$ rpki-client -vvf rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.mft File: mHOIl4P3Uw60S-AJeqNhiwcWjzs.mft (raw, json) Hash identifier: q4SpEmAJQ5rBWh0lUwAkJGiHr9+5Si+Ez/mKkOZMHFo= Subject key identifier: 90:FA:7A:3E:3B:25:AC:55:7A:E5:12:16:24:33:44:28:50:EF:06:D5 Authority key identifier: 98:73:88:97:83:F7:53:0E:B4:4B:E0:09:7A:A3:61:8B:07:16:8F:3B Certificate issuer: /CN=A9161322/serialNumber=9873889783F7530EB44BE0097AA3618B07168F3B Certificate serial: 011E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mHOIl4P3Uw60S-AJeqNhiwcWjzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.mft Manifest number: 011C Signing time: Sat 19 Jul 2025 04:58:18 +0000 Manifest this update: Sat 19 Jul 2025 04:58:18 +0000 Manifest next update: Sat 26 Jul 2025 04:58:18 +0000 Files and hashes: 1: mHOIl4P3Uw60S-AJeqNhiwcWjzs.crl (hash: aFRDNGTQJOfriSSEV/XHw8QGdDb4z6gd8BaD7VaDjC0=) 2: A023DD56B12F11EEB1221E32C4F9AE02.roa (hash: NmbBdfuCudYxF5RZcp9GpJHBkLSfYF/OMfMDOKpiQbY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.crl rsync://rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mHOIl4P3Uw60S-AJeqNhiwcWjzs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 04:58:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 286 (0x11e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161322, serialNumber=9873889783F7530EB44BE0097AA3618B07168F3B Validity Not Before: Jul 19 04:58:18 2025 GMT Not After : Jul 26 04:58:18 2025 GMT Subject: CN=687b25ea-7b84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2e:cc:37:f0:53:e9:15:f0:92:8d:64:44:61: f9:62:64:a4:f6:1a:f7:5d:06:32:b4:0d:fc:55:a1: c9:44:f9:07:d1:31:06:8b:89:fb:e6:d2:46:0f:75: 2a:f7:80:a1:e2:96:2c:52:8e:8d:e7:0a:9b:e4:f0: 59:48:ea:22:4d:06:ea:21:1c:46:03:ae:bd:97:73: 1c:06:5e:86:fd:5d:8e:9b:ef:33:50:72:a2:ff:72: 1d:ac:ea:ce:01:e6:33:bf:72:0d:9c:a0:f4:2f:67: 84:ae:0f:5b:5b:92:e7:c4:5a:64:31:1a:81:ea:0e: 8f:fa:b9:e0:03:53:c9:34:e2:0b:0e:de:b3:b4:4e: a5:c5:ce:c4:d6:cf:dc:ac:c6:07:c0:52:24:b3:a0: 03:8b:18:50:0b:e6:79:ac:2d:4c:2a:3f:14:b2:22: 4a:30:99:d1:94:91:fc:98:cf:91:96:a7:15:b0:c8: 09:b4:e4:a3:88:4e:a9:8b:ae:63:bd:04:61:68:d9: c0:29:6f:25:3d:8e:6a:52:f5:8a:b3:79:72:5b:d7: 6a:07:88:17:82:b8:c3:31:f0:b0:d1:7c:e0:dd:ec: 3d:44:3f:c1:2e:d7:c0:76:d7:77:70:4b:a1:cc:46: c0:69:86:7a:82:5b:a6:52:4d:9e:ae:2e:9e:7d:5d: 23:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:FA:7A:3E:3B:25:AC:55:7A:E5:12:16:24:33:44:28:50:EF:06:D5 X509v3 Authority Key Identifier: keyid:98:73:88:97:83:F7:53:0E:B4:4B:E0:09:7A:A3:61:8B:07:16:8F:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mHOIl4P3Uw60S-AJeqNhiwcWjzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d9:f0:69:ca:6f:f0:d4:bf:0d:51:92:c3:a5:8b:b1:ae:3a:ea: 6c:f3:fc:94:55:bf:dd:4a:1a:d2:5f:1a:b7:90:18:e8:f2:c4: 3c:4f:0d:21:0e:cf:c8:8b:88:fc:2d:ae:58:ef:49:6c:94:b4: 51:9b:2e:9d:41:6e:fc:cd:34:bc:bf:c1:17:bd:f4:ce:81:fa: 61:58:54:cb:64:0f:34:a4:e3:6e:dd:a6:8e:48:6e:f0:7a:3a: 68:3f:fc:64:49:9c:34:c9:74:22:31:05:ef:03:f5:b2:f8:49: 79:06:a3:0a:dc:a7:7c:de:ca:15:7b:8a:01:29:00:40:f6:1e: b0:5b:8b:4f:13:55:19:e9:a8:1c:6a:b1:ee:38:11:0a:ab:93: 50:87:85:ca:38:4f:cf:c4:89:d6:39:45:0c:cd:0c:37:a0:2b: 2a:47:bd:c6:9a:75:f1:4c:b4:4d:5d:90:ff:35:be:3b:37:b2: 23:f5:49:0f:10:80:b3:14:a8:fd:f1:6f:c8:4c:11:d8:12:dd: ed:9b:2d:1c:0a:8b:c9:c7:7b:f8:1a:2a:fc:77:c4:c0:e8:3e: 59:34:c5:29:59:9d:44:37:ad:f5:e3:ca:3d:43:d0:c0:00:7c: cf:1c:3b:d1:92:c9:f3:2a:c5:7c:f5:19:e7:74:7f:8e:a2:f7: ba:b7:8e:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjEzMjIxMTAvBgNVBAUTKDk4NzM4ODk3ODNGNzUzMEVCNDRCRTAwOTdBQTM2MThC MDcxNjhGM0IwHhcNMjUwNzE5MDQ1ODE4WhcNMjUwNzI2MDQ1ODE4WjAYMRYwFAYD VQQDEw02ODdiMjVlYS03Yjg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsC7MN/BT6RXwko1kRGH5YmSk9hr3XQYytA38VaHJRPkH0TEGi4n75tJGD3Uq 94Ch4pYsUo6N5wqb5PBZSOoiTQbqIRxGA669l3McBl6G/V2Om+8zUHKi/3IdrOrO AeYzv3INnKD0L2eErg9bW5LnxFpkMRqB6g6P+rngA1PJNOILDt6ztE6lxc7E1s/c rMYHwFIks6ADixhQC+Z5rC1MKj8UsiJKMJnRlJH8mM+RlqcVsMgJtOSjiE6pi65j vQRhaNnAKW8lPY5qUvWKs3lyW9dqB4gXgrjDMfCw0Xzg3ew9RD/BLtfAdtd3cEuh zEbAaYZ6glumUk2eri6efV0jHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJD6ej47 JaxVeuUSFiQzRChQ7wbVMB8GA1UdIwQYMBaAFJhziJeD91MOtEvgCXqjYYsHFo87 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTMyMi80OUU0QjAwOEIw RUIxMUVFQjY5ODlGNTRDNEY5QUUwMi9tSE9JbDRQM1V3NjBTLUFKZXFOaGl3Y1dq enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL21IT0lsNFAzVXc2MFMtQUplcU5oaXdjV2p6cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTMyMi80OUU0QjAwOEIwRUIxMUVFQjY5ODlGNTRDNEY5QUUwMi9tSE9JbDRQM1V3 NjBTLUFKZXFOaGl3Y1dqenMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDZ8GnKb/DUvw1RksOli7GuOups8/yUVb/dShrSXxq3kBjo8sQ8Tw0h Ds/Ii4j8La5Y70lslLRRmy6dQW78zTS8v8EXvfTOgfphWFTLZA80pONu3aaOSG7w ejpoP/xkSZw0yXQiMQXvA/Wy+El5BqMK3Kd83soVe4oBKQBA9h6wW4tPE1UZ6agc arHuOBEKq5NQh4XKOE/PxInWOUUMzQw3oCsqR73GmnXxTLRNXZD/Nb47N7Ij9UkP EICzFKj98W/ITBHYEt3tmy0cCovJx3v4Gir8d8TA6D5ZNMUpWZ1EN63148o9Q9DA AHzPHDvRksnzKsV89RnndH+Oove6t458 -----END CERTIFICATE-----Generated at Sun Jul 20 18:39:37 2025 by rpki-client