$ rpki-client -vvf rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.mft File: pAislKDTNvRzJJBakYrySQLw3os.mft (raw, json) Hash identifier: +vpu05z4YwE6eRMamU8TnS/jLsrnFM77WXxGxDDAG48= Subject key identifier: 5D:67:04:F1:26:EC:58:7C:C1:0D:62:A4:58:E5:AF:55:C4:4E:92:22 Authority key identifier: A4:08:AC:94:A0:D3:36:F4:73:24:90:5A:91:8A:F2:49:02:F0:DE:8B Certificate issuer: /CN=A9158620/serialNumber=A408AC94A0D336F47324905A918AF24902F0DE8B Certificate serial: 015E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pAislKDTNvRzJJBakYrySQLw3os.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.mft Manifest number: 014B Signing time: Sat 19 Jul 2025 04:40:04 +0000 Manifest this update: Sat 19 Jul 2025 04:40:03 +0000 Manifest next update: Sat 26 Jul 2025 04:40:03 +0000 Files and hashes: 1: pAislKDTNvRzJJBakYrySQLw3os.crl (hash: GGVUw6t5/QHojfzixb3I0hxnhSlqDR8Tmr88w0WhM7o=) 2: 62258D42C93A11EEA1A4CA4FC4F9AE02.roa (hash: TLDnWAlNl4+LlNPMq6EhX78RX8oFwqpDV+CE22BbZbE=) 3: 31A1996898F711EEB7B27877C4F9AE02.roa (hash: inpneUp76nQQX6Q/CpN1dgRfEj/8zpxJb6ddO35TdAM=) 4: 62C61398C93A11EEA1A4CA4FC4F9AE02.roa (hash: jax3qkALNRFMNrAOXKyN2WiovYFpDRlk86jOWinHUwU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.crl rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pAislKDTNvRzJJBakYrySQLw3os.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 04:40:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 350 (0x15e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158620, serialNumber=A408AC94A0D336F47324905A918AF24902F0DE8B Validity Not Before: Jul 19 04:40:03 2025 GMT Not After : Jul 26 04:40:03 2025 GMT Subject: CN=687b21a3-4459 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:15:8b:ef:19:67:cb:79:46:39:7b:28:c8:1e: 28:88:ab:0e:a8:54:9e:70:46:45:d6:f9:1f:7b:12: 6f:91:29:63:2b:5b:24:f8:a2:b0:31:d5:0c:1c:f1: 9f:a4:86:95:50:03:5e:48:6f:c8:e7:c7:9e:ce:04: 9a:ef:7f:35:b9:b4:1d:9a:be:c1:d0:a2:8c:03:78: 26:87:f4:6f:37:7a:d9:d5:ab:1c:32:db:4a:ed:22: 5b:b2:ae:fd:de:c2:27:42:40:65:9c:ad:04:aa:13: d0:3b:0e:f9:80:22:49:96:0d:b5:f9:14:25:90:ea: 45:66:03:f0:e8:64:98:b0:fb:30:2c:e4:89:8e:98: 7f:c7:10:74:5f:7d:b9:51:fd:e2:2d:7e:57:03:ed: 45:8f:01:a7:f9:e6:2e:61:b9:78:1b:09:bb:cc:b5: da:91:70:43:7c:4f:fa:b2:20:d2:b7:99:0e:5d:eb: 1f:e3:20:1a:6d:e0:06:eb:11:84:10:df:7c:ab:d7: 4d:2d:e5:89:93:a6:cf:9a:1d:bb:d6:03:3d:7d:4e: 72:49:05:b1:a0:07:32:ad:8d:f6:62:3d:f3:46:1a: 51:41:05:a4:36:b5:c5:c0:63:17:33:fa:e3:ad:46: ba:a8:8a:43:42:dc:49:9b:73:8d:dc:5b:01:4f:a4: b4:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:67:04:F1:26:EC:58:7C:C1:0D:62:A4:58:E5:AF:55:C4:4E:92:22 X509v3 Authority Key Identifier: keyid:A4:08:AC:94:A0:D3:36:F4:73:24:90:5A:91:8A:F2:49:02:F0:DE:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pAislKDTNvRzJJBakYrySQLw3os.