$ rpki-client -vvf rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.mft File: --G6XF5MRXTo6VEiWGdWCd9Ba7c.mft (raw, json) Hash identifier: by9GRLvhbT4hOowZbXItuQMFxZk/RCuZOgS4wz8JUas= Subject key identifier: 74:2E:9C:00:EF:D3:85:D5:D0:8A:43:8E:FA:86:3E:EF:56:76:97:5E Authority key identifier: FB:E1:BA:5C:5E:4C:45:74:E8:E9:51:22:58:67:56:09:DF:41:6B:B7 Certificate issuer: /CN=A9172506/serialNumber=FBE1BA5C5E4C4574E8E9512258675609DF416BB7 Certificate serial: 9A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/--G6XF5MRXTo6VEiWGdWCd9Ba7c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.mft Manifest number: 9A Signing time: Thu 03 Jul 2025 06:32:41 +0000 Manifest this update: Thu 03 Jul 2025 06:32:41 +0000 Manifest next update: Thu 10 Jul 2025 06:32:41 +0000 Files and hashes: 1: --G6XF5MRXTo6VEiWGdWCd9Ba7c.crl (hash: CvrnpO9sjb289mSSssPp8bDNkhVkC0MO7+lt8IQM7EU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.crl rsync://rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/--G6XF5MRXTo6VEiWGdWCd9Ba7c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 154 (0x9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172506, serialNumber=FBE1BA5C5E4C4574E8E9512258675609DF416BB7 Validity Not Before: Jul 3 06:32:41 2025 GMT Not After : Jul 10 06:32:41 2025 GMT Subject: CN=68662409-4dea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:73:fe:15:9c:20:cf:20:9d:80:9e:78:92:ce: 04:4e:77:bc:39:44:5f:fd:f3:02:33:3f:9c:e1:1b: fb:07:20:b1:e8:50:6b:96:1d:f8:3c:89:76:72:cc: e9:f6:32:8c:89:5f:d6:9e:43:4e:25:ae:16:c2:41: 9a:d7:d4:85:dd:61:e6:cc:2e:2e:02:bf:3b:b4:4b: 1e:9e:29:33:16:39:78:57:73:5d:cb:2d:82:15:27: ca:e8:a7:c0:05:d5:64:4b:76:72:60:5f:36:0d:92: f0:b8:1a:fc:5a:88:d6:b7:0d:71:de:7c:53:9c:ae: 2c:54:88:23:1f:9b:7d:1a:c0:c9:9d:31:a3:e8:2c: 0e:09:3e:14:f3:05:32:54:2a:19:5e:5f:0e:d2:2e: 6a:f7:ab:19:34:74:e7:9f:ca:77:df:ac:28:fc:c9: 4c:b5:17:b2:91:ed:2d:f9:95:e3:97:9e:7b:b1:e9: 61:a6:33:5d:9c:66:a4:74:a5:6f:d9:9e:61:d6:d8: 20:c6:84:30:a3:c1:47:3b:45:f4:4d:1e:4a:56:66: 68:0a:f4:20:e8:70:38:d0:2c:6f:4f:0b:33:cd:da: 1a:20:a4:eb:84:da:84:5f:0f:a8:e7:4b:12:06:b6: 9c:61:8f:3e:f4:68:59:2c:07:bb:78:08:2a:63:55: d3:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:2E:9C:00:EF:D3:85:D5:D0:8A:43:8E:FA:86:3E:EF:56:76:97:5E X509v3 Authority Key Identifier: keyid:FB:E1:BA:5C:5E:4C:45:74:E8:E9:51:22:58:67:56:09:DF:41:6B:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/--G6XF5MRXTo6VEiWGdWCd9Ba7c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:b1:5f:f9:36:66:0d:90:07:15:5b:4e:78:c1:5e:64:11:73: 