$ rpki-client -vvf rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.mft File: --G6XF5MRXTo6VEiWGdWCd9Ba7c.mft (raw, json) Hash identifier: 02RqtainS1rb8KBr4ht0nYoKIhSOKkmgdF6YlFfcvUg= Subject key identifier: B0:16:CD:22:3F:48:70:E2:72:31:7C:F2:49:0F:26:8D:96:22:66:CA Authority key identifier: FB:E1:BA:5C:5E:4C:45:74:E8:E9:51:22:58:67:56:09:DF:41:6B:B7 Certificate issuer: /CN=A9172506/serialNumber=FBE1BA5C5E4C4574E8E9512258675609DF416BB7 Certificate serial: AB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/--G6XF5MRXTo6VEiWGdWCd9Ba7c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.mft Manifest number: AB Signing time: Tue 05 Aug 2025 06:40:38 +0000 Manifest this update: Tue 05 Aug 2025 06:40:38 +0000 Manifest next update: Tue 12 Aug 2025 06:40:38 +0000 Files and hashes: 1: --G6XF5MRXTo6VEiWGdWCd9Ba7c.crl (hash: /hurEdpcyASqSVvIGh5Q460PkvdFR7oLof7J0eqQ/E8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.crl rsync://rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/--G6XF5MRXTo6VEiWGdWCd9Ba7c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 06:40:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 171 (0xab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172506, serialNumber=FBE1BA5C5E4C4574E8E9512258675609DF416BB7 Validity Not Before: Aug 5 06:40:38 2025 GMT Not After : Aug 12 06:40:38 2025 GMT Subject: CN=6891a766-b6de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:84:81:35:42:44:40:eb:9a:2c:8b:16:85:7e: 31:86:21:20:29:97:05:d6:3b:ac:87:20:5c:ab:1a: 62:db:fd:13:d3:eb:2a:52:64:f5:68:97:11:54:c7: df:89:39:e7:14:34:e9:4a:f4:07:68:a9:3f:13:9e: 21:bd:15:25:56:84:7e:f2:27:b0:e7:80:43:c6:5e: f6:ac:88:fe:1f:2d:a4:a0:e8:a2:4f:18:f3:cc:2d: 42:09:cf:c8:7e:1a:15:65:96:cf:c1:c1:4d:3b:51: 17:44:c7:cf:3c:ea:af:06:aa:0a:2a:ab:02:b7:d9: bb:1a:00:2e:a2:b7:9f:c2:a5:58:92:60:6c:cc:5d: 7a:00:17:79:7c:1f:a8:33:1c:e2:8a:90:c3:8a:de: 45:e9:9e:d3:d0:2a:a0:7f:c9:dd:01:67:c5:d1:46: 76:22:5f:48:e8:2a:3c:2a:5d:21:ba:ad:e0:b5:71: 06:59:77:2a:8b:68:3e:28:5c:43:df:16:2a:53:ca: 12:32:3d:c7:77:bd:b6:1b:ba:cc:90:97:ca:c6:4b: be:b8:c6:3a:ba:81:59:2c:b5:0c:31:e2:c8:2a:da: 95:ee:20:59:23:a2:f1:cc:77:b2:7c:21:68:b1:34: 78:6b:c1:62:64:cc:1d:bf:c6:ea:cb:8c:72:e4:c3: 70:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:16:CD:22:3F:48:70:E2:72:31:7C:F2:49:0F:26:8D:96:22:66:CA X509v3 Authority Key Identifier: keyid:FB:E1:BA:5C:5E:4C:45:74:E8:E9:51:22:58:67:56:09:DF:41:6B:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/--G6XF5MRXTo6VEiWGdWCd9Ba7c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:4a:aa:92:94:a2:f0:36:cd:85:dc:43:42:49:50:96:cb:7a: 3e:de:cd:e4:d3:37:9e:ff:b0:ea:4f:c1:d9:9c:c7:ed:4b:21: 65:3f:0f:e3:bd:9d:89:ce:b5:0d:85:17:f2:42:41:cd:72:29: ac:31:26:2e:1b:82:fb:0d:c4:cc:be:1d:92:f8:b7:93:b0:f6: 35:54:15:39:de:70:0b:fc:c6:69:4b:73:d0:e2:e0:38:f5:e2: 26:12:22:6a:f9:1d:ce:9c:c7:36:cd:b0:7a:91:61:38:9c:83: 3e:df:82:3f:38:2b:6e:47:a8:82:3f:29:ea:b7:02:1e:72:b1: c4:91:7c:72:d6:c7:e7:09:e1:c2:5d:c1:9d:0c:17:92:85:e9: b1:7d:32:7c:37:55:59:c7:1e:b7:37:cb:08:53:1c:9a:7e:5d: cf:40:50:da:24:65:1f:10:59:df:64:93:81:a9:b0:1f:bf:c8: 50:80:21:1c:ce:be:61:15:b9:27:aa:b1:6c:0f:0a:69:07:5b: 3d:22:ca:13:5b:b1:3c:2e:66:98:d9:6b:f2:bd:42:26:7d:0b: d9:19:94:5d:43:c1:cd:ae:29:7c:fe:b4:73:82:0b:7d:d8:e9: 7f:0b:83:9e:14:92:c0:6a:c7:21:3b:35:5a:ac:41:6b:cd:8f: a3:13:3c:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI1MDYxMTAvBgNVBAUTKEZCRTFCQTVDNUU0QzQ1NzRFOEU5NTEyMjU4Njc1NjA5 REY0MTZCQjcwHhcNMjUwODA1MDY0MDM4WhcNMjUwODEyMDY0MDM4WjAYMRYwFAYD VQQDEw02ODkxYTc2Ni1iNmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyYSBNUJEQOuaLIsWhX4xhiEgKZcF1jushyBcqxpi2/0T0+sqUmT1aJcRVMff iTnnFDTpSvQHaKk/E54hvRUlVoR+8iew54BDxl72rIj+Hy2koOiiTxjzzC1CCc/I fhoVZZbPwcFNO1EXRMfPPOqvBqoKKqsCt9m7GgAuorefwqVYkmBszF16ABd5fB+o MxziipDDit5F6Z7T0Cqgf8ndAWfF0UZ2Il9I6Co8Kl0huq3gtXEGWXcqi2g+KFxD 3xYqU8oSMj3Hd722G7rMkJfKxku+uMY6uoFZLLUMMeLIKtqV7iBZI6LxzHeyfCFo sTR4a8FiZMwdv8bqy4xy5MNwpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLAWzSI/ SHDicjF88kkPJo2WImbKMB8GA1UdIwQYMBaAFPvhulxeTEV06OlRIlhnVgnfQWu3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjUwNi9BNUU0QzQ1RTZF REUxMUVGQUFDMkNCNURDNEY5QUUwMi8tLUc2WEY1TVJYVG82VkVpV0dkV0NkOUJh N2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy0tRzZYRjVNUlhUbzZWRWlXR2RXQ2Q5QmE3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MjUwNi9BNUU0QzQ1RTZFREUxMUVGQUFDMkNCNURDNEY5QUUwMi8tLUc2WEY1TVJY VG82VkVpV0dkV0NkOUJhN2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXSqqSlKLwNs2F3ENCSVCWy3o+3s3k0zee/7DqT8HZnMftSyFlPw/j vZ2JzrUNhRfyQkHNcimsMSYuG4L7DcTMvh2S+LeTsPY1VBU53nAL/MZpS3PQ4uA4 9eImEiJq+R3OnMc2zbB6kWE4nIM+34I/OCtuR6iCPynqtwIecrHEkXxy1sfnCeHC XcGdDBeShemxfTJ8N1VZxx63N8sIUxyafl3PQFDaJGUfEFnfZJOBqbAfv8hQgCEc zr5hFbknqrFsDwppB1s9IsoTW7E8LmaY2WvyvUImfQvZGZRdQ8HNril8/rRzggt9 2Ol/C4OeFJLAaschOzVarEFrzY+jEzzg -----END CERTIFICATE-----Generated at Tue Aug 5 17:26:17 2025 by rpki-client