$ rpki-client -vvf rpki.apnic.net/member_repository/A9175762/C343692AB85111EB9F80A81CC4F9AE02/l6EmJW-Wlm7UyuHe3Q75QNMAB6Y.mft File: l6EmJW-Wlm7UyuHe3Q75QNMAB6Y.mft (raw, json) Hash identifier: Hv63r5qvzGu3YegmEHnpiSurFuSycttT3E6T2nXtkbw= Subject key identifier: A8:E7:09:F0:03:EC:A5:B4:53:86:33:77:ED:07:75:4D:C6:03:0D:56 Authority key identifier: 97:A1:26:25:6F:96:96:6E:D4:CA:E1:DE:DD:0E:F9:40:D3:00:07:A6 Certificate issuer: /CN=A9175762/serialNumber=97A126256F96966ED4CAE1DEDD0EF940D30007A6 Certificate serial: 060B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l6EmJW-Wlm7UyuHe3Q75QNMAB6Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175762/C343692AB85111EB9F80A81CC4F9AE02/l6EmJW-Wlm7UyuHe3Q75QNMAB6Y.mft Manifest number: 0605 Signing time: Fri 22 Aug 2025 23:01:51 +0000 Manifest this update: Fri 22 Aug 2025 23:01:50 +0000 Manifest next update: Fri 29 Aug 2025 23:01:50 +0000 Files and hashes: 1: l6EmJW-Wlm7UyuHe3Q75QNMAB6Y.crl (hash: Gpvk4AlUGDyTBPE2iNBc1JKDVNEe7hgJDbgQTF5QmOE=) 2: 9DD99914B85311EBA5D4171FC4F9AE02.roa (hash: sA3Y6loeO+Du++cXdVYeey7TebrDsgcCCcYdqCjW+ns=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175762/C343692AB85111EB9F80A81CC4F9AE02/l6EmJW-Wlm7UyuHe3Q75QNMAB6Y.crl rsync://rpki.apnic.net/member_repository/A9175762/C343692AB85111EB9F80A81CC4F9AE02/l6EmJW-Wlm7UyuHe3Q75QNMAB6Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l6EmJW-Wlm7UyuHe3Q75QNMAB6Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:01:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1547 (0x60b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175762, serialNumber=97A126256F96966ED4CAE1DEDD0EF940D30007A6 Validity Not Before: Aug 22 23:01:50 2025 GMT Not After : Aug 29 23:01:50 2025 GMT Subject: CN=68a8f6df-d6e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e2:a5:3e:7a:11:05:e2:31:16:4e:8a:38:db: bb:de:28:ce:90:83:8b:49:c2:9c:3a:97:48:1c:5d: 40:0e:aa:fe:38:9a:15:0e:d6:93:58:8a:e0:fe:b4: 66:e8:a5:8a:e8:b0:2c:3a:f2:f0:f1:3e:ee:af:60: 65:cb:f4:b0:50:c8:64:a8:6f:89:f4:d9:92:0c:88: 3d:58:48:22:69:57:85:ba:45:b3:8c:6a:b5:01:bf: fb:12:45:6c:de:96:b3:98:fa:3f:31:f2:68:22:a0: 2d:1e:30:4e:6d:05:0b:27:c4:98:c6:6d:55:56:1d: 35:55:fe:1c:05:f9:c2:69:54:61:53:36:26:7b:63: 65:53:60:1a:12:ee:d4:26:5c:ff:94:6e:e4:7f:8b: a5:3f:ef:32:91:a3:c9:b5:78:79:a1:31:53:4e:fe: 2f:3a:66:0d:98:8e:d9:90:9b:8e:51:a3:92:67:93: c5:e5:b7:f8:11:f7:5c:34:3f:4c:9d:ac:ee:c1:a5: 74:4d:7e:94:82:13:90:cb:2c:d5:77:75:c5:55:c2: f7:0b:14:f9:55:4f:84:c9:12:93:73:ad:c6:3b:02: ac:c6:16:39:1d:33:7a:49:aa:6b:b2:c4:98:ef:a5: 25:e5:31:5e:ec:a7:8d:0f:94:01:9c:01:a4:2a:62: 93:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:E7:09:F0:03:EC:A5:B4:53:86:33:77:ED:07:75:4D:C6:03:0D:56 X509v3 Authority Key Identifier: