$ rpki-client -vvf rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.mft File: --G6XF5MRXTo6VEiWGdWCd9Ba7c.mft (raw, json) Hash identifier: 5KHp1Xa80fVchmryNBRePQ4wOzuHsPB5ItHSRKDaB+M= Subject key identifier: C7:52:DE:8E:E8:AE:CC:ED:7C:CA:FD:E1:4E:CD:A6:78:26:56:62:B6 Authority key identifier: FB:E1:BA:5C:5E:4C:45:74:E8:E9:51:22:58:67:56:09:DF:41:6B:B7 Certificate issuer: /CN=A9172506/serialNumber=FBE1BA5C5E4C4574E8E9512258675609DF416BB7 Certificate serial: D1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/--G6XF5MRXTo6VEiWGdWCd9Ba7c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.mft Manifest number: D1 Signing time: Sun 19 Oct 2025 08:46:00 +0000 Manifest this update: Sun 19 Oct 2025 08:46:00 +0000 Manifest next update: Sun 26 Oct 2025 08:46:00 +0000 Files and hashes: 1: --G6XF5MRXTo6VEiWGdWCd9Ba7c.crl (hash: TYWEckORxzDoknnZBRuNk7eNDal+g4d/Lq/AEFRCNqk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.crl rsync://rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/--G6XF5MRXTo6VEiWGdWCd9Ba7c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:45:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 209 (0xd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172506, serialNumber=FBE1BA5C5E4C4574E8E9512258675609DF416BB7 Validity Not Before: Oct 19 08:46:00 2025 GMT Not After : Oct 26 08:46:00 2025 GMT Subject: CN=68f4a548-8936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:fa:a8:04:04:e5:8b:97:04:1b:6c:cf:0f:8a: 18:55:b6:d4:be:59:87:24:d8:d6:31:d7:b6:57:d3: 56:bb:c7:ca:76:34:99:30:ac:62:80:67:12:27:53: 53:11:a7:ff:7c:1b:06:ff:8a:ff:b4:c3:5e:33:9e: 0a:d0:44:a4:1e:dd:d9:4c:f4:b5:f4:0f:57:8c:d5: 6b:bc:8c:f4:73:8b:80:c0:f3:5a:7e:2d:dd:79:5f: 01:0c:9a:12:cf:32:fe:02:1a:5d:ca:09:2a:2c:3d: 8e:68:09:a9:62:06:45:28:5f:df:72:47:60:dd:83: a5:52:45:7b:64:2d:94:4c:31:57:0e:61:6d:7d:f0: f7:c0:38:da:45:ac:3b:a7:21:94:b8:69:e0:e4:dd: 60:ba:47:4e:24:75:ec:35:0b:e2:c8:e7:ca:77:13: 2a:72:8d:25:f9:7e:51:01:3e:9b:2d:6d:93:cf:cf: 7a:3b:12:88:ca:31:2e:3f:ec:bc:f1:d2:e1:2e:b2: b8:0a:60:8a:f1:64:fb:0d:b9:c0:f9:af:30:2f:d3: ac:45:5c:99:b9:0d:39:ef:af:b1:16:a5:38:bf:1c: 0b:5f:7c:d8:8c:d5:de:3a:77:30:93:14:6b:34:fb: 1a:90:30:35:12:53:9b:5b:e6:63:46:a6:3c:88:71: 22:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:52:DE:8E:E8:AE:CC:ED:7C:CA:FD:E1:4E:CD:A6:78:26:56:62:B6 X509v3 Authority Key Identifier: