$ rpki-client -vvf rpki.apnic.net/member_repository/A9146304/E788C8A2258211E990B3783AC4F9AE02/RhQllCdGSHS-fet79CEnLLI9oYg.mft File: RhQllCdGSHS-fet79CEnLLI9oYg.mft (raw, json) Hash identifier: zT1k/SqkJllgyoMLJRtOK5Dw4XmAtdMW4Epv6MckOf8= Subject key identifier: 99:88:80:EC:8F:75:BE:F2:B9:9E:ED:89:0B:F2:4F:73:91:D1:5F:60 Authority key identifier: 46:14:25:94:27:46:48:74:BE:7D:EB:7B:F4:21:27:2C:B2:3D:A1:88 Certificate issuer: /CN=A9146304/serialNumber=4614259427464874BE7DEB7BF421272CB23DA188 Certificate serial: 10EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RhQllCdGSHS-fet79CEnLLI9oYg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146304/E788C8A2258211E990B3783AC4F9AE02/RhQllCdGSHS-fet79CEnLLI9oYg.mft Manifest number: 10E3 Signing time: Fri 08 Aug 2025 17:56:43 +0000 Manifest this update: Fri 08 Aug 2025 17:56:42 +0000 Manifest next update: Fri 15 Aug 2025 17:56:42 +0000 Files and hashes: 1: RhQllCdGSHS-fet79CEnLLI9oYg.crl (hash: LTlxo8TJiLNNhVF87je3w/8dY+mAfK3uOGEBXz9h3qA=) 2: 65B35A86577011EC8F00A65AC4F9AE02.roa (hash: 4ddMyzUmIiWucVfUmzZbGoeIuz/De3rIfnynVpK/dAw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146304/E788C8A2258211E990B3783AC4F9AE02/RhQllCdGSHS-fet79CEnLLI9oYg.crl rsync://rpki.apnic.net/member_repository/A9146304/E788C8A2258211E990B3783AC4F9AE02/RhQllCdGSHS-fet79CEnLLI9oYg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RhQllCdGSHS-fet79CEnLLI9oYg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4330 (0x10ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146304, serialNumber=4614259427464874BE7DEB7BF421272CB23DA188 Validity Not Before: Aug 8 17:56:42 2025 GMT Not After : Aug 15 17:56:42 2025 GMT Subject: CN=68963a5a-8458 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f6:e4:8a:82:8f:d4:52:a7:1a:1d:3c:22:34: 25:cd:68:5c:38:c5:8a:50:c5:06:2a:4a:98:b4:4c: fe:55:ac:47:73:b1:cb:20:59:b2:68:ed:00:fb:e2: 6d:42:a8:9c:8a:bd:11:d6:77:e4:3a:62:1e:33:ca: 6f:8c:f3:9b:b3:58:77:f8:4e:ad:cf:66:ad:c8:8f: 8b:ec:42:d5:df:00:60:11:57:e3:af:4e:fa:41:c8: 5b:79:4b:b6:c5:e9:c2:0a:e2:d9:1a:61:eb:be:5f: bc:8f:22:79:c7:22:03:06:d5:05:24:44:81:40:8e: 23:24:67:3a:9c:36:34:36:df:4f:34:72:f2:ba:eb: 1e:86:d8:c7:00:ec:ea:10:1a:89:c3:bf:da:9f:e6: fa:81:ed:ef:a6:c2:ae:bf:00:5e:50:3d:80:28:01: 3e:db:f3:6c:a6:90:33:a2:e4:f9:8e:d7:6e:14:38: 99:29:5f:22:ae:e2:84:41:47:de:a6:6c:aa:8e:25: 31:dd:98:ca:3b:ea:65:ce:0f:53:34:cc:2a:42:82: 63:29:10:b8:b5:86:36:69:a5:28:52:aa:13:14:38: 5a:d0:76:e4:87:44:06:89:50:47:fe:db:8c:37:03: 4e:a2:e9:f7:33:42:f9:f3:27:0c:98:7b:72:d1:d2: a4:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:88:80:EC:8F:75:BE:F2:B9:9E:ED:89:0B:F2:4F:73:91:D1:5F:60 X509v3 Authority Key Identifier: keyid:46:14:25:94:27:46:48:74:BE:7D:EB:7B:F4:21:27:2C:B2:3D:A1:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146304/E788C8A2258211E990B3783AC4F9AE02/RhQllCdGSHS-fet79CEnLLI9oYg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RhQllCdGSHS-fet79CEnLLI9oYg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146304/E788C8A2258211E990B3783AC4F9AE02/RhQllCdGSHS-fet79CEnLLI9oYg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:a1:6f:4f:6e:02:8b:5e:ef:37:62:4c:4d:3b:6a:fb:1a:30: 39:03:bc:7c:7d:6f:0e:af:0b:72:d6:da:31:77:ae:b5:ff:a0: be:71:64:e8:a2:1d:1d:1e:04:18:d7:58:47:69:5b:ee:96:3f: a1:a5:02:1b:5f:41:be:08:e0:f2:35:4d:51:68:35:76:df:56: e4:26:93:00:92:9c:bc:cc:ed:20:ea:ba:5c:f7:3e:78:94:f8: 7f:a8:e9:1b:f6:a1:d0:10:1c:74:46:79:0f:ba:70:24:15:f1: 68:3c:5e:4b:eb:16:bc:d8:25:28:dc:e1:c5:a4:34:9f:48:d1: 58:1e:27:aa:ae:45:22:23:1a:b4:c8:8d:90:9a:8a:41:b0:1a: 49:ac:f1:61:10:68:20:b0:4a:57:a3:41:47:14:ac:b9:ed:d9: 4f:db:38:68:17:39:0c:92:a9:aa:b0:29:17:6b:b7:1d:c6:d7: 4c:3c:a3:fe:8e:81:49:a6:1c:1c:a3:16:95:80:53:a4:b2:84: 7c:a7:e4:2e:28:9d:83:08:55:9f:b1:2d:ac:8c:16:e6:d7:e3: 05:98:1d:0d:03:50:9d:78:c9:de:a2:1c:28:a4:7d:e4:57:fb: 85:e5:62:a2:e3:8b:94:66:ed:bd:59:1c:c2:51:ee:28:b1:ab: 32:57:3b:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYzMDQxMTAvBgNVBAUTKDQ2MTQyNTk0Mjc0NjQ4NzRCRTdERUI3QkY0MjEyNzJD QjIzREExODgwHhcNMjUwODA4MTc1NjQyWhcNMjUwODE1MTc1NjQyWjAYMRYwFAYD VQQDEw02ODk2M2E1YS04NDU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtPbkioKP1FKnGh08IjQlzWhcOMWKUMUGKkqYtEz+VaxHc7HLIFmyaO0A++Jt Qqicir0R1nfkOmIeM8pvjPObs1h3+E6tz2atyI+L7ELV3wBgEVfjr076QchbeUu2 xenCCuLZGmHrvl+8jyJ5xyIDBtUFJESBQI4jJGc6nDY0Nt9PNHLyuusehtjHAOzq EBqJw7/an+b6ge3vpsKuvwBeUD2AKAE+2/NsppAzouT5jtduFDiZKV8iruKEQUfe pmyqjiUx3ZjKO+plzg9TNMwqQoJjKRC4tYY2aaUoUqoTFDha0Hbkh0QGiVBH/tuM NwNOoun3M0L58ycMmHty0dKkPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJmIgOyP db7yuZ7tiQvyT3OR0V9gMB8GA1UdIwQYMBaAFEYUJZQnRkh0vn3re/QhJyyyPaGI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjMwNC9FNzg4QzhBMjI1 ODIxMUU5OTBCMzc4M0FDNEY5QUUwMi9SaFFsbENkR1NIUy1mZXQ3OUNFbkxMSTlv WWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JoUWxsQ2RHU0hTLWZldDc5Q0VuTExJOW9ZZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjMwNC9FNzg4QzhBMjI1ODIxMUU5OTBCMzc4M0FDNEY5QUUwMi9SaFFsbENkR1NI Uy1mZXQ3OUNFbkxMSTlvWWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0oW9PbgKLXu83YkxNO2r7GjA5A7x8fW8Orwty1toxd661/6C+cWTo oh0dHgQY11hHaVvulj+hpQIbX0G+CODyNU1RaDV231bkJpMAkpy8zO0g6rpc9z54 lPh/qOkb9qHQEBx0RnkPunAkFfFoPF5L6xa82CUo3OHFpDSfSNFYHieqrkUiIxq0 yI2QmopBsBpJrPFhEGggsEpXo0FHFKy57dlP2zhoFzkMkqmqsCkXa7cdxtdMPKP+ joFJphwcoxaVgFOksoR8p+QuKJ2DCFWfsS2sjBbm1+MFmB0NA1CdeMneohwopH3k V/uF5WKi44uUZu29WRzCUe4osasyVzuK -----END CERTIFICATE-----Generated at Fri Aug 8 20:52:37 2025 by rpki-client