$ rpki-client -vvf rpki.apnic.net/member_repository/A9146304/E788C8A2258211E990B3783AC4F9AE02/RhQllCdGSHS-fet79CEnLLI9oYg.mft File: RhQllCdGSHS-fet79CEnLLI9oYg.mft (raw, json) Hash identifier: +3OE+LW7oR6na3oNAXffy4kXU2nBDfDuNF2jXohSglQ= Subject key identifier: 84:72:81:EA:CB:EF:7A:17:A9:74:BA:B6:82:06:02:FC:52:B2:90:42 Authority key identifier: 46:14:25:94:27:46:48:74:BE:7D:EB:7B:F4:21:27:2C:B2:3D:A1:88 Certificate issuer: /CN=A9146304/serialNumber=4614259427464874BE7DEB7BF421272CB23DA188 Certificate serial: 10DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RhQllCdGSHS-fet79CEnLLI9oYg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146304/E788C8A2258211E990B3783AC4F9AE02/RhQllCdGSHS-fet79CEnLLI9oYg.mft Manifest number: 10D8 Signing time: Tue 22 Jul 2025 17:27:21 +0000 Manifest this update: Tue 22 Jul 2025 17:27:20 +0000 Manifest next update: Tue 29 Jul 2025 17:27:20 +0000 Files and hashes: 1: RhQllCdGSHS-fet79CEnLLI9oYg.crl (hash: ZWrFUFzvyZk/evPI+baYFP+b2Xa4pO37EYy5KQuE3bA=) 2: 65B35A86577011EC8F00A65AC4F9AE02.roa (hash: +KeTCKuOfeRgu5RimCaRxKh/0Sa4v6tZDxtG+Krp5ho=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146304/E788C8A2258211E990B3783AC4F9AE02/RhQllCdGSHS-fet79CEnLLI9oYg.crl rsync://rpki.apnic.net/member_repository/A9146304/E788C8A2258211E990B3783AC4F9AE02/RhQllCdGSHS-fet79CEnLLI9oYg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RhQllCdGSHS-fet79CEnLLI9oYg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 17:27:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4318 (0x10de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146304, serialNumber=4614259427464874BE7DEB7BF421272CB23DA188 Validity Not Before: Jul 22 17:27:20 2025 GMT Not After : Jul 29 17:27:20 2025 GMT Subject: CN=687fc9f9-346a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1e:97:0e:f6:ce:4b:86:14:c5:fa:37:2e:2e: 08:94:16:8c:3c:05:7b:33:e8:e0:3c:cc:64:6f:e6: 6e:c2:a0:f1:f2:2d:34:05:3e:a6:d9:77:a2:f5:4d: c7:ff:84:c4:28:62:21:6d:b1:11:43:76:dc:6e:51: 75:c7:3c:b4:34:e6:c0:29:b6:ec:9a:13:1b:43:33: e5:5f:0c:9d:2d:4c:2f:66:45:e0:82:4e:7f:01:a2: 40:90:61:6f:81:5e:23:c6:53:a0:2a:0d:6d:8b:a5: 05:77:f1:49:61:63:81:73:97:71:0e:33:3f:1b:39: b0:b8:e0:60:df:0e:91:00:dc:09:41:ff:f5:8f:42: 89:1b:ad:dd:54:79:a3:62:b7:ec:c8:3e:cf:0f:bf: 09:0f:1f:c5:85:60:df:76:b4:6f:e0:a1:8e:71:9e: 34:4d:b8:fa:71:5b:a0:9c:d4:01:d3:ea:43:2a:e7: 4e:23:ca:6a:eb:f3:6b:c0:ee:98:aa:ad:31:72:b7: a1:fd:5a:59:0d:eb:59:c9:59:d6:3c:3b:76:66:c6: de:fb:7f:84:f5:32:83:8b:3e:64:23:d6:87:b8:8b: f2:9b:4d:fc:ac:fc:b4:61:e2:c5:06:d7:97:e6:a7: f8:36:b2:96:03:06:1d:b5:dc:a7:c3:0a:44:01:3a: 80:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:72:81:EA:CB:EF:7A:17:A9:74:BA:B6:82:06:02:FC:52:B2:90:42 X509v3 Authority Key Identifier: keyid:46:14:25:94:27:46:48:74:BE:7D:EB:7B:F4:21:27:2C:B2:3D:A1:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146304/E788C8A2258211E990B3783AC4F9AE02/RhQllCdGSHS-fet79CEnLLI9oYg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RhQllCdGSHS-fet79CEnLLI9oYg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146304/E788C8A2258211E990B3783AC4F9AE02/RhQllCdGSHS-fet79CEnLLI9oYg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:58:83:5f:6c:f4:f6:e7:db:b7:ea:10:da:05:7c:f3:60:c7: 91:f2:21:05:34:08:90:65:68:33:0a:d3:d4:13:be:c6:9b:35: 74:75:85:a7:7a:46:7d:c3:1c:aa:ec:44:fa:9c:9c:c3:2c:d7: 80:13:13:4a:f3:d8:cb:a7:e5:66:bc:e5:0d:f1:04:91:be:d2: 50:c4:17:f0:d2:80:d8:ae:bd:a1:01:2f:d9:ee:65:28:96:40: 86:19:65:8b:e4:16:1f:6d:68:ba:23:0a:6a:80:01:95:d7:c7: 15:0f:72:45:60:c3:db:8a:0a:a4:86:10:97:03:28:84:3e:da: 27:14:e7:97:c4:2e:b6:48:75:56:c6:57:32:b0:ac:f6:ff:8c: 38:e5:5b:19:03:f2:8b:99:28:54:2a:5d:65:f7:9f:55:e8:19: e7:5b:1b:b5:e8:ab:25:2c:4c:c1:e5:c1:a1:b0:d6:ce:12:bb: a6:d7:17:13:ad:60:36:b1:95:5d:f4:b0:bb:34:63:1c:33:98: 54:93:cd:49:53:aa:f6:62:fa:cf:0b:b2:12:6e:58:12:bb:cd: f5:cf:27:b1:f0:c5:9a:d2:04:9f:ab:e0:4d:90:e4:63:4a:58: e2:df:e3:14:f1:9c:1f:3d:ff:ba:3e:eb:63:7d:a4:8d:a1:3e: b8:f9:31:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYzMDQxMTAvBgNVBAUTKDQ2MTQyNTk0Mjc0NjQ4NzRCRTdERUI3QkY0MjEyNzJD QjIzREExODgwHhcNMjUwNzIyMTcyNzIwWhcNMjUwNzI5MTcyNzIwWjAYMRYwFAYD VQQDEw02ODdmYzlmOS0zNDZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvx6XDvbOS4YUxfo3Li4IlBaMPAV7M+jgPMxkb+ZuwqDx8i00BT6m2Xei9U3H /4TEKGIhbbERQ3bcblF1xzy0NObAKbbsmhMbQzPlXwydLUwvZkXggk5/AaJAkGFv gV4jxlOgKg1ti6UFd/FJYWOBc5dxDjM/GzmwuOBg3w6RANwJQf/1j0KJG63dVHmj YrfsyD7PD78JDx/FhWDfdrRv4KGOcZ40Tbj6cVugnNQB0+pDKudOI8pq6/NrwO6Y qq0xcreh/VpZDetZyVnWPDt2Zsbe+3+E9TKDiz5kI9aHuIvym038rPy0YeLFBteX 5qf4NrKWAwYdtdynwwpEATqAzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIRygerL 73oXqXS6toIGAvxSspBCMB8GA1UdIwQYMBaAFEYUJZQnRkh0vn3re/QhJyyyPaGI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjMwNC9FNzg4QzhBMjI1 ODIxMUU5OTBCMzc4M0FDNEY5QUUwMi9SaFFsbENkR1NIUy1mZXQ3OUNFbkxMSTlv WWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JoUWxsQ2RHU0hTLWZldDc5Q0VuTExJOW9ZZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjMwNC9FNzg4QzhBMjI1ODIxMUU5OTBCMzc4M0FDNEY5QUUwMi9SaFFsbENkR1NI Uy1mZXQ3OUNFbkxMSTlvWWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5WINfbPT259u36hDaBXzzYMeR8iEFNAiQZWgzCtPUE77GmzV0dYWn ekZ9wxyq7ET6nJzDLNeAExNK89jLp+VmvOUN8QSRvtJQxBfw0oDYrr2hAS/Z7mUo lkCGGWWL5BYfbWi6IwpqgAGV18cVD3JFYMPbigqkhhCXAyiEPtonFOeXxC62SHVW xlcysKz2/4w45VsZA/KLmShUKl1l959V6BnnWxu16KslLEzB5cGhsNbOErum1xcT rWA2sZVd9LC7NGMcM5hUk81JU6r2YvrPC7ISblgSu831zyex8MWa0gSfq+BNkORj Slji3+MU8ZwfPf+6PutjfaSNoT64+TEr -----END CERTIFICATE-----Generated at Wed Jul 23 12:49:00 2025 by rpki-client