$ rpki-client -vvf rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.mft File: he6Mb5WNbzwfFdLBq8T-m75s7tc.mft (raw, json) Hash identifier: 6wG1BDDX6/FMsnSZOc5dhAteSysTJ8YZD5hLe375D7M= Subject key identifier: 02:0C:E9:49:BF:BA:A9:99:BA:7C:21:8D:01:C9:C0:AC:AD:4B:9F:AB Authority key identifier: 85:EE:8C:6F:95:8D:6F:3C:1F:15:D2:C1:AB:C4:FE:9B:BE:6C:EE:D7 Certificate issuer: /CN=A9175165/serialNumber=85EE8C6F958D6F3C1F15D2C1ABC4FE9BBE6CEED7 Certificate serial: 114F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6Mb5WNbzwfFdLBq8T-m75s7tc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.mft Manifest number: 1147 Signing time: Fri 08 Aug 2025 17:26:12 +0000 Manifest this update: Fri 08 Aug 2025 17:26:12 +0000 Manifest next update: Fri 15 Aug 2025 17:26:12 +0000 Files and hashes: 1: he6Mb5WNbzwfFdLBq8T-m75s7tc.crl (hash: bnuO+Qq5aBbAfbdUDVONsjr7ty2EB13xR3Y7tCOddoc=) 2: 8B8DEE220F0911E9A8CC815EC4F9AE02.roa (hash: gteMkfVnVg4ffsJGo4gzYRn2LBvsScWGIppneQ2BQXI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.crl rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6Mb5WNbzwfFdLBq8T-m75s7tc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4431 (0x114f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175165, serialNumber=85EE8C6F958D6F3C1F15D2C1ABC4FE9BBE6CEED7 Validity Not Before: Aug 8 17:26:12 2025 GMT Not After : Aug 15 17:26:12 2025 GMT Subject: CN=68963334-c019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b9:4d:f9:f8:e2:4d:fe:f8:28:7e:b7:ab:ac: fc:77:98:8a:8d:bc:aa:17:61:10:c0:e4:ad:a9:83: 4f:c0:b1:bb:1f:a1:62:97:04:4a:08:cb:22:a9:cb: c6:37:4d:83:9c:ac:b8:c3:ca:38:9b:a7:ad:cd:4b: 89:f5:1b:f2:5f:83:db:16:3e:7d:2d:67:0d:54:d6: cb:8e:0c:d8:c9:01:e5:1f:4b:69:e3:16:65:2c:49: 9e:73:2b:20:95:de:1b:64:5c:f3:dc:e0:27:50:08: 7d:67:fd:88:12:a9:9f:08:96:4a:0f:a6:df:44:b0: cb:4a:ae:c1:a3:16:00:8a:f4:4f:85:1b:51:a4:d4: 44:75:c4:b7:c9:da:23:88:af:5b:48:bc:ac:1e:71: 9b:95:d9:45:90:93:10:16:f1:0b:1c:37:df:90:07: e2:be:85:65:2e:0a:82:df:aa:26:8f:bd:53:76:f4: a0:d6:e0:58:2e:0b:c0:87:46:6f:ae:f9:15:42:59: 1e:c3:63:e0:4c:23:10:a2:4c:dd:a7:f9:ad:12:9d: 9d:ee:c0:54:43:f2:0b:b9:b6:c6:d2:8f:9d:54:ee: b7:e3:06:b3:ad:56:b1:de:8e:da:92:dd:7b:97:10: 80:14:ae:cc:ad:fa:8c:2b:88:67:1c:1e:1d:9c:86: 71:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:0C:E9:49:BF:BA:A9:99:BA:7C:21:8D:01:C9:C0:AC:AD:4B:9F:AB X509v3 Authority Key Identifier: keyid:85:EE:8C:6F:95:8D:6F:3C:1F:15:D2:C1:AB:C4:FE:9B:BE:6C:EE:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6Mb5WNbzwfFdLBq8T-m75s7tc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:04:1b:fb:10:4a:6f:ee:bb:30:98:4d:d0:51:a9:40:e6:e5: 2a:4e:36:da:e5:da:ad:38:d9:41:97:47:0e:0d:b5:3d:da:e0: 94:df:96:9c:35:25:ff:dd:97:3b:5b:3f:5d:1d:2f:2f:a3:3c: ae:4c:31:2a:d0:a8:6c:53:d5:7c:da:36:32:5b:16:31:73:f2: 67:7d:cd:38:59:ed:03:c3:68:c8:44:53:ca:ad:67:cd:df:4d: da:d5:27:a9:a7:84:85:b5:e2:fd:36:3d:a5:2c:82:c9:7f:07: 21:65:b3:1d:4e:19:3c:84:fd:4e:ad:54:d8:4a:0b:bd:35:45: 03:61:a0:83:45:93:f2:2a:24:79:04:ab:d8:f7:f6:47:d2:f2: a0:ae:e7:2c:d5:69:aa:83:9f:07:d0:72:b5:15:3f:01:30:31: b6:a7:53:58:83:26:b1:f5:71:04:a2:84:0a:f6:2b:49:e2:99: 6a:19:82:63:77:c6:3f:52:25:52:c3:9b:0a:ea:14:f9:9f:af: ab:99:31:99:4d:ad:cc:45:29:00:06:11:2d:14:af:90:74:88: 79:8a:c6:c4:52:bd:36:a7:f4:cc:cd:ea:37:d8:67:07:4f:09: 04:eb:60:e4:fb:29:81:64:b5:d2:3a:0b:23:38:b0:bd:51:81: c2:e0:e2:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUxNjUxMTAvBgNVBAUTKDg1RUU4QzZGOTU4RDZGM0MxRjE1RDJDMUFCQzRGRTlC QkU2Q0VFRDcwHhcNMjUwODA4MTcyNjEyWhcNMjUwODE1MTcyNjEyWjAYMRYwFAYD VQQDEw02ODk2MzMzNC1jMDE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA47lN+fjiTf74KH63q6z8d5iKjbyqF2EQwOStqYNPwLG7H6FilwRKCMsiqcvG N02DnKy4w8o4m6etzUuJ9RvyX4PbFj59LWcNVNbLjgzYyQHlH0tp4xZlLEmecysg ld4bZFzz3OAnUAh9Z/2IEqmfCJZKD6bfRLDLSq7BoxYAivRPhRtRpNREdcS3ydoj iK9bSLysHnGbldlFkJMQFvELHDffkAfivoVlLgqC36omj71TdvSg1uBYLgvAh0Zv rvkVQlkew2PgTCMQokzdp/mtEp2d7sBUQ/ILubbG0o+dVO634wazrVax3o7akt17 lxCAFK7MrfqMK4hnHB4dnIZxPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAIM6Um/ uqmZunwhjQHJwKytS5+rMB8GA1UdIwQYMBaAFIXujG+VjW88HxXSwavE/pu+bO7X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTE2NS85MEYwRkZBRTBG MDgxMUU5ODY4MEU4NUNDNEY5QUUwMi9oZTZNYjVXTmJ6d2ZGZExCcThULW03NXM3 dGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hlNk1iNVdOYnp3ZkZkTEJxOFQtbTc1czd0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTE2NS85MEYwRkZBRTBGMDgxMUU5ODY4MEU4NUNDNEY5QUUwMi9oZTZNYjVXTmJ6 d2ZGZExCcThULW03NXM3dGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYBBv7EEpv7rswmE3QUalA5uUqTjba5dqtONlBl0cODbU92uCU35ac NSX/3Zc7Wz9dHS8vozyuTDEq0KhsU9V82jYyWxYxc/Jnfc04We0Dw2jIRFPKrWfN 303a1Sepp4SFteL9Nj2lLILJfwchZbMdThk8hP1OrVTYSgu9NUUDYaCDRZPyKiR5 BKvY9/ZH0vKgrucs1Wmqg58H0HK1FT8BMDG2p1NYgyax9XEEooQK9itJ4plqGYJj d8Y/UiVSw5sK6hT5n6+rmTGZTa3MRSkABhEtFK+QdIh5isbEUr02p/TMzeo32GcH TwkE62Dk+ymBZLXSOgsjOLC9UYHC4OLr -----END CERTIFICATE-----Generated at Sun Aug 10 05:39:39 2025 by rpki-client