$ rpki-client -vvf rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.mft File: he6Mb5WNbzwfFdLBq8T-m75s7tc.mft (raw, json) Hash identifier: TJg3/T9mfZiS7HHNcnyoSawuOZXETmbqACmzQaDzyOE= Subject key identifier: 13:AB:C2:5B:C4:86:2C:02:30:AC:DC:04:28:DB:15:DC:A9:AB:A6:B7 Authority key identifier: 85:EE:8C:6F:95:8D:6F:3C:1F:15:D2:C1:AB:C4:FE:9B:BE:6C:EE:D7 Certificate issuer: /CN=A9175165/serialNumber=85EE8C6F958D6F3C1F15D2C1ABC4FE9BBE6CEED7 Certificate serial: 1164 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6Mb5WNbzwfFdLBq8T-m75s7tc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.mft Manifest number: 115C Signing time: Thu 18 Sep 2025 17:23:36 +0000 Manifest this update: Thu 18 Sep 2025 17:23:35 +0000 Manifest next update: Thu 25 Sep 2025 17:23:35 +0000 Files and hashes: 1: he6Mb5WNbzwfFdLBq8T-m75s7tc.crl (hash: NUqtmKSvdz/EiFH8TwFJ4KdbWojPtiMcSs6pUXROLUE=) 2: 8B8DEE220F0911E9A8CC815EC4F9AE02.roa (hash: gteMkfVnVg4ffsJGo4gzYRn2LBvsScWGIppneQ2BQXI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.crl rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6Mb5WNbzwfFdLBq8T-m75s7tc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 17:23:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4452 (0x1164) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175165, serialNumber=85EE8C6F958D6F3C1F15D2C1ABC4FE9BBE6CEED7 Validity Not Before: Sep 18 17:23:35 2025 GMT Not After : Sep 25 17:23:35 2025 GMT Subject: CN=68cc4018-0fe9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:d1:d4:d9:b6:95:16:28:8e:10:35:5c:b0:fb: 26:8b:b2:81:2b:48:75:54:a2:a0:cd:bb:b4:ed:b9: 80:fa:36:47:88:44:ec:b8:88:b2:6d:9a:1d:6d:cd: df:68:6c:0e:bd:5a:3f:82:f4:80:ed:84:73:c1:65: 43:c3:69:a1:d2:03:03:c9:5a:67:1e:99:01:0b:0e: f9:3b:e2:85:d1:c2:7c:33:70:56:61:66:45:93:2c: e0:c2:5e:c3:38:5a:c6:3c:10:97:05:5a:5b:d1:20: 5f:42:63:15:99:05:dc:3f:00:e8:41:46:6f:76:67: 12:0f:58:8a:a8:f6:95:9f:4e:50:4a:22:e8:4b:36: e2:e4:ce:47:79:8b:49:f0:34:c8:87:51:84:d6:e7: a3:12:6f:97:87:be:52:25:44:06:78:11:fe:16:9f: a8:3a:ff:a9:e7:9b:a0:b9:2b:b8:81:7e:af:d6:85: f7:0a:45:f2:b3:9b:28:2c:67:ec:62:a9:2e:1f:28: c0:90:24:53:ec:b5:dd:53:c8:c3:d7:f5:28:55:e5: 46:2d:2a:e2:a4:34:c7:9a:76:34:7e:2d:64:d7:23: 3c:a8:4d:15:35:8e:d6:47:af:a6:dc:73:b3:5d:2b: e2:1f:93:cd:a1:70:5a:c2:1f:44:21:8b:05:d6:a0: 42:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:AB:C2:5B:C4:86:2C:02:30:AC:DC:04:28:DB:15:DC:A9:AB:A6:B7 X509v3 Authority Key Identifier: