$ rpki-client -vvf rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/CgiKGbvbYd7RkWyGCrK4vuGG7c0.mft File: CgiKGbvbYd7RkWyGCrK4vuGG7c0.mft (raw, json) Hash identifier: FR9x6DedEiKhE/BulluUyrppF4TqTzsJmoP3rtU2t2Y= Subject key identifier: 69:01:0F:2A:CE:D5:1F:50:DC:61:EA:22:A8:AE:02:26:1A:B5:82:58 Authority key identifier: 0A:08:8A:19:BB:DB:61:DE:D1:91:6C:86:0A:B2:B8:BE:E1:86:ED:CD Certificate issuer: /CN=A91777B9/serialNumber=0A088A19BBDB61DED1916C860AB2B8BEE186EDCD Certificate serial: A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgiKGbvbYd7RkWyGCrK4vuGG7c0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/CgiKGbvbYd7RkWyGCrK4vuGG7c0.mft Manifest number: A6 Signing time: Thu 07 Aug 2025 06:45:48 +0000 Manifest this update: Thu 07 Aug 2025 06:45:47 +0000 Manifest next update: Thu 14 Aug 2025 06:45:47 +0000 Files and hashes: 1: CgiKGbvbYd7RkWyGCrK4vuGG7c0.crl (hash: Ek32veF1L/JR21lJ8Cd/FG0jplE9XiSFyaIObgBmKpI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/CgiKGbvbYd7RkWyGCrK4vuGG7c0.crl rsync://rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/CgiKGbvbYd7RkWyGCrK4vuGG7c0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgiKGbvbYd7RkWyGCrK4vuGG7c0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 166 (0xa6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91777B9, serialNumber=0A088A19BBDB61DED1916C860AB2B8BEE186EDCD Validity Not Before: Aug 7 06:45:47 2025 GMT Not After : Aug 14 06:45:47 2025 GMT Subject: CN=68944b9b-29db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:05:97:73:c3:06:68:cd:c1:ae:9b:bd:2d:88: 71:93:17:b9:27:20:c3:25:e2:09:e4:7f:a4:26:08: ae:e6:4e:f3:8f:fd:b3:d6:e7:af:37:09:98:e7:8a: 5b:ca:9f:76:eb:51:72:23:e0:09:9b:51:3e:0f:3e: 7e:bb:f9:9a:db:42:41:15:50:64:75:93:19:f5:9e: 84:7c:7a:07:f6:d7:76:05:61:dc:9e:5d:8d:2c:59: 1e:b6:63:f4:24:79:51:cd:be:81:97:74:c6:6e:39: 79:dc:ba:02:46:e1:9a:36:c5:59:e1:0b:bf:35:0a: 68:a9:45:20:8d:07:ff:1f:77:ee:da:8a:e5:e4:9c: 01:af:ba:f7:da:8b:f9:0e:e6:ae:3b:f8:c4:96:63: 8f:c2:1b:81:f0:8e:17:54:6a:1c:f5:e0:cf:90:6b: 61:ab:06:eb:1f:c7:1d:a1:29:60:b4:0f:ad:ed:cf: 30:e6:1d:fc:61:23:c0:65:3f:72:38:b8:7c:8d:44: 37:08:d7:97:30:b2:a4:e3:1b:ea:7a:20:51:f7:a4: d8:b5:5f:bf:d3:c0:9c:12:ff:da:37:bc:43:ea:89: 32:61:0f:8a:03:b0:7f:af:11:6e:7a:a5:7a:95:7f: 64:70:1f:7a:30:35:9d:12:71:7f:2e:dd:75:11:de: fd:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:01:0F:2A:CE:D5:1F:50:DC:61:EA:22:A8:AE:02:26:1A:B5:82:58 X509v3 Authority Key Identifier: