$ rpki-client -vvf rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft File: -KpwkWtspYPANj63qaX38mJ9c2A.mft (raw, json) Hash identifier: 1lvCHgNzs6Lg0ik9grsdQzutnOmlNNILgsINvHBIgvA= Subject key identifier: 67:FB:B2:4B:D8:2C:94:DC:E7:FB:57:10:1C:5E:14:95:AC:65:77:63 Authority key identifier: F8:AA:70:91:6B:6C:A5:83:C0:36:3E:B7:A9:A5:F7:F2:62:7D:73:60 Certificate issuer: /CN=A915EE53/serialNumber=F8AA70916B6CA583C0363EB7A9A5F7F2627D7360 Certificate serial: 2676 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft Manifest number: 2571 Signing time: Thu 04 Sep 2025 15:51:40 +0000 Manifest this update: Thu 04 Sep 2025 15:51:40 +0000 Manifest next update: Thu 11 Sep 2025 15:51:40 +0000 Files and hashes: 1: -KpwkWtspYPANj63qaX38mJ9c2A.crl (hash: SR6m1nUO3PBw3Cw6Yf3fTDA6VNghg+9+aWrCxsgRwyo=) 2: 9DBB8670790211EC9EE24885C4F9AE02.roa (hash: HAVp5cljtBnNfexhpbWp3fQD4oxFEGOqIu7ZTxc+Cn0=) 3: 5CCAC7F8528C11ECB6101B10C4F9AE02.roa (hash: RIyr8Ughbt9mob5hXoVNYqj5DjcM8cytuIahFNZG+OY=) 4: 86D13B7E571C11EC81276481C4F9AE02.roa (hash: MOs76+y2ZzpmyQheXk3mTC95IHPkn0FNf96cGXOiX14=) 5: 63C97CBAC49E11EBAC936D7AC4F9AE02.roa (hash: Z5qSs34sPKp/u0MZu0MdqYO0kmHEtkJPsT5iKOnHCCM=) 6: CFF5A20078E011EC8357FA15C4F9AE02.roa (hash: 0lnFnxu0rWa+p9n4oerH1rvUz5x82J6mnvG019TSBpo=) 7: 15812F82C4A111EBAE6C7F49C4F9AE02.roa (hash: lPqoKt6e9WB68QkGqWF9uf0n021O/vJN6Ok+8vPm99E=) 8: 6E042EFCABF011EC92152E22C4F9AE02.roa (hash: nSFw75IcZdLxXGKGRDjDilcmAybSCgLtcoRvUszM+xw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.crl rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 15:51:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9846 (0x2676) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EE53, serialNumber=F8AA70916B6CA583C0363EB7A9A5F7F2627D7360 Validity Not Before: Sep 4 15:51:40 2025 GMT Not After : Sep 11 15:51:40 2025 GMT Subject: CN=68b9b58c-77e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:21:55:2d:e8:50:33:27:83:9f:26:22:5c:fd: 66:0a:ec:d6:ec:60:50:e3:3d:1f:b7:39:f2:5f:17: 34:9b:92:e6:f7:12:9e:42:d0:a5:6d:a8:24:61:6d: cf:2a:16:e6:86:cb:35:bd:54:19:8e:b2:aa:9b:30: 9b:d8:23:e9:a0:d6:01:d4:ad:4b:24:b6:90:33:56: eb:bb:8a:f3:0c:4b:09:69:e3:43:51:2f:f9:c1:e1: 28:8f:ae:17:e3:18:b1:6b:b0:00:e3:9b:44:d0:38: bd:4f:05:41:03:d8:d4:8d:54:d2:97:9b:57:4b:65: 81:e8:ba:d1:a2:1b:53:de:32:15:b9:81:ed:63:2e: d5:a6:4b:73:9d:f6:bf:d7:8b:bf:8d:d1:88:28:a6: d9:a3:b0:a0:32:bd:b5:de:fb:6e:b0:6e:3f:eb:0d: 26:2b:1d:ea:c4:95:6c:40:70:e4:cb:51:56:18:06: f2:36:85:95:0c:2f:ca:a1:3f:c6:8d:ae:1f:86:af: c4:f5:c5:70:94:56:aa:15:1d:49:3f:7f:71:22:aa: 95:44:ef:97:9e:b2:cd:1b:84:a1:62:80:35:1f:84: fb:31:de:b8:13:7a:cb:66:28:da:1d:fd:af:dd:68: 96:17:80:8f:4f:b5:e9:7f:94:23:38:fa:54:ef:5c: 