$ rpki-client -vvf rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/rlT2Go-9_rnvA0VXvInXETsBUDw.mft File: rlT2Go-9_rnvA0VXvInXETsBUDw.mft (raw, json) Hash identifier: 0RXr3HTa19GvynZoqsLGiboU1khelPnMjOEbGOr0BRs= Subject key identifier: 64:FE:09:21:20:61:6E:5B:8D:38:6D:37:1D:37:DE:EE:A1:CA:CB:85 Authority key identifier: AE:54:F6:1A:8F:BD:FE:B9:EF:03:45:57:BC:89:D7:11:3B:01:50:3C Certificate issuer: /CN=A9180542/serialNumber=AE54F61A8FBDFEB9EF034557BC89D7113B01503C Certificate serial: 0489 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rlT2Go-9_rnvA0VXvInXETsBUDw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/rlT2Go-9_rnvA0VXvInXETsBUDw.mft Manifest number: 1342 Signing time: Sun 20 Jul 2025 17:58:52 +0000 Manifest this update: Sun 20 Jul 2025 17:58:52 +0000 Manifest next update: Sun 27 Jul 2025 17:58:52 +0000 Files and hashes: 1: rlT2Go-9_rnvA0VXvInXETsBUDw.crl (hash: PjOI6Sc95WKat94PlAcGf5gDaelVuNUZA8sfj9jLJvo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/rlT2Go-9_rnvA0VXvInXETsBUDw.crl rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/rlT2Go-9_rnvA0VXvInXETsBUDw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rlT2Go-9_rnvA0VXvInXETsBUDw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 17:58:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1161 (0x489) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180542, serialNumber=AE54F61A8FBDFEB9EF034557BC89D7113B01503C Validity Not Before: Jul 20 17:58:52 2025 GMT Not After : Jul 27 17:58:52 2025 GMT Subject: CN=687d2e5c-5f0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:42:1b:e7:66:fa:b5:5f:e3:7e:b2:aa:74:19: 09:df:78:d1:a8:64:41:29:9b:9a:e6:67:30:1e:aa: 02:20:75:f9:d5:c8:c6:a9:26:26:62:c7:0a:be:b7: f2:e7:90:02:61:7a:06:37:bc:61:51:d9:30:07:f7: 29:d9:d2:62:ba:cb:da:bb:6f:8b:50:e3:df:05:5f: b9:b0:77:3d:59:fa:10:1a:fd:22:5c:0d:08:08:da: 72:51:a6:81:fb:77:34:0d:64:b1:47:39:48:89:d4: bb:f3:c5:11:f2:31:6f:4b:7a:e9:84:6b:eb:cd:83: 37:09:a0:e5:50:ba:a9:fa:e4:91:64:eb:82:2b:b5: 41:75:63:db:4b:3e:df:90:b8:f8:82:67:74:cd:53: 81:2e:9c:a8:8d:32:46:c6:5b:dc:4b:88:e0:d3:87: 25:f6:31:8c:99:42:14:cc:7a:7b:1c:4c:7d:49:68: 01:4b:e3:db:0f:c4:7c:d3:0f:e8:42:47:d5:bf:a1: 95:11:c5:6a:3d:18:5a:41:aa:c1:34:66:11:57:aa: 7b:16:c3:f7:73:2c:3e:28:dc:69:50:3a:aa:a6:c8: a8:e7:b1:3a:1d:98:fa:0d:94:74:de:c2:c5:16:dc: a8:7c:9d:63:90:8d:81:08:dd:3f:f7:64:d2:ce:35: 8f:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:FE:09:21:20:61:6E:5B:8D:38:6D:37:1D:37:DE:EE:A1:CA:CB:85 X509v3 Authority Key Identifier: keyid:AE:54:F6:1A:8F:BD:FE:B9:EF:03:45:57:BC:89:D7:11:3B:01:50:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/rlT2Go-9_rnvA0VXvInXETsBUDw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rlT2Go-9_rnvA0VXvInXETsBUDw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/rlT2Go-9_rnvA0VXvInXETsBUDw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:f3:a5:e8:0a:32:ac:ff:1d:62:60:b7:39:57:ca:cd:3a:a8: 11:ec:43:38:52:1c:25:41:52:9b:0a:59:a3:93:ab:11:bb:e9: 1b:01:ac:26:21:cd:01:84:6b:d0:86:5c:e5:5d:ba:e4:af:3a: d0:d7:bf:58:3a:58:a4:93:ae:a2:f0:e0:72:b9:71:cd:7a:bb: be:a4:50:47:2b:c9:2c:be:e4:77:df:78:51:1a:7c:e3:44:18: 94:4d:01:b9:58:25:43:73:85:e6:d3:80:67:04:73:c7:a8:69: 62:0a:c8:81:69:df:3d:c9:d2:1a:92:2d:1c:30:61:a6:2e:44: b6:a5:0d:a6:48:f2:a6:92:dd:54:82:f5:04:67:04:43:37:8b: d8:8e:27:f2:52:31:98:d7:3e:6c:11:79:99:e9:08:cc:d0:ac: d6:af:ad:68:27:27:83:1a:fc:95:66:8d:3d:f0:26:20:d4:c6: 45:4e:d0:b4:c8:e2:b1:2d:5d:ad:60:64:26:f8:9b:4a:9d:a1: d2:41:ce:85:2a:9e:99:14:18:ec:ff:a4:cc:22:a8:5a:79:7b: 1b:54:b6:18:33:d8:83:2c:fb:7d:10:80:7b:f7:64:40:1e:e9: f3:85:94:8b:00:74:b9:d2:ad:50:6e:a3:37:97:65:d5:69:19: 33:fc:80:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA1NDIxMTAvBgNVBAUTKEFFNTRGNjFBOEZCREZFQjlFRjAzNDU1N0JDODlENzEx M0IwMTUwM0MwHhcNMjUwNzIwMTc1ODUyWhcNMjUwNzI3MTc1ODUyWjAYMRYwFAYD VQQDEw02ODdkMmU1Yy01ZjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4UIb52b6tV/jfrKqdBkJ33jRqGRBKZua5mcwHqoCIHX51cjGqSYmYscKvrfy 55ACYXoGN7xhUdkwB/cp2dJiusvau2+LUOPfBV+5sHc9WfoQGv0iXA0ICNpyUaaB +3c0DWSxRzlIidS788UR8jFvS3rphGvrzYM3CaDlULqp+uSRZOuCK7VBdWPbSz7f kLj4gmd0zVOBLpyojTJGxlvcS4jg04cl9jGMmUIUzHp7HEx9SWgBS+PbD8R80w/o QkfVv6GVEcVqPRhaQarBNGYRV6p7FsP3cyw+KNxpUDqqpsio57E6HZj6DZR03sLF FtyofJ1jkI2BCN0/92TSzjWPgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGT+CSEg YW5bjThtNx033u6hysuFMB8GA1UdIwQYMBaAFK5U9hqPvf657wNFV7yJ1xE7AVA8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDU0Mi8wQTQ3OUM5MENB RTkxMUU5QkJFOTIxODNDNEY5QUUwMi9ybFQyR28tOV9ybnZBMFZYdkluWEVUc0JV RHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JsVDJHby05X3JudkEwVlh2SW5YRVRzQlVEdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDU0Mi8wQTQ3OUM5MENBRTkxMUU5QkJFOTIxODNDNEY5QUUwMi9ybFQyR28tOV9y bnZBMFZYdkluWEVUc0JVRHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCf86XoCjKs/x1iYLc5V8rNOqgR7EM4UhwlQVKbClmjk6sRu+kbAawm Ic0BhGvQhlzlXbrkrzrQ179YOlikk66i8OByuXHNeru+pFBHK8ksvuR333hRGnzj RBiUTQG5WCVDc4Xm04BnBHPHqGliCsiBad89ydIaki0cMGGmLkS2pQ2mSPKmkt1U gvUEZwRDN4vYjifyUjGY1z5sEXmZ6QjM0KzWr61oJyeDGvyVZo098CYg1MZFTtC0 yOKxLV2tYGQm+JtKnaHSQc6FKp6ZFBjs/6TMIqhaeXsbVLYYM9iDLPt9EIB792RA HunzhZSLAHS50q1QbqM3l2XVaRkz/ICF -----END CERTIFICATE-----Generated at Mon Jul 21 12:50:56 2025 by rpki-client