$ rpki-client -vvf rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/i6r6xGXwjQR9LXCUulKA19OYg2Y.mft File: i6r6xGXwjQR9LXCUulKA19OYg2Y.mft (raw, json) Hash identifier: u+GPXaLl3BNjyK1qrwr2pzsiiW+zta7TxTutN4rq6fY= Subject key identifier: A3:59:F6:2D:EE:A9:42:85:11:1B:66:17:C3:3D:D1:B1:BA:4A:E4:B6 Authority key identifier: 8B:AA:FA:C4:65:F0:8D:04:7D:2D:70:94:BA:52:80:D7:D3:98:83:66 Certificate issuer: /CN=A917C716/serialNumber=8BAAFAC465F08D047D2D7094BA5280D7D3988366 Certificate serial: 0293 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6r6xGXwjQR9LXCUulKA19OYg2Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/i6r6xGXwjQR9LXCUulKA19OYg2Y.mft Manifest number: 0376 Signing time: Sat 19 Jul 2025 02:06:55 +0000 Manifest this update: Sat 19 Jul 2025 02:06:54 +0000 Manifest next update: Sat 26 Jul 2025 02:06:54 +0000 Files and hashes: 1: i6r6xGXwjQR9LXCUulKA19OYg2Y.crl (hash: FTimOnyjze6iprs3PVIbPJkqle0IfaEOkOZFtybaihU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/i6r6xGXwjQR9LXCUulKA19OYg2Y.crl rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/i6r6xGXwjQR9LXCUulKA19OYg2Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6r6xGXwjQR9LXCUulKA19OYg2Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 02:06:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 659 (0x293) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C716, serialNumber=8BAAFAC465F08D047D2D7094BA5280D7D3988366 Validity Not Before: Jul 19 02:06:54 2025 GMT Not After : Jul 26 02:06:54 2025 GMT Subject: CN=687afdbe-91e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:e8:9b:74:de:21:d8:92:8a:47:e5:f9:79:17: e6:07:3e:00:0a:1e:0b:84:77:24:a9:7e:5e:40:14: 03:ed:5a:1a:fe:ec:ec:5e:d8:d5:72:1a:38:47:77: f6:44:df:f7:8d:18:44:aa:e3:b8:30:89:5d:f0:69: e3:38:00:c0:68:49:d0:ea:0e:b9:a1:ef:ba:c8:39: bb:f7:dd:26:50:74:b6:78:86:0c:35:e4:48:13:e2: 2e:bd:61:74:af:52:4a:9c:72:bd:e5:1e:b4:c1:66: f4:dc:56:49:1b:aa:cf:f4:e8:71:cd:b6:ee:fc:6b: 33:31:1e:51:56:be:1d:81:07:cc:15:be:07:e8:51: 0a:0f:7a:b0:71:90:43:a6:ac:ec:cd:ce:24:36:a5: 2f:ba:09:26:fc:46:c0:af:5d:60:d0:18:1a:de:0d: 52:c2:ce:6c:22:4d:08:79:f1:6f:3e:68:77:11:a4: 26:0b:77:0b:5b:30:49:71:ad:f5:5d:8e:6b:bc:3c: e6:6d:d3:93:6f:e8:67:4a:36:74:29:61:97:0c:3b: 27:c7:26:cc:f2:06:0e:b3:51:37:78:31:ef:55:80: 42:92:b3:c4:ca:47:0c:cd:c3:70:a7:dc:63:18:00: 3f:aa:a1:53:7a:4e:86:6d:70:87:b5:8e:43:2e:8d: 12:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:59:F6:2D:EE:A9:42:85:11:1B:66:17:C3:3D:D1:B1:BA:4A:E4:B6 X509v3 Authority Key Identifier: keyid:8B:AA:FA:C4:65:F0:8D:04:7D:2D:70:94:BA:52:80:D7:D3:98:83:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/i6r6xGXwjQR9LXCUulKA19OYg2Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6r6xGXwjQR9LXCUulKA19OYg2Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/i6r6xGXwjQR9LXCUulKA19OYg2Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:d7:79:60:98:1e:2e:41:c8:e9:b0:66:85:71:8c:0e:e3:90: 95:f2:31:78:7b:03:46:a6:76:5d:2e:15:4b:22:8e:0c:e5:8a: 3f:ca:ea:7a:f2:d2:eb:69:3f:93:67:12:aa:a9:6b:e1:16:d3: 17:6c:71:10:63:56:c5:bf:e1:5a:c9:fc:b6:de:ca:64:d4:ee: 32:73:40:50:76:27:c6:a2:ab:2d:51:67:03:81:c1:7f:b3:ef: 90:06:95:2f:01:54:e1:35:b3:fd:d9:9b:c0:b7:f6:85:17:08: 47:90:f1:bd:ab:4f:85:c2:52:b0:ca:81:f5:00:75:5e:4d:de: 34:f8:bb:56:27:98:63:19:2b:0a:5f:85:26:ed:10:77:58:a3: 93:2b:0c:56:82:f4:08:4a:c3:66:8d:a8:16:6d:be:dc:1d:45: e3:e5:4e:e1:3f:be:ec:2d:50:4d:fe:25:a3:ce:67:9a:47:4b: 30:8a:81:bd:0c:c1:11:bf:b5:47:d0:8c:a5:03:62:bd:c6:2e: ac:91:0d:d0:e8:3e:41:d6:f2:ce:69:0f:58:dd:a2:20:a2:c7: 78:f7:a0:de:8f:a9:56:93:25:93:86:0d:7d:a7:e7:a7:4c:be: 33:c3:e0:7c:21:13:39:33:f8:e5:97:51:4d:05:e3:93:c7:4e: dc:74:91:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M3MTYxMTAvBgNVBAUTKDhCQUFGQUM0NjVGMDhEMDQ3RDJENzA5NEJBNTI4MEQ3 RDM5ODgzNjYwHhcNMjUwNzE5MDIwNjU0WhcNMjUwNzI2MDIwNjU0WjAYMRYwFAYD VQQDEw02ODdhZmRiZS05MWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3uibdN4h2JKKR+X5eRfmBz4ACh4LhHckqX5eQBQD7Voa/uzsXtjVcho4R3f2 RN/3jRhEquO4MIld8GnjOADAaEnQ6g65oe+6yDm7990mUHS2eIYMNeRIE+IuvWF0 r1JKnHK95R60wWb03FZJG6rP9Ohxzbbu/GszMR5RVr4dgQfMFb4H6FEKD3qwcZBD pqzszc4kNqUvugkm/EbAr11g0Bga3g1Sws5sIk0IefFvPmh3EaQmC3cLWzBJca31 XY5rvDzmbdOTb+hnSjZ0KWGXDDsnxybM8gYOs1E3eDHvVYBCkrPEykcMzcNwp9xj GAA/qqFTek6GbXCHtY5DLo0SawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKNZ9i3u qUKFERtmF8M90bG6SuS2MB8GA1UdIwQYMBaAFIuq+sRl8I0EfS1wlLpSgNfTmINm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzcxNi80REI5Q0FDNDE0 MDIxMUVEQjk2NjM0MTVDNEY5QUUwMi9pNnI2eEdYd2pRUjlMWENVdWxLQTE5T1ln MlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2k2cjZ4R1h3alFSOUxYQ1V1bEtBMTlPWWcyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzcxNi80REI5Q0FDNDE0MDIxMUVEQjk2NjM0MTVDNEY5QUUwMi9pNnI2eEdYd2pR UjlMWENVdWxLQTE5T1lnMlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCj13lgmB4uQcjpsGaFcYwO45CV8jF4ewNGpnZdLhVLIo4M5Yo/yup6 8tLraT+TZxKqqWvhFtMXbHEQY1bFv+Fayfy23spk1O4yc0BQdifGoqstUWcDgcF/ s++QBpUvAVThNbP92ZvAt/aFFwhHkPG9q0+FwlKwyoH1AHVeTd40+LtWJ5hjGSsK X4Um7RB3WKOTKwxWgvQISsNmjagWbb7cHUXj5U7hP77sLVBN/iWjzmeaR0swioG9 DMERv7VH0IylA2K9xi6skQ3Q6D5B1vLOaQ9Y3aIgosd496Dej6lWkyWThg19p+en TL4zw+B8IRM5M/jll1FNBeOTx07cdJGS -----END CERTIFICATE-----Generated at Sun Jul 20 06:21:58 2025 by rpki-client