$ rpki-client -vvf rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft File: Psg0IE1rqvmRQMA712IRRcB7umI.mft (raw, json) Hash identifier: 58aiSSXxdDflikHu+Z6zvstZVvGDXRS//xNIJeC4Dus= Subject key identifier: C9:20:41:DF:13:B8:7C:0C:71:CE:77:BF:D2:68:7D:0D:9D:C3:10:37 Authority key identifier: 3E:C8:34:20:4D:6B:AA:F9:91:40:C0:3B:D7:62:11:45:C0:7B:BA:62 Certificate issuer: /CN=A9196D24/serialNumber=3EC834204D6BAAF99140C03BD7621145C07BBA62 Certificate serial: 34B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft Manifest number: 34A8 Signing time: Thu 24 Jul 2025 15:10:23 +0000 Manifest this update: Thu 24 Jul 2025 15:10:23 +0000 Manifest next update: Thu 31 Jul 2025 15:10:23 +0000 Files and hashes: 1: Psg0IE1rqvmRQMA712IRRcB7umI.crl (hash: oDdWzYRisYbrBcndIQ6Gq/LdXZBrMWl/LQy3cEzijXI=) 2: E7DDE5B8682811EB8D635520C4F9AE02.roa (hash: u3o7AHzkAWjpm//p/0D10Rom5wmEBlx/qRmPwbhLS5Y=) 3: E73006AA682811EB8D635520C4F9AE02.roa (hash: /iYEOgQAhfI0KK0K51Ux9lFp8lKBTgd9K9F6YiH5y0o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.crl rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 31 Jul 2025 15:10:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13493 (0x34b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196D24, serialNumber=3EC834204D6BAAF99140C03BD7621145C07BBA62 Validity Not Before: Jul 24 15:10:23 2025 GMT Not After : Jul 31 15:10:23 2025 GMT Subject: CN=68824cdf-6972 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:eb:63:81:dc:1b:cf:4f:f5:c8:54:ff:30:62: 5f:1e:2d:23:bb:1d:2b:48:13:47:ce:cb:c5:23:14: 24:d8:83:16:d3:60:de:01:43:1c:dd:45:ba:30:8f: cf:69:d1:d9:e7:9e:ed:1b:6b:54:30:a4:8b:32:39: 8d:c8:34:65:6d:69:c4:ec:77:9e:3b:09:ba:3f:47: ff:39:28:5c:18:56:5b:76:61:c9:68:16:5a:49:1a: 3f:19:66:5b:a2:3b:1a:b0:0d:25:c3:19:8f:61:be: 01:59:03:c3:23:7b:a9:80:fc:0e:c7:41:98:83:73: 1b:f6:a5:62:bc:c3:92:72:5f:87:b3:64:d4:9b:49: 24:95:2b:c8:d8:76:56:42:8f:29:dc:32:df:5e:41: cb:1e:66:ef:2a:c0:86:7c:c3:67:91:51:60:3d:92: 6f:8d:fb:43:6d:0b:68:d3:75:b5:5b:6d:07:64:10: a9:bc:3a:d3:3a:16:33:ff:ee:53:0e:b9:26:e7:5f: 53:9b:3c:b2:18:ec:83:73:29:6f:c9:d2:08:e1:b6: d6:2f:9d:d4:7c:4e:10:6b:9e:3a:94:d0:f3:7f:80: 68:ba:93:73:c1:a7:38:5e:38:c4:35:56:98:23:b7: 9f:49:78:1e:93:89:ba:cb:dd:6b:13:6a:8c:75:92: 20:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:20:41:DF:13:B8:7C:0C:71:CE:77:BF:D2:68:7D:0D:9D:C3:10:37 X509v3 Authority Key Identifier: