$ rpki-client -vvf rpki.apnic.net/member_repository/A9181C75/903CE126909511EA8292085FC4F9AE02/15fpHhsnQJH3397fpbABL-m1roc.mft File: 15fpHhsnQJH3397fpbABL-m1roc.mft (raw, json) Hash identifier: Z/taIUDZXghCMuuSrIrDyv1g5AZXY8Pw4plj/DOh13o= Subject key identifier: D9:61:4B:7D:3A:4E:AD:C9:10:27:F1:41:0C:43:81:37:CF:7C:85:BD Authority key identifier: D7:97:E9:1E:1B:27:40:91:F7:DF:DE:DF:A5:B0:01:2F:E9:B5:AE:87 Certificate issuer: /CN=A9181C75/serialNumber=D797E91E1B274091F7DFDEDFA5B0012FE9B5AE87 Certificate serial: 099F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15fpHhsnQJH3397fpbABL-m1roc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9181C75/903CE126909511EA8292085FC4F9AE02/15fpHhsnQJH3397fpbABL-m1roc.mft Manifest number: 0996 Signing time: Sun 20 Jul 2025 20:12:53 +0000 Manifest this update: Sun 20 Jul 2025 20:12:52 +0000 Manifest next update: Sun 27 Jul 2025 20:12:52 +0000 Files and hashes: 1: 15fpHhsnQJH3397fpbABL-m1roc.crl (hash: 3QHh7/MATeN9yKL2uxqKdeSzu0XMLNkbsz4QJt69FRk=) 2: 1EC631B2FFB211ECA2EBD652C4F9AE02.roa (hash: 9yZSRRj+c0xUC0wLONS1pajEgEnXcu6/+H0zYnjOy0o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9181C75/903CE126909511EA8292085FC4F9AE02/15fpHhsnQJH3397fpbABL-m1roc.crl rsync://rpki.apnic.net/member_repository/A9181C75/903CE126909511EA8292085FC4F9AE02/15fpHhsnQJH3397fpbABL-m1roc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15fpHhsnQJH3397fpbABL-m1roc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 20:12:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2463 (0x99f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181C75, serialNumber=D797E91E1B274091F7DFDEDFA5B0012FE9B5AE87 Validity Not Before: Jul 20 20:12:52 2025 GMT Not After : Jul 27 20:12:52 2025 GMT Subject: CN=687d4dc5-496c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:23:df:9b:b1:93:90:e0:be:e4:7e:b6:7f:8d: 05:c7:5d:4e:45:2d:af:78:e2:f2:2d:d7:ac:cc:fb: 0c:f3:d5:fc:22:29:70:e2:db:cf:88:21:ec:86:47: 57:e9:5d:f7:49:00:7b:bc:b6:d1:db:9c:25:2a:2b: d4:5d:27:d9:70:3b:fe:99:b7:06:d5:c3:31:4e:03: 7b:aa:db:b8:c8:04:fb:87:3a:e0:37:3b:3f:41:87: ec:1c:12:5d:9b:93:c9:c1:32:7c:36:f0:f9:c6:f6: 1f:a8:88:70:90:5d:1d:0a:7c:80:b4:8c:af:67:42: ca:ec:09:75:a1:61:3d:86:70:dd:09:43:de:f2:c9: 54:48:19:f4:99:af:61:18:c3:c3:c1:a7:d1:fc:ab: c7:64:f5:93:9e:52:4d:52:eb:8c:42:c7:44:3c:f2: 23:dd:91:0a:94:ca:b3:aa:9f:f6:d1:05:aa:9f:72: 8b:f5:4b:85:91:18:c6:df:49:74:4b:29:5e:96:e4: 61:f4:b3:4b:06:18:3b:c4:10:c8:4c:6f:0d:3d:c1: c0:7d:cb:1d:78:44:da:b4:3b:69:e4:63:dd:7d:a9: 5a:68:bf:b4:b8:7b:86:e3:f2:e3:57:89:de:44:05: 16:7b:f4:8b:27:63:12:e4:2c:6e:75:da:cd:81:91: ed:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:61:4B:7D:3A:4E:AD:C9:10:27:F1:41:0C:43:81:37:CF:7C:85:BD X509v3 Authority Key Identifier: keyid:D7:97:E9:1E:1B:27:40:91:F7:DF:DE:DF:A5:B0:01:2F:E9:B5:AE:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9181C75/903CE126909511EA8292085FC4F9AE02/15fpHhsnQJH3397fpbABL-m1roc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15fpHhsnQJH3397fpbABL-m1roc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181C75/903CE126909511EA8292085FC4F9AE02/15fpHhsnQJH3397fpbABL-m1roc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:d2:56:6b:f3:ea:05:51:04:59:3f:7d:c9:ae:90:53:56:62: e8:ae:6f:86:4d:9c:6f:ed:61:5d:fe:d3:93:50:96:41:d0:a2: 39:e8:a3:58:8a:48:c2:98:5b:97:c8:d3:ef:77:85:1d:f0:90: 14:02:c3:55:4f:9c:eb:4a:1c:7e:4e:7f:0c:f7:dd:a6:db:2b: 62:f5:d6:d0:c7:5d:63:4b:e1:77:15:47:ad:5a:42:b9:f5:d7: dd:15:a4:0b:34:0c:89:e0:28:da:03:2d:fc:24:02:6c:ab:b1: fe:52:d9:be:1b:da:8d:18:43:70:1b:8d:aa:1d:22:54:09:e2: 23:97:36:77:28:0a:d4:6b:04:91:00:99:ad:38:dd:a0:03:23: 69:bc:0b:c0:c7:df:92:e2:dd:1e:2b:d5:8f:30:3a:7e:7e:4b: 1e:a1:b1:49:d8:40:8c:93:d5:3b:54:00:e1:ce:40:6d:71:51: 30:d9:c8:12:a9:08:af:4d:03:e6:60:e9:d4:30:a7:e3:47:86: 51:a0:69:dc:de:db:ff:e8:d0:40:d4:e5:cf:cb:56:46:df:1d: a6:ac:8e:9a:fe:af:97:ad:39:93:97:6a:4a:ae:5b:df:64:9a: 06:2b:f0:7a:99:aa:f7:14:59:d3:4d:f6:62:6f:01:b5:b0:81: e4:28:9d:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCZ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODFDNzUxMTAvBgNVBAUTKEQ3OTdFOTFFMUIyNzQwOTFGN0RGREVERkE1QjAwMTJG RTlCNUFFODcwHhcNMjUwNzIwMjAxMjUyWhcNMjUwNzI3MjAxMjUyWjAYMRYwFAYD VQQDEw02ODdkNGRjNS00OTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxyPfm7GTkOC+5H62f40Fx11ORS2veOLyLdeszPsM89X8Iilw4tvPiCHshkdX 6V33SQB7vLbR25wlKivUXSfZcDv+mbcG1cMxTgN7qtu4yAT7hzrgNzs/QYfsHBJd m5PJwTJ8NvD5xvYfqIhwkF0dCnyAtIyvZ0LK7Al1oWE9hnDdCUPe8slUSBn0ma9h GMPDwafR/KvHZPWTnlJNUuuMQsdEPPIj3ZEKlMqzqp/20QWqn3KL9UuFkRjG30l0 SyleluRh9LNLBhg7xBDITG8NPcHAfcsdeETatDtp5GPdfalaaL+0uHuG4/LjV4ne RAUWe/SLJ2MS5CxuddrNgZHtQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNlhS306 Tq3JECfxQQxDgTfPfIW9MB8GA1UdIwQYMBaAFNeX6R4bJ0CR99/e36WwAS/pta6H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MUM3NS85MDNDRTEyNjkw OTUxMUVBODI5MjA4NUZDNEY5QUUwMi8xNWZwSGhzblFKSDMzOTdmcGJBQkwtbTFy b2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzE1ZnBIaHNuUUpIMzM5N2ZwYkFCTC1tMXJvYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MUM3NS85MDNDRTEyNjkwOTUxMUVBODI5MjA4NUZDNEY5QUUwMi8xNWZwSGhzblFK SDMzOTdmcGJBQkwtbTFyb2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBV0lZr8+oFUQRZP33JrpBTVmLorm+GTZxv7WFd/tOTUJZB0KI56KNY ikjCmFuXyNPvd4Ud8JAUAsNVT5zrShx+Tn8M992m2yti9dbQx11jS+F3FUetWkK5 9dfdFaQLNAyJ4CjaAy38JAJsq7H+Utm+G9qNGENwG42qHSJUCeIjlzZ3KArUawSR AJmtON2gAyNpvAvAx9+S4t0eK9WPMDp+fkseobFJ2ECMk9U7VADhzkBtcVEw2cgS qQivTQPmYOnUMKfjR4ZRoGnc3tv/6NBA1OXPy1ZG3x2mrI6a/q+XrTmTl2pKrlvf ZJoGK/B6mar3FFnTTfZibwG1sIHkKJ2u -----END CERTIFICATE-----Generated at Mon Jul 21 18:38:44 2025 by rpki-client