$ rpki-client -vvf rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.mft File: --G6XF5MRXTo6VEiWGdWCd9Ba7c.mft (raw, json) Hash identifier: adYnd4leKd4o/t4fkiq6bvsnFK1+Z/H9w6dPrnJxMwQ= Subject key identifier: 59:BB:51:66:88:79:9F:96:F1:74:DF:03:1E:CC:CE:F5:B7:AD:A9:2D Authority key identifier: FB:E1:BA:5C:5E:4C:45:74:E8:E9:51:22:58:67:56:09:DF:41:6B:B7 Certificate issuer: /CN=A9172506/serialNumber=FBE1BA5C5E4C4574E8E9512258675609DF416BB7 Certificate serial: 8B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/--G6XF5MRXTo6VEiWGdWCd9Ba7c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.mft Manifest number: 8B Signing time: Tue 03 Jun 2025 06:19:31 +0000 Manifest this update: Tue 03 Jun 2025 06:19:30 +0000 Manifest next update: Tue 10 Jun 2025 06:19:30 +0000 Files and hashes: 1: --G6XF5MRXTo6VEiWGdWCd9Ba7c.crl (hash: J/fX3ASjsZTIZKcZArbJ8u/cjM6UTESSQrdc28DCWvg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.crl rsync://rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/--G6XF5MRXTo6VEiWGdWCd9Ba7c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 06:19:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 139 (0x8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172506, serialNumber=FBE1BA5C5E4C4574E8E9512258675609DF416BB7 Validity Not Before: Jun 3 06:19:30 2025 GMT Not After : Jun 10 06:19:30 2025 GMT Subject: CN=683e93f2-3831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:14:cc:b8:58:c7:6f:fd:8d:8c:47:e3:dd:3e: ca:02:87:02:80:0b:39:69:e5:12:8c:44:57:3b:7d: 20:fa:2d:47:1a:70:c8:59:1c:ca:55:13:ef:cc:2d: 89:99:49:1f:f7:b6:14:d9:e5:5f:78:89:c6:27:38: 2c:5d:de:e3:8b:d2:3a:b7:b0:10:a3:13:6e:8f:e0: 21:db:f6:b0:0b:b1:6e:48:19:ba:8d:f6:33:e5:87: a5:21:ff:ee:6e:f9:b9:f4:7a:81:87:0d:d7:84:4b: a8:b9:4e:d0:e1:e7:ad:e2:e6:c1:5b:26:11:9a:6c: cb:ea:10:7d:64:da:75:e2:f4:aa:43:a0:30:a3:16: e7:84:3b:c3:1e:cb:cf:4e:9c:27:6d:eb:56:d6:95: 62:e5:ba:3d:79:6b:e5:8f:b1:c5:c8:1c:3e:e2:48: 51:29:4b:c7:99:f2:89:13:76:22:7d:da:32:55:16: 54:b7:77:72:d2:07:83:45:cc:a0:3a:e9:11:36:56: 28:f0:8d:a9:05:da:82:46:8c:11:3a:6d:e9:a3:af: 17:08:c7:1f:10:18:06:ec:41:0c:4c:f2:95:a2:6e: 13:c1:9e:83:19:44:74:32:62:2f:06:d5:86:27:6f: da:3d:e5:fd:6a:20:d2:02:18:e8:b4:e2:83:91:3d: 66:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:BB:51:66:88:79:9F:96:F1:74:DF:03:1E:CC:CE:F5:B7:AD:A9:2D X509v3 Authority Key Identifier: keyid:FB:E1:BA:5C:5E:4C:45:74:E8:E9:51:22:58:67:56:09:DF:41:6B:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/--G6XF5MRXTo6VEiWGdWCd9Ba7c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:6c:f9:94:94:dc:e0:7f:7b:7f:98:de:1a:8a:72:bd:3b:aa: 79:4e:87:e0:d8:c4:1b:08:d5:40:f6:ca:77:f5:fd:37:f7:99: a3:83:63:d6:23:a4:d5:67:2c:d5:0e:e2:61:37:21:b0:b5:c7: 62:39:36:e6:fb:db:e2:21:3b:fd:1b:62:38:73:98:67:c6:60: 44:1d:48:4d:a4:ae:4f:14:17:aa:01:24:da:c7:ef:1f:44:8e: 21:1a:67:c4:d7:79:3d:39:2e:0e:12:40:cf:f2:9e:a5:32:2d: 43:f3:53:f0:cc:4a:fb:82:9d:a6:05:f4:60:5c:43:55:73:80: 66:e0:ec:f6:ac:0d:8f:87:96:cf:a9:89:82:03:6a:79:30:da: 31:ca:94:a7:9e:10:fd:78:ea:ab:7c:6d:81:93:c3:01:af:5d: ad:b0:47:a9:b9:04:0b:b7:77:bc:a7:83:8e:9c:6a:95:bc:07: ea:29:cc:cd:04:54:50:39:11:95:69:03:80:ec:80:0f:c6:67: 6a:ae:ba:6e:4d:31:78:fa:f0:fd:74:83:bf:da:bc:d2:b1:78: ae:15:b5:ac:95:fb:a2:71:51:02:fb:91:72:c5:ed:f4:23:06: 08:2d:fc:6b:aa:fe:26:0f:89:e2:e7:3a:d1:b0:1e:02:52:e5: d2:f6:bb:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI1MDYxMTAvBgNVBAUTKEZCRTFCQTVDNUU0QzQ1NzRFOEU5NTEyMjU4Njc1NjA5 REY0MTZCQjcwHhcNMjUwNjAzMDYxOTMwWhcNMjUwNjEwMDYxOTMwWjAYMRYwFAYD VQQDEw02ODNlOTNmMi0zODMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxBTMuFjHb/2NjEfj3T7KAocCgAs5aeUSjERXO30g+i1HGnDIWRzKVRPvzC2J mUkf97YU2eVfeInGJzgsXd7ji9I6t7AQoxNuj+Ah2/awC7FuSBm6jfYz5YelIf/u bvm59HqBhw3XhEuouU7Q4eet4ubBWyYRmmzL6hB9ZNp14vSqQ6AwoxbnhDvDHsvP TpwnbetW1pVi5bo9eWvlj7HFyBw+4khRKUvHmfKJE3YifdoyVRZUt3dy0geDRcyg OukRNlYo8I2pBdqCRowROm3po68XCMcfEBgG7EEMTPKVom4TwZ6DGUR0MmIvBtWG J2/aPeX9aiDSAhjotOKDkT1mqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFm7UWaI eZ+W8XTfAx7MzvW3raktMB8GA1UdIwQYMBaAFPvhulxeTEV06OlRIlhnVgnfQWu3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjUwNi9BNUU0QzQ1RTZF REUxMUVGQUFDMkNCNURDNEY5QUUwMi8tLUc2WEY1TVJYVG82VkVpV0dkV0NkOUJh N2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy0tRzZYRjVNUlhUbzZWRWlXR2RXQ2Q5QmE3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MjUwNi9BNUU0QzQ1RTZFREUxMUVGQUFDMkNCNURDNEY5QUUwMi8tLUc2WEY1TVJY VG82VkVpV0dkV0NkOUJhN2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrbPmUlNzgf3t/mN4ainK9O6p5Tofg2MQbCNVA9sp39f0395mjg2PW I6TVZyzVDuJhNyGwtcdiOTbm+9viITv9G2I4c5hnxmBEHUhNpK5PFBeqASTax+8f RI4hGmfE13k9OS4OEkDP8p6lMi1D81PwzEr7gp2mBfRgXENVc4Bm4Oz2rA2Ph5bP qYmCA2p5MNoxypSnnhD9eOqrfG2Bk8MBr12tsEepuQQLt3e8p4OOnGqVvAfqKczN BFRQORGVaQOA7IAPxmdqrrpuTTF4+vD9dIO/2rzSsXiuFbWslfuicVEC+5Fyxe30 IwYILfxrqv4mD4ni5zrRsB4CUuXS9ruE -----END CERTIFICATE-----Generated at Tue Jun 3 23:34:48 2025 by rpki-client