keyid:85:EE:8C:6F:95:8D:6F:3C:1F:15:D2:C1:AB:C4:FE:9B:BE:6C:EE:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6Mb5WNbzwfFdLBq8T-m75s7tc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:35:7d:f2:8f:63:42:0d:41:5c:97:39:6c:68:00:b5:57:89: 6d:fb:b1:44:48:d4:36:35:35:3b:ed:d5:78:c7:7f:ae:73:e7: ad:05:a3:03:31:e5:d9:1a:47:dd:10:65:d1:d2:bb:55:2a:df: c0:28:6b:6a:d0:50:ad:af:ef:a7:08:9c:59:47:b8:12:f8:24: 16:4a:49:9a:a8:90:6b:8a:a9:d0:0b:54:e1:35:aa:df:60:cd: 42:f7:58:9c:c4:c8:ce:6a:c1:a2:84:1c:11:07:2c:04:56:5d: 1e:12:ed:0e:32:c8:92:40:89:f2:90:f2:ab:64:75:e4:d2:0c: 53:23:ca:89:47:76:0d:03:f4:c8:b4:71:f5:6e:6d:cd:23:03: 0a:ed:69:c7:44:c8:08:bc:ed:01:b5:2b:70:9b:1d:4f:be:64: 1a:16:cd:e7:94:5d:61:02:31:06:b5:f8:31:4a:54:b4:22:85: ad:95:5b:68:0b:38:09:19:73:69:9d:1f:d7:44:db:d0:9a:e2: 75:30:a7:ed:e4:f4:47:fa:47:74:8d:5c:a4:84:5a:2d:32:af: 78:d5:ee:0f:a3:d2:9a:66:50:4b:b4:24:b7:66:d4:61:53:17: d9:0c:74:59:66:30:ec:ad:c4:10:7e:76:43:43:46:6a:a8:13: 7e:a5:8a:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUxNjUxMTAvBgNVBAUTKDg1RUU4QzZGOTU4RDZGM0MxRjE1RDJDMUFCQzRGRTlC QkU2Q0VFRDcwHhcNMjUwOTE4MTcyMzM1WhcNMjUwOTI1MTcyMzM1WjAYMRYwFAYD VQQDEw02OGNjNDAxOC0wZmU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6tHU2baVFiiOEDVcsPsmi7KBK0h1VKKgzbu07bmA+jZHiETsuIiybZodbc3f aGwOvVo/gvSA7YRzwWVDw2mh0gMDyVpnHpkBCw75O+KF0cJ8M3BWYWZFkyzgwl7D OFrGPBCXBVpb0SBfQmMVmQXcPwDoQUZvdmcSD1iKqPaVn05QSiLoSzbi5M5HeYtJ 8DTIh1GE1uejEm+Xh75SJUQGeBH+Fp+oOv+p55uguSu4gX6v1oX3CkXys5soLGfs YqkuHyjAkCRT7LXdU8jD1/UoVeVGLSripDTHmnY0fi1k1yM8qE0VNY7WR6+m3HOz XSviH5PNoXBawh9EIYsF1qBCHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBOrwlvE hiwCMKzcBCjbFdypq6a3MB8GA1UdIwQYMBaAFIXujG+VjW88HxXSwavE/pu+bO7X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTE2NS85MEYwRkZBRTBG MDgxMUU5ODY4MEU4NUNDNEY5QUUwMi9oZTZNYjVXTmJ6d2ZGZExCcThULW03NXM3 dGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hlNk1iNVdOYnp3ZkZkTEJxOFQtbTc1czd0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTE2NS85MEYwRkZBRTBGMDgxMUU5ODY4MEU4NUNDNEY5QUUwMi9oZTZNYjVXTmJ6 d2ZGZExCcThULW03NXM3dGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoNX3yj2NCDUFclzlsaAC1V4lt+7FESNQ2NTU77dV4x3+uc+etBaMD MeXZGkfdEGXR0rtVKt/AKGtq0FCtr++nCJxZR7gS+CQWSkmaqJBriqnQC1ThNarf YM1C91icxMjOasGihBwRBywEVl0eEu0OMsiSQInykPKrZHXk0gxTI8qJR3YNA/TI tHH1bm3NIwMK7WnHRMgIvO0BtStwmx1PvmQaFs3nlF1hAjEGtfgxSlS0IoWtlVto CzgJGXNpnR/XRNvQmuJ1MKft5PRH+kd0jVykhFotMq941e4Po9KaZlBLtCS3ZtRh UxfZDHRZZjDsrcQQfnZDQ0ZqqBN+pYo7 -----END CERTIFICATE-----Generated at Thu Sep 18 21:43:18 2025 by rpki-client