$ rpki-client -vvf rpki.apnic.net/member_repository/A915177C/924CDCC0143011E3A0B19F2A5911EA32/IpO9TF5PmillNYywGN8-Tu5N8c8.mft File: IpO9TF5PmillNYywGN8-Tu5N8c8.mft (raw, json) Hash identifier: 4Z8zCqIjrd7EQpkShQxAf1TFBOD0wcMiuCIpqIgo5q4= Subject key identifier: 06:9E:BA:2D:97:B2:59:32:43:E1:6D:01:C1:1B:28:59:C8:79:1F:25 Authority key identifier: 22:93:BD:4C:5E:4F:9A:29:65:35:8C:B0:18:DF:3E:4E:EE:4D:F1:CF Certificate issuer: /CN=A915177C/serialNumber=2293BD4C5E4F9A2965358CB018DF3E4EEE4DF1CF Certificate serial: 3024 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IpO9TF5PmillNYywGN8-Tu5N8c8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915177C/924CDCC0143011E3A0B19F2A5911EA32/IpO9TF5PmillNYywGN8-Tu5N8c8.mft Manifest number: 2FFF Signing time: Thu 18 Sep 2025 15:32:26 +0000 Manifest this update: Thu 18 Sep 2025 15:32:26 +0000 Manifest next update: Thu 25 Sep 2025 15:32:26 +0000 Files and hashes: 1: IpO9TF5PmillNYywGN8-Tu5N8c8.crl (hash: hMCax9BEt4ebpvoj6GsKp6jp1BAXrzsJtqfoevmRXYg=) 2: 149AB4BE7CE911EEB9A02D83C4F9AE02.roa (hash: 2Zr7Hm+ka4YogIeAL8utcPORDLzzcWzkuQ8uJ6QbXYo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915177C/924CDCC0143011E3A0B19F2A5911EA32/IpO9TF5PmillNYywGN8-Tu5N8c8.crl rsync://rpki.apnic.net/member_repository/A915177C/924CDCC0143011E3A0B19F2A5911EA32/IpO9TF5PmillNYywGN8-Tu5N8c8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IpO9TF5PmillNYywGN8-Tu5N8c8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 15:32:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12324 (0x3024) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915177C, serialNumber=2293BD4C5E4F9A2965358CB018DF3E4EEE4DF1CF Validity Not Before: Sep 18 15:32:26 2025 GMT Not After : Sep 25 15:32:26 2025 GMT Subject: CN=68cc260a-dca9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:80:3c:7a:75:71:8b:0b:09:41:7a:99:97:71: bf:90:85:23:85:53:a1:4a:9c:20:05:7a:67:4c:4e: d1:07:fc:ea:f2:b3:8c:ef:ec:e9:f2:6a:90:57:c1: bd:7d:49:7e:8e:64:62:f7:35:cb:b7:48:52:56:34: 1a:f7:af:15:a2:9a:39:be:9f:10:78:b6:e2:42:50: 32:0f:44:0a:05:5b:86:d5:8f:41:55:66:23:4b:f4: db:ff:90:f3:59:1a:d0:90:ae:21:21:44:bc:0f:86: 16:9b:c8:5d:0e:69:4b:52:88:56:50:9d:df:d9:7d: e7:2d:1a:c3:21:07:30:4b:b6:01:1f:35:d4:e7:99: 33:44:9e:e5:b2:8f:29:fe:d9:2e:bf:4b:1f:83:08: a8:4d:d1:29:05:a0:22:22:4e:43:80:4f:34:ad:d8: 83:ab:d5:36:20:e8:ff:07:ef:5a:4b:fb:b3:eb:4c: 64:33:44:4f:be:9b:a9:3f:e4:84:ff:66:fd:05:d8: 67:7b:f7:47:70:40:d0:78:7c:c7:c7:a7:cf:f4:7a: 06:f1:ba:5a:1f:b3:62:44:1f:91:3c:fe:8b:eb:20: 37:16:0f:c5:5b:db:da:10:ae:a9:0f:28:7b:c0:2a: 97:30:a5:d7:a9:8d:9c:43:1b:92:1b:cd:42:3f:89: b6:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:9E:BA:2D:97:B2:59:32:43:E1:6D:01:C1:1B:28:59:C8:79:1F:25 X509v3 Authority Key Identifier: keyid:22:93:BD:4C:5E:4F:9A:29:65:35:8C:B0:18:DF:3E:4E:EE:4D:F1:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915177C/924CDCC0143011E3A0B19F2A5911EA32/IpO9TF5PmillNYywGN8-Tu5N8c8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IpO9TF5PmillNYywGN8-Tu5N8c8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915177C/924CDCC0143011E3A0B19F2A5911EA32/IpO9TF5PmillNYywGN8-Tu5N8c8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:c2:db:b9:2a:1f:6f:ba:97:80:fb:c7:dd:0d:90:88:5a:8a: 23:80:71:e9:44:2c:14:6c:6e:12:31:76:44:c4:f3:36:43:7d: b2:6b:8b:e5:96:a0:f2:3f:f5:f7:4e:b7:dd:07:59:ed:23:27: a1:d5:99:ab:01:a8:59:bd:c5:da:90:65:c7:f6:e6:06:62:9b: 03:d9:cb:83:51:23:76:b2:09:c3:f5:5f:19:07:04:0c:26:75: 69:1b:37:d1:35:09:89:d8:78:40:1a:67:9a:fd:58:a5:6e:84: af:2c:a3:3e:c8:c9:08:7c:e7:25:3b:82:94:ce:ba:51:f1:6c: 6a:01:79:e0:1e:a5:3c:90:b1:2b:48:85:6f:d6:9c:5e:eb:f2: c0:86:57:11:78:c1:7b:e2:95:98:1e:ed:02:1b:c0:1e:50:37: 23:db:86:1a:d2:61:83:bb:d8:5a:ea:e3:53:10:a2:9e:a7:ed: 94:fb:01:a8:b4:2e:a2:cf:89:8c:6e:50:d8:9e:4b:1d:4a:d1: c2:08:ed:64:2e:08:c3:74:fd:1a:b3:be:f2:c9:14:46:a5:7e: 55:26:48:f5:44:b7:12:c7:5b:95:18:cc:b8:31:cf:b3:72:b4: d2:01:6e:b3:d0:13:11:4a:83:13:d8:78:d0:ed:1b:8f:e8:2c: f3:ff:b2:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMCQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE3N0MxMTAvBgNVBAUTKDIyOTNCRDRDNUU0RjlBMjk2NTM1OENCMDE4REYzRTRF RUU0REYxQ0YwHhcNMjUwOTE4MTUzMjI2WhcNMjUwOTI1MTUzMjI2WjAYMRYwFAYD VQQDEw02OGNjMjYwYS1kY2E5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuIA8enVxiwsJQXqZl3G/kIUjhVOhSpwgBXpnTE7RB/zq8rOM7+zp8mqQV8G9 fUl+jmRi9zXLt0hSVjQa968Vopo5vp8QeLbiQlAyD0QKBVuG1Y9BVWYjS/Tb/5Dz WRrQkK4hIUS8D4YWm8hdDmlLUohWUJ3f2X3nLRrDIQcwS7YBHzXU55kzRJ7lso8p /tkuv0sfgwioTdEpBaAiIk5DgE80rdiDq9U2IOj/B+9aS/uz60xkM0RPvpupP+SE /2b9Bdhne/dHcEDQeHzHx6fP9HoG8bpaH7NiRB+RPP6L6yA3Fg/FW9vaEK6pDyh7 wCqXMKXXqY2cQxuSG81CP4m2bwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAaeui2X slkyQ+FtAcEbKFnIeR8lMB8GA1UdIwQYMBaAFCKTvUxeT5opZTWMsBjfPk7uTfHP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTc3Qy85MjRDRENDMDE0 MzAxMUUzQTBCMTlGMkE1OTExRUEzMi9JcE85VEY1UG1pbGxOWXl3R044LVR1NU44 YzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lwTzlURjVQbWlsbE5ZeXdHTjgtVHU1TjhjOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTc3Qy85MjRDRENDMDE0MzAxMUUzQTBCMTlGMkE1OTExRUEzMi9JcE85VEY1UG1p bGxOWXl3R044LVR1NU44YzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUwtu5Kh9vupeA+8fdDZCIWoojgHHpRCwUbG4SMXZExPM2Q32ya4vl lqDyP/X3TrfdB1ntIyeh1ZmrAahZvcXakGXH9uYGYpsD2cuDUSN2sgnD9V8ZBwQM JnVpGzfRNQmJ2HhAGmea/VilboSvLKM+yMkIfOclO4KUzrpR8WxqAXngHqU8kLEr SIVv1pxe6/LAhlcReMF74pWYHu0CG8AeUDcj24Ya0mGDu9ha6uNTEKKep+2U+wGo tC6iz4mMblDYnksdStHCCO1kLgjDdP0as77yyRRGpX5VJkj1RLcSx1uVGMy4Mc+z crTSAW6z0BMRSoMT2HjQ7RuP6Czz/7IF -----END CERTIFICATE-----Generated at Fri Sep 19 10:21:35 2025 by rpki-client