1c:8e:af:b9:b8:86:b2:6e:4d:83:9f:b6:39:33:cd:03:82:c9: 18:ed:90:2d:6e:53:e2:55:b8:cc:5f:5a:30:5c:ca:fc:4e:6c: f0:87:d0:29:cb:84:b5:6d:0c:6b:71:bf:70:e0:53:fe:2c:a5: 3e:84:7f:fc:83:33:f4:d2:db:10:9d:10:f2:18:5e:8b:d6:45: 4e:d4:7b:5b:ac:10:1e:60:c8:3f:bb:e6:b6:86:ed:00:2c:b3: 98:b1:95:95:b2:14:9d:d9:77:be:ec:37:cb:3c:22:51:fa:ff: 4e:63:cf:ec:de:6c:cf:63:8d:ca:5c:f7:ba:86:c8:d1:ea:a1: 93:96:bc:6e:c3:c5:34:98:77:01:5d:f2:69:bc:e9:a0:f8:f2: 89:7e:4b:fe:75:7a:79:0c:71:e9:38:53:79:59:88:d0:b0:d1: 69:83:65:7d:46:e7:98:70:cd:6d:56:17:e6:2e:d3:f3:5e:03: dc:aa:56:4f:d2:67:2f:1b:eb:d6:87:a9:75:ad:26:f8:3e:ad: d5:bf:3b:e1:16:f3:6c:3a:93:e4:a6:99:70:a5:f9:34:8e:6c: c7:32:f7:35:55:56:8d:72:3e:ed:ec:d0:ff:98:52:c9:22:87: 74:fc:95:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI1MDYxMTAvBgNVBAUTKEZCRTFCQTVDNUU0QzQ1NzRFOEU5NTEyMjU4Njc1NjA5 REY0MTZCQjcwHhcNMjUwNzAzMDYzMjQxWhcNMjUwNzEwMDYzMjQxWjAYMRYwFAYD VQQDEw02ODY2MjQwOS00ZGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm3P+FZwgzyCdgJ54ks4ETne8OURf/fMCMz+c4Rv7ByCx6FBrlh34PIl2cszp 9jKMiV/WnkNOJa4WwkGa19SF3WHmzC4uAr87tEsenikzFjl4V3Ndyy2CFSfK6KfA BdVkS3ZyYF82DZLwuBr8WojWtw1x3nxTnK4sVIgjH5t9GsDJnTGj6CwOCT4U8wUy VCoZXl8O0i5q96sZNHTnn8p336wo/MlMtReyke0t+ZXjl557selhpjNdnGakdKVv 2Z5h1tggxoQwo8FHO0X0TR5KVmZoCvQg6HA40CxvTwszzdoaIKTrhNqEXw+o50sS BracYY8+9GhZLAe7eAgqY1XTNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHQunADv 04XV0IpDjvqGPu9WdpdeMB8GA1UdIwQYMBaAFPvhulxeTEV06OlRIlhnVgnfQWu3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjUwNi9BNUU0QzQ1RTZF REUxMUVGQUFDMkNCNURDNEY5QUUwMi8tLUc2WEY1TVJYVG82VkVpV0dkV0NkOUJh N2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy0tRzZYRjVNUlhUbzZWRWlXR2RXQ2Q5QmE3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MjUwNi9BNUU0QzQ1RTZFREUxMUVGQUFDMkNCNURDNEY5QUUwMi8tLUc2WEY1TVJY VG82VkVpV0dkV0NkOUJhN2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgsV/5NmYNkAcVW054wV5kEXMcjq+5uIaybk2Dn7Y5M80DgskY7ZAt blPiVbjMX1owXMr8Tmzwh9Apy4S1bQxrcb9w4FP+LKU+hH/8gzP00tsQnRDyGF6L 1kVO1HtbrBAeYMg/u+a2hu0ALLOYsZWVshSd2Xe+7DfLPCJR+v9OY8/s3mzPY43K XPe6hsjR6qGTlrxuw8U0mHcBXfJpvOmg+PKJfkv+dXp5DHHpOFN5WYjQsNFpg2V9 RueYcM1tVhfmLtPzXgPcqlZP0mcvG+vWh6l1rSb4Pq3VvzvhFvNsOpPkpplwpfk0 jmzHMvc1VVaNcj7t7ND/mFLJIod0/JXA -----END CERTIFICATE-----Generated at Thu Jul 3 22:49:35 2025 by rpki-client