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:70:a8:8a:10:27:b2:3c:8e:46:bc:5c:a8:6b:b6:4f:71:1b: fd:46:58:30:58:ec:de:cd:8d:80:4c:52:47:32:9b:85:c8:0c: 12:55:8f:c1:64:f4:24:c2:17:1c:0c:df:ed:d3:48:69:03:64: 46:30:8f:33:2f:65:54:e4:8c:36:da:09:3e:f9:cf:b7:fd:24: 5b:37:77:6a:64:54:7d:ae:c4:bd:5c:8d:d4:97:3e:b1:54:1d: 6d:93:f5:9b:75:89:a0:2c:a5:bc:c5:eb:e6:00:4a:f7:89:52: a9:39:88:7c:be:19:31:0f:ea:a0:33:62:a1:24:95:fb:20:a2: a6:b6:5e:32:63:4d:7f:2e:d5:cf:aa:14:4e:63:d2:4f:ad:63: 96:07:ce:3f:7f:e3:52:f7:b2:52:f1:ae:cc:11:62:d8:27:f0: da:c6:af:3b:30:dd:44:97:3a:a1:ac:6c:ac:e2:78:05:12:8b: f4:7f:ce:41:dd:49:cf:3d:c8:d4:e6:13:4d:fd:50:10:dd:54: 62:e5:a3:fc:25:14:e2:32:0c:09:47:1f:28:68:5a:a3:6b:b5: c0:2e:92:db:2f:88:7d:35:0e:e9:f7:db:b7:bf:56:d4:bb:e3: 98:94:41:70:95:0d:1f:26:2e:11:1b:2b:16:fe:4a:73:c4:73: aa:9c:a8:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg2MjAxMTAvBgNVBAUTKEE0MDhBQzk0QTBEMzM2RjQ3MzI0OTA1QTkxOEFGMjQ5 MDJGMERFOEIwHhcNMjUwNzE5MDQ0MDAzWhcNMjUwNzI2MDQ0MDAzWjAYMRYwFAYD VQQDEw02ODdiMjFhMy00NDU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxhWL7xlny3lGOXsoyB4oiKsOqFSecEZF1vkfexJvkSljK1sk+KKwMdUMHPGf pIaVUANeSG/I58eezgSa7381ubQdmr7B0KKMA3gmh/RvN3rZ1ascMttK7SJbsq79 3sInQkBlnK0EqhPQOw75gCJJlg21+RQlkOpFZgPw6GSYsPswLOSJjph/xxB0X325 Uf3iLX5XA+1FjwGn+eYuYbl4Gwm7zLXakXBDfE/6siDSt5kOXesf4yAabeAG6xGE EN98q9dNLeWJk6bPmh271gM9fU5ySQWxoAcyrY32Yj3zRhpRQQWkNrXFwGMXM/rj rUa6qIpDQtxJm3ON3FsBT6S0TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF1nBPEm 7Fh8wQ1ipFjlr1XETpIiMB8GA1UdIwQYMBaAFKQIrJSg0zb0cySQWpGK8kkC8N6L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODYyMC8wRTkxOTkzNDg4 NDIxMUVFQTdEOEM4MTRDNEY5QUUwMi9wQWlzbEtEVE52UnpKSkJha1lyeVNRTHcz b3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BBaXNsS0RUTnZSekpKQmFrWXJ5U1FMdzNvcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODYyMC8wRTkxOTkzNDg4NDIxMUVFQTdEOEM4MTRDNEY5QUUwMi9wQWlzbEtEVE52 UnpKSkJha1lyeVNRTHczb3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJcKiKECeyPI5GvFyoa7ZPcRv9RlgwWOzezY2ATFJHMpuFyAwSVY/B ZPQkwhccDN/t00hpA2RGMI8zL2VU5Iw22gk++c+3/SRbN3dqZFR9rsS9XI3Ulz6x VB1tk/WbdYmgLKW8xevmAEr3iVKpOYh8vhkxD+qgM2KhJJX7IKKmtl4yY01/LtXP qhROY9JPrWOWB84/f+NS97JS8a7MEWLYJ/Daxq87MN1ElzqhrGys4ngFEov0f85B 3UnPPcjU5hNN/VAQ3VRi5aP8JRTiMgwJRx8oaFqja7XALpLbL4h9NQ7p99u3v1bU u+OYlEFwlQ0fJi4RGysW/kpzxHOqnKjW -----END CERTIFICATE-----Generated at Sun Jul 20 21:55:20 2025 by rpki-client