$ rpki-client -vvf rpki.apnic.net/member_repository/A9181C75/903CE126909511EA8292085FC4F9AE02/15fpHhsnQJH3397fpbABL-m1roc.mft File: 15fpHhsnQJH3397fpbABL-m1roc.mft (raw, json) Hash identifier: UxANx6rI2oGrw5kI6DFFa3JzYqARNru+mmCESW8PbTs= Subject key identifier: 6B:80:11:B7:65:89:2E:11:6A:C5:90:AA:BC:89:33:6D:5B:9E:9A:9E Authority key identifier: D7:97:E9:1E:1B:27:40:91:F7:DF:DE:DF:A5:B0:01:2F:E9:B5:AE:87 Certificate issuer: /CN=A9181C75/serialNumber=D797E91E1B274091F7DFDEDFA5B0012FE9B5AE87 Certificate serial: 09B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15fpHhsnQJH3397fpbABL-m1roc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9181C75/903CE126909511EA8292085FC4F9AE02/15fpHhsnQJH3397fpbABL-m1roc.mft Manifest number: 09B0 Signing time: Mon 08 Sep 2025 20:03:41 +0000 Manifest this update: Mon 08 Sep 2025 20:03:40 +0000 Manifest next update: Mon 15 Sep 2025 20:03:40 +0000 Files and hashes: 1: 15fpHhsnQJH3397fpbABL-m1roc.crl (hash: yh7GkbOBVP9q1DFUoawRK+Atv2yI+XMDmsjZl3co5ac=) 2: 1EC631B2FFB211ECA2EBD652C4F9AE02.roa (hash: 9yZSRRj+c0xUC0wLONS1pajEgEnXcu6/+H0zYnjOy0o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9181C75/903CE126909511EA8292085FC4F9AE02/15fpHhsnQJH3397fpbABL-m1roc.crl rsync://rpki.apnic.net/member_repository/A9181C75/903CE126909511EA8292085FC4F9AE02/15fpHhsnQJH3397fpbABL-m1roc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15fpHhsnQJH3397fpbABL-m1roc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 20:03:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2489 (0x9b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181C75, serialNumber=D797E91E1B274091F7DFDEDFA5B0012FE9B5AE87 Validity Not Before: Sep 8 20:03:40 2025 GMT Not After : Sep 15 20:03:40 2025 GMT Subject: CN=68bf369c-d094 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:93:e9:b2:f3:0d:0c:37:e3:8b:f8:cf:6f:67: 14:cb:f5:57:c9:6a:cc:42:c4:75:0c:c7:ac:1b:4e: 60:5b:6b:c2:93:73:3e:2d:8c:ce:e6:51:53:db:3a: 07:63:28:6a:a9:25:93:d7:32:8a:bd:ed:b6:f7:2f: 79:87:9c:1f:36:49:c9:80:3b:45:1f:87:c6:ed:f7: 42:79:9e:9b:a3:dd:23:92:dc:5d:1a:82:0f:61:fe: f4:84:7d:04:53:e8:f0:5d:d3:da:44:3c:6a:47:d8: e5:34:82:0a:ab:3c:e9:96:3e:aa:16:e8:5b:a4:43: 66:9f:7f:62:df:83:d2:d9:9d:fe:cd:3e:f0:7e:ae: 57:b6:5f:4c:ce:be:a3:0b:42:26:bc:44:54:72:c5: 0e:3f:09:49:32:3d:d2:46:d0:e5:24:0d:c5:c8:51: 1d:a7:8c:72:11:a4:4d:2a:8d:32:3c:32:31:08:de: e5:a4:f6:1e:e4:f9:6a:c9:2f:cc:8b:c7:4d:e6:2f: 6f:f3:72:dd:24:da:9d:08:6f:0a:74:76:7a:bc:8a: 0f:c7:00:13:fd:9d:6c:ae:f9:79:3b:a5:82:31:aa: 82:1f:35:89:0e:45:84:14:be:ec:c7:14:77:eb:81: 22:de:76:04:57:57:1c:4b:ad:cf:cc:e6:64:2b:f2: aa:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:80:11:B7:65:89:2E:11:6A:C5:90:AA:BC:89:33:6D:5B:9E:9A:9E X509v3 Authority Key Identifier: keyid:D7:97:E9:1E:1B:27:40:91:F7:DF:DE:DF:A5:B0:01:2F:E9:B5:AE:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9181C75/903CE126909511EA8292085FC4F9AE02/15fpHhsnQJH3397fpbABL-m1roc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15fpHhsnQJH3397fpbABL-m1roc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181C75/903CE126909511EA8292085FC4F9AE02/15fpHhsnQJH3397fpbABL-m1roc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:12:ac:d7:cd:24:30:5d:bd:e4:fd:12:fd:e1:72:e8:41:15: 9a:97:4e:0c:6e:f1:eb:88:c3:86:28:39:14:93:7d:a6:4d:3b: 78:6f:40:48:5e:4a:52:b8:de:1a:1f:65:46:67:0e:a5:ea:c2: 06:72:b8:ac:06:a6:89:af:5b:c3:e7:5e:c7:73:8d:68:76:d3: c0:2e:b2:0e:2e:78:5c:62:95:6e:4d:91:54:eb:fe:67:7d:df: b0:2f:b2:bb:f5:74:bc:e0:4c:93:cd:b3:35:38:0c:d4:cf:8e: 04:70:c3:f3:85:ab:3a:a8:fc:a1:5a:d4:b3:81:39:a9:10:e8: 8c:ae:5c:b7:7e:24:6e:5c:57:c0:f8:6e:68:73:e9:5e:e8:c3: 00:b3:27:4e:89:70:99:3c:f5:e4:ac:b8:b4:25:2e:c7:46:c0: 9a:aa:f9:ab:c6:aa:b7:dd:f8:d9:0e:51:03:f2:84:ba:0f:1b: 0b:98:81:35:dd:17:76:17:1b:f9:b5:b6:e9:92:68:60:1a:7b: c9:2a:77:4a:73:c9:a1:0c:4d:0f:8d:9b:f7:88:c3:87:43:27: cf:f0:9c:c0:58:85:6c:e2:f3:c5:19:29:d5:ec:90:a6:51:8a: 99:9c:0f:8e:ff:81:c3:b7:21:af:49:f8:39:94:a0:97:87:05: 66:62:7f:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCbkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODFDNzUxMTAvBgNVBAUTKEQ3OTdFOTFFMUIyNzQwOTFGN0RGREVERkE1QjAwMTJG RTlCNUFFODcwHhcNMjUwOTA4MjAwMzQwWhcNMjUwOTE1MjAwMzQwWjAYMRYwFAYD VQQDEw02OGJmMzY5Yy1kMDk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx5PpsvMNDDfji/jPb2cUy/VXyWrMQsR1DMesG05gW2vCk3M+LYzO5lFT2zoH YyhqqSWT1zKKve229y95h5wfNknJgDtFH4fG7fdCeZ6bo90jktxdGoIPYf70hH0E U+jwXdPaRDxqR9jlNIIKqzzplj6qFuhbpENmn39i34PS2Z3+zT7wfq5Xtl9Mzr6j C0ImvERUcsUOPwlJMj3SRtDlJA3FyFEdp4xyEaRNKo0yPDIxCN7lpPYe5PlqyS/M i8dN5i9v83LdJNqdCG8KdHZ6vIoPxwAT/Z1srvl5O6WCMaqCHzWJDkWEFL7sxxR3 64Ei3nYEV1ccS63PzOZkK/KqyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGuAEbdl iS4RasWQqryJM21bnpqeMB8GA1UdIwQYMBaAFNeX6R4bJ0CR99/e36WwAS/pta6H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MUM3NS85MDNDRTEyNjkw OTUxMUVBODI5MjA4NUZDNEY5QUUwMi8xNWZwSGhzblFKSDMzOTdmcGJBQkwtbTFy b2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzE1ZnBIaHNuUUpIMzM5N2ZwYkFCTC1tMXJvYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MUM3NS85MDNDRTEyNjkwOTUxMUVBODI5MjA4NUZDNEY5QUUwMi8xNWZwSGhzblFK SDMzOTdmcGJBQkwtbTFyb2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkEqzXzSQwXb3k/RL94XLoQRWal04MbvHriMOGKDkUk32mTTt4b0BI XkpSuN4aH2VGZw6l6sIGcrisBqaJr1vD517Hc41odtPALrIOLnhcYpVuTZFU6/5n fd+wL7K79XS84EyTzbM1OAzUz44EcMPzhas6qPyhWtSzgTmpEOiMrly3fiRuXFfA +G5oc+le6MMAsydOiXCZPPXkrLi0JS7HRsCaqvmrxqq33fjZDlED8oS6DxsLmIE1 3Rd2Fxv5tbbpkmhgGnvJKndKc8mhDE0PjZv3iMOHQyfP8JzAWIVs4vPFGSnV7JCm UYqZnA+O/4HDtyGvSfg5lKCXhwVmYn8x -----END CERTIFICATE-----Generated at Tue Sep 9 10:19:40 2025 by rpki-client