keyid:97:A1:26:25:6F:96:96:6E:D4:CA:E1:DE:DD:0E:F9:40:D3:00:07:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175762/C343692AB85111EB9F80A81CC4F9AE02/l6EmJW-Wlm7UyuHe3Q75QNMAB6Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l6EmJW-Wlm7UyuHe3Q75QNMAB6Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175762/C343692AB85111EB9F80A81CC4F9AE02/l6EmJW-Wlm7UyuHe3Q75QNMAB6Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:6b:fc:ee:30:00:33:80:c4:84:65:ae:55:b4:b4:3b:ab:52: d3:67:5a:f6:ef:70:df:9e:d2:76:cb:3a:f7:bc:9a:a1:9b:b9: fa:f4:1c:b4:68:fd:8e:69:73:a0:b1:93:9e:52:88:ff:7b:ea: ea:27:27:53:4c:b2:76:8b:b9:81:6d:a8:f5:d8:be:1c:c6:67: fb:7c:7d:fd:e9:9e:ba:aa:17:ac:3e:53:d0:55:ab:61:f7:a8: 1d:4f:16:25:e7:1a:76:5c:cd:90:23:af:1e:0c:81:cb:ae:8c: 45:21:83:13:d5:fe:55:42:f9:ac:5f:e0:49:fc:71:29:1c:a8: 76:43:59:a0:0a:70:be:37:e5:31:c9:8f:71:b2:34:cf:69:a8: 60:51:01:45:71:af:24:2f:17:e9:99:7e:d0:66:4a:12:bb:84: 98:d0:cf:39:ca:20:c6:f4:eb:b5:83:03:53:7e:5a:eb:bd:5c: 5c:f9:4d:0e:d4:8e:d2:02:90:10:84:f4:f8:dd:64:d6:6e:ba: e4:4a:9c:43:1f:3f:5c:5d:79:e0:d8:0f:df:56:29:e5:90:0c: b2:69:f6:a4:19:4d:05:18:9a:41:fa:35:77:4c:23:8f:02:1a: 11:15:05:bb:f5:31:97:68:e4:f3:7e:3c:d0:ba:12:1c:fd:2f: f1:07:b6:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU3NjIxMTAvBgNVBAUTKDk3QTEyNjI1NkY5Njk2NkVENENBRTFERUREMEVGOTQw RDMwMDA3QTYwHhcNMjUwODIyMjMwMTUwWhcNMjUwODI5MjMwMTUwWjAYMRYwFAYD VQQDEw02OGE4ZjZkZi1kNmU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu+KlPnoRBeIxFk6KONu73ijOkIOLScKcOpdIHF1ADqr+OJoVDtaTWIrg/rRm 6KWK6LAsOvLw8T7ur2Bly/SwUMhkqG+J9NmSDIg9WEgiaVeFukWzjGq1Ab/7EkVs 3pazmPo/MfJoIqAtHjBObQULJ8SYxm1VVh01Vf4cBfnCaVRhUzYme2NlU2AaEu7U Jlz/lG7kf4ulP+8ykaPJtXh5oTFTTv4vOmYNmI7ZkJuOUaOSZ5PF5bf4EfdcND9M nazuwaV0TX6UghOQyyzVd3XFVcL3CxT5VU+EyRKTc63GOwKsxhY5HTN6SaprssSY 76Ul5TFe7KeND5QBnAGkKmKT3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKjnCfAD 7KW0U4Yzd+0HdU3GAw1WMB8GA1UdIwQYMBaAFJehJiVvlpZu1Mrh3t0O+UDTAAem MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTc2Mi9DMzQzNjkyQUI4 NTExMUVCOUY4MEE4MUNDNEY5QUUwMi9sNkVtSlctV2xtN1V5dUhlM1E3NVFOTUFC NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w2RW1KVy1XbG03VXl1SGUzUTc1UU5NQUI2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTc2Mi9DMzQzNjkyQUI4NTExMUVCOUY4MEE4MUNDNEY5QUUwMi9sNkVtSlctV2xt N1V5dUhlM1E3NVFOTUFCNlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaa/zuMAAzgMSEZa5VtLQ7q1LTZ1r273DfntJ2yzr3vJqhm7n69By0 aP2OaXOgsZOeUoj/e+rqJydTTLJ2i7mBbaj12L4cxmf7fH396Z66qhesPlPQVath 96gdTxYl5xp2XM2QI68eDIHLroxFIYMT1f5VQvmsX+BJ/HEpHKh2Q1mgCnC+N+Ux yY9xsjTPaahgUQFFca8kLxfpmX7QZkoSu4SY0M85yiDG9Ou1gwNTflrrvVxc+U0O 1I7SApAQhPT43WTWbrrkSpxDHz9cXXng2A/fVinlkAyyafakGU0FGJpB+jV3TCOP AhoRFQW79TGXaOTzfjzQuhIc/S/xB7bA -----END CERTIFICATE-----Generated at Sat Aug 23 18:52:17 2025 by rpki-client