$ rpki-client -vvf rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.mft File: mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.mft (raw, json) Hash identifier: pR1UUK+aXrNg0QC7KCDXB9whXYEv8H/+MXF+vl31RZ0= Subject key identifier: 58:14:45:AB:0D:3C:EC:84:49:BD:50:6D:18:A6:A4:F4:A1:FD:0C:86 Authority key identifier: 9A:16:24:F4:60:82:F5:4A:C5:77:88:59:E2:26:BD:3B:A6:90:23:F4 Certificate issuer: /CN=A9147CBE/serialNumber=9A1624F46082F54AC5778859E226BD3BA69023F4 Certificate serial: 70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.mft Manifest number: 6F Signing time: Sat 23 Aug 2025 07:08:45 +0000 Manifest this update: Sat 23 Aug 2025 07:08:45 +0000 Manifest next update: Sat 30 Aug 2025 07:08:45 +0000 Files and hashes: 1: mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.crl (hash: S6kmWwkJcw7G47d2E8C3buP4YWEzE9rNeCu4Vm69E/s=) 2: 6D66CE8017BA11F094861F7DC4F9AE02.roa (hash: +D4BVGFKWyg9Pr75Q40/ty5hMk4DuavCG4i3TGDDyg0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.crl rsync://rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:08:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 112 (0x70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147CBE, serialNumber=9A1624F46082F54AC5778859E226BD3BA69023F4 Validity Not Before: Aug 23 07:08:45 2025 GMT Not After : Aug 30 07:08:45 2025 GMT Subject: CN=68a968fd-8fee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:39:1d:c3:b6:57:71:ae:ab:00:bc:ff:33:79: 05:ca:b9:3d:ee:ca:af:b3:9a:d9:cc:94:14:82:3a: 54:3f:14:ee:c3:d6:0e:b9:37:6e:af:c7:b0:9c:7b: 49:8d:0b:cf:2e:13:3a:0d:be:25:b5:c0:58:ac:07: db:a6:33:7b:7b:d2:fb:81:ee:37:75:65:bf:ad:f7: 8f:eb:c8:a3:5c:b2:3b:ac:27:32:06:b6:01:95:ff: 7e:b2:e3:04:8b:cf:fe:1c:9d:37:44:ea:ee:e2:c5: a8:98:ec:96:9f:e0:7a:cd:f6:a3:b6:9a:b9:c6:63: 69:ba:c7:f8:7d:95:4b:6c:24:12:b1:fd:05:c9:5e: 71:0f:f2:95:11:4d:bc:78:80:a4:85:e6:b7:4a:1c: 23:d2:62:71:8c:03:94:c0:d5:7a:7d:3e:7b:84:ae: 4f:27:64:2f:84:7d:69:51:90:a5:75:84:3b:81:91: 0a:9e:d1:ef:54:13:a0:8a:16:b9:17:6d:f8:18:dc: 7f:c5:2b:16:b2:b1:3c:c1:38:28:e7:6c:5d:4a:98: 7c:66:49:e2:9d:01:e2:98:f9:c5:90:8f:a9:8d:b0: 20:d4:75:fd:f0:8f:34:e8:16:fd:cb:9e:f5:b2:82: 80:64:87:a5:bc:b7:41:9c:41:b5:0a:94:6b:ad:29: 6d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:14:45:AB:0D:3C:EC:84:49:BD:50:6D:18:A6:A4:F4:A1:FD:0C:86 X509v3 Authority Key Identifier: keyid:9A:16:24:F4:60:82:F5:4A:C5:77:88:59:E2:26:BD:3B:A6:90:23:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:4b:58:ba:de:5a:37:d1:4b:b6:ec:44:63:fa:e2:58:88:15: 93:bf:2c:3a:f2:3e:9a:e5:dd:c7:5f:8c:13:52:0e:e8:29:8e: 16:aa:0b:c0:85:e1:6d:3d:a0:10:c8:43:1f:27:c1:3a:d1:eb: 2e:d9:85:6b:9f:07:b7:88:b0:a1:92:75:fc:8b:9b:9c:48:21: 99:04:04:9d:e9:6f:27:e9:67:c2:95:22:ca:5a:b7:99:48:03: 5c:58:d7:da:3a:f9:29:ff:3e:d6:6b:2a:ae:78:2a:49:8a:8d: c6:08:44:04:50:9f:a0:a1:ea:ca:45:d7:77:c6:3f:c9:b0:71: fd:90:a4:64:52:7e:45:0f:a0:e4:51:21:aa:31:6c:43:be:dc: d3:0b:c3:c3:1c:14:d1:a9:c7:98:0a:27:76:38:6a:71:b9:95: db:16:8f:04:b1:7b:f0:47:9e:5a:bb:54:37:e0:fa:19:55:79: 93:6c:6e:7a:dd:9e:1f:86:cd:a7:a3:a0:72:36:0c:14:25:fa: d2:ec:3b:7d:0b:1b:7e:3e:ee:39:e4:f8:ef:3b:fe:7e:a7:3b: ef:62:e5:9c:d9:86:86:e0:d4:e2:36:bc:15:5a:a3:ff:7a:5d: fc:3c:c1:04:83:9f:b2:2f:8d:9f:04:0e:bd:53:79:b7:dc:40: bc:b2:1d:77 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 N0NCRTExMC8GA1UEBRMoOUExNjI0RjQ2MDgyRjU0QUM1Nzc4ODU5RTIyNkJEM0JB NjkwMjNGNDAeFw0yNTA4MjMwNzA4NDVaFw0yNTA4MzAwNzA4NDVaMBgxFjAUBgNV BAMTDTY4YTk2OGZkLThmZWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDpOR3DtldxrqsAvP8zeQXKuT3uyq+zmtnMlBSCOlQ/FO7D1g65N26vx7Cce0mN C88uEzoNviW1wFisB9umM3t70vuB7jd1Zb+t94/ryKNcsjusJzIGtgGV/36y4wSL z/4cnTdE6u7ixaiY7Jaf4HrN9qO2mrnGY2m6x/h9lUtsJBKx/QXJXnEP8pURTbx4 gKSF5rdKHCPSYnGMA5TA1Xp9PnuErk8nZC+EfWlRkKV1hDuBkQqe0e9UE6CKFrkX bfgY3H/FKxaysTzBOCjnbF1KmHxmSeKdAeKY+cWQj6mNsCDUdf3wjzToFv3LnvWy goBkh6W8t0GcQbUKlGutKW3lAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWBRFqw08 7IRJvVBtGKak9KH9DIYwHwYDVR0jBBgwFoAUmhYk9GCC9UrFd4hZ4ia9O6aQI/Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3Q0JFLzgzQkE4N0FFRDdD MjExRUY4MTkwREE1Q0M0RjlBRTAyL21oWWs5R0NDOVVyRmQ0aFo0aWE5TzZhUUlf US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbWhZazlHQ0M5VXJGZDRoWjRpYTlPNmFRSV9RLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3 Q0JFLzgzQkE4N0FFRDdDMjExRUY4MTkwREE1Q0M0RjlBRTAyL21oWWs5R0NDOVVy RmQ0aFo0aWE5TzZhUUlfUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKVLWLreWjfRS7bsRGP64liIFZO/LDryPprl3cdfjBNSDugpjhaqC8CF 4W09oBDIQx8nwTrR6y7ZhWufB7eIsKGSdfyLm5xIIZkEBJ3pbyfpZ8KVIspat5lI A1xY19o6+Sn/PtZrKq54KkmKjcYIRARQn6Ch6spF13fGP8mwcf2QpGRSfkUPoORR IaoxbEO+3NMLw8McFNGpx5gKJ3Y4anG5ldsWjwSxe/BHnlq7VDfg+hlVeZNsbnrd nh+GzaejoHI2DBQl+tLsO30LG34+7jnk+O87/n6nO+9i5ZzZhobg1OI2vBVao/96 Xfw8wQSDn7IvjZ8EDr1TebfcQLyyHXc= -----END CERTIFICATE-----Generated at Sun Aug 24 00:16:43 2025 by rpki-client