$ rpki-client -vvf rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.mft File: --G6XF5MRXTo6VEiWGdWCd9Ba7c.mft (raw, json) Hash identifier: 7JqmwFQwHnqElQv+Ial23/DO6Zp7xw0ifQVoSSh1OYw= Subject key identifier: 2B:4E:29:B2:23:D2:F9:47:92:4B:A7:4F:60:CD:6A:40:10:A5:75:FB Authority key identifier: FB:E1:BA:5C:5E:4C:45:74:E8:E9:51:22:58:67:56:09:DF:41:6B:B7 Certificate issuer: /CN=A9172506/serialNumber=FBE1BA5C5E4C4574E8E9512258675609DF416BB7 Certificate serial: BB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/--G6XF5MRXTo6VEiWGdWCd9Ba7c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.mft Manifest number: BB Signing time: Fri 05 Sep 2025 06:23:10 +0000 Manifest this update: Fri 05 Sep 2025 06:23:09 +0000 Manifest next update: Fri 12 Sep 2025 06:23:09 +0000 Files and hashes: 1: --G6XF5MRXTo6VEiWGdWCd9Ba7c.crl (hash: Uc76LnLZbgSe+9iYn6nleLOHhasvWIiEY3kEK/DbQGE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.crl rsync://rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/--G6XF5MRXTo6VEiWGdWCd9Ba7c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 06:23:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 187 (0xbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172506, serialNumber=FBE1BA5C5E4C4574E8E9512258675609DF416BB7 Validity Not Before: Sep 5 06:23:09 2025 GMT Not After : Sep 12 06:23:09 2025 GMT Subject: CN=68ba81ce-d2c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f1:5e:b9:95:ce:ac:75:98:83:45:e4:50:a2: e3:00:c6:17:47:13:b0:16:0a:1c:ba:48:9f:81:99: 29:3e:96:f9:08:38:aa:86:5f:4a:6c:7e:67:f0:db: 1a:cf:73:da:f8:d8:57:77:19:36:07:b7:b4:2e:27: 02:70:6a:15:21:3b:75:36:2d:ec:af:92:8d:46:33: 28:d6:41:ba:5f:db:d3:9d:84:d7:34:97:3d:08:24: 5e:26:f1:07:e5:09:45:9e:09:4f:84:8b:af:1a:08: 11:aa:ef:9d:82:9b:dd:98:eb:f8:3a:5d:ab:83:9d: 03:00:3d:0d:7c:4d:6c:d1:ea:c2:e3:b3:ed:af:f4: ab:9e:5f:c9:de:9e:87:81:92:51:d2:28:cd:70:71: 46:2f:74:90:6d:f9:44:53:a2:2f:9f:39:19:63:30: 8c:54:39:0b:00:7e:9a:5d:c0:c0:4a:07:3b:26:9a: 3e:fd:6c:35:13:25:61:c6:d9:d9:1e:f4:1e:51:57: 7e:e0:89:f6:70:df:1b:d0:3b:a0:7f:ea:9c:c5:b5: e0:3b:12:9a:26:d9:93:a5:aa:5a:2a:02:2a:3d:74: 3b:3b:6f:61:11:c9:b9:93:db:fc:07:ca:35:22:1c: 26:5c:a3:56:e4:61:80:53:18:e0:a3:e9:64:e6:08: 2b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:4E:29:B2:23:D2:F9:47:92:4B:A7:4F:60:CD:6A:40:10:A5:75:FB X509v3 Authority Key Identifier: keyid:FB:E1:BA:5C:5E:4C:45:74:E8:E9:51:22:58:67:56:09:DF:41:6B:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/--G6XF5MRXTo6VEiWGdWCd9Ba7c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:3a:89:c8:a1:f2:25:7f:2d:66:38:5d:d2:7b:3a:dd:dc:d0: ab:a0:c4:51:0f:50:68:b4:10:35:5a:02:74:28:3d:c1:67:b6: bc:d9:b0:ed:78:a9:62:5d:eb:fc:7e:a4:1b:01:c1:7b:17:ed: d5:09:9a:43:a3:d8:e4:d1:a6:fa:e2:cf:71:f0:8b:8b:6a:6d: 12:b4:9e:29:e3:77:fd:c6:3a:4d:bc:5c:0a:07:32:fa:2f:c2: 74:35:b7:c7:55:8d:98:34:69:e6:ad:cb:da:5a:0a:d0:74:b8: 30:09:42:ba:fa:d6:d6:8f:9f:27:37:3e:76:ff:0f:42:ae:f9: 69:54:fe:16:ce:50:fa:bc:37:6d:30:b9:43:ac:84:4d:13:eb: 02:42:5c:e4:a4:15:4a:48:a2:6a:4f:86:18:c0:05:da:aa:3f: 79:ed:e7:5d:08:04:d9:32:6b:29:0e:db:d1:cc:80:78:b3:b1: 77:c4:ee:98:d3:5a:a4:71:45:75:0f:31:9b:4e:36:1f:05:18: 1c:b2:b6:f6:c2:5e:40:2c:41:81:9c:67:14:84:cd:6e:48:ee: ad:cf:56:38:b3:6d:69:2c:23:70:7f:ba:b6:78:1b:9b:30:c9: ac:cc:9f:a0:71:6f:e7:b8:9c:d4:d0:80:2d:ac:98:74:1d:8a: 5f:17:56:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI1MDYxMTAvBgNVBAUTKEZCRTFCQTVDNUU0QzQ1NzRFOEU5NTEyMjU4Njc1NjA5 REY0MTZCQjcwHhcNMjUwOTA1MDYyMzA5WhcNMjUwOTEyMDYyMzA5WjAYMRYwFAYD VQQDEw02OGJhODFjZS1kMmM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwvFeuZXOrHWYg0XkUKLjAMYXRxOwFgocukifgZkpPpb5CDiqhl9KbH5n8Nsa z3Pa+NhXdxk2B7e0LicCcGoVITt1Ni3sr5KNRjMo1kG6X9vTnYTXNJc9CCReJvEH 5QlFnglPhIuvGggRqu+dgpvdmOv4Ol2rg50DAD0NfE1s0erC47Ptr/Srnl/J3p6H gZJR0ijNcHFGL3SQbflEU6IvnzkZYzCMVDkLAH6aXcDASgc7Jpo+/Ww1EyVhxtnZ HvQeUVd+4In2cN8b0Dugf+qcxbXgOxKaJtmTpapaKgIqPXQ7O29hEcm5k9v8B8o1 IhwmXKNW5GGAUxjgo+lk5ggrSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCtOKbIj 0vlHkkunT2DNakAQpXX7MB8GA1UdIwQYMBaAFPvhulxeTEV06OlRIlhnVgnfQWu3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjUwNi9BNUU0QzQ1RTZF REUxMUVGQUFDMkNCNURDNEY5QUUwMi8tLUc2WEY1TVJYVG82VkVpV0dkV0NkOUJh N2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy0tRzZYRjVNUlhUbzZWRWlXR2RXQ2Q5QmE3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MjUwNi9BNUU0QzQ1RTZFREUxMUVGQUFDMkNCNURDNEY5QUUwMi8tLUc2WEY1TVJY VG82VkVpV0dkV0NkOUJhN2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1OonIofIlfy1mOF3Sezrd3NCroMRRD1BotBA1WgJ0KD3BZ7a82bDt eKliXev8fqQbAcF7F+3VCZpDo9jk0ab64s9x8IuLam0StJ4p43f9xjpNvFwKBzL6 L8J0NbfHVY2YNGnmrcvaWgrQdLgwCUK6+tbWj58nNz52/w9CrvlpVP4WzlD6vDdt MLlDrIRNE+sCQlzkpBVKSKJqT4YYwAXaqj957eddCATZMmspDtvRzIB4s7F3xO6Y 01qkcUV1DzGbTjYfBRgcsrb2wl5ALEGBnGcUhM1uSO6tz1Y4s21pLCNwf7q2eBub MMmszJ+gcW/nuJzU0IAtrJh0HYpfF1bX -----END CERTIFICATE-----Generated at Sat Sep 6 21:01:22 2025 by rpki-client