$ rpki-client -vvf rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.mft File: he6Mb5WNbzwfFdLBq8T-m75s7tc.mft (raw, json) Hash identifier: 5WGmVIhMFxmnHtn9Ye3Kjj6mlxTZswVNtIqD05/ujT4= Subject key identifier: DB:A1:2D:60:27:F7:01:AB:E3:A5:95:02:9F:B7:F5:6E:0A:05:76:9C Authority key identifier: 85:EE:8C:6F:95:8D:6F:3C:1F:15:D2:C1:AB:C4:FE:9B:BE:6C:EE:D7 Certificate issuer: /CN=A9175165/serialNumber=85EE8C6F958D6F3C1F15D2C1ABC4FE9BBE6CEED7 Certificate serial: 1156 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6Mb5WNbzwfFdLBq8T-m75s7tc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.mft Manifest number: 114E Signing time: Fri 22 Aug 2025 17:22:20 +0000 Manifest this update: Fri 22 Aug 2025 17:22:19 +0000 Manifest next update: Fri 29 Aug 2025 17:22:19 +0000 Files and hashes: 1: he6Mb5WNbzwfFdLBq8T-m75s7tc.crl (hash: b1lpgpmNwoZK6nfAEDWsU+zebhEuCuZ50Dv+e5zUhTw=) 2: 8B8DEE220F0911E9A8CC815EC4F9AE02.roa (hash: gteMkfVnVg4ffsJGo4gzYRn2LBvsScWGIppneQ2BQXI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.crl rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6Mb5WNbzwfFdLBq8T-m75s7tc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:22:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4438 (0x1156) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175165, serialNumber=85EE8C6F958D6F3C1F15D2C1ABC4FE9BBE6CEED7 Validity Not Before: Aug 22 17:22:19 2025 GMT Not After : Aug 29 17:22:19 2025 GMT Subject: CN=68a8a74b-ba81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:eb:1a:1f:0d:4c:1a:00:ab:d6:37:35:50:d5: 81:fd:cb:a7:bb:40:a7:2e:81:08:d1:22:32:34:86: ce:fd:40:27:35:40:db:c7:d8:67:69:18:66:4f:bb: a9:9a:39:47:ef:94:73:8c:c3:03:7e:13:9e:ea:7b: 97:a2:ea:04:7a:2e:1c:a5:b1:35:6d:29:8a:c3:eb: 74:9d:84:7a:2b:19:d8:8e:58:cc:03:28:53:01:2c: 30:4a:30:55:87:f0:f7:42:16:25:92:fd:a0:e7:c4: 73:a6:40:b1:cf:95:76:7d:70:47:a1:b1:b4:86:d9: 2e:fb:94:b7:c4:f8:32:11:79:6d:b1:1c:36:e4:79: 1b:2e:28:01:18:23:36:90:f0:1b:23:5f:c3:cd:b7: b0:fd:0b:9c:05:79:56:0e:69:e8:34:d3:0a:3a:4c: bd:48:51:97:da:28:eb:b1:61:16:b6:61:16:4c:a7: e9:df:c2:eb:05:65:36:29:1c:76:ae:68:80:f7:ab: 45:bb:29:ff:09:eb:a5:23:07:1a:78:1d:e9:47:10: 99:50:79:07:7b:6c:fb:7e:ea:e4:a4:dc:5d:68:e6: da:66:94:18:c4:b4:be:66:b2:33:42:88:e3:9d:9f: d6:5e:86:25:9a:6f:b1:29:fb:b5:59:80:9d:58:53: 51:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:A1:2D:60:27:F7:01:AB:E3:A5:95:02:9F:B7:F5:6E:0A:05:76:9C X509v3 Authority Key Identifier: keyid:85:EE:8C:6F:95:8D:6F:3C:1F:15:D2:C1:AB:C4:FE:9B:BE:6C:EE:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6Mb5WNbzwfFdLBq8T-m75s7tc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:7f:a4:d4:d3:d9:c6:8b:5e:26:ee:c7:2a:ca:01:b4:0d:dd: f2:91:ec:18:10:34:e3:20:9a:36:ac:09:76:65:ca:ed:bd:ac: ed:a9:8b:4f:47:9e:e1:72:bb:70:55:92:97:77:46:e8:77:c9: a3:e0:eb:e5:ae:90:75:a0:cc:17:a4:4a:98:56:82:33:59:be: da:92:5a:6c:8a:6a:d0:99:8d:2a:3c:96:3b:f9:3b:b9:ad:e7: 6f:8f:d0:62:6c:3a:d0:a1:25:8e:94:a2:5a:17:03:26:fb:a2: 67:6d:95:90:e7:d1:38:cf:ec:3c:a4:7e:9e:d6:31:b8:f7:47: e1:b7:34:2e:17:2b:b7:29:db:ff:ff:74:b1:1e:31:1a:40:9d: 9b:b8:7a:ec:2c:5d:47:0c:c7:cf:2d:ab:35:dc:40:c6:a6:47: 3a:e4:06:ec:f7:12:6a:fc:91:09:50:27:a7:f9:e4:26:a8:3e: 9e:e3:a9:63:f6:6a:9d:7c:ff:fe:4e:8a:27:8a:5d:05:9a:2a: 2c:9a:7b:02:26:b7:92:d9:d5:a0:c2:e4:04:28:a9:2b:1c:06: 0e:97:d9:04:05:80:5f:d8:ec:03:5a:d5:ef:78:84:06:2e:03: c3:24:a2:30:93:fd:f2:c0:1e:e2:75:a0:9a:e9:f4:bf:3d:82: 86:dc:f8:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUxNjUxMTAvBgNVBAUTKDg1RUU4QzZGOTU4RDZGM0MxRjE1RDJDMUFCQzRGRTlC QkU2Q0VFRDcwHhcNMjUwODIyMTcyMjE5WhcNMjUwODI5MTcyMjE5WjAYMRYwFAYD VQQDEw02OGE4YTc0Yi1iYTgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsOsaHw1MGgCr1jc1UNWB/cunu0CnLoEI0SIyNIbO/UAnNUDbx9hnaRhmT7up mjlH75RzjMMDfhOe6nuXouoEei4cpbE1bSmKw+t0nYR6KxnYjljMAyhTASwwSjBV h/D3QhYlkv2g58RzpkCxz5V2fXBHobG0htku+5S3xPgyEXltsRw25HkbLigBGCM2 kPAbI1/Dzbew/QucBXlWDmnoNNMKOky9SFGX2ijrsWEWtmEWTKfp38LrBWU2KRx2 rmiA96tFuyn/CeulIwcaeB3pRxCZUHkHe2z7furkpNxdaObaZpQYxLS+ZrIzQojj nZ/WXoYlmm+xKfu1WYCdWFNRQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNuhLWAn 9wGr46WVAp+39W4KBXacMB8GA1UdIwQYMBaAFIXujG+VjW88HxXSwavE/pu+bO7X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTE2NS85MEYwRkZBRTBG MDgxMUU5ODY4MEU4NUNDNEY5QUUwMi9oZTZNYjVXTmJ6d2ZGZExCcThULW03NXM3 dGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hlNk1iNVdOYnp3ZkZkTEJxOFQtbTc1czd0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTE2NS85MEYwRkZBRTBGMDgxMUU5ODY4MEU4NUNDNEY5QUUwMi9oZTZNYjVXTmJ6 d2ZGZExCcThULW03NXM3dGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtf6TU09nGi14m7scqygG0Dd3ykewYEDTjIJo2rAl2ZcrtvaztqYtP R57hcrtwVZKXd0bod8mj4OvlrpB1oMwXpEqYVoIzWb7aklpsimrQmY0qPJY7+Tu5 redvj9BibDrQoSWOlKJaFwMm+6JnbZWQ59E4z+w8pH6e1jG490fhtzQuFyu3Kdv/ /3SxHjEaQJ2buHrsLF1HDMfPLas13EDGpkc65Abs9xJq/JEJUCen+eQmqD6e46lj 9mqdfP/+Toonil0FmiosmnsCJreS2dWgwuQEKKkrHAYOl9kEBYBf2OwDWtXveIQG LgPDJKIwk/3ywB7idaCa6fS/PYKG3PiU -----END CERTIFICATE-----Generated at Sat Aug 23 21:23:11 2025 by rpki-client