keyid:FB:E1:BA:5C:5E:4C:45:74:E8:E9:51:22:58:67:56:09:DF:41:6B:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/--G6XF5MRXTo6VEiWGdWCd9Ba7c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:45:31:ea:41:ef:ee:d2:70:db:e3:8c:ac:ac:2e:85:ea:b8: 17:a0:d2:d7:0e:f8:80:51:b6:70:1e:eb:69:26:13:1f:29:4d: cc:3a:8c:97:31:9d:74:4b:6f:46:89:fe:ac:32:14:f0:ac:b3: 18:cb:34:fd:5b:f8:de:99:a4:9a:ff:ce:2f:1f:b8:16:51:2c: 76:c4:a5:ce:c6:bb:25:af:7a:aa:58:08:c9:89:ae:82:c6:dc: f1:f1:2d:f0:7a:88:a9:c6:a2:ce:c8:94:28:58:72:a4:b1:ea: af:0a:4c:8d:75:8d:eb:18:db:64:4a:76:d1:04:56:b8:5d:19: 72:c8:d0:2b:33:fb:53:54:65:a4:25:be:56:98:b2:d0:dd:38: 0e:29:b0:95:97:61:d9:c1:0b:bd:88:54:48:a5:39:f1:2d:5b: 15:4d:9a:29:a9:bf:a0:99:84:54:8d:e6:64:29:1d:66:5c:76: f1:cf:f4:1a:10:78:04:6b:db:eb:df:aa:80:2b:33:f4:38:cf: 29:4e:ee:8a:69:20:c2:b7:67:2f:7c:50:1e:71:9b:2e:fa:90: 85:9f:bb:c4:fa:f7:06:7d:94:ac:6c:df:99:a4:7a:7a:90:4c: ee:e2:11:e7:91:fe:5c:32:4a:4f:d5:00:02:88:09:e7:6b:17: f9:4b:82:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI1MDYxMTAvBgNVBAUTKEZCRTFCQTVDNUU0QzQ1NzRFOEU5NTEyMjU4Njc1NjA5 REY0MTZCQjcwHhcNMjUxMDE5MDg0NjAwWhcNMjUxMDI2MDg0NjAwWjAYMRYwFAYD VQQDEw02OGY0YTU0OC04OTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApvqoBATli5cEG2zPD4oYVbbUvlmHJNjWMde2V9NWu8fKdjSZMKxigGcSJ1NT Eaf/fBsG/4r/tMNeM54K0ESkHt3ZTPS19A9XjNVrvIz0c4uAwPNafi3deV8BDJoS zzL+AhpdygkqLD2OaAmpYgZFKF/fckdg3YOlUkV7ZC2UTDFXDmFtffD3wDjaRaw7 pyGUuGng5N1gukdOJHXsNQviyOfKdxMqco0l+X5RAT6bLW2Tz896OxKIyjEuP+y8 8dLhLrK4CmCK8WT7DbnA+a8wL9OsRVyZuQ0576+xFqU4vxwLX3zYjNXeOncwkxRr NPsakDA1ElObW+ZjRqY8iHEi5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMdS3o7o rsztfMr94U7NpngmVmK2MB8GA1UdIwQYMBaAFPvhulxeTEV06OlRIlhnVgnfQWu3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjUwNi9BNUU0QzQ1RTZF REUxMUVGQUFDMkNCNURDNEY5QUUwMi8tLUc2WEY1TVJYVG82VkVpV0dkV0NkOUJh N2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy0tRzZYRjVNUlhUbzZWRWlXR2RXQ2Q5QmE3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MjUwNi9BNUU0QzQ1RTZFREUxMUVGQUFDMkNCNURDNEY5QUUwMi8tLUc2WEY1TVJY VG82VkVpV0dkV0NkOUJhN2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABRTHqQe/u0nDb44ysrC6F6rgXoNLXDviAUbZwHutpJhMfKU3MOoyX MZ10S29Gif6sMhTwrLMYyzT9W/jemaSa/84vH7gWUSx2xKXOxrslr3qqWAjJia6C xtzx8S3weoipxqLOyJQoWHKkseqvCkyNdY3rGNtkSnbRBFa4XRlyyNArM/tTVGWk Jb5WmLLQ3TgOKbCVl2HZwQu9iFRIpTnxLVsVTZopqb+gmYRUjeZkKR1mXHbxz/Qa EHgEa9vr36qAKzP0OM8pTu6KaSDCt2cvfFAecZsu+pCFn7vE+vcGfZSsbN+ZpHp6 kEzu4hHnkf5cMkpP1QACiAnnaxf5S4Jh -----END CERTIFICATE-----Generated at Tue Oct 21 12:45:13 2025 by rpki-client