$ rpki-client -vvf rpki.apnic.net/member_repository/A911FCFC/0EF3B3887D3E11EB9EDF687CC4F9AE02/PSZeQBIxQ3qRDsIf5O1O47EmnI0.mft File: PSZeQBIxQ3qRDsIf5O1O47EmnI0.mft (raw, json) Hash identifier: yOfDj28JpMt1DrMICTUawyIU3LSLU3upj0Wfql3LLGQ= Subject key identifier: DF:9E:EC:B9:C6:E7:C9:7D:67:C2:BE:C8:1D:AC:B0:27:23:08:2D:61 Authority key identifier: 3D:26:5E:40:12:31:43:7A:91:0E:C2:1F:E4:ED:4E:E3:B1:26:9C:8D Certificate issuer: /CN=A911FCFC/serialNumber=3D265E401231437A910EC21FE4ED4EE3B1269C8D Certificate serial: 0696 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSZeQBIxQ3qRDsIf5O1O47EmnI0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FCFC/0EF3B3887D3E11EB9EDF687CC4F9AE02/PSZeQBIxQ3qRDsIf5O1O47EmnI0.mft Manifest number: 068B Signing time: Fri 18 Jul 2025 22:34:39 +0000 Manifest this update: Fri 18 Jul 2025 22:34:39 +0000 Manifest next update: Fri 25 Jul 2025 22:34:39 +0000 Files and hashes: 1: PSZeQBIxQ3qRDsIf5O1O47EmnI0.crl (hash: gRqWCp0iLrKAhRqOgkFi6BZXNCGrmr2zcp8P5LCO0+0=) 2: 584CC9ACEA0911EF91395D2BC4F9AE02.roa (hash: 0CvjA6RG6CwLDhsi+lvIuB2qC+UIcfKPm+dtie8AJzA=) 3: 3A542BE0BC7511EBBB084D27C4F9AE02.roa (hash: h6cfh4R2DSVctuRgtsUmGsASm4gMo0dIEjDPej0xQNc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FCFC/0EF3B3887D3E11EB9EDF687CC4F9AE02/PSZeQBIxQ3qRDsIf5O1O47EmnI0.crl rsync://rpki.apnic.net/member_repository/A911FCFC/0EF3B3887D3E11EB9EDF687CC4F9AE02/PSZeQBIxQ3qRDsIf5O1O47EmnI0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSZeQBIxQ3qRDsIf5O1O47EmnI0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 22:34:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1686 (0x696) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FCFC, serialNumber=3D265E401231437A910EC21FE4ED4EE3B1269C8D Validity Not Before: Jul 18 22:34:39 2025 GMT Not After : Jul 25 22:34:39 2025 GMT Subject: CN=687acbff-0f2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a6:2c:d4:4c:12:df:a9:99:b5:bf:3e:9f:b0: 01:43:72:c6:6a:54:35:dd:ef:8d:31:a2:22:9b:45: 23:1c:4f:df:1b:5f:fc:4f:d6:6a:d9:12:0e:3a:a6: fd:1a:56:0f:b6:ea:fb:3d:62:55:ed:14:d0:3d:9b: ed:94:ca:29:da:ef:68:b8:25:09:74:7a:00:82:6e: fb:4c:3f:f7:7c:8c:d2:8a:1f:54:1d:47:7b:3e:f9: 03:64:16:ac:40:d0:20:e5:3a:3d:46:46:7f:40:4c: 17:53:30:fb:fa:b8:b2:b0:38:c4:f7:85:6b:82:8e: d5:29:47:51:f3:43:fb:80:f3:7b:c1:88:a0:28:a8: 6f:bc:4d:21:e7:b3:1e:d7:38:18:a5:2e:b9:4c:a3: 7a:f9:c8:75:d5:7c:30:1d:34:82:f4:0c:d6:8b:64: 04:dc:0d:d7:9a:9d:2e:7f:40:2e:32:1b:ff:85:cc: 07:f0:e5:71:03:6b:5e:36:05:b1:df:67:8f:73:4a: d7:c9:b7:9d:0c:25:b2:10:70:f7:f4:08:db:3e:7b: 02:fc:3b:3b:e7:5c:f7:90:c3:6e:24:b4:3a:25:80: 90:73:f9:d8:93:7e:57:72:97:48:89:ac:19:ad:36: 4f:06:d3:92:b2:1e:46:73:66:45:9f:ee:60:ed:97: 04:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:9E:EC:B9:C6:E7:C9:7D:67:C2:BE:C8:1D:AC:B0:27:23:08:2D:61 X509v3 Authority