF033D45C4 Certificate serial: 0182 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15DCxGkyvp0lgi2ZEo67zwM9RcQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft Manifest number: 017B Signing time: Sat 19 Jul 2025 03:58:31 +0000 Manifest this update: Sat 19 Jul 2025 03:58:30 +0000 Manifest next update: Sat 26 Jul 2025 03:58:30 +0000 Files and hashes: 1: 15DCxGkyvp0lgi2ZEo67zwM9RcQ.crl (hash: p7Omqjn1zNyQbqRE67rW7U0v/pbk2a2t4NVrZaU8A1A=) 2: 9728C64EF10811EE8F128341C4F9AE02.roa (hash: 4J0ORjYm3cW6dunDewDTVLOKNHiY1sO2eutzlceykHU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.crl rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15DCxGkyvp0lgi2ZEo67zwM9RcQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 03:58:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 386 (0x182) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143F26, serialNumber=D790C2C46932BE9D25822D99128EBBCF033D45C4 Validity Not Before: Jul 19 03:58:30 2025 GMT Not After : Jul 26 03:58:30 2025 GMT Subject: CN=687b17e6-0ae6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:91:25:25:3d:3d:95:1b:b8:90:bb:6c:7a:58: d7:cd:ac:fb:e7:f4:bc:44:3b:b2:47:87:df:2f:e4: 2c:b7:41:cf:67:27:5f:32:6a:9c:b9:c2:94:2c:bb: e5:fc:89:5c:bc:32:df:c9:ac:6e:3a:79:ac:cf:99: 9d:60:7f:62:95:45:17:17:95:46:61:77:da:1c:ac: bc:f8:c8:0b:da:56:3f:99:80:0d:fc:31:cc:9e:ac: ae:be:70:e6:c1:9e:b1:0e:1f:a8:21:56:4e:26:ad: 00:26:10:d0:18:6f:a4:38:90:5d:78:c6:89:a2:cb: 4c:2f:58:ae:b0:23:b2:43:28:84:b4:49:53:df:13: 89:61:f7:a0:fb:80:64:d6:24:20:4b:b2:ff:5c:29: fa:45:0f:a0:db:c5:8b:5b:e1:8e:b3:4e:59:79:42: 9f:bd:31:d1:ec:e6:35:2c:60:47:72:51:0c:ac:94: e9:58:77:3e:fb:5d:94:17:38:18:b2:0e:ba:f4:87: ef:36:55:98:c7:7a:f0:7f:7a:c6:0c:2d:ab:c0:6e: 0d:d6:5a:4e:3b:10:3b:1b:e1:fa:bf:a8:14:f4:73: 38:c9:68:90:89:e4:8d:38:4b:aa:75:3d:9d:57:7e: d0:fd:13:19:5b:58:f3:b3:0b:2b:df:d3:84:c8:c9: bc:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:AC:F4:1E:1E:69:A6:CA:84:79:AF:9B:93:2A:AD:3E:6D:FF:58:E6 X509v3 Authority Key Identifier: keyid:D7:90:C2:C4:69:32:BE:9D:25:82:2D:99:12:8E:BB:CF:03:3D:45:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15DCxGkyvp0lgi2ZEo67zwM9RcQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:2b:96:41:9b:69:38:82:6e:51:22:f0:01:60:a7:4c:9d:55: 89:23:2b:62:3a:a3:e7:53:05:65:1c:7d:21:5d:d0:2e:bc:d8: 7f:94:5e:38:cb:d1:e0:7c:db:0a:09:71:e6:42:4b:b1:58:b7: 32:04:f1:3d:79:99:e8:38:99:3d:3c:28:a0:70:21:d1:09:b3: 32:27:c9:4b:7c:2e:59:0d:19:70:08:6e:9b:b0:8d:a3:fc:1e: 6e:ca:36:ed:6c:23:1f:a8:f7:9d:46:84:d7:9b:a9:0e:a9:30: a8:ce:bb:73:4a:3e:0f:f8:e6:68:f0:ab:9b:e2:33:71:5a:58: 59:b6:b4:1e:d1:86:a0:bf:d6:19:d6:92:48:7d:24:a2:cb:58: 0d:35:c9:94:3c:32:43:2f:7f:54:38:46:63:d3:c4:bb:52:c5: 1f:23:b6:96:e9:05:89:86:96:f4:9f:8e:75:38:50:7a:17:b6: 72:8c:ca:2c:e7:6c:b6:96:e6:a2:7d:7c:0a:0b:3b:85:30:fa: bb:39:26:e8:dc:63:9a:5e:b3:ba:bb:5a:7f:5b:cb:d0:65:88: aa:4f:b4:8f:8c:01:00:c9:a8:09:7f:d9:00:8b:e7:49:a7:7a: e0:a7:1f:5c:b6:54:67:0d:be:76:bb:e5:cf:98:f9:4e:fe:fa: 05:01:5c:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNGMjYxMTAvBgNVBAUTKEQ3OTBDMkM0NjkzMkJFOUQyNTgyMkQ5OTEyOEVCQkNG MDMzRDQ1QzQwHhcNMjUwNzE5MDM1ODMwWhcNMjUwNzI2MDM1ODMwWjAYMRYwFAYD VQQDEw02ODdiMTdlNi0wYWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuJElJT09lRu4kLtseljXzaz75/S8RDuyR4ffL+Qst0HPZydfMmqcucKULLvl /IlcvDLfyaxuOnmsz5mdYH9ilUUXF5VGYXfaHKy8+MgL2lY/mYAN/DHMnqyuvnDm wZ6xDh+oIVZOJq0AJhDQGG+kOJBdeMaJostML1iusCOyQyiEtElT3xOJYfeg+4Bk 1iQgS7L/XCn6RQ+g28WLW+GOs05ZeUKfvTHR7OY1LGBHclEMrJTpWHc++12UFzgY sg669IfvNlWYx3rwf3rGDC2rwG4N1lpOOxA7G+H6v6gU9HM4yWiQieSNOEuqdT2d V37Q/RMZW1jzswsr39OEyMm8mQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBCs9B4e aabKhHmvm5MqrT5t/1jmMB8GA1UdIwQYMBaAFNeQwsRpMr6dJYItmRKOu88DPUXE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0YyNi83MDNBMDI1NDJE NTUxMUVFODlBQTIwMDlDNEY5QUUwMi8xNURDeEdreXZwMGxnaTJaRW82N3p3TTlS Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzE1REN4R2t5dnAwbGdpMlpFbzY3endNOVJjUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0YyNi83MDNBMDI1NDJENTUxMUVFODlBQTIwMDlDNEY5QUUwMi8xNURDeEdreXZw MGxnaTJaRW82N3p3TTlSY1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5K5ZBm2k4gm5RIvABYKdMnVWJIytiOqPnUwVlHH0hXdAuvNh/lF44 y9HgfNsKCXHmQkuxWLcyBPE9eZnoOJk9PCigcCHRCbMyJ8lLfC5ZDRlwCG6bsI2j /B5uyjbtbCMfqPedRoTXm6kOqTCozrtzSj4P+OZo8Kub4jNxWlhZtrQe0Yagv9YZ 1pJIfSSiy1gNNcmUPDJDL39UOEZj08S7UsUfI7aW6QWJhpb0n451OFB6F7ZyjMos 52y2luaifXwKCzuFMPq7OSbo3GOaXrO6u1p/W8vQZYiqT7SPjAEAyagJf9kAi+dJ p3rgpx9ctlRnDb52u+XPmPlO/voFAVwO -----END CERTIFICATE-----Generated at Sun Jul 20 08:04:23 2025 by rpki-client