$ rpki-client -vvf rpki.apnic.net/member_repository/A9180669/77E904C824B111F0A05B0064C4F9AE02/rLhNci0lVbSDPOQGgw_b_pgrfGY.mft File: rLhNci0lVbSDPOQGgw_b_pgrfGY.mft (raw, json) Hash identifier: YckhsCeNwX6rtHJFdKSUWZzUmgIN2j7nXqlpwQgcqQA= Subject key identifier: 83:98:57:C9:CF:49:7A:C8:88:81:16:59:76:C0:46:FA:96:A4:BB:8F Authority key identifier: AC:B8:4D:72:2D:25:55:B4:83:3C:E4:06:83:0F:DB:FE:98:2B:7C:66 Certificate issuer: /CN=A9180669/serialNumber=ACB84D722D2555B4833CE406830FDBFE982B7C66 Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLhNci0lVbSDPOQGgw_b_pgrfGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180669/77E904C824B111F0A05B0064C4F9AE02/rLhNci0lVbSDPOQGgw_b_pgrfGY.mft Manifest number: 34 Signing time: Sat 09 Aug 2025 08:06:51 +0000 Manifest this update: Sat 09 Aug 2025 08:06:50 +0000 Manifest next update: Sat 16 Aug 2025 08:06:50 +0000 Files and hashes: 1: rLhNci0lVbSDPOQGgw_b_pgrfGY.crl (hash: SS/7P5DOCd4SJ84J8+B29LfdWsFAZKLJ2lny4dxj+2Y=) 2: 7D1BFC5E24B411F08834DE10C4F9AE02.roa (hash: diVe3oDK8BNzbsZfVF9MUY+tHtrxSbiFO+M9PazMfpE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180669/77E904C824B111F0A05B0064C4F9AE02/rLhNci0lVbSDPOQGgw_b_pgrfGY.crl rsync://rpki.apnic.net/member_repository/A9180669/77E904C824B111F0A05B0064C4F9AE02/rLhNci0lVbSDPOQGgw_b_pgrfGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLhNci0lVbSDPOQGgw_b_pgrfGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180669, serialNumber=ACB84D722D2555B4833CE406830FDBFE982B7C66 Validity Not Before: Aug 9 08:06:50 2025 GMT Not After : Aug 16 08:06:50 2025 GMT Subject: CN=6897019a-dbc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e3:22:16:0e:e0:02:06:cd:d7:cc:6d:d2:26: 52:d4:40:08:34:48:f8:46:6a:06:2b:2c:e0:38:53: 67:98:58:39:23:ef:b1:c7:58:80:f1:de:9f:a9:47: 63:e2:03:7b:8f:08:70:05:8c:fe:ce:94:71:6c:9a: 6f:93:14:e8:29:2e:e5:c8:3d:e2:16:76:60:7d:65: 02:23:b7:d7:13:78:b1:db:d7:ae:e7:57:07:81:1b: 31:aa:59:87:2a:02:86:56:17:a3:c8:da:f8:e2:8f: 14:f9:26:e7:ec:c0:d2:4e:41:bd:0e:15:20:82:00: 60:99:e5:bd:6a:54:0e:ef:a4:44:6c:e6:d2:0a:d8: 82:fc:b6:28:2e:ea:b0:1d:fa:10:4d:4f:8d:c5:5e: 03:24:dd:d0:e3:bf:03:e1:fd:84:6b:74:d3:63:58: c6:a7:5f:78:bb:1b:83:b0:ab:f7:c5:79:de:20:5c: 73:75:6e:f5:e3:52:8c:e1:1d:d5:9f:70:71:1e:a4: 5e:01:c9:b2:f1:52:8a:a0:df:c1:ae:e8:b5:a3:dd: 8f:89:8c:3d:1f:ff:6c:1d:57:69:6e:7a:a0:64:e7: 08:46:3e:28:db:43:d2:c6:96:df:fa:18:70:3c:8b: b7:97:8f:0e:a8:2e:a7:39:63:b5:28:d1:d0:5c:b2: c3:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:98:57:C9:CF:49:7A:C8:88:81:16:59:76:C0:46:FA:96:A4:BB:8F X509v3 Authority Key Identifier: keyid:AC:B8:4D:72:2D:25:55:B4:83:3C:E4:06:83:0F:DB:FE:98:2B:7C:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180669/77E904C824B111F0A05B0064C4F9AE02/rLhNci0lVbSDPOQGgw_b_pgrfGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLhNci0lVbSDPOQGgw_b_pgrfGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180669/77E904C824B111F0A05B0064C4F9AE02/rLhNci0lVbSDPOQGgw_b_pgrfGY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:2e:57:92:8e:16:dc:19:dc:4a:1d:6b:68:d9:4a:9d:91:e0: d7:77:9e:ae:4b:1f:90:9e:ae:38:94:37:ce:ce:99:cd:64:d7: 15:09:a9:ed:94:f2:67:82:68:ac:fb:e2:9f:b0:3e:68:f7:52: 1d:a6:fc:37:57:77:b0:e7:72:ea:c3:d1:e2:ae:c2:2e:c5:a0: 74:85:bf:65:87:8f:9d:01:52:a9:90:57:34:27:f2:89:bc:53: 7f:2e:21:49:17:f9:39:e8:13:0e:be:74:3b:c6:6e:da:84:51: 4f:02:04:39:1f:50:f8:6c:67:d9:ac:9a:b8:33:af:a7:2b:f3: 62:c2:a1:be:ec:64:d5:48:90:38:f3:81:df:9a:ef:61:fd:c5: 7b:29:08:72:a2:e4:3c:05:ca:92:37:b6:1f:a5:20:c2:c2:df: 64:a6:3d:3c:cd:4f:98:3b:e9:a4:25:37:0f:93:a7:67:62:f2: 9f:f6:49:30:82:0a:7d:c6:52:91:94:6c:a7:62:9e:89:5b:8c: c2:78:ea:60:e3:b2:95:79:be:7b:80:4d:4f:4a:1f:64:97:9b: 59:a3:eb:88:ee:06:9d:09:d4:ff:47:bc:44:34:84:dc:2c:06: 1a:93:33:c9:0f:06:2f:5e:ae:c8:91:45:4b:e2:57:98:09:e4: d6:44:e3:a2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MDY2OTExMC8GA1UEBRMoQUNCODRENzIyRDI1NTVCNDgzM0NFNDA2ODMwRkRCRkU5 ODJCN0M2NjAeFw0yNTA4MDkwODA2NTBaFw0yNTA4MTYwODA2NTBaMBgxFjAUBgNV BAMTDTY4OTcwMTlhLWRiYzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDG4yIWDuACBs3XzG3SJlLUQAg0SPhGagYrLOA4U2eYWDkj77HHWIDx3p+pR2Pi A3uPCHAFjP7OlHFsmm+TFOgpLuXIPeIWdmB9ZQIjt9cTeLHb167nVweBGzGqWYcq AoZWF6PI2vjijxT5JufswNJOQb0OFSCCAGCZ5b1qVA7vpERs5tIK2IL8tigu6rAd +hBNT43FXgMk3dDjvwPh/YRrdNNjWManX3i7G4Owq/fFed4gXHN1bvXjUozhHdWf cHEepF4BybLxUoqg38Gu6LWj3Y+JjD0f/2wdV2lueqBk5whGPijbQ9LGlt/6GHA8 i7eXjw6oLqc5Y7Uo0dBcssOpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUg5hXyc9J esiIgRZZdsBG+paku48wHwYDVR0jBBgwFoAUrLhNci0lVbSDPOQGgw/b/pgrfGYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgwNjY5Lzc3RTkwNEM4MjRC MTExRjBBMDVCMDA2NEM0RjlBRTAyL3JMaE5jaTBsVmJTRFBPUUdnd19iX3BncmZH WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvckxoTmNpMGxWYlNEUE9RR2d3X2JfcGdyZkdZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgw NjY5Lzc3RTkwNEM4MjRCMTExRjBBMDVCMDA2NEM0RjlBRTAyL3JMaE5jaTBsVmJT RFBPUUdnd19iX3BncmZHWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADsuV5KOFtwZ3Eoda2jZSp2R4Nd3nq5LH5CerjiUN87Omc1k1xUJqe2U 8meCaKz74p+wPmj3Uh2m/DdXd7DncurD0eKuwi7FoHSFv2WHj50BUqmQVzQn8om8 U38uIUkX+TnoEw6+dDvGbtqEUU8CBDkfUPhsZ9msmrgzr6cr82LCob7sZNVIkDjz gd+a72H9xXspCHKi5DwFypI3th+lIMLC32SmPTzNT5g76aQlNw+Tp2di8p/2STCC Cn3GUpGUbKdinolbjMJ46mDjspV5vnuATU9KH2SXm1mj64juBp0J1P9HvEQ0hNws BhqTM8kPBi9ersiRRUviV5gJ5NZE46I= -----END CERTIFICATE-----Generated at Sun Aug 10 21:06:56 2025 by rpki-client