$ rpki-client -vvf rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.mft File: --G6XF5MRXTo6VEiWGdWCd9Ba7c.mft (raw, json) Hash identifier: I6MCLgixxDttjxYsIQvl8xIR26LrprGgrGYK7GPSIuA= Subject key identifier: 42:F4:8B:D5:96:82:9A:C9:49:56:85:B9:E9:0B:74:90:FD:41:DC:59 Authority key identifier: FB:E1:BA:5C:5E:4C:45:74:E8:E9:51:22:58:67:56:09:DF:41:6B:B7 Certificate issuer: /CN=A9172506/serialNumber=FBE1BA5C5E4C4574E8E9512258675609DF416BB7 Certificate serial: B4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/--G6XF5MRXTo6VEiWGdWCd9Ba7c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.mft Manifest number: B4 Signing time: Sat 23 Aug 2025 06:15:34 +0000 Manifest this update: Sat 23 Aug 2025 06:15:34 +0000 Manifest next update: Sat 30 Aug 2025 06:15:33 +0000 Files and hashes: 1: --G6XF5MRXTo6VEiWGdWCd9Ba7c.crl (hash: +7ZOnWalV1Mc79onIYvnz1di6s23ulXxE04r7lDZT2w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.crl rsync://rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/--G6XF5MRXTo6VEiWGdWCd9Ba7c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:10:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 180 (0xb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172506, serialNumber=FBE1BA5C5E4C4574E8E9512258675609DF416BB7 Validity Not Before: Aug 23 06:15:34 2025 GMT Not After : Aug 30 06:15:33 2025 GMT Subject: CN=68a95c86-3b01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9e:d4:8d:a1:cb:e4:a9:f8:38:fa:4e:20:a8: 60:22:39:36:93:13:ef:5c:aa:2b:96:49:7a:53:4a: b7:38:1e:b4:c9:92:0e:35:c2:c6:6c:d1:0b:1c:84: a3:d7:7a:49:91:94:01:9a:4d:7c:2b:d6:16:ca:19: 2e:56:c0:44:0c:ce:dd:0e:f5:39:26:b2:5d:e2:80: 8e:c5:3e:bb:93:3a:85:c8:31:1e:6e:e5:66:24:63: 34:6c:14:ad:9d:6b:82:2c:d9:12:73:61:29:84:11: a8:bb:29:9b:6a:0e:9d:55:23:87:88:86:e0:cf:4e: ad:32:1f:fc:75:87:d5:4f:91:40:a7:1a:61:e9:88: 5a:f1:55:1c:a3:d3:8f:cf:c6:0b:53:d7:c5:eb:00: b5:b6:00:b2:71:3e:c6:5d:26:d5:55:db:f1:04:88: c4:dd:30:aa:8c:18:8b:92:4d:e5:d0:34:cf:49:b4: 90:2d:72:de:ad:40:1b:a4:5b:d1:a1:c2:ba:b4:78: 10:3b:ed:34:93:5e:9a:85:6c:d9:1a:cd:23:6a:63: c5:34:28:f0:12:fd:51:dc:b0:53:9c:26:2e:df:e2: 9c:8a:bf:ec:5e:4a:3b:27:96:e9:da:ae:ba:40:ba: d5:9a:63:8c:00:c9:fa:36:c6:07:37:e0:a4:4c:38: 81:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:F4:8B:D5:96:82:9A:C9:49:56:85:B9:E9:0B:74:90:FD:41:DC:59 X509v3 Authority Key Identifier: keyid:FB:E1:BA:5C:5E:4C:45:74:E8:E9:51:22:58:67:56:09:DF:41:6B:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/--G6XF5MRXTo6VEiWGdWCd9Ba7c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:99:3e:55:31:8b:b7:0a:ea:68:c6:56:7a:a0:ae:df:fa:f5: ee:a2:2c:53:de:0e:36:f0:59:4b:39:24:3e:8a:96:af:43:43: 75:ae:ed:a9:75:b0:b6:98:cb:4c:c3:bd:6a:ef:34:05:96:ea: b7:0e:cb:2f:3e:96:a0:ec:8a:62:ec:54:d5:60:36:e8:68:4b: a0:33:21:e8:17:25:54:08:16:e6:e7:93:91:2c:0c:5a:85:5c: 04:8d:c7:b2:0b:f9:45:d8:9f:8b:29:df:58:fc:bd:7a:84:2d: 3d:ec:15:6c:95:51:dc:3a:18:db:23:45:bc:05:4c:cc:7d:6e: 73:fb:74:1f:89:44:91:1d:34:5c:ac:2d:02:fb:85:73:6d:29: 01:fb:c5:17:b8:53:83:8e:34:37:85:3c:42:b2:f8:22:d4:bd: 5e:3b:f2:7e:23:4f:34:df:33:7c:22:12:a8:a3:d8:ea:2e:29: 67:1a:42:3d:e3:3f:93:84:9d:d8:5d:33:a6:02:8f:45:1f:7a: 25:34:f7:c8:11:bf:65:19:31:8d:81:51:8f:53:d3:a7:46:6f: 2d:c6:5b:04:94:a3:1e:5e:00:03:cb:c8:4f:f5:cd:3e:90:01: 88:85:2d:54:39:ec:5d:44:81:be:87:10:50:98:3c:72:12:ac: 5c:70:a4:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI1MDYxMTAvBgNVBAUTKEZCRTFCQTVDNUU0QzQ1NzRFOEU5NTEyMjU4Njc1NjA5 REY0MTZCQjcwHhcNMjUwODIzMDYxNTM0WhcNMjUwODMwMDYxNTMzWjAYMRYwFAYD VQQDEw02OGE5NWM4Ni0zYjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyp7UjaHL5Kn4OPpOIKhgIjk2kxPvXKorlkl6U0q3OB60yZIONcLGbNELHISj 13pJkZQBmk18K9YWyhkuVsBEDM7dDvU5JrJd4oCOxT67kzqFyDEebuVmJGM0bBSt nWuCLNkSc2EphBGouymbag6dVSOHiIbgz06tMh/8dYfVT5FApxph6Yha8VUco9OP z8YLU9fF6wC1tgCycT7GXSbVVdvxBIjE3TCqjBiLkk3l0DTPSbSQLXLerUAbpFvR ocK6tHgQO+00k16ahWzZGs0jamPFNCjwEv1R3LBTnCYu3+Kcir/sXko7J5bp2q66 QLrVmmOMAMn6NsYHN+CkTDiBhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEL0i9WW gprJSVaFuekLdJD9QdxZMB8GA1UdIwQYMBaAFPvhulxeTEV06OlRIlhnVgnfQWu3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjUwNi9BNUU0QzQ1RTZF REUxMUVGQUFDMkNCNURDNEY5QUUwMi8tLUc2WEY1TVJYVG82VkVpV0dkV0NkOUJh N2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy0tRzZYRjVNUlhUbzZWRWlXR2RXQ2Q5QmE3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MjUwNi9BNUU0QzQ1RTZFREUxMUVGQUFDMkNCNURDNEY5QUUwMi8tLUc2WEY1TVJY VG82VkVpV0dkV0NkOUJhN2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLmT5VMYu3CupoxlZ6oK7f+vXuoixT3g428FlLOSQ+ipavQ0N1ru2p dbC2mMtMw71q7zQFluq3DssvPpag7Ipi7FTVYDboaEugMyHoFyVUCBbm55ORLAxa hVwEjceyC/lF2J+LKd9Y/L16hC097BVslVHcOhjbI0W8BUzMfW5z+3QfiUSRHTRc rC0C+4VzbSkB+8UXuFODjjQ3hTxCsvgi1L1eO/J+I0803zN8IhKoo9jqLilnGkI9 4z+ThJ3YXTOmAo9FH3olNPfIEb9lGTGNgVGPU9OnRm8txlsElKMeXgADy8hP9c0+ kAGIhS1UOexdRIG+hxBQmDxyEqxccKQu -----END CERTIFICATE-----Generated at Sat Aug 23 10:17:55 2025 by rpki-client