$ rpki-client -vvf rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.mft File: C9usFSJfG_m2FLKjR6G5bEoPlpw.mft (raw, json) Hash identifier: 6pXm64H4nzIb2FlAukYfN6+RMcTykb6//mkV2zhOgZ0= Subject key identifier: 49:E1:52:52:C9:BA:8E:26:E1:AC:03:ED:1D:05:E4:2F:9D:A4:24:D5 Authority key identifier: 0B:DB:AC:15:22:5F:1B:F9:B6:14:B2:A3:47:A1:B9:6C:4A:0F:96:9C Certificate issuer: /CN=A915FDA7/serialNumber=0BDBAC15225F1BF9B614B2A347A1B96C4A0F969C Certificate serial: F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C9usFSJfG_m2FLKjR6G5bEoPlpw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.mft Manifest number: ED Signing time: Mon 21 Jul 2025 05:29:33 +0000 Manifest this update: Mon 21 Jul 2025 05:29:33 +0000 Manifest next update: Mon 28 Jul 2025 05:29:33 +0000 Files and hashes: 1: C9usFSJfG_m2FLKjR6G5bEoPlpw.crl (hash: +5Bi1EFkelCfp2Ff0Swu/nJYxj3cACYV3UIhJSbddSg=) 2: 7C3A615CFD2A11EE9030911CC4F9AE02.roa (hash: /piRZvXAAsh1mpg66Okc/aC7aZTe1kUD5ojc4AIc6UQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.crl rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C9usFSJfG_m2FLKjR6G5bEoPlpw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 05:19:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 240 (0xf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FDA7, serialNumber=0BDBAC15225F1BF9B614B2A347A1B96C4A0F969C Validity Not Before: Jul 21 05:29:33 2025 GMT Not After : Jul 28 05:29:33 2025 GMT Subject: CN=687dd03d-9f8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e3:11:84:b4:04:25:2f:89:14:6b:88:65:56: 3f:71:64:d3:7b:cb:67:6e:30:28:8b:03:79:df:c4: 4e:ce:28:14:e0:fc:7e:ec:50:36:ad:01:e9:b7:91: 71:64:0e:f8:2c:ec:15:6e:95:c1:00:34:41:9e:09: 76:83:a3:13:20:05:66:75:d5:c5:eb:6f:96:4f:8c: 9c:63:d5:50:8f:c8:01:08:d4:ab:5f:18:3a:a8:b9: c4:c7:65:d3:32:f2:e0:2c:30:47:c0:d4:05:4a:0c: cc:d4:66:61:0d:a9:aa:5d:5e:b7:76:1a:d1:f1:ff: 8c:c7:8a:b2:19:2f:78:81:68:07:e5:c1:d8:59:d7: 6c:3b:11:8d:5d:18:cb:f0:3e:ec:83:57:1d:6e:5d: 2f:a5:7c:8b:ae:b3:d1:be:6d:46:bb:7d:75:aa:d8: 74:f7:3c:59:70:67:2e:a8:34:46:8c:6b:bc:4f:f8: c6:59:51:7a:6f:d1:58:1c:e2:60:da:89:01:c9:fb: b1:9e:70:cf:86:ea:36:9e:49:a9:13:15:98:12:74: 3d:8e:d7:30:bb:53:96:26:ba:d8:02:3c:2e:75:89: 92:af:76:9a:80:12:41:52:59:1b:08:1e:4b:32:07: b4:34:56:e1:94:fa:4b:18:a6:e1:14:85:61:f0:c7: bc:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:E1:52:52:C9:BA:8E:26:E1:AC:03:ED:1D:05:E4:2F:9D:A4:24:D5 X509v3 Authority Key Identifier: keyid:0B:DB:AC:15:22:5F:1B:F9:B6:14:B2:A3:47:A1:B9:6C:4A:0F:96:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C9usFSJfG_m2FLKjR6G5bEoPlpw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:9e:92:c8:e4:57:75:75:30:40:86:b2:55:c0:b0:d5:cf:6c: b9:aa:90:4c:ad:17:39:31:c3:21:68:86:b8:17:6f:0b:99:95: 3e:da:b8:c1:17:a4:03:38:10:ae:04:1e:7f:b3:fd:a3:b5:71: 3e:b4:da:79:85:e9:75:91:f8:91:95:e2:69:df:19:c0:92:e1: 74:5b:89:65:1f:db:59:e6:39:ca:40:37:36:c0:cd:96:e5:71: 26:d9:dd:d9:f8:c9:ac:0c:b5:8a:d7:28:23:48:f5:fc:27:57: 18:02:4f:f8:d9:60:d1:03:a3:9e:66:72:d7:7b:4b:be:98:a0: fd:20:35:c0:69:1c:77:f1:91:16:ce:06:a2:85:25:b4:ef:ee: 0e:92:e6:b1:88:e0:e1:06:83:6e:52:3d:ac:62:e4:cf:1d:4f: 72:b0:c6:68:b3:8d:25:8d:73:0a:1b:41:e5:82:b7:f8:a8:bd: 9c:af:f0:c2:5c:10:be:22:04:53:a5:fc:3a:94:20:a6:11:bf: 90:c8:ec:e0:0e:4f:47:f2:15:17:df:fe:3a:24:af:58:b1:04: 85:fa:dc:78:7f:f7:48:c9:6d:b4:dc:ce:5d:05:96:83:e6:f4: 06:ad:05:cf:7c:ae:20:9c:e7:df:f3:1f:42:96:a4:5c:97:fb: 50:9a:68:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZEQTcxMTAvBgNVBAUTKDBCREJBQzE1MjI1RjFCRjlCNjE0QjJBMzQ3QTFCOTZD NEEwRjk2OUMwHhcNMjUwNzIxMDUyOTMzWhcNMjUwNzI4MDUyOTMzWjAYMRYwFAYD VQQDEw02ODdkZDAzZC05ZjhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuOMRhLQEJS+JFGuIZVY/cWTTe8tnbjAoiwN538ROzigU4Px+7FA2rQHpt5Fx ZA74LOwVbpXBADRBngl2g6MTIAVmddXF62+WT4ycY9VQj8gBCNSrXxg6qLnEx2XT MvLgLDBHwNQFSgzM1GZhDamqXV63dhrR8f+Mx4qyGS94gWgH5cHYWddsOxGNXRjL 8D7sg1cdbl0vpXyLrrPRvm1Gu311qth09zxZcGcuqDRGjGu8T/jGWVF6b9FYHOJg 2okByfuxnnDPhuo2nkmpExWYEnQ9jtcwu1OWJrrYAjwudYmSr3aagBJBUlkbCB5L Mge0NFbhlPpLGKbhFIVh8Me8QwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEnhUlLJ uo4m4awD7R0F5C+dpCTVMB8GA1UdIwQYMBaAFAvbrBUiXxv5thSyo0ehuWxKD5ac MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkRBNy80RjQ4MUFDOEZE MjkxMUVFQTYyOUFFNjJDNEY5QUUwMi9DOXVzRlNKZkdfbTJGTEtqUjZHNWJFb1Bs cHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M5dXNGU0pmR19tMkZMS2pSNkc1YkVvUGxwdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkRBNy80RjQ4MUFDOEZEMjkxMUVFQTYyOUFFNjJDNEY5QUUwMi9DOXVzRlNKZkdf bTJGTEtqUjZHNWJFb1BscHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCnpLI5Fd1dTBAhrJVwLDVz2y5qpBMrRc5McMhaIa4F28LmZU+2rjB F6QDOBCuBB5/s/2jtXE+tNp5hel1kfiRleJp3xnAkuF0W4llH9tZ5jnKQDc2wM2W 5XEm2d3Z+MmsDLWK1ygjSPX8J1cYAk/42WDRA6OeZnLXe0u+mKD9IDXAaRx38ZEW zgaihSW07+4OkuaxiODhBoNuUj2sYuTPHU9ysMZos40ljXMKG0Hlgrf4qL2cr/DC XBC+IgRTpfw6lCCmEb+QyOzgDk9H8hUX3/46JK9YsQSF+tx4f/dIyW203M5dBZaD 5vQGrQXPfK4gnOff8x9ClqRcl/tQmmgo -----END CERTIFICATE-----Generated at Mon Jul 21 06:49:17 2025 by rpki-client