$ rpki-client -vvf rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.mft File: mLI8urGE2rGtANEAC4IMmyGkM-w.mft (raw, json) Hash identifier: wZiPxlohAItCnzmoAmFS4Q5UdzIL6F4F0D55y/+ksHM= Subject key identifier: B3:FC:E9:30:05:36:76:DD:75:98:5E:CB:D1:4C:36:21:14:54:64:49 Authority key identifier: 98:B2:3C:BA:B1:84:DA:B1:AD:00:D1:00:0B:82:0C:9B:21:A4:33:EC Certificate issuer: /CN=A9182FBC/serialNumber=98B23CBAB184DAB1AD00D1000B820C9B21A433EC Certificate serial: 11F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLI8urGE2rGtANEAC4IMmyGkM-w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.mft Manifest number: 11D1 Signing time: Thu 18 Sep 2025 17:20:24 +0000 Manifest this update: Thu 18 Sep 2025 17:20:23 +0000 Manifest next update: Thu 25 Sep 2025 17:20:23 +0000 Files and hashes: 1: mLI8urGE2rGtANEAC4IMmyGkM-w.crl (hash: k8IjgacDve01MWYbG1/wOPFVPkwOAtZIHtugmzV+pwc=) 2: 38F5C602B18711EC9F9FA058C4F9AE02.roa (hash: 864v72yIGP6+fcV9ihOEtR0vSNI9KCZAgVkE2lkVzYA=) 3: 37BC67B4B18711EC9F9FA058C4F9AE02.roa (hash: au9xZxCZeREaDcJouTlLj1rRcc2mSPei8Jd1icPw/ew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.crl rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLI8urGE2rGtANEAC4IMmyGkM-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 17:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4592 (0x11f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182FBC, serialNumber=98B23CBAB184DAB1AD00D1000B820C9B21A433EC Validity Not Before: Sep 18 17:20:23 2025 GMT Not After : Sep 25 17:20:23 2025 GMT Subject: CN=68cc3f58-45d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b0:42:01:6f:71:50:e0:f6:98:bc:d0:f1:84: f0:4d:16:6e:7d:70:ce:e0:7b:33:81:bb:b6:b7:b8: 16:c4:5d:33:62:b7:f8:25:f4:b8:86:de:94:58:5d: 9d:d9:15:0e:5a:bb:17:c7:70:fd:97:cd:2a:ef:a3: 03:75:28:52:ea:16:29:bb:5e:05:9e:03:79:ad:62: eb:09:7d:99:93:b3:3e:a7:46:6f:df:a8:28:bf:64: 88:73:7b:ce:d4:b2:4b:14:e6:92:2b:7c:75:27:d2: 24:a9:ce:fd:2b:f8:39:01:31:6a:bb:26:8b:94:c1: 69:53:dc:75:98:e0:f2:a7:1d:7e:7c:36:84:6a:09: 23:a2:58:3b:cd:af:a3:57:2a:2b:67:04:42:75:dc: cf:22:c7:64:86:52:50:d4:35:6b:4e:f1:7a:5d:54: ce:c2:9d:d5:00:bf:b8:5d:6d:d8:7a:61:59:c5:77: 7f:9f:7a:d6:63:b8:dd:0b:ff:6b:d4:34:0a:4b:c6: f6:ea:f4:b7:d2:8e:61:31:ab:9e:ca:7e:5d:0d:e6: d7:5e:4d:13:e0:9f:fd:70:81:fd:b9:97:8b:b5:a2: e8:06:f3:a1:08:c7:ca:48:87:8d:b3:63:a0:7b:34: 4b:7f:de:72:67:f1:cb:9a:ab:cf:3b:05:52:a2:a7: 36:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:FC:E9:30:05:36:76:DD:75:98:5E:CB:D1:4C:36:21:14:54:64:49 X509v3 Authority Key Identifier: keyid:98:B2:3C:BA:B1:84:DA:B1:AD:00:D1:00:0B:82:0C:9B:21:A4:33:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLI8urGE2rGtANEAC4IMmyGkM-w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:70:a2:89:9b:c4:ba:6b:0c:c5:a4:91:25:32:a4:c1:4c:1c: 2b:69:38:d8:70:c2:92:9b:f0:d6:8e:8b:2e:a8:71:80:cd:65: b8:27:b5:74:c5:83:61:84:a8:c8:8a:ab:e2:0f:d8:b8:f0:33: fd:61:71:30:8e:d6:d6:d8:40:28:f4:41:9e:05:1d:99:c9:6f: 8c:54:f2:8b:ea:c2:de:c7:c4:ef:51:de:2a:40:d8:de:e0:12: a0:21:44:97:0b:6d:8b:dd:9e:b3:93:e0:92:d5:9e:65:b5:9e: 51:df:21:b7:c3:d7:23:7c:10:67:3d:b9:b3:52:4f:c7:f8:26: 8c:50:6e:e0:58:8e:7b:b1:00:db:fc:23:4a:73:82:59:72:3a: 57:fb:3d:c5:fb:ec:56:f3:bd:66:44:23:64:1f:39:84:c2:73: c1:47:ec:e3:74:20:d7:47:4b:85:d5:af:99:95:57:3e:a8:61: 7d:3f:2e:ae:ff:9f:65:d7:f4:d6:6d:56:c1:a0:e0:c6:a4:6b: f6:e0:92:bf:85:6c:c1:67:8b:6e:84:1f:7d:74:fb:5b:ae:da: fe:45:5e:82:c1:e0:6c:50:6f:bb:a7:28:ba:0a:5d:20:66:80: 26:4e:76:bd:03:82:59:41:7d:24:37:e4:c5:94:dc:1b:4e:72: 82:a4:43:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEfAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODJGQkMxMTAvBgNVBAUTKDk4QjIzQ0JBQjE4NERBQjFBRDAwRDEwMDBCODIwQzlC MjFBNDMzRUMwHhcNMjUwOTE4MTcyMDIzWhcNMjUwOTI1MTcyMDIzWjAYMRYwFAYD VQQDEw02OGNjM2Y1OC00NWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvLBCAW9xUOD2mLzQ8YTwTRZufXDO4Hszgbu2t7gWxF0zYrf4JfS4ht6UWF2d 2RUOWrsXx3D9l80q76MDdShS6hYpu14FngN5rWLrCX2Zk7M+p0Zv36gov2SIc3vO 1LJLFOaSK3x1J9Ikqc79K/g5ATFquyaLlMFpU9x1mODypx1+fDaEagkjolg7za+j VyorZwRCddzPIsdkhlJQ1DVrTvF6XVTOwp3VAL+4XW3YemFZxXd/n3rWY7jdC/9r 1DQKS8b26vS30o5hMaueyn5dDebXXk0T4J/9cIH9uZeLtaLoBvOhCMfKSIeNs2Og ezRLf95yZ/HLmqvPOwVSoqc2+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLP86TAF NnbddZhey9FMNiEUVGRJMB8GA1UdIwQYMBaAFJiyPLqxhNqxrQDRAAuCDJshpDPs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MkZCQy9BMzM1QjI1OEZD RTQxMUU4OTBGQzFFMzdDNEY5QUUwMi9tTEk4dXJHRTJyR3RBTkVBQzRJTW15R2tN LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21MSTh1ckdFMnJHdEFORUFDNElNbXlHa00tdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MkZCQy9BMzM1QjI1OEZDRTQxMUU4OTBGQzFFMzdDNEY5QUUwMi9tTEk4dXJHRTJy R3RBTkVBQzRJTW15R2tNLXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLcKKJm8S6awzFpJElMqTBTBwraTjYcMKSm/DWjosuqHGAzWW4J7V0 xYNhhKjIiqviD9i48DP9YXEwjtbW2EAo9EGeBR2ZyW+MVPKL6sLex8TvUd4qQNje 4BKgIUSXC22L3Z6zk+CS1Z5ltZ5R3yG3w9cjfBBnPbmzUk/H+CaMUG7gWI57sQDb /CNKc4JZcjpX+z3F++xW871mRCNkHzmEwnPBR+zjdCDXR0uF1a+ZlVc+qGF9Py6u /59l1/TWbVbBoODGpGv24JK/hWzBZ4tuhB99dPtbrtr+RV6CweBsUG+7pyi6Cl0g ZoAmTna9A4JZQX0kN+TFlNwbTnKCpEOI -----END CERTIFICATE-----Generated at Sat Sep 20 00:44:47 2025 by rpki-client