keyid:3E:C8:34:20:4D:6B:AA:F9:91:40:C0:3B:D7:62:11:45:C0:7B:BA:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:67:d5:58:c1:d9:a2:b6:12:58:ef:d9:87:84:82:65:ce:19: 0e:ce:99:79:e5:db:3f:d1:b6:58:8f:35:91:21:5f:1b:aa:71: 62:2b:41:d3:02:30:1f:9f:25:8c:ed:b9:a2:54:13:f9:4d:7c: 82:98:2d:ef:7e:50:cc:06:0c:10:ed:f9:dc:58:5e:ed:96:c2: 71:a7:86:c8:ce:8a:80:96:1a:39:78:84:9a:c8:57:6b:7e:c6: a1:49:ae:2e:5d:66:98:73:2b:0f:7d:15:32:7f:f8:af:ea:09: 9f:63:28:7e:ba:73:dd:73:11:2d:f9:e1:b2:88:ed:ff:9c:b4: f1:a4:dc:ef:39:55:29:a3:69:b5:62:a5:96:cc:dc:7d:a5:0c: c6:da:28:8b:8e:bd:86:ab:10:73:a5:e9:c7:a1:0b:ad:58:ba: 32:bd:0c:95:9d:97:82:6d:ec:1a:4c:44:55:f2:14:3c:74:22: 01:34:d2:99:40:f2:29:2a:b2:90:e2:44:b2:13:66:57:9b:d0: 41:af:bc:22:fc:b4:2d:eb:eb:0c:13:66:3a:f3:ac:2b:45:1c: e5:5a:4d:5e:4a:44:df:54:59:ad:a0:d8:b0:2e:6a:db:d8:1d: 3f:9f:33:8e:32:24:af:55:7e:d6:b5:db:03:d6:5a:55:09:7e: 72:6b:b8:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZEMjQxMTAvBgNVBAUTKDNFQzgzNDIwNEQ2QkFBRjk5MTQwQzAzQkQ3NjIxMTQ1 QzA3QkJBNjIwHhcNMjUwNzI0MTUxMDIzWhcNMjUwNzMxMTUxMDIzWjAYMRYwFAYD VQQDEw02ODgyNGNkZi02OTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9+tjgdwbz0/1yFT/MGJfHi0jux0rSBNHzsvFIxQk2IMW02DeAUMc3UW6MI/P adHZ557tG2tUMKSLMjmNyDRlbWnE7HeeOwm6P0f/OShcGFZbdmHJaBZaSRo/GWZb ojsasA0lwxmPYb4BWQPDI3upgPwOx0GYg3Mb9qVivMOScl+Hs2TUm0kklSvI2HZW Qo8p3DLfXkHLHmbvKsCGfMNnkVFgPZJvjftDbQto03W1W20HZBCpvDrTOhYz/+5T Drkm519TmzyyGOyDcylvydII4bbWL53UfE4Qa546lNDzf4BoupNzwac4XjjENVaY I7efSXgek4m6y91rE2qMdZIgEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMkgQd8T uHwMcc53v9JofQ2dwxA3MB8GA1UdIwQYMBaAFD7INCBNa6r5kUDAO9diEUXAe7pi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkQyNC81NTBFMjdGMjFE QTQxMUUyOEM1MzNCOUEwOEIwMkNEMi9Qc2cwSUUxcnF2bVJRTUE3MTJJUlJjQjd1 bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BzZzBJRTFycXZtUlFNQTcxMklSUmNCN3VtSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkQyNC81NTBFMjdGMjFEQTQxMUUyOEM1MzNCOUEwOEIwMkNEMi9Qc2cwSUUxcnF2 bVJRTUE3MTJJUlJjQjd1bUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFZ9VYwdmithJY79mHhIJlzhkOzpl55ds/0bZYjzWRIV8bqnFiK0HT AjAfnyWM7bmiVBP5TXyCmC3vflDMBgwQ7fncWF7tlsJxp4bIzoqAlho5eISayFdr fsahSa4uXWaYcysPfRUyf/iv6gmfYyh+unPdcxEt+eGyiO3/nLTxpNzvOVUpo2m1 YqWWzNx9pQzG2iiLjr2GqxBzpenHoQutWLoyvQyVnZeCbewaTERV8hQ8dCIBNNKZ QPIpKrKQ4kSyE2ZXm9BBr7wi/LQt6+sME2Y686wrRRzlWk1eSkTfVFmtoNiwLmrb 2B0/nzOOMiSvVX7WtdsD1lpVCX5ya7ie -----END CERTIFICATE-----Generated at Fri Jul 25 04:00:12 2025 by rpki-client