$ rpki-client -vvf rpki.apnic.net/member_repository/A9123059/BBBD802679F611F09CE9C328C4F9AE02/Vx7SVtWPhcYAxkpZ7nsdNq48sJs.mft File: Vx7SVtWPhcYAxkpZ7nsdNq48sJs.mft (raw, json) Hash identifier: Wn2wK7gYHDI1PzjxKl4As/cOMjAXFFVr/NivdiyVUNg= Subject key identifier: A5:3E:17:4B:9A:19:FE:D3:17:28:61:A5:4C:51:03:13:D9:25:1A:EE Authority key identifier: 57:1E:D2:56:D5:8F:85:C6:00:C6:4A:59:EE:7B:1D:36:AE:3C:B0:9B Certificate issuer: /CN=A9123059/serialNumber=571ED256D58F85C600C64A59EE7B1D36AE3CB09B Certificate serial: 06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vx7SVtWPhcYAxkpZ7nsdNq48sJs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123059/BBBD802679F611F09CE9C328C4F9AE02/Vx7SVtWPhcYAxkpZ7nsdNq48sJs.mft Manifest number: 06 Signing time: Sat 23 Aug 2025 08:23:49 +0000 Manifest this update: Sat 23 Aug 2025 08:23:48 +0000 Manifest next update: Sat 30 Aug 2025 08:23:48 +0000 Files and hashes: 1: Vx7SVtWPhcYAxkpZ7nsdNq48sJs.crl (hash: v32STGlCdtOwWskSCQkgYJAqXhDmNeIt+39q0tyrhb0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123059/BBBD802679F611F09CE9C328C4F9AE02/Vx7SVtWPhcYAxkpZ7nsdNq48sJs.crl rsync://rpki.apnic.net/member_repository/A9123059/BBBD802679F611F09CE9C328C4F9AE02/Vx7SVtWPhcYAxkpZ7nsdNq48sJs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vx7SVtWPhcYAxkpZ7nsdNq48sJs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:23:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6 (0x6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123059, serialNumber=571ED256D58F85C600C64A59EE7B1D36AE3CB09B Validity Not Before: Aug 23 08:23:48 2025 GMT Not After : Aug 30 08:23:48 2025 GMT Subject: CN=68a97a95-869e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:40:0a:da:df:d8:da:3a:90:a8:46:47:fa:0d: b9:62:87:a7:4d:f9:8d:1e:b4:ac:92:00:de:84:ab: b0:72:11:11:a5:b9:e3:d0:ae:9f:73:c6:49:22:c4: 28:bf:19:20:3f:a5:e1:6e:07:1b:7d:f1:a4:28:1f: 70:33:24:09:82:ce:2f:a3:b7:f0:0a:c7:2a:5d:bd: 4a:5f:85:f0:4d:31:69:ae:c5:90:91:42:ea:42:c7: a2:59:da:03:d9:dc:e4:9d:e2:a9:34:16:0e:bb:25: 93:2e:45:0f:69:9b:16:ef:37:9d:f8:4f:6b:98:49: 73:1a:ea:59:19:a9:8d:65:40:37:c9:0c:13:aa:01: 51:fd:9f:79:f3:6e:63:41:fe:7e:05:3a:19:33:cc: 65:71:eb:d3:4d:bc:2b:3b:89:6b:0e:6d:60:af:30: c3:22:5e:f1:7a:f6:08:54:dc:15:b5:e1:05:71:3a: 21:e2:7c:c8:4f:a9:6a:59:81:f2:e4:41:ad:49:a3: 13:7d:53:9a:6a:8b:de:16:1e:2c:f3:21:b6:2f:d6: 09:19:91:6f:6c:94:03:f9:ad:ba:7b:2d:86:c2:2d: 1e:fd:34:38:51:26:d7:c1:74:e7:7c:00:de:57:8b: cc:a5:62:3e:23:44:92:94:1e:9f:7d:ce:34:b5:6d: 48:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:3E:17:4B:9A:19:FE:D3:17:28:61:A5:4C:51:03:13:D9:25:1A:EE X509v3 Authority Key Identifier: keyid:57:1E:D2:56:D5:8F:85:C6:00:C6:4A:59:EE:7B:1D:36:AE:3C:B0:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123059/BBBD802679F611F09CE9C328C4F9AE02/Vx7SVtWPhcYAxkpZ7nsdNq48sJs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vx7SVtWPhcYAxkpZ7nsdNq48sJs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123059/BBBD802679F611F09CE9C328C4F9AE02/Vx7SVtWPhcYAxkpZ7nsdNq48sJs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:5c:03:4d:f4:fa:06:f4:3a:3d:bb:7f:fe:c5:82:87:ec:2a: fc:20:cb:0a:ef:54:07:21:84:b5:4d:95:0c:a7:2d:e5:3d:06: 68:dd:80:32:69:ea:63:57:72:a7:0e:94:62:e3:3f:95:df:18: 10:7c:5a:3f:51:62:41:ae:b9:f1:53:97:ed:88:58:97:d5:bf: a3:ee:26:93:93:ea:7a:11:ca:02:5c:d2:c5:61:cf:ba:c8:a5: 77:02:b5:a5:3c:08:02:ff:16:e8:a5:f1:5e:fc:3f:13:33:2d: d7:f5:a1:a0:65:c6:9c:fc:ae:47:41:e0:38:e1:75:76:7e:5d: 6a:55:fa:8f:7d:41:f7:a5:5c:a4:67:22:a2:5f:79:ee:3c:27: b8:2a:ca:af:6f:f4:3f:08:93:69:79:42:16:04:79:e5:76:ca: a9:8f:e3:71:c8:a3:d2:79:71:13:11:4a:cf:9e:c3:24:3e:89: 5d:f7:99:63:df:70:81:95:d5:69:ef:01:75:a5:16:72:d6:b7: ca:0a:13:db:6e:15:da:e6:1f:46:ec:c3:f8:cb:48:13:34:a5: 6b:10:85:8b:db:2d:75:8e:36:7c:ee:a6:bf:91:87:e7:38:c9: 6f:e0:2c:6f:0f:45:a4:1f:62:ea:8b:ec:f6:7b:83:63:a0:0a: de:44:01:26 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MzA1OTExMC8GA1UEBRMoNTcxRUQyNTZENThGODVDNjAwQzY0QTU5RUU3QjFEMzZB RTNDQjA5QjAeFw0yNTA4MjMwODIzNDhaFw0yNTA4MzAwODIzNDhaMBgxFjAUBgNV BAMTDTY4YTk3YTk1LTg2OWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDlQAra39jaOpCoRkf6Dblih6dN+Y0etKySAN6Eq7ByERGluePQrp9zxkkixCi/ GSA/peFuBxt98aQoH3AzJAmCzi+jt/AKxypdvUpfhfBNMWmuxZCRQupCx6JZ2gPZ 3OSd4qk0Fg67JZMuRQ9pmxbvN534T2uYSXMa6lkZqY1lQDfJDBOqAVH9n3nzbmNB /n4FOhkzzGVx69NNvCs7iWsObWCvMMMiXvF69ghU3BW14QVxOiHifMhPqWpZgfLk Qa1JoxN9U5pqi94WHizzIbYv1gkZkW9slAP5rbp7LYbCLR79NDhRJtfBdOd8AN5X i8ylYj4jRJKUHp99zjS1bUhzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUpT4XS5oZ /tMXKGGlTFEDE9klGu4wHwYDVR0jBBgwFoAUVx7SVtWPhcYAxkpZ7nsdNq48sJsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIzMDU5L0JCQkQ4MDI2NzlG NjExRjA5Q0U5QzMyOEM0RjlBRTAyL1Z4N1NWdFdQaGNZQXhrcFo3bnNkTnE0OHNK cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVng3U1Z0V1BoY1lBeGtwWjduc2ROcTQ4c0pzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIz MDU5L0JCQkQ4MDI2NzlGNjExRjA5Q0U5QzMyOEM0RjlBRTAyL1Z4N1NWdFdQaGNZ QXhrcFo3bnNkTnE0OHNKcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKtcA030+gb0Oj27f/7FgofsKvwgywrvVAchhLVNlQynLeU9BmjdgDJp 6mNXcqcOlGLjP5XfGBB8Wj9RYkGuufFTl+2IWJfVv6PuJpOT6noRygJc0sVhz7rI pXcCtaU8CAL/Fuil8V78PxMzLdf1oaBlxpz8rkdB4DjhdXZ+XWpV+o99QfelXKRn IqJfee48J7gqyq9v9D8Ik2l5QhYEeeV2yqmP43HIo9J5cRMRSs+ewyQ+iV33mWPf cIGV1WnvAXWlFnLWt8oKE9tuFdrmH0bsw/jLSBM0pWsQhYvbLXWONnzupr+Rh+c4 yW/gLG8PRaQfYuqL7PZ7g2OgCt5EASY= -----END CERTIFICATE-----Generated at Sat Aug 23 14:30:41 2025 by rpki-client