$ rpki-client -vvf rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.mft File: rLLFTvC2TcIQCkhqe49ZMkute0k.mft (raw, json) Hash identifier: qVNM+6Rs4o3m5QIHJPo1t1RB3o7obkYa4WnK2G4hX0E= Subject key identifier: 95:CF:C0:96:DD:C2:68:03:2B:CC:D7:B3:7D:AB:EC:54:A1:23:DE:0D Authority key identifier: AC:B2:C5:4E:F0:B6:4D:C2:10:0A:48:6A:7B:8F:59:32:4B:AD:7B:49 Certificate issuer: /CN=A9185673/serialNumber=ACB2C54EF0B64DC2100A486A7B8F59324BAD7B49 Certificate serial: 0173 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLLFTvC2TcIQCkhqe49ZMkute0k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.mft Manifest number: 016D Signing time: Tue 01 Jul 2025 04:23:56 +0000 Manifest this update: Tue 01 Jul 2025 04:23:56 +0000 Manifest next update: Tue 08 Jul 2025 04:23:56 +0000 Files and hashes: 1: rLLFTvC2TcIQCkhqe49ZMkute0k.crl (hash: DffJg25RA9LFYqOWitW7chZAz7L1J/LzSVB6i0VDw/E=) 2: B76A1A109B5411EF9756FD79C4F9AE02.roa (hash: nEnauNcK30SC5dUj0ntjcanTMyK24OfS+HXF4N9+TpI=) 3: C4D5BB009B5411EFBBEFF384C4F9AE02.roa (hash: QDeaqdoBnFXV+JmRiyCNSIMZmZka/hyC5/9UzKXY3ZA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.crl rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLLFTvC2TcIQCkhqe49ZMkute0k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 04:23:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 371 (0x173) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185673, serialNumber=ACB2C54EF0B64DC2100A486A7B8F59324BAD7B49 Validity Not Before: Jul 1 04:23:56 2025 GMT Not After : Jul 8 04:23:56 2025 GMT Subject: CN=686362dc-40cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b3:13:a7:38:3a:f1:7f:a5:4d:21:4b:8e:90: f3:97:df:e6:6a:71:45:0b:e5:ac:79:c2:49:55:4c: 24:1a:d2:b8:54:c2:61:0b:de:94:1a:57:af:a4:3f: 65:4a:0b:a0:17:0f:99:84:90:f0:0f:29:6a:e2:1b: c5:07:4a:7e:a8:2c:95:cd:f0:fb:c9:db:5b:ca:3e: a5:fc:1b:32:ae:c3:d1:88:2c:77:23:bc:8f:f0:60: 6c:0d:43:1a:3d:29:08:a3:02:b5:b0:e0:c0:d8:8b: ca:ed:e4:5b:ab:fa:51:2e:d5:4f:48:77:2d:67:61: 7a:0a:da:8e:dd:c4:66:2e:13:48:a4:8e:94:2a:28: d5:2d:ff:47:61:73:26:b3:a8:96:ea:9c:a6:a7:f1: 62:d8:d6:b5:60:ff:85:76:49:78:46:92:f5:ce:40: 03:39:08:3c:5b:69:38:30:09:f2:ba:5f:cb:5d:3e: e4:7e:96:44:ab:ea:c9:0f:40:b3:aa:28:8c:58:fe: c4:0f:0c:53:3e:4d:8d:4e:f1:17:9d:de:0b:cb:a8: d1:17:94:54:23:f2:a3:bb:0b:94:21:e0:8f:d5:8c: 7b:51:e2:a3:95:4a:53:4b:d5:40:2d:19:c2:32:c8: aa:9e:a5:c6:b5:83:10:e3:74:d3:71:e7:39:40:0f: f5:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:CF:C0:96:DD:C2:68:03:2B:CC:D7:B3:7D:AB:EC:54:A1:23:DE:0D X509v3 Authority Key Identifier: keyid:AC:B2:C5:4E:F0:B6:4D:C2:10:0A:48:6A:7B:8F:59:32:4B:AD:7B:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLLFTvC2TcIQCkhqe49ZMkute0k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:c3:ca:4e:e5:40:be:a4:0b:47:41:7c:e6:1d:83:8c:51:e1: ff:8b:96:c9:9c:35:b3:5d:69:0e:d7:6c:33:8e:53:e3:37:0f: e3:a2:40:21:b3:2a:b7:08:f1:66:d8:ee:b8:5b:86:84:55:04: 84:e2:98:60:ae:52:ea:c8:a7:15:0b:e0:ec:1e:fe:db:fd:06: 9e:ed:a3:21:e5:9d:94:b2:a5:31:30:63:81:db:d5:a5:eb:46: b2:af:4f:72:08:9f:b9:91:d2:00:18:ac:db:a0:77:63:4f:c3: 3f:ff:05:10:b8:7a:84:23:a9:25:ad:f3:97:33:c7:42:9a:92: 08:5a:e2:73:2c:da:4f:2e:24:8f:0b:f0:96:6f:6b:21:70:5d: d5:72:28:10:c1:98:e3:c7:1c:2b:9e:ec:38:2d:b7:75:0a:6c: 20:fa:84:88:85:92:68:43:8a:30:a5:73:9e:4d:39:59:31:3a: 5b:3e:d2:8a:26:fc:a8:c6:96:16:51:ea:44:ba:aa:9d:38:b7: a6:b9:0f:ac:b3:93:ca:4c:cc:23:2a:29:6a:45:e7:27:46:26: 6c:d0:99:31:38:69:9c:7c:35:0e:f8:fa:7e:53:93:29:2f:ac: 2f:99:75:8e:80:06:76:a5:fc:92:42:81:91:67:f7:bf:e3:7a: 75:8d:e5:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU2NzMxMTAvBgNVBAUTKEFDQjJDNTRFRjBCNjREQzIxMDBBNDg2QTdCOEY1OTMy NEJBRDdCNDkwHhcNMjUwNzAxMDQyMzU2WhcNMjUwNzA4MDQyMzU2WjAYMRYwFAYD VQQDEw02ODYzNjJkYy00MGNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2rMTpzg68X+lTSFLjpDzl9/manFFC+WsecJJVUwkGtK4VMJhC96UGlevpD9l SgugFw+ZhJDwDylq4hvFB0p+qCyVzfD7ydtbyj6l/BsyrsPRiCx3I7yP8GBsDUMa PSkIowK1sODA2IvK7eRbq/pRLtVPSHctZ2F6CtqO3cRmLhNIpI6UKijVLf9HYXMm s6iW6pymp/Fi2Na1YP+Fdkl4RpL1zkADOQg8W2k4MAnyul/LXT7kfpZEq+rJD0Cz qiiMWP7EDwxTPk2NTvEXnd4Ly6jRF5RUI/KjuwuUIeCP1Yx7UeKjlUpTS9VALRnC MsiqnqXGtYMQ43TTcec5QA/19wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJXPwJbd wmgDK8zXs32r7FShI94NMB8GA1UdIwQYMBaAFKyyxU7wtk3CEApIanuPWTJLrXtJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTY3My84MDNBQ0QyQzMy OTIxMUVFOTg2RjE0MUZDNEY5QUUwMi9yTExGVHZDMlRjSVFDa2hxZTQ5Wk1rdXRl MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JMTEZUdkMyVGNJUUNraHFlNDlaTWt1dGUway5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTY3My84MDNBQ0QyQzMyOTIxMUVFOTg2RjE0MUZDNEY5QUUwMi9yTExGVHZDMlRj SVFDa2hxZTQ5Wk1rdXRlMGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdw8pO5UC+pAtHQXzmHYOMUeH/i5bJnDWzXWkO12wzjlPjNw/jokAh syq3CPFm2O64W4aEVQSE4phgrlLqyKcVC+DsHv7b/Qae7aMh5Z2UsqUxMGOB29Wl 60ayr09yCJ+5kdIAGKzboHdjT8M//wUQuHqEI6klrfOXM8dCmpIIWuJzLNpPLiSP C/CWb2shcF3VcigQwZjjxxwrnuw4Lbd1Cmwg+oSIhZJoQ4owpXOeTTlZMTpbPtKK JvyoxpYWUepEuqqdOLemuQ+ss5PKTMwjKilqRecnRiZs0JkxOGmcfDUO+Pp+U5Mp L6wvmXWOgAZ2pfySQoGRZ/e/43p1jeUL -----END CERTIFICATE-----Generated at Thu Jul 3 05:34:33 2025 by rpki-client