$ rpki-client -vvf rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.mft File: PXdT_euyLwk6cQIag9ZYZlXpJKA.mft (raw, json) Hash identifier: PX92mcMCTz0x7tXwm4Ws338CijNIhlBqzZ8XSlr2xjU= Subject key identifier: 2A:60:A9:03:E7:86:99:A4:34:45:2E:64:18:33:FE:09:8F:A9:6F:78 Authority key identifier: 3D:77:53:FD:EB:B2:2F:09:3A:71:02:1A:83:D6:58:66:55:E9:24:A0 Certificate issuer: /CN=A911D857/serialNumber=3D7753FDEBB22F093A71021A83D6586655E924A0 Certificate serial: 08C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXdT_euyLwk6cQIag9ZYZlXpJKA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.mft Manifest number: 08B6 Signing time: Sun 24 Aug 2025 20:32:07 +0000 Manifest this update: Sun 24 Aug 2025 20:32:07 +0000 Manifest next update: Sun 31 Aug 2025 20:32:06 +0000 Files and hashes: 1: PXdT_euyLwk6cQIag9ZYZlXpJKA.crl (hash: /3gQ+xTOdZ9G+BxRegKtozbL8SZv4F3q7Vp0nqvd20Q=) 2: 162EA00C442411EB911D086BC4F9AE02.roa (hash: +enQgUid53gMaFPCBDOzsd0TE3j6ha7MQxAZKWnZpAQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.crl rsync://rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXdT_euyLwk6cQIag9ZYZlXpJKA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 19:03:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2242 (0x8c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D857, serialNumber=3D7753FDEBB22F093A71021A83D6586655E924A0 Validity Not Before: Aug 24 20:32:07 2025 GMT Not After : Aug 31 20:32:06 2025 GMT Subject: CN=68ab76c7-3c14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:cf:93:74:5b:f2:00:b7:0a:d1:55:3a:db:b3: 4b:44:ab:09:9e:1c:2c:e8:bb:5f:fb:fb:16:9d:1a: 05:5e:cf:9f:2c:c9:24:c2:25:e5:fa:16:80:57:90: 27:73:8e:83:44:46:13:f3:56:df:ee:6d:53:e0:da: e3:c6:29:59:39:5b:ff:78:21:cb:ef:ea:74:6b:98: 43:7f:2b:bb:6c:1e:3e:96:bf:81:1c:34:15:55:c7: 64:ea:97:0b:84:a3:21:50:a7:1f:e6:9e:0f:ba:5c: 2f:e3:9f:b3:d8:8b:6e:57:4d:07:ba:78:d8:90:5b: 23:39:67:70:40:54:68:ea:35:c5:df:f4:f4:6a:77: 74:cf:aa:ec:17:1f:78:07:a1:43:e0:0c:ff:62:84: d7:cc:fe:7a:b5:1f:1c:dc:eb:39:83:84:56:23:11: 0e:cb:52:72:e2:66:c1:2b:82:07:1c:70:34:93:4c: 64:68:37:29:91:17:bf:59:20:4d:a6:fd:9a:21:69: 5f:f8:98:2e:29:91:6b:a1:37:9a:a7:da:1e:8f:02: 85:dd:2c:26:4b:9b:c6:3a:20:a1:78:e5:58:ea:02: f9:64:d4:23:5a:84:ce:d0:42:11:04:6e:e6:95:8f: 89:83:5c:db:c5:93:4a:c0:d2:c2:75:9f:5f:a2:b0: 42:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:60:A9:03:E7:86:99:A4:34:45:2E:64:18:33:FE:09:8F:A9:6F:78 X509v3 Authority Key Identifier: keyid:3D:77:53:FD:EB:B2:2F:09:3A:71:02:1A:83:D6:58:66:55:E9:24:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXdT_euyLwk6cQIag9ZYZlXpJKA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:1f:73:fb:40:ed:70:fb:5f:05:f6:52:8d:a4:4d:73:1a:59: df:18:dc:58:3e:be:68:bd:ff:ed:c1:e5:44:7a:64:8c:ae:db: 35:38:33:d2:18:a2:f6:78:74:f9:a2:25:43:55:7b:bc:34:33: 11:2d:f9:d5:d6:c2:84:b1:4c:90:10:94:c1:23:8f:0a:e5:d6: 57:52:dc:b2:ea:6f:2a:6c:c7:ea:62:80:ce:86:22:4d:14:36: 3c:52:e3:0b:12:d0:54:af:45:29:6a:db:7f:fe:f5:19:a0:d1: 56:27:ef:7a:66:ca:92:83:10:5f:15:1c:f2:b2:83:05:92:a7: 43:1f:d1:52:c4:d1:0d:94:e5:87:f9:31:44:a6:fe:cd:06:4d: 1f:6c:3f:ce:9e:c8:51:19:1e:73:93:3e:f6:96:58:a0:36:b3: 5b:f8:0c:9e:33:54:02:bf:88:ea:f2:0e:21:0a:5a:6a:51:c6: d4:c3:0e:b0:67:f1:25:f4:f5:f6:19:b3:ef:7e:63:fc:1c:e8: 32:b1:99:82:30:a2:ab:a5:fe:63:0f:3a:79:a9:53:b9:8e:fd: 87:07:48:ec:22:73:a9:9e:56:79:ac:53:53:ac:3e:6d:c4:49: c6:bd:70:7a:6f:2c:a4:ed:5c:d9:cf:80:30:34:af:8a:d6:40: cc:61:25:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ4NTcxMTAvBgNVBAUTKDNENzc1M0ZERUJCMjJGMDkzQTcxMDIxQTgzRDY1ODY2 NTVFOTI0QTAwHhcNMjUwODI0MjAzMjA3WhcNMjUwODMxMjAzMjA2WjAYMRYwFAYD VQQDEw02OGFiNzZjNy0zYzE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuc+TdFvyALcK0VU627NLRKsJnhws6Ltf+/sWnRoFXs+fLMkkwiXl+haAV5An c46DREYT81bf7m1T4NrjxilZOVv/eCHL7+p0a5hDfyu7bB4+lr+BHDQVVcdk6pcL hKMhUKcf5p4Pulwv45+z2ItuV00HunjYkFsjOWdwQFRo6jXF3/T0and0z6rsFx94 B6FD4Az/YoTXzP56tR8c3Os5g4RWIxEOy1Jy4mbBK4IHHHA0k0xkaDcpkRe/WSBN pv2aIWlf+JguKZFroTeap9oejwKF3SwmS5vGOiCheOVY6gL5ZNQjWoTO0EIRBG7m lY+Jg1zbxZNKwNLCdZ9forBClQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCpgqQPn hpmkNEUuZBgz/gmPqW94MB8GA1UdIwQYMBaAFD13U/3rsi8JOnECGoPWWGZV6SSg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDg1Ny81MzgwRUY2Q0JG N0UxMUVBQjZGQTM3NUZDNEY5QUUwMi9QWGRUX2V1eUx3azZjUUlhZzlaWVpsWHBK S0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BYZFRfZXV5THdrNmNRSWFnOVpZWmxYcEpLQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDg1Ny81MzgwRUY2Q0JGN0UxMUVBQjZGQTM3NUZDNEY5QUUwMi9QWGRUX2V1eUx3 azZjUUlhZzlaWVpsWHBKS0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfH3P7QO1w+18F9lKNpE1zGlnfGNxYPr5ovf/tweVEemSMrts1ODPS GKL2eHT5oiVDVXu8NDMRLfnV1sKEsUyQEJTBI48K5dZXUtyy6m8qbMfqYoDOhiJN FDY8UuMLEtBUr0Upatt//vUZoNFWJ+96ZsqSgxBfFRzysoMFkqdDH9FSxNENlOWH +TFEpv7NBk0fbD/OnshRGR5zkz72lligNrNb+AyeM1QCv4jq8g4hClpqUcbUww6w Z/El9PX2GbPvfmP8HOgysZmCMKKrpf5jDzp5qVO5jv2HB0jsInOpnlZ5rFNTrD5t xEnGvXB6byyk7VzZz4AwNK+K1kDMYSV8 -----END CERTIFICATE-----Generated at Sun Aug 24 22:18:27 2025 by rpki-client