$ rpki-client -vvf rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.mft File: 9fHi3rMlVisihf-LXeJd8srfdwc.mft (raw, json) Hash identifier: QavKCLe+54ZdOMC19b9H/o7px413eDmI4Pc4qA/Au90= Subject key identifier: 26:F7:C4:60:DF:60:8A:97:6C:9D:CA:F3:2C:F9:22:37:61:50:3D:5A Authority key identifier: F5:F1:E2:DE:B3:25:56:2B:22:85:FF:8B:5D:E2:5D:F2:CA:DF:77:07 Certificate issuer: /CN=A915B4B5/serialNumber=F5F1E2DEB325562B2285FF8B5DE25DF2CADF7707 Certificate serial: 0104 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fHi3rMlVisihf-LXeJd8srfdwc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.mft Manifest number: 0102 Signing time: Sat 23 Aug 2025 05:12:59 +0000 Manifest this update: Sat 23 Aug 2025 05:12:59 +0000 Manifest next update: Sat 30 Aug 2025 05:12:59 +0000 Files and hashes: 1: 9fHi3rMlVisihf-LXeJd8srfdwc.crl (hash: hxhPXSRLWSnws9SCftbk/EyF2GNYpqC7TCO5itK9LVM=) 2: E0207030F13611EE869F9E34C4F9AE02.roa (hash: 1cTaBvBAhxFneEeGlAFuRr/tcaFQd3vN8aAkRfuybSk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.crl rsync://rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fHi3rMlVisihf-LXeJd8srfdwc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:12:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 260 (0x104) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B4B5, serialNumber=F5F1E2DEB325562B2285FF8B5DE25DF2CADF7707 Validity Not Before: Aug 23 05:12:59 2025 GMT Not After : Aug 30 05:12:59 2025 GMT Subject: CN=68a94ddb-ca15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:20:96:28:9d:c2:b3:59:61:f6:08:57:77:b4: 1d:5f:cb:98:f3:1c:d7:cf:d8:70:6a:0e:61:92:be: 96:6e:a1:cd:88:58:76:8a:d8:b4:1c:93:eb:a0:8f: b3:0a:e6:57:5b:82:00:91:86:64:cc:7c:21:eb:43: e7:5a:cf:76:a4:ab:31:a3:85:cf:70:cd:be:fd:1e: 4a:de:51:64:4b:db:11:62:cc:d4:6d:a6:a2:4a:88: c5:5f:24:8f:fe:76:60:75:3b:c1:db:d8:d3:f5:18: 22:b9:91:ad:f6:19:22:f1:e0:89:09:e7:cd:57:2e: 00:84:72:7b:e3:84:43:17:56:c9:08:54:5c:2f:94: 79:47:3c:44:de:fd:7b:d9:f0:b3:4b:24:d0:68:c0: 1f:a3:66:5f:86:d1:92:4e:64:d3:2c:a7:83:d8:66: df:60:b1:ae:1e:29:38:b3:a2:04:63:ca:d4:3a:52: 42:83:14:60:5b:f7:4e:91:10:db:e9:45:72:7f:fd: a2:00:c7:33:a4:f7:f3:05:33:77:7b:b3:7f:8a:01: 71:69:ab:46:e1:67:93:3c:65:d3:4b:e6:51:31:90: 84:8f:4e:3a:a7:5a:b6:f9:27:51:e6:61:22:e6:29: d0:38:75:98:83:fb:61:05:04:91:97:14:b2:23:f0: 55:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:F7:C4:60:DF:60:8A:97:6C:9D:CA:F3:2C:F9:22:37:61:50:3D:5A X509v3 Authority Key Identifier: keyid:F5:F1:E2:DE:B3:25:56:2B:22:85:FF:8B:5D:E2:5D:F2:CA:DF:77:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fHi3rMlVisihf-LXeJd8srfdwc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:b4:56:ca:7e:fa:07:75:fc:46:c4:8b:21:6d:d1:a9:fa:7e: 1a:c6:1e:11:b4:13:e9:a1:82:97:37:a5:3a:12:63:66:41:d5: bb:68:c2:e7:73:ff:e8:04:ba:d3:68:03:d9:a4:ff:d5:16:90: 0e:9f:e3:c1:b9:c6:d6:19:e1:fe:a3:de:f5:c8:81:a0:17:12: e6:54:b3:c5:7a:b8:c2:66:0e:2f:1e:59:84:e8:bc:83:b6:ca: 6a:f5:53:9a:0b:c0:1e:28:7f:68:5f:25:04:0c:20:cb:eb:4a: c2:ea:fe:35:38:25:f1:52:c7:56:8b:01:bc:c1:d6:27:31:5a: 2b:61:d8:99:05:dc:06:1a:71:5c:bb:5a:68:5d:a2:ad:47:e5: 1a:cd:67:ea:94:fa:a8:a3:ee:34:04:d2:43:10:a0:88:e8:35: a5:18:03:1b:50:83:50:fe:68:8b:c9:e8:9d:b9:b5:92:06:b6: 84:d7:02:5c:e0:9d:4b:40:96:0e:56:60:71:f7:02:04:79:2f: cd:30:55:fc:b2:2d:eb:ee:bc:dd:a3:bc:42:26:8d:e0:9e:9d: e8:2c:f9:3c:8a:97:c6:87:56:eb:24:61:2f:de:71:79:10:71: f4:bc:d4:1b:70:2d:d5:2b:10:4e:21:87:3e:16:7b:1e:b2:8a: b5:9c:64:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI0QjUxMTAvBgNVBAUTKEY1RjFFMkRFQjMyNTU2MkIyMjg1RkY4QjVERTI1REYy Q0FERjc3MDcwHhcNMjUwODIzMDUxMjU5WhcNMjUwODMwMDUxMjU5WjAYMRYwFAYD VQQDEw02OGE5NGRkYi1jYTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyiCWKJ3Cs1lh9ghXd7QdX8uY8xzXz9hwag5hkr6WbqHNiFh2iti0HJProI+z CuZXW4IAkYZkzHwh60PnWs92pKsxo4XPcM2+/R5K3lFkS9sRYszUbaaiSojFXySP /nZgdTvB29jT9RgiuZGt9hki8eCJCefNVy4AhHJ744RDF1bJCFRcL5R5RzxE3v17 2fCzSyTQaMAfo2ZfhtGSTmTTLKeD2GbfYLGuHik4s6IEY8rUOlJCgxRgW/dOkRDb 6UVyf/2iAMczpPfzBTN3e7N/igFxaatG4WeTPGXTS+ZRMZCEj046p1q2+SdR5mEi 5inQOHWYg/thBQSRlxSyI/BVVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCb3xGDf YIqXbJ3K8yz5IjdhUD1aMB8GA1UdIwQYMBaAFPXx4t6zJVYrIoX/i13iXfLK33cH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjRCNS80MENFOUYyQUYx MzYxMUVFOTA4QkYwMzJDNEY5QUUwMi85ZkhpM3JNbFZpc2loZi1MWGVKZDhzcmZk d2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlmSGkzck1sVmlzaWhmLUxYZUpkOHNyZmR3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjRCNS80MENFOUYyQUYxMzYxMUVFOTA4QkYwMzJDNEY5QUUwMi85ZkhpM3JNbFZp c2loZi1MWGVKZDhzcmZkd2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWtFbKfvoHdfxGxIshbdGp+n4axh4RtBPpoYKXN6U6EmNmQdW7aMLn c//oBLrTaAPZpP/VFpAOn+PBucbWGeH+o971yIGgFxLmVLPFerjCZg4vHlmE6LyD tspq9VOaC8AeKH9oXyUEDCDL60rC6v41OCXxUsdWiwG8wdYnMVorYdiZBdwGGnFc u1poXaKtR+UazWfqlPqoo+40BNJDEKCI6DWlGAMbUINQ/miLyeidubWSBraE1wJc 4J1LQJYOVmBx9wIEeS/NMFX8si3r7rzdo7xCJo3gnp3oLPk8ipfGh1brJGEv3nF5 EHH0vNQbcC3VKxBOIYc+Fnsesoq1nGQx -----END CERTIFICATE-----Generated at Sun Aug 24 21:33:14 2025 by rpki-client