$ rpki-client -vvf rpki.apnic.net/member_repository/A9180669/77E904C824B111F0A05B0064C4F9AE02/rLhNci0lVbSDPOQGgw_b_pgrfGY.mft File: rLhNci0lVbSDPOQGgw_b_pgrfGY.mft (raw, json) Hash identifier: eo8ZKXstmOBEYARHh9/4UelfLehm+yoxm9PAk7CCgYw= Subject key identifier: 9E:93:05:4D:ED:C6:FD:6B:F1:B5:32:46:98:49:8A:1B:F8:13:2E:30 Authority key identifier: AC:B8:4D:72:2D:25:55:B4:83:3C:E4:06:83:0F:DB:FE:98:2B:7C:66 Certificate issuer: /CN=A9180669/serialNumber=ACB84D722D2555B4833CE406830FDBFE982B7C66 Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLhNci0lVbSDPOQGgw_b_pgrfGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180669/77E904C824B111F0A05B0064C4F9AE02/rLhNci0lVbSDPOQGgw_b_pgrfGY.mft Manifest number: 29 Signing time: Sat 19 Jul 2025 08:00:24 +0000 Manifest this update: Sat 19 Jul 2025 08:00:24 +0000 Manifest next update: Sat 26 Jul 2025 08:00:24 +0000 Files and hashes: 1: rLhNci0lVbSDPOQGgw_b_pgrfGY.crl (hash: 9t+W3Tx8zzfjxJw/w+H1USTDJfwd2ambY+qp528w7J0=) 2: 7D1BFC5E24B411F08834DE10C4F9AE02.roa (hash: diVe3oDK8BNzbsZfVF9MUY+tHtrxSbiFO+M9PazMfpE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180669/77E904C824B111F0A05B0064C4F9AE02/rLhNci0lVbSDPOQGgw_b_pgrfGY.crl rsync://rpki.apnic.net/member_repository/A9180669/77E904C824B111F0A05B0064C4F9AE02/rLhNci0lVbSDPOQGgw_b_pgrfGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLhNci0lVbSDPOQGgw_b_pgrfGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 08:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180669, serialNumber=ACB84D722D2555B4833CE406830FDBFE982B7C66 Validity Not Before: Jul 19 08:00:24 2025 GMT Not After : Jul 26 08:00:24 2025 GMT Subject: CN=687b5098-7eba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c3:08:b2:e3:0b:21:dd:e9:ae:8a:8c:f8:f3: e8:41:11:9a:8b:d6:de:41:90:08:69:69:ae:dc:0a: a5:e6:33:c1:27:38:49:f9:4b:e9:36:65:5b:62:63: 0e:30:0d:50:eb:42:fc:78:90:b9:1d:04:cf:22:2f: 4d:07:8c:56:a5:99:4a:ca:5a:bc:ae:d0:95:99:fb: 16:07:d2:71:c7:40:11:3c:e8:4d:8f:23:39:11:23: 97:50:29:0a:c1:e0:89:64:77:30:f4:a9:1b:99:70: db:25:a1:17:4d:8d:39:6c:d0:0b:46:da:79:55:0f: 19:62:6d:27:91:98:9c:8f:94:5c:98:87:21:c8:9a: 38:e1:14:e6:d1:31:9f:cb:40:80:54:d1:1c:06:1d: 02:bb:4a:ad:f3:e3:bb:9a:03:1b:e8:49:21:d8:62: 50:e8:b4:d3:e7:fb:dc:c2:02:9a:07:59:34:47:cb: ea:35:af:b2:d1:2e:ef:f8:ed:b2:75:55:ca:50:fb: bd:02:9a:1d:b3:e4:d1:9e:58:0c:00:19:d0:64:84: bf:c0:6d:51:e9:ca:a1:f6:bf:a9:ef:ac:c5:91:c0: 2e:75:8f:aa:4e:15:9d:01:10:80:82:ee:d4:14:00: 9f:bf:68:d9:2c:3b:bb:60:e3:bd:54:99:78:a2:91: 5c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:93:05:4D:ED:C6:FD:6B:F1:B5:32:46:98:49:8A:1B:F8:13:2E:30 X509v3 Authority Key Identifier: keyid:AC:B8:4D:72:2D:25:55:B4:83:3C:E4:06:83:0F:DB:FE:98:2B:7C:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180669/77E904C824B111F0A05B0064C4F9AE02/rLhNci0lVbSDPOQGgw_b_pgrfGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLhNci0lVbSDPOQGgw_b_pgrfGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180669/77E904C824B111F0A05B0064C4F9AE02/rLhNci0lVbSDPOQGgw_b_pgrfGY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:5d:8c:af:25:af:85:67:db:50:0a:a6:d3:c5:a2:b2:87:3f: 7a:d9:03:b9:16:f9:6b:75:dd:93:89:57:7c:d1:d8:f5:fb:17: a6:80:9d:61:27:84:40:b3:fe:96:1f:69:3c:a3:f8:ca:71:a6: 31:10:45:8c:82:ad:f4:c8:43:ff:14:7f:15:de:4f:6d:5e:99: f4:77:56:e7:ae:b9:7d:c3:b6:d3:8a:d4:15:2a:54:de:0e:41: f1:74:e1:bc:c5:3d:08:00:87:68:4e:4c:61:a3:6b:af:d6:8d: ce:17:0a:b2:5f:7e:40:a7:43:ee:be:5c:d1:b2:fc:c5:f0:d7: 66:4a:dd:ab:e5:3c:4a:79:d4:0c:58:1e:8f:5d:51:f6:bf:09: 5c:35:f4:61:ad:9a:9c:ac:31:3e:4d:e4:40:3f:84:6e:0a:c6: df:50:eb:71:5e:8f:00:14:69:62:ab:1e:1e:fb:3b:c4:94:8e: 4c:e7:d6:3d:a1:8e:90:49:47:0f:ae:d8:c3:05:4d:0b:42:ac: 52:92:f6:5d:af:23:82:04:d3:ea:32:a6:f3:a1:69:a0:44:3b: 84:6d:70:87:fa:62:fe:d2:1b:04:51:bc:3d:31:21:a8:55:5d: 2a:42:28:db:a6:97:63:46:bc:3e:83:85:11:f4:24:23:12:70: 7e:e5:6b:e1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MDY2OTExMC8GA1UEBRMoQUNCODRENzIyRDI1NTVCNDgzM0NFNDA2ODMwRkRCRkU5 ODJCN0M2NjAeFw0yNTA3MTkwODAwMjRaFw0yNTA3MjYwODAwMjRaMBgxFjAUBgNV BAMTDTY4N2I1MDk4LTdlYmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFwwiy4wsh3emuioz48+hBEZqL1t5BkAhpaa7cCqXmM8EnOEn5S+k2ZVtiYw4w DVDrQvx4kLkdBM8iL00HjFalmUrKWryu0JWZ+xYH0nHHQBE86E2PIzkRI5dQKQrB 4IlkdzD0qRuZcNsloRdNjTls0AtG2nlVDxlibSeRmJyPlFyYhyHImjjhFObRMZ/L QIBU0RwGHQK7Sq3z47uaAxvoSSHYYlDotNPn+9zCApoHWTRHy+o1r7LRLu/47bJ1 VcpQ+70Cmh2z5NGeWAwAGdBkhL/AbVHpyqH2v6nvrMWRwC51j6pOFZ0BEICC7tQU AJ+/aNksO7tg471UmXiikVw1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUnpMFTe3G /WvxtTJGmEmKG/gTLjAwHwYDVR0jBBgwFoAUrLhNci0lVbSDPOQGgw/b/pgrfGYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgwNjY5Lzc3RTkwNEM4MjRC MTExRjBBMDVCMDA2NEM0RjlBRTAyL3JMaE5jaTBsVmJTRFBPUUdnd19iX3BncmZH WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvckxoTmNpMGxWYlNEUE9RR2d3X2JfcGdyZkdZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgw NjY5Lzc3RTkwNEM4MjRCMTExRjBBMDVCMDA2NEM0RjlBRTAyL3JMaE5jaTBsVmJT RFBPUUdnd19iX3BncmZHWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADJdjK8lr4Vn21AKptPForKHP3rZA7kW+Wt13ZOJV3zR2PX7F6aAnWEn hECz/pYfaTyj+MpxpjEQRYyCrfTIQ/8UfxXeT21emfR3VueuuX3DttOK1BUqVN4O QfF04bzFPQgAh2hOTGGja6/Wjc4XCrJffkCnQ+6+XNGy/MXw12ZK3avlPEp51AxY Ho9dUfa/CVw19GGtmpysMT5N5EA/hG4Kxt9Q63FejwAUaWKrHh77O8SUjkzn1j2h jpBJRw+u2MMFTQtCrFKS9l2vI4IE0+oypvOhaaBEO4RtcIf6Yv7SGwRRvD0xIahV XSpCKNuml2NGvD6DhRH0JCMScH7la+E= -----END CERTIFICATE-----Generated at Sun Jul 20 19:00:10 2025 by rpki-client