$ rpki-client -vvf rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.mft File: MhXFUWr7VNjmEtHsPVGC0yHlMXE.mft (raw, json) Hash identifier: YdApnUdCK5IXTNJFvzL1Pf3hJpWXAP/8krxikdPqTyU= Subject key identifier: 46:CF:FC:A0:AD:87:8D:71:F9:14:A6:87:93:A7:F7:25:BA:08:15:C6 Authority key identifier: 32:15:C5:51:6A:FB:54:D8:E6:12:D1:EC:3D:51:82:D3:21:E5:31:71 Certificate issuer: /CN=A9180127/serialNumber=3215C5516AFB54D8E612D1EC3D5182D321E53171 Certificate serial: 0152 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MhXFUWr7VNjmEtHsPVGC0yHlMXE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.mft Manifest number: 014E Signing time: Thu 03 Jul 2025 04:18:59 +0000 Manifest this update: Thu 03 Jul 2025 04:18:58 +0000 Manifest next update: Thu 10 Jul 2025 04:18:58 +0000 Files and hashes: 1: MhXFUWr7VNjmEtHsPVGC0yHlMXE.crl (hash: Bb3MYErQaqOjc+ShnjRY/lQzLsuxNLDawPE7qUY9eRQ=) 2: 80A66D902A6411F09ACA5C61C4F9AE02.roa (hash: VkiCTpbHNMdBRPiF1oBiRg7dOTIy/YEbnzSkLjMcvbc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.crl rsync://rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MhXFUWr7VNjmEtHsPVGC0yHlMXE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 338 (0x152) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180127, serialNumber=3215C5516AFB54D8E612D1EC3D5182D321E53171 Validity Not Before: Jul 3 04:18:58 2025 GMT Not After : Jul 10 04:18:58 2025 GMT Subject: CN=686604b3-9b07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ba:a8:6d:17:bd:9e:c7:ac:34:49:a2:e5:82: af:6e:a6:51:72:e8:9c:12:76:59:3f:42:86:5a:e5: 90:c9:c1:da:07:e0:af:9a:ad:d0:33:d7:ec:fc:77: d8:af:d1:77:c6:8f:13:bc:6d:a2:34:15:31:f1:ee: ea:14:a9:26:b1:51:5b:6d:9c:8f:75:39:24:90:0c: 19:55:81:ac:ca:77:d6:06:34:cf:5f:d1:66:c2:e3: 7a:61:1a:a4:44:ba:04:cc:5b:a6:8e:d4:0e:1e:ab: 17:73:cc:7e:68:54:30:91:08:6b:c0:03:5a:19:7d: de:28:25:aa:0f:9a:e2:39:ad:23:e2:ba:62:d1:42: a7:00:a1:21:cd:ad:fd:e6:c4:01:1b:23:8a:7d:f8: 3a:4e:8c:6f:28:79:52:97:be:fb:cb:f0:20:41:24: 27:cb:6b:ad:f7:b9:b9:cb:23:26:46:7f:8c:52:aa: fd:7d:db:9d:b0:27:0b:7b:b5:23:ce:28:e1:7a:a9: f4:f7:4f:a7:48:92:82:25:df:97:65:4a:87:ff:e8: 7a:a9:52:06:f4:c5:10:92:e1:24:87:9d:fc:a0:95: 7b:70:2d:c3:35:45:da:20:2d:d9:71:18:66:e9:eb: eb:4b:96:4f:74:75:88:dd:09:64:3e:26:38:5d:5c: b7:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:CF:FC:A0:AD:87:8D:71:F9:14:A6:87:93:A7:F7:25:BA:08:15:C6 X509v3 Authority Key Identifier: keyid:32:15:C5:51:6A:FB:54:D8:E6:12:D1:EC:3D:51:82:D3:21:E5:31:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MhXFUWr7VNjmEtHsPVGC0yHlMXE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:55:7a:cd:bc:4b:d8:28:7a:3c:f0:5a:19:e1:fb:a5:30:11: 1c:54:9e:53:0e:13:5d:f2:4f:81:5c:24:9d:33:61:90:ee:14: ae:45:13:ee:17:0b:aa:53:bb:4b:11:e9:e7:7f:a2:18:39:ac: 04:32:88:e5:8c:13:5c:5c:7a:3c:ce:11:70:b0:94:06:43:af: 34:56:dd:fc:d2:9f:65:1e:fa:36:1b:13:fb:89:86:5d:ab:7c: d8:5d:fa:31:bc:ba:25:32:58:91:61:2f:20:8a:2e:6e:10:b3: 06:1e:a8:f5:a2:76:9e:e9:4e:00:c4:4a:b7:fb:23:f5:12:d5: 68:25:1a:9c:5f:69:bb:e4:48:39:db:a6:bf:ef:65:b3:60:fc: 76:8b:b3:85:57:8a:da:22:85:91:93:33:1a:ff:e4:58:aa:37: 62:e2:89:e0:9f:2c:ad:5d:0e:4b:77:90:cb:29:bc:64:cd:15: 61:85:d5:f3:4c:df:1a:fa:65:f6:e1:ad:94:26:39:2d:04:ff: 7c:61:f7:8f:3d:cc:af:94:54:40:56:b0:da:be:91:54:e2:d0: 45:e7:51:da:4b:c1:54:60:c0:20:9b:b2:86:ff:06:f0:f3:b9: 9f:2c:e7:0a:94:d2:a8:a1:13:1d:a0:c2:39:89:1d:70:3b:54: db:5e:50:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAxMjcxMTAvBgNVBAUTKDMyMTVDNTUxNkFGQjU0RDhFNjEyRDFFQzNENTE4MkQz MjFFNTMxNzEwHhcNMjUwNzAzMDQxODU4WhcNMjUwNzEwMDQxODU4WjAYMRYwFAYD VQQDEw02ODY2MDRiMy05YjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2bqobRe9nsesNEmi5YKvbqZRcuicEnZZP0KGWuWQycHaB+Cvmq3QM9fs/HfY r9F3xo8TvG2iNBUx8e7qFKkmsVFbbZyPdTkkkAwZVYGsynfWBjTPX9FmwuN6YRqk RLoEzFumjtQOHqsXc8x+aFQwkQhrwANaGX3eKCWqD5riOa0j4rpi0UKnAKEhza39 5sQBGyOKffg6ToxvKHlSl777y/AgQSQny2ut97m5yyMmRn+MUqr9fdudsCcLe7Uj zijheqn090+nSJKCJd+XZUqH/+h6qVIG9MUQkuEkh538oJV7cC3DNUXaIC3ZcRhm 6evrS5ZPdHWI3QlkPiY4XVy3UQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEbP/KCt h41x+RSmh5On9yW6CBXGMB8GA1UdIwQYMBaAFDIVxVFq+1TY5hLR7D1RgtMh5TFx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDEyNy8xNkFGMUQyMDVC N0YxMUVFQkUzMjBFMzVDNEY5QUUwMi9NaFhGVVdyN1ZOam1FdEhzUFZHQzB5SGxN WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01oWEZVV3I3Vk5qbUV0SHNQVkdDMHlIbE1YRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDEyNy8xNkFGMUQyMDVCN0YxMUVFQkUzMjBFMzVDNEY5QUUwMi9NaFhGVVdyN1ZO am1FdEhzUFZHQzB5SGxNWEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2VXrNvEvYKHo88FoZ4fulMBEcVJ5TDhNd8k+BXCSdM2GQ7hSuRRPu FwuqU7tLEennf6IYOawEMojljBNcXHo8zhFwsJQGQ680Vt380p9lHvo2GxP7iYZd q3zYXfoxvLolMliRYS8gii5uELMGHqj1onae6U4AxEq3+yP1EtVoJRqcX2m75Eg5 26a/72WzYPx2i7OFV4raIoWRkzMa/+RYqjdi4ongnyytXQ5Ld5DLKbxkzRVhhdXz TN8a+mX24a2UJjktBP98YfePPcyvlFRAVrDavpFU4tBF51HaS8FUYMAgm7KG/wbw 87mfLOcKlNKooRMdoMI5iR1wO1TbXlBZ -----END CERTIFICATE-----Generated at Sat Jul 5 01:22:13 2025 by rpki-client