$ rpki-client -vvf rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.mft File: he6Mb5WNbzwfFdLBq8T-m75s7tc.mft (raw, json) Hash identifier: KHjKarNq3Jl7yk7ZhLSrZ0noidLT/fxsDvcSmc+wlH8= Subject key identifier: 04:A1:3C:C0:BF:58:2A:2A:2E:9E:3D:53:DF:DD:65:07:C0:8F:42:15 Authority key identifier: 85:EE:8C:6F:95:8D:6F:3C:1F:15:D2:C1:AB:C4:FE:9B:BE:6C:EE:D7 Certificate issuer: /CN=A9175165/serialNumber=85EE8C6F958D6F3C1F15D2C1ABC4FE9BBE6CEED7 Certificate serial: 113B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6Mb5WNbzwfFdLBq8T-m75s7tc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.mft Manifest number: 1133 Signing time: Mon 30 Jun 2025 17:28:19 +0000 Manifest this update: Mon 30 Jun 2025 17:28:18 +0000 Manifest next update: Mon 07 Jul 2025 17:28:18 +0000 Files and hashes: 1: he6Mb5WNbzwfFdLBq8T-m75s7tc.crl (hash: wetPK4G4ODuGP+StV0/S2uSY+8k/WhnTeS+pS5bNeWg=) 2: 8B8DEE220F0911E9A8CC815EC4F9AE02.roa (hash: gteMkfVnVg4ffsJGo4gzYRn2LBvsScWGIppneQ2BQXI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.crl rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6Mb5WNbzwfFdLBq8T-m75s7tc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 17:28:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4411 (0x113b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175165, serialNumber=85EE8C6F958D6F3C1F15D2C1ABC4FE9BBE6CEED7 Validity Not Before: Jun 30 17:28:18 2025 GMT Not After : Jul 7 17:28:18 2025 GMT Subject: CN=6862c933-8ab2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:08:d8:db:61:b2:72:27:7d:9a:60:34:ad:22: 15:de:f6:69:5e:c6:cb:7b:e1:14:28:60:4a:59:b6: 87:8a:e8:5b:6f:c3:89:01:49:22:60:9b:87:36:c6: 0b:59:b5:31:3d:72:bc:50:ea:e0:97:9b:61:05:7d: 42:62:b8:8d:84:9d:a4:5f:17:f1:eb:e1:58:16:21: 34:c9:8d:0d:2b:42:72:0a:cf:d6:b5:1c:92:9d:9b: a7:6d:9e:7c:a7:a9:0b:40:77:cc:e2:5f:fb:90:30: 16:4a:5e:1a:9a:2d:c8:61:5a:0f:4a:29:67:95:a9: 02:92:f0:dd:bb:bd:69:83:fb:ce:6f:44:1e:36:89: 08:fe:fc:72:63:e5:26:1f:20:71:43:ea:03:26:ab: 04:96:60:84:0e:dc:b7:d9:0f:b2:90:9d:74:37:40: 9f:6b:9c:2e:e4:c4:8e:60:f1:70:36:43:7e:51:af: f7:50:39:df:a9:3a:42:48:f5:f9:8c:19:b0:66:e5: c0:d0:ae:63:38:8b:82:24:04:99:8f:39:0f:69:a0: 31:76:90:2e:8d:8e:e8:7e:4e:da:21:dc:0f:02:a4: 91:e4:e1:b9:14:7a:9d:bb:76:8e:bb:83:b1:60:6a: 50:59:5c:2b:a7:95:2e:aa:60:29:4e:23:02:e5:ff: 18:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:A1:3C:C0:BF:58:2A:2A:2E:9E:3D:53:DF:DD:65:07:C0:8F:42:15 X509v3 Authority Key Identifier: keyid:85:EE:8C:6F:95:8D:6F:3C:1F:15:D2:C1:AB:C4:FE:9B:BE:6C:EE:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6Mb5WNbzwfFdLBq8T-m75s7tc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:2b:dd:1d:c3:ac:76:d6:97:45:64:78:6a:24:f3:51:b5:97: c7:20:f3:27:bd:6b:8e:0c:de:e7:af:db:cb:d0:b5:39:0a:2a: 8a:c3:75:95:bc:a0:50:b4:78:ec:e6:3e:5d:73:22:b9:14:6c: 2d:a2:bf:eb:7c:78:c6:be:c1:d7:42:24:87:8a:e0:85:0d:97: 3d:25:ea:b6:ac:80:af:4d:e5:fd:27:10:ec:88:2d:34:e2:6c: c0:80:47:95:4c:3d:43:ca:04:1a:c4:14:28:2b:d3:75:75:82: 40:60:55:c8:a9:81:42:72:b6:a8:94:15:d5:10:b0:3a:9a:d7: 8c:f3:b6:54:5e:ec:2c:33:65:d7:ab:75:17:8c:07:9a:6c:60: 03:82:f2:b5:b9:b1:20:9d:8c:b1:ae:43:7e:e9:d1:ac:00:6e: 62:29:ff:23:ec:0c:68:95:7c:b8:81:58:43:2e:f7:26:7c:7a: a5:28:60:52:f7:9d:a2:b8:b2:0d:f7:7e:cd:f2:d8:34:21:fb: e4:fa:ea:97:08:e1:f4:f0:d7:32:f4:86:e0:bd:8a:53:33:20: ac:30:3b:f2:6d:c4:55:42:11:ca:ca:d9:fd:62:d1:ff:07:6a: 78:a7:f6:b7:b7:83:c5:1a:35:83:97:f7:08:c2:1b:95:c7:5c: 3f:54:0c:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICETswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUxNjUxMTAvBgNVBAUTKDg1RUU4QzZGOTU4RDZGM0MxRjE1RDJDMUFCQzRGRTlC QkU2Q0VFRDcwHhcNMjUwNjMwMTcyODE4WhcNMjUwNzA3MTcyODE4WjAYMRYwFAYD VQQDEw02ODYyYzkzMy04YWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6AjY22Gycid9mmA0rSIV3vZpXsbLe+EUKGBKWbaHiuhbb8OJAUkiYJuHNsYL WbUxPXK8UOrgl5thBX1CYriNhJ2kXxfx6+FYFiE0yY0NK0JyCs/WtRySnZunbZ58 p6kLQHfM4l/7kDAWSl4ami3IYVoPSilnlakCkvDdu71pg/vOb0QeNokI/vxyY+Um HyBxQ+oDJqsElmCEDty32Q+ykJ10N0Cfa5wu5MSOYPFwNkN+Ua/3UDnfqTpCSPX5 jBmwZuXA0K5jOIuCJASZjzkPaaAxdpAujY7ofk7aIdwPAqSR5OG5FHqdu3aOu4Ox YGpQWVwrp5UuqmApTiMC5f8YGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAShPMC/ WCoqLp49U9/dZQfAj0IVMB8GA1UdIwQYMBaAFIXujG+VjW88HxXSwavE/pu+bO7X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTE2NS85MEYwRkZBRTBG MDgxMUU5ODY4MEU4NUNDNEY5QUUwMi9oZTZNYjVXTmJ6d2ZGZExCcThULW03NXM3 dGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hlNk1iNVdOYnp3ZkZkTEJxOFQtbTc1czd0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTE2NS85MEYwRkZBRTBGMDgxMUU5ODY4MEU4NUNDNEY5QUUwMi9oZTZNYjVXTmJ6 d2ZGZExCcThULW03NXM3dGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqK90dw6x21pdFZHhqJPNRtZfHIPMnvWuODN7nr9vL0LU5CiqKw3WV vKBQtHjs5j5dcyK5FGwtor/rfHjGvsHXQiSHiuCFDZc9Jeq2rICvTeX9JxDsiC00 4mzAgEeVTD1DygQaxBQoK9N1dYJAYFXIqYFCcraolBXVELA6mteM87ZUXuwsM2XX q3UXjAeabGADgvK1ubEgnYyxrkN+6dGsAG5iKf8j7AxolXy4gVhDLvcmfHqlKGBS 952iuLIN937N8tg0Ifvk+uqXCOH08Ncy9IbgvYpTMyCsMDvybcRVQhHKytn9YtH/ B2p4p/a3t4PFGjWDl/cIwhuVx1w/VAz6 -----END CERTIFICATE-----Generated at Wed Jul 2 13:05:01 2025 by rpki-client