$ rpki-client -vvf rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.mft File: 15aZWndnWcQmQxeAAofr7u-0umo.mft (raw, json) Hash identifier: GaS89b9OVM4UnLj8fpA2zHQDHwziwPWyQ+wCHHNjCso= Subject key identifier: 6A:FC:58:96:B0:A3:07:EA:E1:1B:F5:70:CC:ED:C0:EB:DA:13:E4:1D Authority key identifier: D7:96:99:5A:77:67:59:C4:26:43:17:80:02:87:EB:EE:EF:B4:BA:6A Certificate issuer: /CN=A91C022C/serialNumber=D796995A776759C4264317800287EBEEEFB4BA6A Certificate serial: 68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15aZWndnWcQmQxeAAofr7u-0umo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.mft Manifest number: 64 Signing time: Sat 19 Jul 2025 07:20:44 +0000 Manifest this update: Sat 19 Jul 2025 07:20:44 +0000 Manifest next update: Sat 26 Jul 2025 07:20:44 +0000 Files and hashes: 1: 15aZWndnWcQmQxeAAofr7u-0umo.crl (hash: NiT8riX2iq9EvAig0oIxNpVSXEYDziedFzKL76iz9JA=) 2: 90405CE2D5DD11EF99075D78C4F9AE02.roa (hash: hTL1z9/ySOlu0XaviOinYnMnBTyzcwAp4EbODVpERNU=) 3: B6CFF1B2D5F911EFB9B1055CC4F9AE02.roa (hash: ZxCbb7cdq/LewtopQIPSnB7gN2Ydt1y4TyGzN7hgTr4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.crl rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15aZWndnWcQmQxeAAofr7u-0umo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:20:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 104 (0x68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C022C, serialNumber=D796995A776759C4264317800287EBEEEFB4BA6A Validity Not Before: Jul 19 07:20:44 2025 GMT Not After : Jul 26 07:20:44 2025 GMT Subject: CN=687b474c-16d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b8:ed:b6:12:96:b5:0a:3d:c9:b0:d9:12:28: 4d:1a:10:d2:43:17:af:dc:2e:2a:b5:24:15:ba:15: b7:01:ba:e2:fc:5f:33:79:52:7f:ee:59:4e:bd:20: 26:0d:b7:2f:1b:50:0d:c3:a9:69:83:3b:f9:92:e9: 8a:41:42:56:1a:2a:78:70:8a:6e:2b:58:a8:d2:92: d6:fa:83:13:f4:57:ac:8c:5e:db:1b:63:7f:60:45: 73:eb:25:b5:37:e8:01:08:f4:1a:80:ff:9f:27:80: e2:f0:59:2e:1e:14:a6:0e:e8:31:ab:e7:3f:32:ca: dc:c3:bc:00:c1:c4:c6:29:71:36:fe:d6:f6:42:f4: 0d:78:25:ae:37:8a:e0:83:a8:6e:77:33:c5:7a:99: d1:21:73:4c:04:21:49:f5:85:dc:6e:15:17:15:df: e5:79:f9:c3:ae:55:7a:80:b4:47:06:ec:e2:45:c5: ad:0e:a7:f9:16:ae:72:b0:47:c9:8f:04:37:fd:ee: cb:e4:93:05:c2:57:e9:94:81:7a:29:b2:a0:31:6d: 20:aa:f9:82:fe:9a:64:45:0f:e1:5f:ab:c2:be:8d: 82:e7:d0:a3:e0:ba:94:c7:0f:50:aa:4c:8f:45:d1: 69:ca:09:52:5c:d9:64:27:36:d3:8a:fa:ce:06:18: d6:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:FC:58:96:B0:A3:07:EA:E1:1B:F5:70:CC:ED:C0:EB:DA:13:E4:1D X509v3 Authority Key Identifier: keyid:D7:96:99:5A:77:67:59:C4:26:43:17:80:02:87:EB:EE:EF:B4:BA:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15aZWndnWcQmQxeAAofr7u-0umo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:1b:58:d4:fd:d7:8a:45:59:45:98:ae:2c:e5:f8:19:96:0d: e0:49:55:16:35:2f:f3:03:82:11:59:93:0b:56:6f:5d:ad:cb: 79:be:16:63:aa:76:c0:60:67:10:13:13:98:b0:a4:1b:b4:e4: ac:d4:5e:4a:8b:69:2b:38:8c:b9:2a:1b:e2:7c:08:f2:19:79: a4:9f:b0:d2:51:c0:7c:75:8a:c1:e8:fc:0d:3f:3f:ae:b2:b7: de:42:7d:83:7f:e1:66:41:2d:22:15:f0:25:ed:be:46:28:44: b0:c0:f5:19:ca:00:4a:2e:a3:7a:77:77:37:ec:60:32:00:0a: 89:75:18:69:44:47:fe:12:2f:c1:89:81:42:e2:16:ca:cb:95: d1:3a:19:06:82:db:bd:0f:c4:36:25:3b:7b:14:a2:f6:51:95: 6e:68:a4:80:d8:1e:56:52:16:84:2f:14:3b:a6:77:52:48:3d: dc:7a:12:3a:2a:96:9e:7d:5b:5a:94:83:b2:6b:8b:8e:8b:27: 22:df:7c:00:af:e4:cf:52:8f:33:14:83:72:e8:0d:aa:09:1c: 10:01:51:70:25:21:5e:64:38:fd:55:30:e5:b8:c4:94:f1:18: bb:6d:ac:9e:ed:3a:4f:8e:b5:be:4b:20:e2:4a:41:25:01:3e: 53:8e:f0:b0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD MDIyQzExMC8GA1UEBRMoRDc5Njk5NUE3NzY3NTlDNDI2NDMxNzgwMDI4N0VCRUVF RkI0QkE2QTAeFw0yNTA3MTkwNzIwNDRaFw0yNTA3MjYwNzIwNDRaMBgxFjAUBgNV BAMTDTY4N2I0NzRjLTE2ZDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9uO22Epa1Cj3JsNkSKE0aENJDF6/cLiq1JBW6FbcBuuL8XzN5Un/uWU69ICYN ty8bUA3DqWmDO/mS6YpBQlYaKnhwim4rWKjSktb6gxP0V6yMXtsbY39gRXPrJbU3 6AEI9BqA/58ngOLwWS4eFKYO6DGr5z8yytzDvADBxMYpcTb+1vZC9A14Ja43iuCD qG53M8V6mdEhc0wEIUn1hdxuFRcV3+V5+cOuVXqAtEcG7OJFxa0Op/kWrnKwR8mP BDf97svkkwXCV+mUgXopsqAxbSCq+YL+mmRFD+Ffq8K+jYLn0KPgupTHD1CqTI9F 0WnKCVJc2WQnNtOK+s4GGNapAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUavxYlrCj B+rhG/VwzO3A69oT5B0wHwYDVR0jBBgwFoAU15aZWndnWcQmQxeAAofr7u+0umow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMwMjJDL0JBMEYyREYyRDRC OTExRUY5RkE4RTI0RkM0RjlBRTAyLzE1YVpXbmRuV2NRbVF4ZUFBb2ZyN3UtMHVt by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMTVhWlduZG5XY1FtUXhlQUFvZnI3dS0wdW1vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMw MjJDL0JBMEYyREYyRDRCOTExRUY5RkE4RTI0RkM0RjlBRTAyLzE1YVpXbmRuV2NR bVF4ZUFBb2ZyN3UtMHVtby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAIbWNT914pFWUWYrizl+BmWDeBJVRY1L/MDghFZkwtWb12ty3m+FmOq dsBgZxATE5iwpBu05KzUXkqLaSs4jLkqG+J8CPIZeaSfsNJRwHx1isHo/A0/P66y t95CfYN/4WZBLSIV8CXtvkYoRLDA9RnKAEouo3p3dzfsYDIACol1GGlER/4SL8GJ gULiFsrLldE6GQaC270PxDYlO3sUovZRlW5opIDYHlZSFoQvFDumd1JIPdx6Ejoq lp59W1qUg7Jri46LJyLffACv5M9SjzMUg3LoDaoJHBABUXAlIV5kOP1VMOW4xJTx GLttrJ7tOk+Otb5LIOJKQSUBPlOO8LA= -----END CERTIFICATE-----Generated at Mon Jul 21 07:03:22 2025 by rpki-client