$ rpki-client -vvf rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.mft File: mHOIl4P3Uw60S-AJeqNhiwcWjzs.mft (raw, json) Hash identifier: 1777ib80W/twOHaEV9+XCS6O5eixm1T3K8LhSPNRRZ8= Subject key identifier: 8C:04:6E:C4:D0:C8:B0:AD:04:3B:BF:D3:6B:1D:C3:42:B2:87:C0:4D Authority key identifier: 98:73:88:97:83:F7:53:0E:B4:4B:E0:09:7A:A3:61:8B:07:16:8F:3B Certificate issuer: /CN=A9161322/serialNumber=9873889783F7530EB44BE0097AA3618B07168F3B Certificate serial: 0130 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mHOIl4P3Uw60S-AJeqNhiwcWjzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.mft Manifest number: 012E Signing time: Sat 23 Aug 2025 04:42:02 +0000 Manifest this update: Sat 23 Aug 2025 04:42:01 +0000 Manifest next update: Sat 30 Aug 2025 04:42:01 +0000 Files and hashes: 1: mHOIl4P3Uw60S-AJeqNhiwcWjzs.crl (hash: MLi6XD+BynZL/8c0B548HN7seozeUxOfjd6FFLQnlwQ=) 2: A023DD56B12F11EEB1221E32C4F9AE02.roa (hash: NmbBdfuCudYxF5RZcp9GpJHBkLSfYF/OMfMDOKpiQbY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.crl rsync://rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mHOIl4P3Uw60S-AJeqNhiwcWjzs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:42:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 304 (0x130) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161322, serialNumber=9873889783F7530EB44BE0097AA3618B07168F3B Validity Not Before: Aug 23 04:42:01 2025 GMT Not After : Aug 30 04:42:01 2025 GMT Subject: CN=68a9469a-5c97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2c:37:f8:c0:82:c9:3b:18:ca:47:85:4b:36: 0e:56:2a:0c:72:b1:f8:62:67:5e:67:da:51:d4:15: ce:b7:31:f6:14:5d:3a:f5:9c:70:4c:00:76:ab:37: d4:cd:ee:8d:24:25:c9:a4:37:88:ab:6f:2f:f8:7a: 1e:59:fc:f9:91:10:a7:58:44:60:69:6a:71:10:88: bf:28:88:f5:c7:d3:18:4d:1b:3b:4c:b0:0a:bd:e4: 72:b8:17:b1:90:25:42:43:45:c1:da:98:9b:0e:63: f2:42:6e:c0:5c:d9:84:85:98:5d:c7:78:ac:0e:35: 2c:93:f1:95:1f:43:d8:8d:e1:e1:fe:7d:6a:37:f6: 7b:b0:b3:1c:22:98:5f:29:df:da:cf:22:9d:58:37: 46:b5:3d:01:eb:a2:53:ce:91:95:64:1a:b6:53:f7: 12:51:46:7a:cc:51:c1:b5:1d:da:c0:8f:18:8d:32: c2:80:65:9a:a3:f0:0d:6f:22:ad:10:19:c0:be:40: af:c1:55:8b:7d:cf:a6:3f:73:ff:55:80:52:24:9b: 78:78:42:ad:87:cc:d6:c2:91:93:6b:e7:89:84:cf: 2d:05:2a:26:0e:77:d2:6e:e5:6d:09:16:4e:90:62: 45:61:09:7a:69:f4:68:e5:56:4e:fa:fb:0e:a3:55: ad:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:04:6E:C4:D0:C8:B0:AD:04:3B:BF:D3:6B:1D:C3:42:B2:87:C0:4D X509v3 Authority Key Identifier: keyid:98:73:88:97:83:F7:53:0E:B4:4B:E0:09:7A:A3:61:8B:07:16:8F:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mHOIl4P3Uw60S-AJeqNhiwcWjzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:6b:a9:bc:13:26:c4:d0:61:3c:bf:40:17:86:74:73:da:f0: 52:82:e0:a9:6c:e7:49:2f:b7:10:2b:11:84:1f:66:67:81:78: 35:26:e0:86:03:6b:ad:ef:c1:44:d3:48:8b:13:50:eb:7a:46: 73:ea:f1:98:20:fc:9a:37:d2:b2:7f:76:8b:fb:ea:5c:dc:7e: 09:c9:66:5c:8f:05:45:c5:ae:fc:22:bd:b3:ea:f1:80:19:c2: cb:df:aa:b9:3c:71:db:dc:5c:13:6b:bd:0e:ab:5b:be:ff:ef: 8f:c5:77:fe:65:8e:d3:50:d4:6b:e2:84:07:fd:1e:44:52:4c: 98:49:57:26:ea:56:30:25:10:76:aa:86:fe:9e:a9:e3:72:0a: 81:fc:a6:d7:f7:57:53:d3:49:01:c4:53:46:f3:a5:9d:91:69: 2c:54:8d:52:d1:fa:bc:7d:1f:bb:68:23:55:ff:b9:cd:8b:8e: 82:13:5a:8f:24:4e:3e:05:95:6b:5f:43:bd:32:62:95:73:48: 85:00:93:fa:e4:a2:1b:06:e2:a3:f4:a7:90:97:5e:a2:a8:50: 97:09:de:25:ed:b3:1c:e4:3d:fe:e9:37:8e:30:44:da:c5:56: 75:86:90:e3:73:37:21:d7:64:2b:21:9e:a1:79:19:f6:8b:8d: f5:5e:2f:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjEzMjIxMTAvBgNVBAUTKDk4NzM4ODk3ODNGNzUzMEVCNDRCRTAwOTdBQTM2MThC MDcxNjhGM0IwHhcNMjUwODIzMDQ0MjAxWhcNMjUwODMwMDQ0MjAxWjAYMRYwFAYD VQQDEw02OGE5NDY5YS01Yzk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwSw3+MCCyTsYykeFSzYOVioMcrH4YmdeZ9pR1BXOtzH2FF069ZxwTAB2qzfU ze6NJCXJpDeIq28v+HoeWfz5kRCnWERgaWpxEIi/KIj1x9MYTRs7TLAKveRyuBex kCVCQ0XB2pibDmPyQm7AXNmEhZhdx3isDjUsk/GVH0PYjeHh/n1qN/Z7sLMcIphf Kd/azyKdWDdGtT0B66JTzpGVZBq2U/cSUUZ6zFHBtR3awI8YjTLCgGWao/ANbyKt EBnAvkCvwVWLfc+mP3P/VYBSJJt4eEKth8zWwpGTa+eJhM8tBSomDnfSbuVtCRZO kGJFYQl6afRo5VZO+vsOo1WtmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIwEbsTQ yLCtBDu/02sdw0Kyh8BNMB8GA1UdIwQYMBaAFJhziJeD91MOtEvgCXqjYYsHFo87 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTMyMi80OUU0QjAwOEIw RUIxMUVFQjY5ODlGNTRDNEY5QUUwMi9tSE9JbDRQM1V3NjBTLUFKZXFOaGl3Y1dq enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL21IT0lsNFAzVXc2MFMtQUplcU5oaXdjV2p6cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTMyMi80OUU0QjAwOEIwRUIxMUVFQjY5ODlGNTRDNEY5QUUwMi9tSE9JbDRQM1V3 NjBTLUFKZXFOaGl3Y1dqenMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3a6m8EybE0GE8v0AXhnRz2vBSguCpbOdJL7cQKxGEH2ZngXg1JuCG A2ut78FE00iLE1DrekZz6vGYIPyaN9Kyf3aL++pc3H4JyWZcjwVFxa78Ir2z6vGA GcLL36q5PHHb3FwTa70Oq1u+/++PxXf+ZY7TUNRr4oQH/R5EUkyYSVcm6lYwJRB2 qob+nqnjcgqB/KbX91dT00kBxFNG86WdkWksVI1S0fq8fR+7aCNV/7nNi46CE1qP JE4+BZVrX0O9MmKVc0iFAJP65KIbBuKj9KeQl16iqFCXCd4l7bMc5D3+6TeOMETa xVZ1hpDjczch12QrIZ6heRn2i431Xi/4 -----END CERTIFICATE-----Generated at Sat Aug 23 12:30:31 2025 by rpki-client