6f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:FB:B2:4B:D8:2C:94:DC:E7:FB:57:10:1C:5E:14:95:AC:65:77:63 X509v3 Authority Key Identifier: keyid:F8:AA:70:91:6B:6C:A5:83:C0:36:3E:B7:A9:A5:F7:F2:62:7D:73:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:22:29:99:b2:84:9f:57:09:fe:ea:e2:dc:d0:e9:35:c7:c9: 2e:64:83:88:c5:ca:09:3a:c0:35:30:65:0a:34:be:f1:ee:a5: 45:a9:07:58:12:46:c2:1f:92:16:62:88:4b:2b:7b:08:09:d9: 48:2f:cb:f7:49:4c:ac:8d:cd:9e:6b:a4:77:89:1e:84:14:26: 80:7c:d9:b3:ad:7d:4d:73:eb:aa:cf:7d:87:42:0f:09:1f:63: a2:b9:5f:5e:ca:dd:41:5e:8c:89:38:40:01:df:6d:da:b4:d1: ce:ce:15:d5:36:55:ae:de:0a:a6:6d:cd:df:8f:2f:fd:38:60: 18:b9:39:b2:2f:33:0f:4b:04:be:93:09:0b:4c:97:77:ed:5e: 54:f0:b2:c2:d9:51:27:d6:c6:b7:f4:e9:bf:28:cc:30:eb:c1: 86:1e:d3:2d:bc:19:5e:a4:62:dc:93:f6:cc:fc:24:d0:09:be: de:c0:ce:4f:8e:28:7e:4c:9d:77:4d:3d:82:5c:cd:b8:7a:54: 99:cb:68:72:62:0a:ca:5c:58:96:46:95:38:e2:e2:3a:49:7b: ca:53:a2:44:8b:26:0e:5d:a2:c2:a4:34:c0:d3:6b:87:3a:0c: 6d:25:5b:e3:82:ab:63:7e:35:33:a4:b4:54:d5:9b:4b:93:2e: 0a:30:4f:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJnYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUVFNTMxMTAvBgNVBAUTKEY4QUE3MDkxNkI2Q0E1ODNDMDM2M0VCN0E5QTVGN0Yy NjI3RDczNjAwHhcNMjUwOTA0MTU1MTQwWhcNMjUwOTExMTU1MTQwWjAYMRYwFAYD VQQDEw02OGI5YjU4Yy03N2U5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqSFVLehQMyeDnyYiXP1mCuzW7GBQ4z0ftznyXxc0m5Lm9xKeQtClbagkYW3P Khbmhss1vVQZjrKqmzCb2CPpoNYB1K1LJLaQM1bru4rzDEsJaeNDUS/5weEoj64X 4xixa7AA45tE0Di9TwVBA9jUjVTSl5tXS2WB6LrRohtT3jIVuYHtYy7Vpktznfa/ 14u/jdGIKKbZo7CgMr213vtusG4/6w0mKx3qxJVsQHDky1FWGAbyNoWVDC/KoT/G ja4fhq/E9cVwlFaqFR1JP39xIqqVRO+XnrLNG4ShYoA1H4T7Md64E3rLZijaHf2v 3WiWF4CPT7Xpf5QjOPpU71xvSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGf7skvY LJTc5/tXEBxeFJWsZXdjMB8GA1UdIwQYMBaAFPiqcJFrbKWDwDY+t6ml9/JifXNg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUU1My8zODUxMTg0MDQ1 ODgxMUU1OUIyRDgzNzFDNEY5QUUwMi8tS3B3a1d0c3BZUEFOajYzcWFYMzhtSjlj MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1LcHdrV3RzcFlQQU5qNjNxYVgzOG1KOWMyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RUU1My8zODUxMTg0MDQ1ODgxMUU1OUIyRDgzNzFDNEY5QUUwMi8tS3B3a1d0c3BZ UEFOajYzcWFYMzhtSjljMkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArIimZsoSfVwn+6uLc0Ok1x8kuZIOIxcoJOsA1MGUKNL7x7qVFqQdY EkbCH5IWYohLK3sICdlIL8v3SUysjc2ea6R3iR6EFCaAfNmzrX1Nc+uqz32HQg8J H2OiuV9eyt1BXoyJOEAB323atNHOzhXVNlWu3gqmbc3fjy/9OGAYuTmyLzMPSwS+ kwkLTJd37V5U8LLC2VEn1sa39Om/KMww68GGHtMtvBlepGLck/bM/CTQCb7ewM5P jih+TJ13TT2CXM24elSZy2hyYgrKXFiWRpU44uI6SXvKU6JEiyYOXaLCpDTA02uH OgxtJVvjgqtjfjUzpLRU1ZtLky4KME+0 -----END CERTIFICATE-----Generated at Sat Sep 6 08:14:50 2025 by rpki-client