$ rpki-client -vvf rpki.apnic.net/member_repository/A915177C/924CDCC0143011E3A0B19F2A5911EA32/IpO9TF5PmillNYywGN8-Tu5N8c8.mft File: IpO9TF5PmillNYywGN8-Tu5N8c8.mft (raw, json) Hash identifier: Ae6HSY9ojYFAM068qRROhcmgzRXaYiFb1s4XEG3jspQ= Subject key identifier: 9D:13:1A:CC:BC:5F:38:8D:26:02:85:F8:A3:B8:AB:6B:12:ED:DF:19 Authority key identifier: 22:93:BD:4C:5E:4F:9A:29:65:35:8C:B0:18:DF:3E:4E:EE:4D:F1:CF Certificate issuer: /CN=A915177C/serialNumber=2293BD4C5E4F9A2965358CB018DF3E4EEE4DF1CF Certificate serial: 3003 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IpO9TF5PmillNYywGN8-Tu5N8c8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915177C/924CDCC0143011E3A0B19F2A5911EA32/IpO9TF5PmillNYywGN8-Tu5N8c8.mft Manifest number: 2FDF Signing time: Tue 22 Jul 2025 15:31:29 +0000 Manifest this update: Tue 22 Jul 2025 15:31:28 +0000 Manifest next update: Tue 29 Jul 2025 15:31:28 +0000 Files and hashes: 1: IpO9TF5PmillNYywGN8-Tu5N8c8.crl (hash: qulUC/nJa3lsr2Wi5JtpL2/69z++AfpR9mq5L14bYH0=) 2: 149AB4BE7CE911EEB9A02D83C4F9AE02.roa (hash: E2NZXpYraOPVv0cpnUWbQpkzMNGT1LYi52LyYrBbmwA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915177C/924CDCC0143011E3A0B19F2A5911EA32/IpO9TF5PmillNYywGN8-Tu5N8c8.crl rsync://rpki.apnic.net/member_repository/A915177C/924CDCC0143011E3A0B19F2A5911EA32/IpO9TF5PmillNYywGN8-Tu5N8c8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IpO9TF5PmillNYywGN8-Tu5N8c8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 15:31:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12291 (0x3003) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915177C, serialNumber=2293BD4C5E4F9A2965358CB018DF3E4EEE4DF1CF Validity Not Before: Jul 22 15:31:28 2025 GMT Not After : Jul 29 15:31:28 2025 GMT Subject: CN=687faed1-1e79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:03:7b:0a:a0:a8:bf:25:68:57:8a:09:41:f3: a3:0d:5e:e9:b8:fc:b4:7d:cb:c6:af:7e:4d:3a:d9: 40:b0:00:ba:42:75:01:d2:0a:e9:a4:a5:a8:06:ae: 75:03:8f:25:4f:d2:8a:a5:07:fb:b1:ce:48:0e:31: 86:7c:42:31:f2:dd:bd:e5:0c:22:8d:a7:70:d8:44: ce:25:22:b8:89:94:29:68:2a:00:45:4b:9c:a0:24: 2b:f5:62:67:87:d8:66:25:eb:ff:40:26:2c:40:7c: de:32:0d:cc:e0:ea:d9:27:68:dc:d1:d9:55:23:0a: 37:51:ab:32:2e:20:0c:35:db:b0:20:07:46:0a:90: 86:94:32:71:ca:05:9d:93:ba:f7:85:80:c0:54:2a: 8b:93:3d:eb:29:dd:9e:86:0c:d7:af:e0:84:43:96: a0:2c:ab:85:ad:a1:75:41:fe:b3:36:ef:d6:0e:30: 4f:d0:f2:ea:42:9f:6b:6e:fa:cf:fd:a8:d5:6f:6f: 00:a4:59:39:8d:f4:7a:40:61:d2:da:fd:1a:c1:6d: 71:9e:98:f0:fa:a3:f3:57:01:a1:d5:01:f1:2b:5e: 0f:bc:8b:8e:de:40:60:18:57:b9:5f:5c:96:d2:7f: fb:30:7e:f5:7b:cd:25:87:ae:d5:a2:ce:3a:16:a7: 94:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:13:1A:CC:BC:5F:38:8D:26:02:85:F8:A3:B8:AB:6B:12:ED:DF:19 X509v3 Authority Key Identifier: keyid:22:93:BD:4C:5E:4F:9A:29:65:35:8C:B0:18:DF:3E:4E:EE:4D:F1:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915177C/924CDCC0143011E3A0B19F2A5911EA32/IpO9TF5PmillNYywGN8-Tu5N8c8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IpO9TF5PmillNYywGN8-Tu5N8c8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915177C/924CDCC0143011E3A0B19F2A5911EA32/IpO9TF5PmillNYywGN8-Tu5N8c8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:f9:c4:ec:38:de:49:76:21:a5:d0:a6:26:cb:26:6b:32:30: f4:3b:26:2d:bf:1d:43:eb:fb:b9:53:7a:ac:12:8e:20:63:30: 92:7d:8f:8e:50:1b:7a:be:ee:5b:62:03:34:0b:52:11:de:fa: b7:37:af:38:5f:9b:46:24:2b:43:c4:58:ec:8c:4f:86:82:8e: 1f:9d:00:c6:57:81:28:d6:8d:93:de:c9:4a:32:5c:89:7e:b2: ab:50:55:29:7f:8a:f8:b7:c7:3f:67:6b:71:b5:6a:ff:2b:b4: 72:3d:88:1b:50:63:28:a5:81:be:a5:42:33:75:6b:ec:2f:92: 8c:32:62:ee:4a:aa:f6:40:d5:b6:5d:9f:fb:d7:38:f1:5b:a5: e0:b9:59:27:f8:7a:77:43:6b:db:9c:c7:9a:64:1e:7f:aa:e0: d4:fb:c9:92:f8:83:89:65:f0:85:27:41:99:1d:af:d7:fe:b9: d6:87:df:de:a1:32:7f:f0:8c:b4:4b:d2:ae:17:7a:04:07:e9: e3:bb:c6:4d:43:be:6b:06:00:c4:ad:f8:ed:c1:d4:89:5d:eb: a4:cc:e7:ce:6f:fd:22:99:2c:e8:d3:95:0e:1d:8e:13:1d:32: 88:5f:d7:7b:6f:5d:f8:e2:b4:66:11:d6:52:2a:96:4e:c8:77: 94:a7:e7:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMAMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE3N0MxMTAvBgNVBAUTKDIyOTNCRDRDNUU0RjlBMjk2NTM1OENCMDE4REYzRTRF RUU0REYxQ0YwHhcNMjUwNzIyMTUzMTI4WhcNMjUwNzI5MTUzMTI4WjAYMRYwFAYD VQQDEw02ODdmYWVkMS0xZTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsgN7CqCovyVoV4oJQfOjDV7puPy0fcvGr35NOtlAsAC6QnUB0grppKWoBq51 A48lT9KKpQf7sc5IDjGGfEIx8t295Qwijadw2ETOJSK4iZQpaCoARUucoCQr9WJn h9hmJev/QCYsQHzeMg3M4OrZJ2jc0dlVIwo3UasyLiAMNduwIAdGCpCGlDJxygWd k7r3hYDAVCqLkz3rKd2ehgzXr+CEQ5agLKuFraF1Qf6zNu/WDjBP0PLqQp9rbvrP /ajVb28ApFk5jfR6QGHS2v0awW1xnpjw+qPzVwGh1QHxK14PvIuO3kBgGFe5X1yW 0n/7MH71e80lh67Vos46FqeUSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ0TGsy8 XziNJgKF+KO4q2sS7d8ZMB8GA1UdIwQYMBaAFCKTvUxeT5opZTWMsBjfPk7uTfHP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTc3Qy85MjRDRENDMDE0 MzAxMUUzQTBCMTlGMkE1OTExRUEzMi9JcE85VEY1UG1pbGxOWXl3R044LVR1NU44 YzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lwTzlURjVQbWlsbE5ZeXdHTjgtVHU1TjhjOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTc3Qy85MjRDRENDMDE0MzAxMUUzQTBCMTlGMkE1OTExRUEzMi9JcE85VEY1UG1p bGxOWXl3R044LVR1NU44YzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBD+cTsON5JdiGl0KYmyyZrMjD0OyYtvx1D6/u5U3qsEo4gYzCSfY+O UBt6vu5bYgM0C1IR3vq3N684X5tGJCtDxFjsjE+Ggo4fnQDGV4Eo1o2T3slKMlyJ frKrUFUpf4r4t8c/Z2txtWr/K7RyPYgbUGMopYG+pUIzdWvsL5KMMmLuSqr2QNW2 XZ/71zjxW6XguVkn+Hp3Q2vbnMeaZB5/quDU+8mS+IOJZfCFJ0GZHa/X/rnWh9/e oTJ/8Iy0S9KuF3oEB+nju8ZNQ75rBgDErfjtwdSJXeukzOfOb/0imSzo05UOHY4T HTKIX9d7b1344rRmEdZSKpZOyHeUp+fg -----END CERTIFICATE-----Generated at Wed Jul 23 12:52:47 2025 by rpki-client