Key Identifier: keyid:3D:26:5E:40:12:31:43:7A:91:0E:C2:1F:E4:ED:4E:E3:B1:26:9C:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FCFC/0EF3B3887D3E11EB9EDF687CC4F9AE02/PSZeQBIxQ3qRDsIf5O1O47EmnI0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSZeQBIxQ3qRDsIf5O1O47EmnI0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FCFC/0EF3B3887D3E11EB9EDF687CC4F9AE02/PSZeQBIxQ3qRDsIf5O1O47EmnI0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:a5:66:81:ec:40:88:23:12:97:ec:a6:90:7a:03:95:65:5d: 56:58:08:14:fb:56:0f:44:38:c4:92:b4:1d:bc:b2:e4:21:4c: af:a4:b1:bc:1e:fc:bf:b6:1b:67:df:55:da:44:15:44:aa:38: 01:6d:ac:33:5c:c4:d7:c6:dd:27:4c:fc:7b:5a:8b:ba:0e:ec: 9f:3f:37:1a:d9:55:62:87:e3:9c:1e:9b:37:d7:ad:63:68:9b: 0c:f7:7d:f0:57:6b:ef:f1:3d:d9:e0:8e:c2:bb:74:58:ed:6b: 3d:e6:c5:7f:d7:06:c9:a4:d0:e9:fa:1f:a7:1c:0b:ca:a7:78: 8d:f0:be:06:ca:ad:67:24:e5:68:7e:f7:1d:f0:22:55:83:cc: b9:bc:8c:7c:37:e5:22:0d:bd:a5:fc:a6:23:52:0a:bc:6b:70: 15:a8:e5:84:f5:ac:8d:f0:d4:56:cd:ca:17:34:00:d2:09:29: 38:47:77:0b:e4:85:37:99:6a:59:71:e8:16:21:8d:fb:b0:88: b9:f4:35:1e:8e:fb:ee:fe:b8:e7:f0:63:b1:45:34:74:9b:63: 1d:b3:32:d3:55:4b:00:b5:83:aa:fa:b1:cf:37:94:46:3e:c9: 03:85:c2:7b:1b:56:68:df:96:5e:ac:a9:9e:a1:4e:6f:af:28: 6f:26:74:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZDRkMxMTAvBgNVBAUTKDNEMjY1RTQwMTIzMTQzN0E5MTBFQzIxRkU0RUQ0RUUz QjEyNjlDOEQwHhcNMjUwNzE4MjIzNDM5WhcNMjUwNzI1MjIzNDM5WjAYMRYwFAYD VQQDEw02ODdhY2JmZi0wZjJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqqYs1EwS36mZtb8+n7ABQ3LGalQ13e+NMaIim0UjHE/fG1/8T9Zq2RIOOqb9 GlYPtur7PWJV7RTQPZvtlMop2u9ouCUJdHoAgm77TD/3fIzSih9UHUd7PvkDZBas QNAg5To9RkZ/QEwXUzD7+riysDjE94Vrgo7VKUdR80P7gPN7wYigKKhvvE0h57Me 1zgYpS65TKN6+ch11XwwHTSC9AzWi2QE3A3Xmp0uf0AuMhv/hcwH8OVxA2teNgWx 32ePc0rXybedDCWyEHD39AjbPnsC/Ds751z3kMNuJLQ6JYCQc/nYk35XcpdIiawZ rTZPBtOSsh5Gc2ZFn+5g7ZcEJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN+e7LnG 58l9Z8K+yB2ssCcjCC1hMB8GA1UdIwQYMBaAFD0mXkASMUN6kQ7CH+TtTuOxJpyN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkNGQy8wRUYzQjM4ODdE M0UxMUVCOUVERjY4N0NDNEY5QUUwMi9QU1plUUJJeFEzcVJEc0lmNU8xTzQ3RW1u STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BTWmVRQkl4UTNxUkRzSWY1TzFPNDdFbW5JMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkNGQy8wRUYzQjM4ODdEM0UxMUVCOUVERjY4N0NDNEY5QUUwMi9QU1plUUJJeFEz cVJEc0lmNU8xTzQ3RW1uSTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAypWaB7ECIIxKX7KaQegOVZV1WWAgU+1YPRDjEkrQdvLLkIUyvpLG8 Hvy/thtn31XaRBVEqjgBbawzXMTXxt0nTPx7Wou6DuyfPzca2VVih+OcHps3161j aJsM933wV2vv8T3Z4I7Cu3RY7Ws95sV/1wbJpNDp+h+nHAvKp3iN8L4Gyq1nJOVo fvcd8CJVg8y5vIx8N+UiDb2l/KYjUgq8a3AVqOWE9ayN8NRWzcoXNADSCSk4R3cL 5IU3mWpZcegWIY37sIi59DUejvvu/rjn8GOxRTR0m2MdszLTVUsAtYOq+rHPN5RG PskDhcJ7G1Zo35ZerKmeoU5vryhvJnQc -----END CERTIFICATE-----Generated at Sun Jul 20 16:23:40 2025 by rpki-client