keyid:0A:08:8A:19:BB:DB:61:DE:D1:91:6C:86:0A:B2:B8:BE:E1:86:ED:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/CgiKGbvbYd7RkWyGCrK4vuGG7c0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgiKGbvbYd7RkWyGCrK4vuGG7c0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/CgiKGbvbYd7RkWyGCrK4vuGG7c0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:ad:b6:9e:e5:99:91:df:23:27:e4:6a:9a:95:cb:f1:04:d7: 99:a5:f9:05:dd:bd:97:35:b1:b9:81:89:00:1e:9b:f8:e5:ee: 11:2b:17:45:82:0d:40:66:9c:cf:d8:b9:ed:4b:23:f0:fe:fc: b6:ca:1f:81:78:c1:82:9a:92:ea:70:b0:2d:c7:0a:3a:ff:d6: 85:7e:2b:80:6a:64:d9:ce:4a:8f:16:a6:7b:63:04:45:4d:de: ee:18:c3:82:30:30:8e:7e:2e:82:9c:d5:31:8e:20:c2:95:7b: be:62:52:77:21:20:74:b1:4a:9f:8e:39:fb:81:28:57:08:7a: 36:35:b1:18:e2:7f:28:c8:ef:68:18:6f:71:20:a2:22:22:2d: b6:64:34:fa:11:59:d4:42:a6:25:2a:72:3a:c5:e2:3e:e6:8e: 8d:6d:a2:d8:79:fe:f5:41:5a:ba:9f:6a:ea:ef:fe:b4:57:cd: e6:5f:c8:04:43:80:60:b8:7f:b7:dc:10:40:12:94:01:18:9e: 3c:b7:64:0a:1d:fd:52:7a:28:8f:29:f6:92:b7:2a:04:39:1e: 33:3d:eb:e5:54:69:fa:16:a2:93:80:d2:d7:68:b9:5e:04:43: 37:e3:f5:1d:f0:61:75:de:4b:f3:b5:7f:e4:0b:52:7c:b5:b2: 94:36:e7:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc3QjkxMTAvBgNVBAUTKDBBMDg4QTE5QkJEQjYxREVEMTkxNkM4NjBBQjJCOEJF RTE4NkVEQ0QwHhcNMjUwODA3MDY0NTQ3WhcNMjUwODE0MDY0NTQ3WjAYMRYwFAYD VQQDEw02ODk0NGI5Yi0yOWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0wWXc8MGaM3Brpu9LYhxkxe5JyDDJeIJ5H+kJgiu5k7zj/2z1uevNwmY54pb yp9261FyI+AJm1E+Dz5+u/ma20JBFVBkdZMZ9Z6EfHoH9td2BWHcnl2NLFketmP0 JHlRzb6Bl3TGbjl53LoCRuGaNsVZ4Qu/NQpoqUUgjQf/H3fu2orl5JwBr7r32ov5 DuauO/jElmOPwhuB8I4XVGoc9eDPkGthqwbrH8cdoSlgtA+t7c8w5h38YSPAZT9y OLh8jUQ3CNeXMLKk4xvqeiBR96TYtV+/08CcEv/aN7xD6okyYQ+KA7B/rxFueqV6 lX9kcB96MDWdEnF/Lt11Ed79YQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGkBDyrO 1R9Q3GHqIqiuAiYatYJYMB8GA1UdIwQYMBaAFAoIihm722He0ZFshgqyuL7hhu3N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzdCOS9EQjUxN0IwODc1 QjYxMUVGQjhFMjE1MTRDNEY5QUUwMi9DZ2lLR2J2YllkN1JrV3lHQ3JLNHZ1R0c3 YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NnaUtHYnZiWWQ3UmtXeUdDcks0dnVHRzdjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzdCOS9EQjUxN0IwODc1QjYxMUVGQjhFMjE1MTRDNEY5QUUwMi9DZ2lLR2J2Yllk N1JrV3lHQ3JLNHZ1R0c3YzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8rbae5ZmR3yMn5GqalcvxBNeZpfkF3b2XNbG5gYkAHpv45e4RKxdF gg1AZpzP2LntSyPw/vy2yh+BeMGCmpLqcLAtxwo6/9aFfiuAamTZzkqPFqZ7YwRF Td7uGMOCMDCOfi6CnNUxjiDClXu+YlJ3ISB0sUqfjjn7gShXCHo2NbEY4n8oyO9o GG9xIKIiIi22ZDT6EVnUQqYlKnI6xeI+5o6NbaLYef71QVq6n2rq7/60V83mX8gE Q4BguH+33BBAEpQBGJ48t2QKHf1SeiiPKfaStyoEOR4zPevlVGn6FqKTgNLXaLle BEM34/Ud8GF13kvztX/kC1J8tbKUNuda -----END CERTIFICATE-----Generated at Fri Aug 8 20:53:38 2025 by rpki-client