$ rpki-client -vvf rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.mft File: lFOfgqNeshWO18Ni1boVQz5-0uE.mft (raw, json) Hash identifier: l4lJYPjJ8DQ3OcBN0BHQlajYH+g6Fx7tiTB+RoA6TL8= Subject key identifier: CC:1C:BC:ED:6E:EE:A8:28:D2:B3:A4:DA:28:B7:FC:8B:1B:8A:D4:8F Authority key identifier: 94:53:9F:82:A3:5E:B2:15:8E:D7:C3:62:D5:BA:15:43:3E:7E:D2:E1 Certificate issuer: /CN=A9179EAE/serialNumber=94539F82A35EB2158ED7C362D5BA15433E7ED2E1 Certificate serial: AD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lFOfgqNeshWO18Ni1boVQz5-0uE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.mft Manifest number: AA Signing time: Fri 05 Sep 2025 06:39:13 +0000 Manifest this update: Fri 05 Sep 2025 06:39:13 +0000 Manifest next update: Fri 12 Sep 2025 06:39:13 +0000 Files and hashes: 1: lFOfgqNeshWO18Ni1boVQz5-0uE.crl (hash: 0qC9OTcYenvV/AoquiCbHLmmpiBgZreTTxlyPrd4LSY=) 2: B3DA6A52A96511EFB3EB6721C4F9AE02.roa (hash: FFio9OtmebaEzCJyFXTCLhGivXqzWOQVgzKrbso6U2U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.crl rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lFOfgqNeshWO18Ni1boVQz5-0uE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 06:39:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 173 (0xad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179EAE, serialNumber=94539F82A35EB2158ED7C362D5BA15433E7ED2E1 Validity Not Before: Sep 5 06:39:13 2025 GMT Not After : Sep 12 06:39:13 2025 GMT Subject: CN=68ba8591-1d83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:41:25:2a:2d:ef:58:40:a9:1f:02:f6:63:62: 3c:6e:d0:06:d2:2c:cd:63:ef:25:88:56:cf:a8:15: e4:5d:34:20:a7:48:88:00:4c:2e:17:b8:cb:19:44: 6e:75:ee:b7:01:1d:bc:4a:21:9b:68:f1:4e:5e:e1: 86:46:2d:b8:73:f1:4c:2f:2a:14:f9:cb:44:45:39: 0d:85:88:70:04:24:91:e2:48:90:d1:28:5b:76:aa: f1:79:b5:2e:03:e7:d7:1b:7b:fe:95:bf:b7:3c:fd: ac:c2:1c:0d:de:d2:b5:50:45:3d:a8:90:1c:8e:c8: 8d:ba:6c:a2:51:63:2a:8a:68:f4:5e:8f:54:57:b8: f0:ea:3f:cb:c1:ad:1c:23:3d:72:0e:7b:b7:c2:7d: ba:8b:41:d5:2b:75:fc:b0:0e:a1:de:8e:de:cb:b1: 7e:8d:87:4f:4a:74:4e:fc:33:9a:52:89:3e:54:bc: 3d:fe:7d:b6:7c:2c:dc:e8:d2:1d:ca:e7:22:86:dc: 6f:a2:70:5d:c2:5a:3b:7e:c5:28:f6:50:94:31:e5: b9:56:8f:cf:3e:d1:33:68:1b:7f:80:b9:78:4f:77: e8:c5:d9:21:72:a8:65:44:35:26:f7:07:13:57:7e: e1:8c:5d:b5:e7:53:3a:81:58:ba:38:51:79:1a:69: 02:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:1C:BC:ED:6E:EE:A8:28:D2:B3:A4:DA:28:B7:FC:8B:1B:8A:D4:8F X509v3 Authority Key Identifier: keyid:94:53:9F:82:A3:5E:B2:15:8E:D7:C3:62:D5:BA:15:43:3E:7E:D2:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lFOfgqNeshWO18Ni1boVQz5-0uE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:f0:e5:8f:a4:65:08:73:ca:05:e8:4c:d5:8b:79:3b:78:cd: 1f:71:59:84:15:9f:7d:ab:07:9d:c7:cd:cc:3c:aa:38:85:1f: f0:a8:c3:18:07:01:27:34:96:45:25:d1:0c:a3:94:9b:a5:db: ff:d7:1e:f7:3f:c2:d6:73:c9:b6:19:ef:51:d8:91:dd:6c:4b: 2f:8c:cf:3d:e7:45:53:93:ad:9e:e3:03:4d:51:3a:8b:10:b2: 8b:5f:c1:a1:a7:7f:85:f9:6c:b7:51:a3:ee:64:dc:03:8b:ee: 10:57:62:50:2d:31:87:9e:6a:b3:8e:6b:84:ed:8c:e6:a6:9b: 1f:8d:63:7e:83:37:1a:58:e5:cc:2d:34:2a:47:bb:a8:6d:4e: 7c:54:04:27:76:c8:ba:47:81:8e:ea:1c:aa:86:49:9b:93:1d: ac:d1:67:43:59:55:05:d7:8a:b8:6f:13:ce:79:1b:c2:b0:ca: 9e:7c:01:24:c0:4f:2e:30:1a:9d:45:d7:1e:cb:07:75:ca:4f: 5a:0b:0d:2c:73:01:d8:ce:e0:63:3b:78:e8:d9:86:8f:5c:12: 36:97:55:64:0a:f8:ad:69:2f:2d:a3:15:b7:ca:fb:cd:ae:22: 7b:f4:7f:ab:fd:02:16:07:00:4b:b6:24:5b:c2:cc:6d:fa:cd: 23:a2:96:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlFQUUxMTAvBgNVBAUTKDk0NTM5RjgyQTM1RUIyMTU4RUQ3QzM2MkQ1QkExNTQz M0U3RUQyRTEwHhcNMjUwOTA1MDYzOTEzWhcNMjUwOTEyMDYzOTEzWjAYMRYwFAYD VQQDEw02OGJhODU5MS0xZDgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvUElKi3vWECpHwL2Y2I8btAG0izNY+8liFbPqBXkXTQgp0iIAEwuF7jLGURu de63AR28SiGbaPFOXuGGRi24c/FMLyoU+ctERTkNhYhwBCSR4kiQ0ShbdqrxebUu A+fXG3v+lb+3PP2swhwN3tK1UEU9qJAcjsiNumyiUWMqimj0Xo9UV7jw6j/Lwa0c Iz1yDnu3wn26i0HVK3X8sA6h3o7ey7F+jYdPSnRO/DOaUok+VLw9/n22fCzc6NId yucihtxvonBdwlo7fsUo9lCUMeW5Vo/PPtEzaBt/gLl4T3foxdkhcqhlRDUm9wcT V37hjF2151M6gVi6OFF5GmkCLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMwcvO1u 7qgo0rOk2ii3/IsbitSPMB8GA1UdIwQYMBaAFJRTn4KjXrIVjtfDYtW6FUM+ftLh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUVBRS9BNDlDRERCODhE MEUxMUVGQThGRTkzNzFDNEY5QUUwMi9sRk9mZ3FOZXNoV08xOE5pMWJvVlF6NS0w dUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xGT2ZncU5lc2hXTzE4TmkxYm9WUXo1LTB1RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OUVBRS9BNDlDRERCODhEMEUxMUVGQThGRTkzNzFDNEY5QUUwMi9sRk9mZ3FOZXNo V08xOE5pMWJvVlF6NS0wdUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAK8OWPpGUIc8oF6EzVi3k7eM0fcVmEFZ99qwedx83MPKo4hR/wqMMY BwEnNJZFJdEMo5Sbpdv/1x73P8LWc8m2Ge9R2JHdbEsvjM8950VTk62e4wNNUTqL ELKLX8Ghp3+F+Wy3UaPuZNwDi+4QV2JQLTGHnmqzjmuE7YzmppsfjWN+gzcaWOXM LTQqR7uobU58VAQndsi6R4GO6hyqhkmbkx2s0WdDWVUF14q4bxPOeRvCsMqefAEk wE8uMBqdRdceywd1yk9aCw0scwHYzuBjO3jo2YaPXBI2l1VkCvitaS8toxW3yvvN riJ79H+r/QIWBwBLtiRbwsxt+s0jopbP -----END CERTIFICATE-----Generated at Sat Sep 6 21:10:13 2025 by rpki-client