$ rpki-client -vvf rpki.apnic.net/member_repository/A9180EB5/E4EE92CE55FA11ECAAE80E41C4F9AE02/plApCrx0GfQg5AG7s6RNCBPR8Wk.mft File: plApCrx0GfQg5AG7s6RNCBPR8Wk.mft (raw, json) Hash identifier: QDqgwOyXlu9Fz3znQ4X5K/WP/IgQibAV2j/ty/8dmUg= Subject key identifier: 21:1B:DD:5D:17:C8:BA:9C:0B:90:0A:B7:38:F1:48:C5:EE:D0:89:19 Authority key identifier: A6:50:29:0A:BC:74:19:F4:20:E4:01:BB:B3:A4:4D:08:13:D1:F1:69 Certificate issuer: /CN=A9180EB5/serialNumber=A650290ABC7419F420E401BBB3A44D0813D1F169 Certificate serial: 047A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/plApCrx0GfQg5AG7s6RNCBPR8Wk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180EB5/E4EE92CE55FA11ECAAE80E41C4F9AE02/plApCrx0GfQg5AG7s6RNCBPR8Wk.mft Manifest number: 0476 Signing time: Sat 23 Aug 2025 00:18:21 +0000 Manifest this update: Sat 23 Aug 2025 00:18:20 +0000 Manifest next update: Sat 30 Aug 2025 00:18:20 +0000 Files and hashes: 1: plApCrx0GfQg5AG7s6RNCBPR8Wk.crl (hash: NkM0EnT9lkKSaci6SjQy6W6hETofe+CL8QihTjXJjxk=) 2: C361870855FD11EC938D1744C4F9AE02.roa (hash: SB4h4zGEtxyFJYfc5GO7YkKy69kkEfQKoUL9+jluR6E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180EB5/E4EE92CE55FA11ECAAE80E41C4F9AE02/plApCrx0GfQg5AG7s6RNCBPR8Wk.crl rsync://rpki.apnic.net/member_repository/A9180EB5/E4EE92CE55FA11ECAAE80E41C4F9AE02/plApCrx0GfQg5AG7s6RNCBPR8Wk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/plApCrx0GfQg5AG7s6RNCBPR8Wk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1146 (0x47a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180EB5, serialNumber=A650290ABC7419F420E401BBB3A44D0813D1F169 Validity Not Before: Aug 23 00:18:20 2025 GMT Not After : Aug 30 00:18:20 2025 GMT Subject: CN=68a908cc-c288 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:dc:cc:6a:d5:9b:2e:6e:83:5e:a2:eb:70:78: e1:45:89:ff:00:8c:9b:4c:30:95:5c:df:c0:12:e3: 87:c3:a4:cd:58:91:f9:8a:9e:ed:de:dc:a8:91:6d: e7:c3:b0:49:4c:54:49:43:ad:3a:9e:09:0f:9b:15: fb:71:0b:90:82:c4:30:3c:7a:41:8e:33:da:7a:a9: 98:c5:d4:8d:ab:9b:f2:53:26:49:f8:1e:61:7e:d7: c9:5b:6f:f5:65:a4:34:ea:de:71:84:cc:84:29:4c: eb:73:67:f2:74:ac:89:e8:da:3e:80:f9:6a:b2:32: 9e:5a:52:ff:f0:2a:5e:9e:75:ef:73:3e:ac:50:27: ef:d0:44:dd:f4:60:c6:36:9f:ec:d3:7f:7d:e0:7d: 75:93:00:92:39:9a:47:2f:f8:fd:46:42:7b:fa:19: 67:62:1b:1b:06:72:a7:5c:4d:ba:05:14:65:dc:ba: 15:d0:a0:69:a3:36:0b:e0:89:72:7c:ac:75:d4:a4: 29:f8:db:7e:db:b8:23:1f:b9:f8:e8:8e:1b:0f:50: 4a:33:bf:1b:9a:09:35:0b:48:c0:4e:a0:93:ec:89: fc:9e:e3:82:9a:67:f6:73:86:3e:14:b2:15:e2:ae: 31:4f:50:8a:15:d1:da:75:6b:de:c3:66:5c:81:1e: 71:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:1B:DD:5D:17:C8:BA:9C:0B:90:0A:B7:38:F1:48:C5:EE:D0:89:19 X509v3 Authority Key Identifier: keyid:A6:50:29:0A:BC:74:19:F4:20:E4:01:BB:B3:A4:4D:08:13:D1:F1:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180EB5/E4EE92CE55FA11ECAAE80E41C4F9AE02/plApCrx0GfQg5AG7s6RNCBPR8Wk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/plApCrx0GfQg5AG7s6RNCBPR8Wk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180EB5/E4EE92CE55FA11ECAAE80E41C4F9AE02/plApCrx0GfQg5AG7s6RNCBPR8Wk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:a9:e7:cd:bf:29:d5:29:8b:c6:c0:cb:51:7d:50:c3:86:3f: 04:d4:30:2d:eb:bd:bd:e3:70:82:f8:12:a3:ef:68:e3:06:70: 44:f7:69:ae:0d:72:ba:98:f6:c3:1f:fe:0b:45:a6:d3:c5:5c: 27:09:e5:0f:6e:a9:a3:1b:cf:ad:b1:1f:a9:04:98:b2:85:64: f4:34:e5:00:9a:21:1a:ff:41:ab:eb:50:88:5f:c0:57:41:c3: 16:a7:17:ad:02:b3:49:ae:4d:4a:f2:0a:d2:2a:11:34:76:69: f7:42:ec:30:61:2b:66:f5:66:46:85:a6:39:db:b1:c4:d9:aa: 47:f6:57:26:a9:df:b1:3e:b1:ff:2f:71:29:b6:4e:89:02:b5: 69:e9:74:2d:47:7d:6c:62:52:ec:17:59:49:f4:df:39:91:46: a3:2f:56:4b:77:8f:3c:14:e7:5a:1e:c6:87:82:bd:e7:be:e4: 50:17:b3:34:81:ee:07:e7:3d:1c:2a:73:8b:ca:52:9d:8c:1d: b0:c4:1d:0e:b5:02:15:84:a7:e8:08:0f:99:02:94:7e:6a:51: ad:a2:61:b0:9c:83:5f:cb:79:0b:1e:86:d0:80:74:2b:b1:e7: d5:61:34:c0:42:74:79:68:67:82:f3:ee:21:c9:f7:6a:92:9e: e1:52:e0:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODBFQjUxMTAvBgNVBAUTKEE2NTAyOTBBQkM3NDE5RjQyMEU0MDFCQkIzQTQ0RDA4 MTNEMUYxNjkwHhcNMjUwODIzMDAxODIwWhcNMjUwODMwMDAxODIwWjAYMRYwFAYD VQQDEw02OGE5MDhjYy1jMjg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAudzMatWbLm6DXqLrcHjhRYn/AIybTDCVXN/AEuOHw6TNWJH5ip7t3tyokW3n w7BJTFRJQ606ngkPmxX7cQuQgsQwPHpBjjPaeqmYxdSNq5vyUyZJ+B5hftfJW2/1 ZaQ06t5xhMyEKUzrc2fydKyJ6No+gPlqsjKeWlL/8CpennXvcz6sUCfv0ETd9GDG Np/s03994H11kwCSOZpHL/j9RkJ7+hlnYhsbBnKnXE26BRRl3LoV0KBpozYL4Ily fKx11KQp+Nt+27gjH7n46I4bD1BKM78bmgk1C0jATqCT7In8nuOCmmf2c4Y+FLIV 4q4xT1CKFdHadWvew2ZcgR5xsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCEb3V0X yLqcC5AKtzjxSMXu0IkZMB8GA1UdIwQYMBaAFKZQKQq8dBn0IOQBu7OkTQgT0fFp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MEVCNS9FNEVFOTJDRTU1 RkExMUVDQUFFODBFNDFDNEY5QUUwMi9wbEFwQ3J4MEdmUWc1QUc3czZSTkNCUFI4 V2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BsQXBDcngwR2ZRZzVBRzdzNlJOQ0JQUjhXay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MEVCNS9FNEVFOTJDRTU1RkExMUVDQUFFODBFNDFDNEY5QUUwMi9wbEFwQ3J4MEdm UWc1QUc3czZSTkNCUFI4V2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPqefNvynVKYvGwMtRfVDDhj8E1DAt672943CC+BKj72jjBnBE92mu DXK6mPbDH/4LRabTxVwnCeUPbqmjG8+tsR+pBJiyhWT0NOUAmiEa/0Gr61CIX8BX QcMWpxetArNJrk1K8grSKhE0dmn3QuwwYStm9WZGhaY527HE2apH9lcmqd+xPrH/ L3Eptk6JArVp6XQtR31sYlLsF1lJ9N85kUajL1ZLd488FOdaHsaHgr3nvuRQF7M0 ge4H5z0cKnOLylKdjB2wxB0OtQIVhKfoCA+ZApR+alGtomGwnINfy3kLHobQgHQr sefVYTTAQnR5aGeC8+4hyfdqkp7hUuBD -----END CERTIFICATE-----Generated at Sat Aug 23 17:15:30 2025 by rpki-client