$ rpki-client -vvf rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/i6r6xGXwjQR9LXCUulKA19OYg2Y.mft File: i6r6xGXwjQR9LXCUulKA19OYg2Y.mft (raw, json) Hash identifier: /COK+kMj5l/hjd9gkt3G/jjYJ3zD1Bwbznj9gVk2XPc= Subject key identifier: 9F:1D:CB:89:44:CA:24:EC:5D:57:D5:23:58:37:7E:4F:15:20:ED:1B Authority key identifier: 8B:AA:FA:C4:65:F0:8D:04:7D:2D:70:94:BA:52:80:D7:D3:98:83:66 Certificate issuer: /CN=A917C716/serialNumber=8BAAFAC465F08D047D2D7094BA5280D7D3988366 Certificate serial: 02A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6r6xGXwjQR9LXCUulKA19OYg2Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/i6r6xGXwjQR9LXCUulKA19OYg2Y.mft Manifest number: 03AC Signing time: Sat 23 Aug 2025 01:51:57 +0000 Manifest this update: Sat 23 Aug 2025 01:51:57 +0000 Manifest next update: Sat 30 Aug 2025 01:51:57 +0000 Files and hashes: 1: i6r6xGXwjQR9LXCUulKA19OYg2Y.crl (hash: xfZdtbx9dlOzWEZ4ufEbx5YsT9tsRCnaPtXlJXtsCwo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/i6r6xGXwjQR9LXCUulKA19OYg2Y.crl rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/i6r6xGXwjQR9LXCUulKA19OYg2Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6r6xGXwjQR9LXCUulKA19OYg2Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:51:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 677 (0x2a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C716, serialNumber=8BAAFAC465F08D047D2D7094BA5280D7D3988366 Validity Not Before: Aug 23 01:51:57 2025 GMT Not After : Aug 30 01:51:57 2025 GMT Subject: CN=68a91ebd-dc60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ec:15:46:72:10:3a:89:dd:5a:ec:d3:4e:69: 07:40:21:d4:57:a3:7a:ac:4d:17:64:04:81:aa:08: 4f:6e:65:e9:77:c3:c7:85:94:79:8d:04:3d:62:f3: a2:40:42:de:14:8a:ea:a4:0b:38:75:9a:94:c1:9e: fa:c1:db:2e:89:3a:00:79:fb:ae:b6:b5:f0:03:81: 7f:06:a5:09:28:da:0d:a3:03:3e:58:4f:0b:90:f3: 4b:57:b4:78:ca:b3:be:31:63:5e:da:1c:36:98:ca: 30:e8:b5:03:a4:43:8a:e0:fc:31:4c:50:4a:fa:9d: 1b:e4:c0:10:72:19:d5:aa:f2:6d:51:36:4c:ed:75: 89:94:0e:17:7b:a4:1b:11:ba:b2:31:22:08:e3:9a: 07:49:9c:86:ea:4f:d9:e0:fe:81:04:75:ed:93:1b: 38:0a:49:a3:a2:e6:82:96:2d:4e:33:bd:e2:71:74: 0f:60:fa:d8:35:8c:e7:bf:24:f6:f7:48:be:b3:94: bc:37:a4:42:80:f4:aa:5f:ab:d3:6a:ee:c5:bd:04: ae:3d:0b:85:2e:e2:03:39:07:c7:be:f8:f0:c8:dc: b2:dd:37:44:49:92:8b:c6:8f:9e:6a:b5:11:04:c7: 9a:2c:7d:a8:a9:6f:c4:82:31:4e:fb:2a:68:5f:59: f5:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:1D:CB:89:44:CA:24:EC:5D:57:D5:23:58:37:7E:4F:15:20:ED:1B X509v3 Authority Key Identifier: keyid:8B:AA:FA:C4:65:F0:8D:04:7D:2D:70:94:BA:52:80:D7:D3:98:83:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/i6r6xGXwjQR9LXCUulKA19OYg2Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6r6xGXwjQR9LXCUulKA19OYg2Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/i6r6xGXwjQR9LXCUulKA19OYg2Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:1c:e7:d5:1e:79:98:e9:7d:b4:57:8a:f3:ec:72:b3:73:3a: 7e:eb:59:30:96:30:2b:e2:f2:3a:09:b2:1f:74:85:3d:a8:81: df:26:1d:82:2b:9a:72:7b:29:3f:1b:de:cb:17:3d:36:90:14: 0a:33:67:b7:7a:c7:61:04:cd:08:39:3f:df:70:2c:89:1d:5a: b3:23:12:10:21:eb:00:08:36:82:5e:c6:65:1c:11:f9:97:6e: ee:b8:52:a7:50:dc:2f:d1:4f:f1:f5:96:b8:d8:24:37:5b:0b: 08:20:d4:21:a4:ae:60:ae:2a:e7:19:f4:6b:5b:4e:91:4f:00: 7d:e8:98:96:ac:3d:9d:17:20:61:c2:03:54:67:f0:60:84:75: 39:9b:62:bc:ac:9f:7f:83:dd:91:ea:b0:d8:29:98:e2:ba:b5: 71:84:37:9e:bf:68:51:82:95:53:99:f5:22:6c:a6:ae:e3:84: d5:af:be:bd:85:d6:02:72:54:20:92:ae:85:6b:58:1d:aa:23: ba:43:f4:29:dc:2a:70:7d:02:c0:af:28:c5:d1:48:f0:3b:1d: 9d:63:eb:c5:f6:32:1b:91:cf:56:4e:f2:ce:06:61:17:f2:a6: 26:d8:d8:80:f0:bc:11:6d:9c:7a:5c:8b:f0:6e:42:a8:6a:f7: 1d:ff:d0:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M3MTYxMTAvBgNVBAUTKDhCQUFGQUM0NjVGMDhEMDQ3RDJENzA5NEJBNTI4MEQ3 RDM5ODgzNjYwHhcNMjUwODIzMDE1MTU3WhcNMjUwODMwMDE1MTU3WjAYMRYwFAYD VQQDEw02OGE5MWViZC1kYzYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyewVRnIQOondWuzTTmkHQCHUV6N6rE0XZASBqghPbmXpd8PHhZR5jQQ9YvOi QELeFIrqpAs4dZqUwZ76wdsuiToAefuutrXwA4F/BqUJKNoNowM+WE8LkPNLV7R4 yrO+MWNe2hw2mMow6LUDpEOK4PwxTFBK+p0b5MAQchnVqvJtUTZM7XWJlA4Xe6Qb EbqyMSII45oHSZyG6k/Z4P6BBHXtkxs4CkmjouaCli1OM73icXQPYPrYNYznvyT2 90i+s5S8N6RCgPSqX6vTau7FvQSuPQuFLuIDOQfHvvjwyNyy3TdESZKLxo+earUR BMeaLH2oqW/EgjFO+ypoX1n1nQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ8dy4lE yiTsXVfVI1g3fk8VIO0bMB8GA1UdIwQYMBaAFIuq+sRl8I0EfS1wlLpSgNfTmINm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzcxNi80REI5Q0FDNDE0 MDIxMUVEQjk2NjM0MTVDNEY5QUUwMi9pNnI2eEdYd2pRUjlMWENVdWxLQTE5T1ln MlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2k2cjZ4R1h3alFSOUxYQ1V1bEtBMTlPWWcyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzcxNi80REI5Q0FDNDE0MDIxMUVEQjk2NjM0MTVDNEY5QUUwMi9pNnI2eEdYd2pR UjlMWENVdWxLQTE5T1lnMlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbHOfVHnmY6X20V4rz7HKzczp+61kwljAr4vI6CbIfdIU9qIHfJh2C K5pyeyk/G97LFz02kBQKM2e3esdhBM0IOT/fcCyJHVqzIxIQIesACDaCXsZlHBH5 l27uuFKnUNwv0U/x9Za42CQ3WwsIINQhpK5grirnGfRrW06RTwB96JiWrD2dFyBh wgNUZ/BghHU5m2K8rJ9/g92R6rDYKZjiurVxhDeev2hRgpVTmfUibKau44TVr769 hdYCclQgkq6Fa1gdqiO6Q/Qp3CpwfQLAryjF0UjwOx2dY+vF9jIbkc9WTvLOBmEX 8qYm2NiA8LwRbZx6XIvwbkKoavcd/9D7 -----END CERTIFICATE-----Generated at Sat Aug 23 16:44:09 2025 by rpki-client