$ rpki-client -vvf rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.mft File: MhXFUWr7VNjmEtHsPVGC0yHlMXE.mft (raw, json) Hash identifier: VMu3J364E5iqr0E4pWIXhO6FTznRa6t+qzW8s2qKq10= Subject key identifier: 0F:1B:F8:A8:B3:80:4B:D1:22:1D:3C:3B:F0:67:EA:14:4A:C9:4F:74 Authority key identifier: 32:15:C5:51:6A:FB:54:D8:E6:12:D1:EC:3D:51:82:D3:21:E5:31:71 Certificate issuer: /CN=A9180127/serialNumber=3215C5516AFB54D8E612D1EC3D5182D321E53171 Certificate serial: 016C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MhXFUWr7VNjmEtHsPVGC0yHlMXE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.mft Manifest number: 0168 Signing time: Sat 23 Aug 2025 04:03:46 +0000 Manifest this update: Sat 23 Aug 2025 04:03:45 +0000 Manifest next update: Sat 30 Aug 2025 04:03:45 +0000 Files and hashes: 1: MhXFUWr7VNjmEtHsPVGC0yHlMXE.crl (hash: KdLC4ClZ1wjDa4ocEOuTBEpLzLHf/8/ULO8sjwbJMNA=) 2: 80A66D902A6411F09ACA5C61C4F9AE02.roa (hash: VkiCTpbHNMdBRPiF1oBiRg7dOTIy/YEbnzSkLjMcvbc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.crl rsync://rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MhXFUWr7VNjmEtHsPVGC0yHlMXE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:03:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 364 (0x16c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180127, serialNumber=3215C5516AFB54D8E612D1EC3D5182D321E53171 Validity Not Before: Aug 23 04:03:45 2025 GMT Not After : Aug 30 04:03:45 2025 GMT Subject: CN=68a93da1-b42d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:50:65:c2:07:17:71:91:3a:f6:9e:e4:53:60: 06:5c:3a:58:20:b4:c8:2f:35:5e:b5:1c:1c:b7:d9: 1b:ef:88:f0:69:90:3f:63:90:7d:43:82:e4:0f:e4: 1e:ab:04:75:1a:c2:17:6a:cd:57:83:99:7c:9b:d7: 81:ee:61:fd:14:d9:41:36:94:3c:a0:13:4e:2b:4a: d6:d3:d8:bb:43:3b:cf:25:a9:55:17:a2:9a:28:64: 3b:24:9f:6e:f2:45:d5:06:89:01:1e:45:59:59:02: d4:89:ad:70:8f:4b:54:d6:95:72:77:96:ba:e7:d3: 59:dc:e4:b2:55:33:61:c9:8e:c3:d3:fa:ee:01:06: d5:ea:c5:91:93:ae:a2:5a:eb:a4:26:38:66:f2:42: f5:7c:ac:24:c9:6c:45:5a:02:bc:47:7c:e5:2d:55: 04:ed:c3:26:36:6c:b8:a7:0f:1c:88:5f:e7:29:67: 45:4a:bb:e6:f5:8e:0f:1f:e6:70:16:b5:6a:a1:ba: 1a:2d:42:4f:35:47:2a:bd:c4:df:7c:82:a1:37:c3: b5:a1:ee:f7:16:ec:3b:bd:1b:c0:1b:13:15:6c:2f: 63:32:54:10:82:12:b8:1d:be:ea:79:30:76:ee:c3: 86:1b:8b:5b:25:b5:96:3d:17:2a:37:df:4e:29:f4: c3:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:1B:F8:A8:B3:80:4B:D1:22:1D:3C:3B:F0:67:EA:14:4A:C9:4F:74 X509v3 Authority Key Identifier: keyid:32:15:C5:51:6A:FB:54:D8:E6:12:D1:EC:3D:51:82:D3:21:E5:31:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MhXFUWr7VNjmEtHsPVGC0yHlMXE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:f5:8e:94:82:e1:25:d3:41:16:32:68:23:21:c3:cd:dc:23: 12:27:04:19:64:06:f3:d2:4d:79:5d:97:e4:10:58:74:fe:7a: 2b:04:e7:12:fe:92:75:e8:cf:92:8b:b1:7c:d5:08:df:78:e1: 5e:56:b7:d6:16:88:3d:97:86:f3:a7:ca:fa:0d:1b:9a:96:be: a7:1d:cc:6c:3e:ec:70:a3:ca:7a:97:f6:51:d9:3f:27:a7:82: 5f:8b:4f:dd:b8:f3:ed:55:5b:33:c2:95:0d:58:bf:29:32:a8: b5:e1:5a:a7:2c:f8:b2:b0:92:13:4a:fd:20:4d:7b:09:8f:0b: 62:d0:e7:5b:03:6a:44:08:fe:51:fc:06:47:76:79:24:2b:d4: 90:5d:87:26:91:a3:70:d6:8c:1b:f6:fb:bc:df:60:ab:9c:8b: 71:0a:df:6b:07:06:07:49:1a:ac:b9:ca:53:11:0f:a3:b8:2f: 2e:4d:72:fd:bb:c2:f7:aa:0c:84:ad:d0:4f:6b:a3:bf:ba:62: c6:73:13:91:7a:5c:7c:b1:36:62:cd:f7:b9:e7:83:c8:07:49: ec:80:11:94:44:33:29:ed:ce:d0:1e:c7:64:98:52:de:99:92: 2e:9d:a8:a9:40:94:b3:20:83:ef:d6:d7:48:74:4e:ba:f8:be: c8:f0:1e:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAxMjcxMTAvBgNVBAUTKDMyMTVDNTUxNkFGQjU0RDhFNjEyRDFFQzNENTE4MkQz MjFFNTMxNzEwHhcNMjUwODIzMDQwMzQ1WhcNMjUwODMwMDQwMzQ1WjAYMRYwFAYD VQQDEw02OGE5M2RhMS1iNDJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxFBlwgcXcZE69p7kU2AGXDpYILTILzVetRwct9kb74jwaZA/Y5B9Q4LkD+Qe qwR1GsIXas1Xg5l8m9eB7mH9FNlBNpQ8oBNOK0rW09i7QzvPJalVF6KaKGQ7JJ9u 8kXVBokBHkVZWQLUia1wj0tU1pVyd5a659NZ3OSyVTNhyY7D0/ruAQbV6sWRk66i WuukJjhm8kL1fKwkyWxFWgK8R3zlLVUE7cMmNmy4pw8ciF/nKWdFSrvm9Y4PH+Zw FrVqoboaLUJPNUcqvcTffIKhN8O1oe73Fuw7vRvAGxMVbC9jMlQQghK4Hb7qeTB2 7sOGG4tbJbWWPRcqN99OKfTDTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA8b+Kiz gEvRIh08O/Bn6hRKyU90MB8GA1UdIwQYMBaAFDIVxVFq+1TY5hLR7D1RgtMh5TFx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDEyNy8xNkFGMUQyMDVC N0YxMUVFQkUzMjBFMzVDNEY5QUUwMi9NaFhGVVdyN1ZOam1FdEhzUFZHQzB5SGxN WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01oWEZVV3I3Vk5qbUV0SHNQVkdDMHlIbE1YRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDEyNy8xNkFGMUQyMDVCN0YxMUVFQkUzMjBFMzVDNEY5QUUwMi9NaFhGVVdyN1ZO am1FdEhzUFZHQzB5SGxNWEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAK9Y6UguEl00EWMmgjIcPN3CMSJwQZZAbz0k15XZfkEFh0/norBOcS /pJ16M+Si7F81QjfeOFeVrfWFog9l4bzp8r6DRualr6nHcxsPuxwo8p6l/ZR2T8n p4Jfi0/duPPtVVszwpUNWL8pMqi14VqnLPiysJITSv0gTXsJjwti0OdbA2pECP5R /AZHdnkkK9SQXYcmkaNw1owb9vu832CrnItxCt9rBwYHSRqsucpTEQ+juC8uTXL9 u8L3qgyErdBPa6O/umLGcxORelx8sTZizfe554PIB0nsgBGURDMp7c7QHsdkmFLe mZIunaipQJSzIIPv1tdIdE66+L7I8B44 -----END CERTIFICATE-----Generated at Sat Aug 23 18:57:24 2025 by rpki-client