$ rpki-client -vvf rpki.apnic.net/member_repository/A9180669/77E904C824B111F0A05B0064C4F9AE02/rLhNci0lVbSDPOQGgw_b_pgrfGY.mft File: rLhNci0lVbSDPOQGgw_b_pgrfGY.mft (raw, json) Hash identifier: nv/IqpOk34EPv+qIFXDbg2PWSteZoYLzVVIl353VFmQ= Subject key identifier: 45:CD:C3:56:F7:25:33:C5:0A:AF:E9:BE:9F:46:DC:90:63:5A:06:52 Authority key identifier: AC:B8:4D:72:2D:25:55:B4:83:3C:E4:06:83:0F:DB:FE:98:2B:7C:66 Certificate issuer: /CN=A9180669/serialNumber=ACB84D722D2555B4833CE406830FDBFE982B7C66 Certificate serial: 61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLhNci0lVbSDPOQGgw_b_pgrfGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180669/77E904C824B111F0A05B0064C4F9AE02/rLhNci0lVbSDPOQGgw_b_pgrfGY.mft Manifest number: 60 Signing time: Wed 05 Nov 2025 07:15:30 +0000 Manifest this update: Wed 05 Nov 2025 07:15:29 +0000 Manifest next update: Wed 12 Nov 2025 07:15:29 +0000 Files and hashes: 1: rLhNci0lVbSDPOQGgw_b_pgrfGY.crl (hash: KJmOufdZJWwxjTfwIVP5he6+jhqFPX/fq2ViwiwvlLQ=) 2: 7D1BFC5E24B411F08834DE10C4F9AE02.roa (hash: diVe3oDK8BNzbsZfVF9MUY+tHtrxSbiFO+M9PazMfpE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180669/77E904C824B111F0A05B0064C4F9AE02/rLhNci0lVbSDPOQGgw_b_pgrfGY.crl rsync://rpki.apnic.net/member_repository/A9180669/77E904C824B111F0A05B0064C4F9AE02/rLhNci0lVbSDPOQGgw_b_pgrfGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLhNci0lVbSDPOQGgw_b_pgrfGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:15:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 97 (0x61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180669, serialNumber=ACB84D722D2555B4833CE406830FDBFE982B7C66 Validity Not Before: Nov 5 07:15:29 2025 GMT Not After : Nov 12 07:15:29 2025 GMT Subject: CN=690af992-20dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:24:c0:f9:76:01:44:8b:58:d7:30:2b:6d:d2: e9:72:dc:fe:52:5f:c3:04:42:00:11:83:01:a0:3c: 40:4d:0c:75:a4:45:31:54:dd:a9:71:84:cd:77:2a: 55:88:59:44:96:5b:63:97:1b:9b:cb:8e:a8:15:ef: ba:c3:12:2a:bf:6e:40:56:fb:42:49:66:e6:ea:18: 2e:f6:90:49:14:f6:90:51:da:cf:85:77:d1:6f:68: 44:23:56:d1:a3:b0:54:68:97:80:31:cc:13:b3:8c: c7:e5:16:ed:72:5e:b3:9b:b1:d3:0a:df:f0:a6:12: 50:75:ea:e3:a1:da:8e:b1:83:4e:1b:e8:b1:b6:71: 21:d2:d5:ea:f5:c2:a1:44:82:66:5e:38:68:40:d9: 7f:d9:35:b4:d0:80:84:4b:68:12:7b:13:25:13:08: 63:29:03:63:52:61:c8:e6:12:95:78:3b:a8:36:3f: 47:85:cd:b3:06:46:f5:ff:9c:b4:60:41:1b:4f:30: 0b:df:e6:ec:06:1b:78:b1:c7:dc:ce:87:5b:c2:0b: 54:81:49:44:08:89:a9:fc:2d:72:a1:f2:b1:9b:d9: 59:da:04:a6:48:e3:c1:77:78:90:86:f2:fe:63:bf: e0:4f:47:5a:a0:df:a2:e0:cc:55:4c:bb:c6:cf:55: eb:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:CD:C3:56:F7:25:33:C5:0A:AF:E9:BE:9F:46:DC:90:63:5A:06:52 X509v3 Authority Key Identifier: keyid:AC:B8:4D:72:2D:25:55:B4:83:3C:E4:06:83:0F:DB:FE:98:2B:7C:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180669/77E904C824B111F0A05B0064C4F9AE02/rLhNci0lVbSDPOQGgw_b_pgrfGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLhNci0lVbSDPOQGgw_b_pgrfGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180669/77E904C824B111F0A05B0064C4F9AE02/rLhNci0lVbSDPOQGgw_b_pgrfGY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:19:06:13:91:1b:70:95:42:11:88:dc:44:9b:bc:fb:eb:82: bd:45:3f:92:2b:b2:95:55:20:80:15:59:10:03:2d:77:52:4f: 8d:e9:c8:75:35:ad:c7:18:80:11:2c:8a:92:f7:e0:7b:30:29: b5:97:af:af:b7:f1:ab:3c:1a:fa:d6:7a:92:e6:4c:6b:82:c1: e4:1e:2c:03:75:27:16:75:c7:49:cf:b8:0c:c7:df:23:72:2f: 3d:ff:0e:12:6c:8f:52:ef:cb:2e:c3:c8:39:63:8e:df:60:2d: 29:11:c4:0d:0c:05:16:69:5d:a9:92:1a:23:de:20:d2:68:29: f7:98:f6:8d:df:b2:40:3f:90:b9:96:be:5e:81:16:d9:2b:39: 17:c4:04:c2:1e:9b:a9:e4:d9:d7:75:04:9b:32:e6:5a:d0:f0: fb:8f:ca:f8:c2:e3:7e:10:aa:02:85:b7:0a:84:d6:91:b0:61: 04:f3:83:66:61:87:50:01:18:24:d3:1d:64:d0:11:2f:84:04: c4:47:7f:dd:3b:22:73:d6:01:bc:f8:97:f4:66:da:24:4f:36: 57:71:e1:ad:cc:1e:f9:3a:14:a5:10:15:8a:4c:93:fb:04:6c: 69:b0:d2:14:8a:ae:84:09:d4:f6:74:2d:b6:8e:8d:84:eb:ad: de:aa:cf:e2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MDY2OTExMC8GA1UEBRMoQUNCODRENzIyRDI1NTVCNDgzM0NFNDA2ODMwRkRCRkU5 ODJCN0M2NjAeFw0yNTExMDUwNzE1MjlaFw0yNTExMTIwNzE1MjlaMBgxFjAUBgNV BAMTDTY5MGFmOTkyLTIwZGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCcJMD5dgFEi1jXMCtt0uly3P5SX8MEQgARgwGgPEBNDHWkRTFU3alxhM13KlWI WUSWW2OXG5vLjqgV77rDEiq/bkBW+0JJZubqGC72kEkU9pBR2s+Fd9FvaEQjVtGj sFRol4AxzBOzjMflFu1yXrObsdMK3/CmElB16uOh2o6xg04b6LG2cSHS1er1wqFE gmZeOGhA2X/ZNbTQgIRLaBJ7EyUTCGMpA2NSYcjmEpV4O6g2P0eFzbMGRvX/nLRg QRtPMAvf5uwGG3ixx9zOh1vCC1SBSUQIian8LXKh8rGb2VnaBKZI48F3eJCG8v5j v+BPR1qg36LgzFVMu8bPVeuBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURc3DVvcl M8UKr+m+n0bckGNaBlIwHwYDVR0jBBgwFoAUrLhNci0lVbSDPOQGgw/b/pgrfGYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgwNjY5Lzc3RTkwNEM4MjRC MTExRjBBMDVCMDA2NEM0RjlBRTAyL3JMaE5jaTBsVmJTRFBPUUdnd19iX3BncmZH WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvckxoTmNpMGxWYlNEUE9RR2d3X2JfcGdyZkdZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgw NjY5Lzc3RTkwNEM4MjRCMTExRjBBMDVCMDA2NEM0RjlBRTAyL3JMaE5jaTBsVmJT RFBPUUdnd19iX3BncmZHWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADoZBhORG3CVQhGI3ESbvPvrgr1FP5IrspVVIIAVWRADLXdST43pyHU1 rccYgBEsipL34HswKbWXr6+38as8GvrWepLmTGuCweQeLAN1JxZ1x0nPuAzH3yNy Lz3/DhJsj1Lvyy7DyDljjt9gLSkRxA0MBRZpXamSGiPeINJoKfeY9o3fskA/kLmW vl6BFtkrORfEBMIem6nk2dd1BJsy5lrQ8PuPyvjC434QqgKFtwqE1pGwYQTzg2Zh h1ABGCTTHWTQES+EBMRHf907InPWAbz4l/Rm2iRPNldx4a3MHvk6FKUQFYpMk/sE bGmw0hSKroQJ1PZ0LbaOjYTrrd6qz+I= -----END CERTIFICATE-----Generated at Wed Nov 5 16:44:23 2025 by rpki-client