$ rpki-client -vvf rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.mft File: w9iTsikbOh4b9fTwQdEFLizLslo.mft (raw, json) Hash identifier: jxzxbtjyxOK2m69qBBbcrJcOX9pOe/Giv4OQ/Dny0tE= Subject key identifier: F2:BA:D7:80:C0:A0:BB:3A:07:AC:C9:A1:A0:E4:0B:2B:B9:85:16:FB Authority key identifier: C3:D8:93:B2:29:1B:3A:1E:1B:F5:F4:F0:41:D1:05:2E:2C:CB:B2:5A Certificate issuer: /CN=A915ADC4/serialNumber=C3D893B2291B3A1E1BF5F4F041D1052E2CCBB25A Certificate serial: 0167 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w9iTsikbOh4b9fTwQdEFLizLslo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.mft Manifest number: 014C Signing time: Sat 19 Jul 2025 04:54:53 +0000 Manifest this update: Sat 19 Jul 2025 04:54:52 +0000 Manifest next update: Sat 26 Jul 2025 04:54:52 +0000 Files and hashes: 1: w9iTsikbOh4b9fTwQdEFLizLslo.crl (hash: z+VjB0kQy5UbiUbif1ELOZrS2bZUmW1iqUKhxpQjBCw=) 2: ACFC76964A0E11EF91642A7AC4F9AE02.roa (hash: gez5Qlcfm6c6NA79ftuR/sN6GbAgowRygpjom7unUmc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.crl rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w9iTsikbOh4b9fTwQdEFLizLslo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 04:54:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 359 (0x167) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915ADC4, serialNumber=C3D893B2291B3A1E1BF5F4F041D1052E2CCBB25A Validity Not Before: Jul 19 04:54:52 2025 GMT Not After : Jul 26 04:54:52 2025 GMT Subject: CN=687b251c-ebc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c1:1b:50:3a:b4:83:1f:21:fc:99:d9:6a:8b: 48:24:2f:f5:65:7b:77:1b:bc:11:f3:8a:e1:dd:65: 92:a6:27:de:af:99:09:8d:19:86:46:6e:57:02:78: 34:3e:8e:76:54:2b:89:c5:88:a1:af:6b:54:fb:f5: c7:70:ca:a9:7d:7f:3c:75:99:49:03:90:43:0c:54: 21:e4:be:c8:98:c0:b3:25:64:ad:15:2c:32:00:5b: ef:b1:0c:c1:f6:da:0f:aa:b3:cd:e7:2c:b8:ba:17: b4:2c:c9:3e:7c:33:70:88:6e:96:c1:b2:9f:13:79: c7:08:4a:85:40:28:d3:db:f3:94:2d:59:0a:ca:2f: 7d:41:17:8e:8a:a3:90:31:33:d0:17:a7:00:c1:fb: 77:74:e8:d2:d9:94:ee:47:ea:67:c0:c8:c5:0d:5c: e7:f9:da:79:7e:ed:04:b4:2e:9d:e0:64:aa:61:d4: 38:48:0d:38:79:85:bf:2b:f2:57:d0:28:74:2c:b8: b7:50:5a:03:c1:b6:f6:70:38:82:7e:dc:a3:a9:4d: 57:47:9f:21:e4:8d:52:5b:f2:6a:b1:2e:df:be:3f: 79:04:e1:a0:17:5d:8f:6f:ca:65:4e:70:cb:f6:67: 64:5a:02:c3:9e:cd:ff:64:a9:13:4f:bd:8b:5c:d1: 32:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:BA:D7:80:C0:A0:BB:3A:07:AC:C9:A1:A0:E4:0B:2B:B9:85:16:FB X509v3 Authority Key Identifier: keyid:C3:D8:93:B2:29:1B:3A:1E:1B:F5:F4:F0:41:D1:05:2E:2C:CB:B2:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w9iTsikbOh4b9fTwQdEFLizLslo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:f1:a6:7c:17:c2:bf:0a:1f:88:e6:f6:c1:42:a8:c9:1c:7d: f9:70:ed:2d:7d:6c:2a:40:e3:40:04:77:a5:e6:d5:03:af:43: 19:0c:91:bd:7a:a3:29:81:0f:c5:85:4f:1d:3e:11:03:87:1a: 41:d0:6f:8a:c8:a7:e2:0f:4f:e0:2c:28:b3:e6:ad:f9:2b:5d: e4:63:80:bf:f7:15:66:65:98:3c:9c:3d:88:b4:3c:ec:5a:5b: c7:86:45:2b:7c:40:ef:59:a3:97:54:40:3d:23:41:35:b4:bb: 17:05:fd:6e:ec:0d:9b:9d:74:ce:aa:c5:39:d6:59:23:3c:f1: 7d:e5:06:f7:28:b2:23:8a:f4:d3:ba:eb:c6:64:dc:7a:40:bf: e2:8c:c8:8d:68:03:3a:fa:4b:41:4a:d9:c6:d0:50:09:41:93: b0:e9:8b:29:0d:1d:5c:9f:d3:22:83:00:59:fe:7a:80:1f:38: cd:e2:0a:9a:73:2b:26:80:2b:a8:29:12:f3:9c:6f:60:8d:a8: 19:f7:7c:9f:1f:9b:18:e3:d7:f0:39:1a:0b:e6:00:09:d5:76: 87:ad:11:01:25:fe:2b:8e:a0:15:37:c0:ae:65:f0:15:a7:a7: 6b:12:83:a4:91:aa:26:1b:06:f6:e8:95:e9:65:57:dc:ce:7e: 3f:76:0a:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUFEQzQxMTAvBgNVBAUTKEMzRDg5M0IyMjkxQjNBMUUxQkY1RjRGMDQxRDEwNTJF MkNDQkIyNUEwHhcNMjUwNzE5MDQ1NDUyWhcNMjUwNzI2MDQ1NDUyWjAYMRYwFAYD VQQDEw02ODdiMjUxYy1lYmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1sEbUDq0gx8h/JnZaotIJC/1ZXt3G7wR84rh3WWSpifer5kJjRmGRm5XAng0 Po52VCuJxYihr2tU+/XHcMqpfX88dZlJA5BDDFQh5L7ImMCzJWStFSwyAFvvsQzB 9toPqrPN5yy4uhe0LMk+fDNwiG6WwbKfE3nHCEqFQCjT2/OULVkKyi99QReOiqOQ MTPQF6cAwft3dOjS2ZTuR+pnwMjFDVzn+dp5fu0EtC6d4GSqYdQ4SA04eYW/K/JX 0Ch0LLi3UFoDwbb2cDiCftyjqU1XR58h5I1SW/JqsS7fvj95BOGgF12Pb8plTnDL 9mdkWgLDns3/ZKkTT72LXNEyuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPK614DA oLs6B6zJoaDkCyu5hRb7MB8GA1UdIwQYMBaAFMPYk7IpGzoeG/X08EHRBS4sy7Ja MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QURDNC8yRkE0MzRDQUFB QTYxMUVFOTYzQUE2M0FDNEY5QUUwMi93OWlUc2lrYk9oNGI5ZlR3UWRFRkxpekxz bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3c5aVRzaWtiT2g0YjlmVHdRZEVGTGl6THNsby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QURDNC8yRkE0MzRDQUFBQTYxMUVFOTYzQUE2M0FDNEY5QUUwMi93OWlUc2lrYk9o NGI5ZlR3UWRFRkxpekxzbG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB08aZ8F8K/Ch+I5vbBQqjJHH35cO0tfWwqQONABHel5tUDr0MZDJG9 eqMpgQ/FhU8dPhEDhxpB0G+KyKfiD0/gLCiz5q35K13kY4C/9xVmZZg8nD2ItDzs WlvHhkUrfEDvWaOXVEA9I0E1tLsXBf1u7A2bnXTOqsU51lkjPPF95Qb3KLIjivTT uuvGZNx6QL/ijMiNaAM6+ktBStnG0FAJQZOw6YspDR1cn9MigwBZ/nqAHzjN4gqa cysmgCuoKRLznG9gjagZ93yfH5sY49fwORoL5gAJ1XaHrREBJf4rjqAVN8CuZfAV p6drEoOkkaomGwb26JXpZVfczn4/dgrm -----END CERTIFICATE-----Generated at Sun Jul 20 18:39:26 2025 by rpki-client