$ rpki-client -vvf rpki.apnic.net/member_repository/A9146304/E788C8A2258211E990B3783AC4F9AE02/RhQllCdGSHS-fet79CEnLLI9oYg.mft File: RhQllCdGSHS-fet79CEnLLI9oYg.mft (raw, json) Hash identifier: lN+HmV5DPgBubiW6kNQLwUIMaeerFBMepez2TTj8czM= Subject key identifier: 84:6D:A3:5C:93:A0:D3:5E:B9:74:53:F5:6C:A4:88:33:BE:38:AD:97 Authority key identifier: 46:14:25:94:27:46:48:74:BE:7D:EB:7B:F4:21:27:2C:B2:3D:A1:88 Certificate issuer: /CN=A9146304/serialNumber=4614259427464874BE7DEB7BF421272CB23DA188 Certificate serial: 10D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RhQllCdGSHS-fet79CEnLLI9oYg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146304/E788C8A2258211E990B3783AC4F9AE02/RhQllCdGSHS-fet79CEnLLI9oYg.mft Manifest number: 10CD Signing time: Mon 30 Jun 2025 17:31:19 +0000 Manifest this update: Mon 30 Jun 2025 17:31:19 +0000 Manifest next update: Mon 07 Jul 2025 17:31:19 +0000 Files and hashes: 1: RhQllCdGSHS-fet79CEnLLI9oYg.crl (hash: qYWiprLOLCgWEjEjYmIuWiXQNTYcMyx0uHxrHawQj8g=) 2: 65B35A86577011EC8F00A65AC4F9AE02.roa (hash: +KeTCKuOfeRgu5RimCaRxKh/0Sa4v6tZDxtG+Krp5ho=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146304/E788C8A2258211E990B3783AC4F9AE02/RhQllCdGSHS-fet79CEnLLI9oYg.crl rsync://rpki.apnic.net/member_repository/A9146304/E788C8A2258211E990B3783AC4F9AE02/RhQllCdGSHS-fet79CEnLLI9oYg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RhQllCdGSHS-fet79CEnLLI9oYg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 17:31:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4307 (0x10d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146304, serialNumber=4614259427464874BE7DEB7BF421272CB23DA188 Validity Not Before: Jun 30 17:31:19 2025 GMT Not After : Jul 7 17:31:19 2025 GMT Subject: CN=6862c9e7-60b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8b:1e:42:cf:6d:ab:4d:9a:80:e4:5b:a8:83: 76:03:6d:cc:5d:e3:e3:aa:e1:8a:0a:77:f7:23:30: 78:6c:c2:c1:f8:70:34:27:15:a5:47:24:3f:5e:d6: 01:c6:05:88:d4:bc:b2:58:f8:f7:68:53:8b:72:c7: de:07:0f:b5:0e:dd:fa:97:64:bd:86:c0:5d:9a:31: 93:71:87:18:98:99:d3:d7:7d:c6:d4:ca:1b:6a:a1: 2e:9c:f2:40:02:89:76:3b:d7:26:36:d0:4a:20:16: 3e:c5:5b:95:bf:3f:21:5b:57:e0:43:f4:97:d1:87: d1:d9:7e:3b:18:2a:ea:ae:c0:f7:b9:d6:e1:fd:fa: 5f:9e:8b:c7:07:ad:22:63:b4:2b:02:1a:51:96:8e: 9c:48:06:90:c9:d1:c1:ea:87:47:c0:f4:e7:a6:d1: 29:08:9b:b6:d8:68:71:77:2a:16:8b:cb:a2:de:97: 65:9a:45:83:a0:6a:ac:3a:4c:fc:1a:99:bf:fb:d6: 07:b9:90:ed:f5:b6:d7:59:9a:ce:f4:79:87:b4:83: 52:85:8a:08:0c:71:17:21:c5:01:c5:70:9e:54:08: 58:2e:a8:28:e1:7d:7b:bf:46:d7:5f:44:7b:f4:5f: 77:bf:89:6e:f8:70:76:7f:a4:e1:2f:4a:80:9d:27: 33:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:6D:A3:5C:93:A0:D3:5E:B9:74:53:F5:6C:A4:88:33:BE:38:AD:97 X509v3 Authority Key Identifier: keyid:46:14:25:94:27:46:48:74:BE:7D:EB:7B:F4:21:27:2C:B2:3D:A1:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146304/E788C8A2258211E990B3783AC4F9AE02/RhQllCdGSHS-fet79CEnLLI9oYg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RhQllCdGSHS-fet79CEnLLI9oYg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146304/E788C8A2258211E990B3783AC4F9AE02/RhQllCdGSHS-fet79CEnLLI9oYg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:2d:c0:77:16:0e:f5:75:f6:ff:fa:63:79:df:d9:3f:a6:2a: 28:28:f9:9c:7e:ed:02:c5:d7:82:55:c3:1b:98:b9:6d:63:49: 5c:9e:28:49:af:07:96:40:fa:bd:fa:95:b9:22:74:51:27:8e: 06:85:87:44:cf:42:29:ea:bd:89:6f:79:43:b6:87:ed:dc:97: bb:3b:22:71:fc:ea:62:b8:23:4b:b7:4c:33:16:01:9d:79:fc: cf:d7:4d:6d:39:75:77:5e:9b:a3:f3:7e:bc:52:2d:f5:24:86: d6:a5:d6:d9:97:48:b1:44:1b:9e:e4:84:1b:71:af:dc:24:bd: 96:76:72:96:bb:df:65:74:70:5f:c5:74:22:42:f8:b1:43:23: 1c:2e:f5:b8:e7:0c:9a:dc:c7:be:ae:4a:fb:b8:ee:ee:36:eb: 4c:f7:1f:91:de:2f:54:b1:a6:98:ef:58:a5:2c:72:7a:1c:81: c4:5b:0a:12:85:73:17:b9:5a:73:a5:d2:3b:b3:ad:ee:0a:b3: 6c:09:6f:91:7f:96:ec:3e:f7:27:d5:81:7d:91:05:e1:1f:42: 60:b3:16:a5:a8:d1:86:d2:59:e2:ff:f5:b6:24:48:93:d2:fc: 6b:ce:bc:5e:9d:3a:ea:91:40:8d:67:5b:b7:26:ef:e9:42:75: 39:4b:f9:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICENMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYzMDQxMTAvBgNVBAUTKDQ2MTQyNTk0Mjc0NjQ4NzRCRTdERUI3QkY0MjEyNzJD QjIzREExODgwHhcNMjUwNjMwMTczMTE5WhcNMjUwNzA3MTczMTE5WjAYMRYwFAYD VQQDEw02ODYyYzllNy02MGI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvIseQs9tq02agORbqIN2A23MXePjquGKCnf3IzB4bMLB+HA0JxWlRyQ/XtYB xgWI1LyyWPj3aFOLcsfeBw+1Dt36l2S9hsBdmjGTcYcYmJnT133G1MobaqEunPJA Aol2O9cmNtBKIBY+xVuVvz8hW1fgQ/SX0YfR2X47GCrqrsD3udbh/fpfnovHB60i Y7QrAhpRlo6cSAaQydHB6odHwPTnptEpCJu22GhxdyoWi8ui3pdlmkWDoGqsOkz8 Gpm/+9YHuZDt9bbXWZrO9HmHtINShYoIDHEXIcUBxXCeVAhYLqgo4X17v0bXX0R7 9F93v4lu+HB2f6ThL0qAnSczfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIRto1yT oNNeuXRT9WykiDO+OK2XMB8GA1UdIwQYMBaAFEYUJZQnRkh0vn3re/QhJyyyPaGI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjMwNC9FNzg4QzhBMjI1 ODIxMUU5OTBCMzc4M0FDNEY5QUUwMi9SaFFsbENkR1NIUy1mZXQ3OUNFbkxMSTlv WWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JoUWxsQ2RHU0hTLWZldDc5Q0VuTExJOW9ZZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjMwNC9FNzg4QzhBMjI1ODIxMUU5OTBCMzc4M0FDNEY5QUUwMi9SaFFsbENkR1NI Uy1mZXQ3OUNFbkxMSTlvWWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZLcB3Fg71dfb/+mN539k/piooKPmcfu0CxdeCVcMbmLltY0lcnihJ rweWQPq9+pW5InRRJ44GhYdEz0Ip6r2Jb3lDtoft3Je7OyJx/OpiuCNLt0wzFgGd efzP101tOXV3Xpuj8368Ui31JIbWpdbZl0ixRBue5IQbca/cJL2WdnKWu99ldHBf xXQiQvixQyMcLvW45wya3Me+rkr7uO7uNutM9x+R3i9UsaaY71ilLHJ6HIHEWwoS hXMXuVpzpdI7s63uCrNsCW+Rf5bsPvcn1YF9kQXhH0JgsxalqNGG0lni//W2JEiT 0vxrzrxenTrqkUCNZ1u3Ju/pQnU5S/kb -----END CERTIFICATE-----Generated at Wed Jul 2 12:47:06 2025 by rpki-client