$ rpki-client -vvf rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft File: 15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft (raw, json) Hash identifier: pXfilXJHH1nTvi5xBkFjUOU1+kK2jSXmOVORRz1a2ko= Subject key identifier: AA:6B:12:1A:AF:9E:CE:89:D8:57:65:71:82:36:ED:B0:03:6C:A1:20 Authority key identifier: D7:90:C2:C4:69:32:BE:9D:25:82:2D:99:12:8E:BB:CF:03:3D:45:C4 Certificate issuer: /CN=A9143F26/serialNumber=D790C2C46932BE9D25822D99128EBBCF033D45C4 Certificate serial: 01A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15DCxGkyvp0lgi2ZEo67zwM9RcQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft Manifest number: 0198 Signing time: Tue 09 Sep 2025 03:33:14 +0000 Manifest this update: Tue 09 Sep 2025 03:33:13 +0000 Manifest next update: Tue 16 Sep 2025 03:33:13 +0000 Files and hashes: 1: 15DCxGkyvp0lgi2ZEo67zwM9RcQ.crl (hash: 74cFwOO74Lo+ML3Fo9XT8PheK6bxfJVwA1ESscdMX14=) 2: 9728C64EF10811EE8F128341C4F9AE02.roa (hash: Q0kMZvSMppTmP/L1MFuKtKcyvw4++N9BtkqfdKNNGdY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.crl rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15DCxGkyvp0lgi2ZEo67zwM9RcQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 03:33:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 416 (0x1a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143F26, serialNumber=D790C2C46932BE9D25822D99128EBBCF033D45C4 Validity Not Before: Sep 9 03:33:13 2025 GMT Not After : Sep 16 03:33:13 2025 GMT Subject: CN=68bf9ffa-f994 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:c1:2c:e8:90:7f:e4:d6:ff:d4:16:8d:a2:0e: 05:47:de:6b:a1:bf:0c:92:e6:33:02:79:eb:cc:1d: bf:23:34:67:05:40:30:be:24:f4:08:c0:f1:71:a9: 4d:d3:0c:ac:db:61:f3:6b:2e:aa:0b:56:43:96:3a: f1:77:f9:1d:0a:66:ee:ec:d0:5f:f6:fe:db:db:5b: bc:ef:de:58:7c:13:32:c9:67:03:54:fb:6e:2d:b7: a7:24:15:f4:b1:aa:44:ae:71:f4:36:0e:0c:3c:ac: f5:02:50:8a:80:9f:50:d1:d8:8b:3b:0b:3c:f9:29: f0:12:be:ac:26:46:bb:ff:63:43:41:ce:08:e9:26: f1:0c:33:a9:0c:95:86:f9:31:c2:89:63:b2:0e:bd: 38:68:14:6c:18:a7:17:81:7b:ba:dc:ee:aa:3e:10: 63:f3:4b:5f:9e:0d:76:74:c5:d2:a6:9b:8e:fc:3c: 4b:35:a6:cc:e7:fb:4e:27:e2:45:01:03:2a:b9:b4: 40:8e:8a:27:17:ef:0b:e4:0f:a3:ba:39:0b:d4:cf: 81:29:a7:06:1d:35:d1:ce:ec:6b:f5:5a:aa:3f:13: 6c:2f:73:ba:7f:d5:ce:ba:78:6f:1a:41:bc:0a:2d: 6f:f8:a3:45:9c:5e:5d:40:69:ff:cf:cd:af:19:7f: 5a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:6B:12:1A:AF:9E:CE:89:D8:57:65:71:82:36:ED:B0:03:6C:A1:20 X509v3 Authority Key Identifier: keyid:D7:90:C2:C4:69:32:BE:9D:25:82:2D:99:12:8E:BB:CF:03:3D:45:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15DCxGkyvp0lgi2ZEo67zwM9RcQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:9d:da:f3:b1:ef:7a:4f:cb:f0:bd:1a:95:df:95:77:89:ab: 4e:72:27:7f:65:58:60:d5:d1:b0:00:89:4a:3f:c9:de:a4:30: a3:6e:0b:9d:5c:f0:5a:d6:b6:9b:de:6c:39:fd:b4:06:36:02: b4:ac:85:2b:ff:22:51:13:e8:a7:fa:34:6f:d0:5e:95:8e:bd: e6:ce:eb:90:93:da:98:65:60:b7:31:60:e5:13:e9:e5:4e:1c: 40:33:b1:3e:02:db:8e:47:a3:89:46:ea:a8:16:ac:c8:a7:93: 17:f4:ce:ad:9f:1f:0f:1e:5d:6b:50:09:74:ae:d8:18:58:14: 86:ea:e4:a2:83:3a:b3:ea:4c:2a:ee:67:1b:5f:d6:ee:bf:fa: a9:b2:78:d9:76:91:14:ac:3a:d3:c9:a8:de:98:e0:9a:9e:a3: b5:dd:f9:a1:12:bc:2c:b3:b0:2d:b8:e6:33:85:1f:3f:be:80: 31:7b:af:5b:f7:b2:13:22:d5:0a:4f:0e:b9:18:91:e0:2b:3c: c1:d4:7f:08:73:75:37:ba:ae:5a:dd:4a:68:1d:f6:8c:bb:f9: a2:c5:59:17:e8:1a:74:b3:58:b4:3a:39:3d:db:95:46:86:3c: bf:e7:13:a2:05:c5:4f:20:72:2a:2e:6d:81:19:fa:02:c4:d3: 2d:4c:5c:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNGMjYxMTAvBgNVBAUTKEQ3OTBDMkM0NjkzMkJFOUQyNTgyMkQ5OTEyOEVCQkNG MDMzRDQ1QzQwHhcNMjUwOTA5MDMzMzEzWhcNMjUwOTE2MDMzMzEzWjAYMRYwFAYD VQQDEw02OGJmOWZmYS1mOTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA78Es6JB/5Nb/1BaNog4FR95rob8MkuYzAnnrzB2/IzRnBUAwviT0CMDxcalN 0wys22Hzay6qC1ZDljrxd/kdCmbu7NBf9v7b21u8795YfBMyyWcDVPtuLbenJBX0 sapErnH0Ng4MPKz1AlCKgJ9Q0diLOws8+SnwEr6sJka7/2NDQc4I6SbxDDOpDJWG +THCiWOyDr04aBRsGKcXgXu63O6qPhBj80tfng12dMXSppuO/DxLNabM5/tOJ+JF AQMqubRAjoonF+8L5A+jujkL1M+BKacGHTXRzuxr9VqqPxNsL3O6f9XOunhvGkG8 Ci1v+KNFnF5dQGn/z82vGX9aCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKprEhqv ns6J2FdlcYI27bADbKEgMB8GA1UdIwQYMBaAFNeQwsRpMr6dJYItmRKOu88DPUXE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0YyNi83MDNBMDI1NDJE NTUxMUVFODlBQTIwMDlDNEY5QUUwMi8xNURDeEdreXZwMGxnaTJaRW82N3p3TTlS Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzE1REN4R2t5dnAwbGdpMlpFbzY3endNOVJjUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0YyNi83MDNBMDI1NDJENTUxMUVFODlBQTIwMDlDNEY5QUUwMi8xNURDeEdreXZw MGxnaTJaRW82N3p3TTlSY1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkndrzse96T8vwvRqV35V3iatOcid/ZVhg1dGwAIlKP8nepDCjbgud XPBa1rab3mw5/bQGNgK0rIUr/yJRE+in+jRv0F6Vjr3mzuuQk9qYZWC3MWDlE+nl ThxAM7E+AtuOR6OJRuqoFqzIp5MX9M6tnx8PHl1rUAl0rtgYWBSG6uSigzqz6kwq 7mcbX9buv/qpsnjZdpEUrDrTyajemOCanqO13fmhErwss7AtuOYzhR8/voAxe69b 97ITItUKTw65GJHgKzzB1H8Ic3U3uq5a3UpoHfaMu/mixVkX6Bp0s1i0Ojk925VG hjy/5xOiBcVPIHIqLm2BGfoCxNMtTFyt -----END CERTIFICATE-----Generated at Tue Sep 9 13:25:25 2025 by rpki-client