$ rpki-client -vvf rpki.apnic.net/member_repository/A9123180/30569DB007FB11EA9B34CC45C4F9AE02/1m4Cgid2-1UUPQyeVJAyhlal4I0.mft File: 1m4Cgid2-1UUPQyeVJAyhlal4I0.mft (raw, json) Hash identifier: aqovGXy42xIRj1/5IQtREQw+5fEdoTGpF/eSH/E1POA= Subject key identifier: A1:65:3B:ED:9B:30:19:83:15:C1:AF:23:F9:07:25:ED:3C:E5:19:1F Authority key identifier: D6:6E:02:82:27:76:FB:55:14:3D:0C:9E:54:90:32:86:56:A5:E0:8D Certificate issuer: /CN=A9123180/serialNumber=D66E02822776FB55143D0C9E5490328656A5E08D Certificate serial: 0C68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1m4Cgid2-1UUPQyeVJAyhlal4I0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123180/30569DB007FB11EA9B34CC45C4F9AE02/1m4Cgid2-1UUPQyeVJAyhlal4I0.mft Manifest number: 0C60 Signing time: Fri 22 Aug 2025 18:35:13 +0000 Manifest this update: Fri 22 Aug 2025 18:35:13 +0000 Manifest next update: Fri 29 Aug 2025 18:35:13 +0000 Files and hashes: 1: 1m4Cgid2-1UUPQyeVJAyhlal4I0.crl (hash: QnCVXcT2ZcDlkFqp0RtjiTN0cGR3DKEV5a/F5W3TjGU=) 2: 0EE3438A07FC11EABAD90A47C4F9AE02.roa (hash: o6uzXxi45nuYDCicVYaDwUO/XE7Lp0WVGghWkgO8ZII=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123180/30569DB007FB11EA9B34CC45C4F9AE02/1m4Cgid2-1UUPQyeVJAyhlal4I0.crl rsync://rpki.apnic.net/member_repository/A9123180/30569DB007FB11EA9B34CC45C4F9AE02/1m4Cgid2-1UUPQyeVJAyhlal4I0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1m4Cgid2-1UUPQyeVJAyhlal4I0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:35:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3176 (0xc68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123180, serialNumber=D66E02822776FB55143D0C9E5490328656A5E08D Validity Not Before: Aug 22 18:35:13 2025 GMT Not After : Aug 29 18:35:13 2025 GMT Subject: CN=68a8b861-be95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:93:8b:3e:28:95:fd:2b:4e:84:83:41:24:90: 45:92:32:e3:c2:f1:8d:50:70:d5:8d:1d:b1:fc:44: e1:69:63:8d:98:66:85:4e:7f:80:28:b0:c2:b5:02: 64:a4:59:22:ee:6f:52:1e:fa:96:40:89:cd:be:9e: 52:f2:81:b1:78:b0:8f:14:5d:af:1e:d9:8b:38:a9: d2:15:e4:be:47:1d:20:0a:00:fa:d5:59:c9:dc:ed: 9d:6c:46:9e:83:e8:fb:61:16:43:53:d5:e2:2a:60: af:a1:2a:86:04:e2:72:69:be:a9:70:78:7e:c9:8a: d8:ea:36:3f:65:51:eb:e4:bb:50:23:e6:36:54:f5: 36:52:a7:dc:95:66:04:14:d4:32:7c:af:d1:a1:da: 4c:c3:f6:8a:b6:f6:77:11:55:b9:a2:c1:f0:87:39: ce:a3:ae:1d:15:f1:73:e8:6e:12:22:35:09:72:f7: 34:b2:20:63:83:ac:5c:3c:61:83:13:b8:8d:a0:32: 8b:56:1f:d3:51:fd:f5:3f:2d:d7:c8:14:1a:7e:12: d0:3a:a1:a4:b2:c7:d8:75:cd:98:f2:63:58:87:af: 80:32:1d:fa:81:07:61:e6:c1:dd:a1:24:99:ed:94: db:20:9e:2a:1a:5c:a3:ba:45:89:73:84:7c:7d:1e: e7:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:65:3B:ED:9B:30:19:83:15:C1:AF:23:F9:07:25:ED:3C:E5:19:1F X509v3 Authority Key Identifier: keyid:D6:6E:02:82:27:76:FB:55:14:3D:0C:9E:54:90:32:86:56:A5:E0:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123180/30569DB007FB11EA9B34CC45C4F9AE02/1m4Cgid2-1UUPQyeVJAyhlal4I0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1m4Cgid2-1UUPQyeVJAyhlal4I0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123180/30569DB007FB11EA9B34CC45C4F9AE02/1m4Cgid2-1UUPQyeVJAyhlal4I0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:4a:28:87:f7:0e:29:29:31:a5:5f:22:7a:8c:64:88:0f:ef: e6:b7:36:9f:9b:a4:c1:25:5b:3b:3b:f7:47:ee:1a:4c:62:08: 26:80:dd:b6:49:01:be:61:8e:b6:38:7a:f7:8f:4a:7d:58:4f: d7:9b:c8:d8:96:55:85:60:51:fd:5d:98:48:39:4a:e0:bf:1b: 1d:79:c6:3b:c8:3b:86:b1:5d:42:26:72:39:e9:df:e7:81:66: ec:11:a9:fb:02:3c:68:13:6e:d4:dc:be:c4:55:21:b7:bf:66: 03:f7:5c:9d:4c:e1:66:c1:d7:55:5a:ab:3a:3f:d7:4a:0c:bf: 3c:c4:c3:9c:c0:01:88:44:b1:0d:0e:a4:4e:92:c2:c5:77:da: eb:8f:01:f8:69:45:37:e7:30:98:c2:ad:fb:d6:b6:31:fc:61: 9c:19:6d:02:63:82:80:8e:4a:b4:13:fb:3d:42:8c:da:be:dc: c7:d2:98:0b:7b:16:9c:a2:36:64:32:bc:89:09:51:13:a8:fa: f1:aa:26:a7:4c:75:d1:a9:b6:8e:a4:09:d6:a2:f2:ae:d5:b8: b9:9a:41:86:3d:dd:72:b1:43:d3:7b:ea:7e:41:65:34:78:ca: 4a:ce:54:f9:b6:83:75:25:a8:07:0b:5d:95:24:1a:49:7c:51: af:67:a8:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjMxODAxMTAvBgNVBAUTKEQ2NkUwMjgyMjc3NkZCNTUxNDNEMEM5RTU0OTAzMjg2 NTZBNUUwOEQwHhcNMjUwODIyMTgzNTEzWhcNMjUwODI5MTgzNTEzWjAYMRYwFAYD VQQDEw02OGE4Yjg2MS1iZTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvZOLPiiV/StOhINBJJBFkjLjwvGNUHDVjR2x/EThaWONmGaFTn+AKLDCtQJk pFki7m9SHvqWQInNvp5S8oGxeLCPFF2vHtmLOKnSFeS+Rx0gCgD61VnJ3O2dbEae g+j7YRZDU9XiKmCvoSqGBOJyab6pcHh+yYrY6jY/ZVHr5LtQI+Y2VPU2UqfclWYE FNQyfK/RodpMw/aKtvZ3EVW5osHwhznOo64dFfFz6G4SIjUJcvc0siBjg6xcPGGD E7iNoDKLVh/TUf31Py3XyBQafhLQOqGkssfYdc2Y8mNYh6+AMh36gQdh5sHdoSSZ 7ZTbIJ4qGlyjukWJc4R8fR7nEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKFlO+2b MBmDFcGvI/kHJe085RkfMB8GA1UdIwQYMBaAFNZuAoIndvtVFD0MnlSQMoZWpeCN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzE4MC8zMDU2OURCMDA3 RkIxMUVBOUIzNENDNDVDNEY5QUUwMi8xbTRDZ2lkMi0xVVVQUXllVkpBeWhsYWw0 STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFtNENnaWQyLTFVVVBReWVWSkF5aGxhbDRJMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzE4MC8zMDU2OURCMDA3RkIxMUVBOUIzNENDNDVDNEY5QUUwMi8xbTRDZ2lkMi0x VVVQUXllVkpBeWhsYWw0STAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDISiiH9w4pKTGlXyJ6jGSID+/mtzafm6TBJVs7O/dH7hpMYggmgN22 SQG+YY62OHr3j0p9WE/Xm8jYllWFYFH9XZhIOUrgvxsdecY7yDuGsV1CJnI56d/n gWbsEan7AjxoE27U3L7EVSG3v2YD91ydTOFmwddVWqs6P9dKDL88xMOcwAGIRLEN DqROksLFd9rrjwH4aUU35zCYwq371rYx/GGcGW0CY4KAjkq0E/s9QozavtzH0pgL exacojZkMryJCVETqPrxqianTHXRqbaOpAnWovKu1bi5mkGGPd1ysUPTe+p+QWU0 eMpKzlT5toN1JagHC12VJBpJfFGvZ6j2 -----END CERTIFICATE-----Generated at Sat Aug 23 01:34:19 2025 by rpki-client