$ rpki-client -vvf rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.mft File: PSzMkYN0TcaWqFVry5BDhI6V33A.mft (raw, json) Hash identifier: mkVksnNNSIG0w4keaPfrBQdKwkSzyhvqHIU4k7OTnfY= Subject key identifier: 86:2A:0E:5A:E8:AF:9D:2E:EF:B4:71:66:B0:8F:F8:C3:D4:95:20:5B Authority key identifier: 3D:2C:CC:91:83:74:4D:C6:96:A8:55:6B:CB:90:43:84:8E:95:DF:70 Certificate issuer: /CN=A912D826/serialNumber=3D2CCC9183744DC696A8556BCB9043848E95DF70 Certificate serial: 03B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSzMkYN0TcaWqFVry5BDhI6V33A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.mft Manifest number: 03A6 Signing time: Sun 07 Sep 2025 01:10:09 +0000 Manifest this update: Sun 07 Sep 2025 01:10:08 +0000 Manifest next update: Sun 14 Sep 2025 01:10:08 +0000 Files and hashes: 1: PSzMkYN0TcaWqFVry5BDhI6V33A.crl (hash: uE50iZDV+lzres/Cj/wK9YoMkwQIUMnOFAW3kQ9rZ58=) 2: 69A20286514B11F0B8A8C66DC4F9AE02.roa (hash: FMJfMOhKmr3+LIFoso7iYyeae1vQb80K64qzROcKGwI=) 3: 804B03560A7211EE8FA2CD58C4F9AE02.roa (hash: +4X61DthcWz4IP6DOyrL7Yd1Zc+RFVYAukm8M+MD8hs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.crl rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSzMkYN0TcaWqFVry5BDhI6V33A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 01:10:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 948 (0x3b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D826, serialNumber=3D2CCC9183744DC696A8556BCB9043848E95DF70 Validity Not Before: Sep 7 01:10:08 2025 GMT Not After : Sep 14 01:10:08 2025 GMT Subject: CN=68bcdb70-6264 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0a:09:08:46:76:3e:45:4c:1f:72:05:a5:5f: d8:81:50:19:6f:3a:87:08:1e:7a:15:a9:28:ef:6d: 03:00:44:ba:41:cf:1c:cb:22:32:d0:80:3c:19:48: 1f:02:e0:39:52:25:ef:9a:1e:ea:56:39:ca:20:0b: 71:8e:0c:62:52:13:a0:2b:66:39:9f:bd:64:d9:a0: dc:e3:37:e9:f6:53:7c:43:1d:80:f7:51:a5:46:f7: e3:69:92:3b:d6:a5:ca:0f:3d:d5:20:53:c0:b0:ee: bd:ef:16:40:aa:91:1d:5c:d2:30:d8:29:04:9f:e2: 46:18:ba:bb:df:d8:ad:cf:a1:7b:c1:42:3f:2a:a7: 56:fd:75:79:8c:a7:2d:a3:b4:94:11:fd:c6:b6:9b: 50:e3:c9:9c:cb:af:b0:ed:f1:1b:dd:83:55:e0:c9: d8:9b:6c:60:62:c3:9a:85:49:b5:ef:91:91:e5:77: 6f:af:c3:d2:15:3b:9f:88:ab:e5:0e:bc:3f:67:72: c0:8e:f6:70:6e:87:b4:85:31:83:f6:ca:35:4e:5e: f7:6c:9c:42:46:27:a0:7b:8a:5a:e3:3b:e7:ca:6d: b9:07:59:1b:6b:05:01:6f:85:0a:a5:8e:1d:11:a3: 66:d5:58:66:ef:ed:d3:f1:01:61:8e:0f:f8:6b:70: 83:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:2A:0E:5A:E8:AF:9D:2E:EF:B4:71:66:B0:8F:F8:C3:D4:95:20:5B X509v3 Authority Key Identifier: keyid:3D:2C:CC:91:83:74:4D:C6:96:A8:55:6B:CB:90:43:84:8E:95:DF:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSzMkYN0TcaWqFVry5BDhI6V33A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:29:1d:23:4d:04:2b:7c:59:7d:31:b9:ba:c4:59:65:61:d2: a4:f4:35:82:77:79:28:5c:47:7e:c4:ca:88:2a:0f:0b:78:2f: d0:2d:49:f2:6c:b7:86:37:52:9b:63:08:35:a6:a8:04:3f:cb: 6b:60:d4:1d:0f:33:8d:47:db:af:e7:14:a9:7b:8c:b5:8e:03: 8f:69:16:a3:29:f7:6b:1c:d4:78:fd:f2:b9:e8:b1:6b:28:71: 71:f2:96:d4:2f:d4:fe:a6:f7:75:e1:f8:de:02:51:1e:11:5a: 93:cb:6b:b6:cc:65:46:92:7c:4e:a2:70:ef:41:c2:97:db:d5: 18:f3:b8:cf:ba:90:b5:7d:31:63:5b:44:d4:e1:14:84:44:61: 08:df:49:1d:ed:eb:e9:02:d9:ef:b2:0f:e0:d2:14:1e:7c:a5: ba:53:f3:4e:01:4a:4f:78:11:24:aa:84:7d:fe:f1:f7:bc:8c: 67:54:e3:65:4c:bb:68:90:30:a8:0c:1e:7e:4b:05:c6:c1:9a: 3a:87:46:67:6b:26:eb:b8:71:9f:c6:5f:2f:f9:12:ac:41:2a: af:35:7a:cb:88:7b:03:a4:88:83:72:6a:b9:6f:88:0c:d6:6b: 49:0c:e2:3b:71:fd:81:10:80:98:b9:8d:89:b7:3d:95:09:86: b5:f9:41:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQ4MjYxMTAvBgNVBAUTKDNEMkNDQzkxODM3NDREQzY5NkE4NTU2QkNCOTA0Mzg0 OEU5NURGNzAwHhcNMjUwOTA3MDExMDA4WhcNMjUwOTE0MDExMDA4WjAYMRYwFAYD VQQDEw02OGJjZGI3MC02MjY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyQoJCEZ2PkVMH3IFpV/YgVAZbzqHCB56Fako720DAES6Qc8cyyIy0IA8GUgf AuA5UiXvmh7qVjnKIAtxjgxiUhOgK2Y5n71k2aDc4zfp9lN8Qx2A91GlRvfjaZI7 1qXKDz3VIFPAsO697xZAqpEdXNIw2CkEn+JGGLq739itz6F7wUI/KqdW/XV5jKct o7SUEf3GtptQ48mcy6+w7fEb3YNV4MnYm2xgYsOahUm175GR5Xdvr8PSFTufiKvl Drw/Z3LAjvZwboe0hTGD9so1Tl73bJxCRiege4pa4zvnym25B1kbawUBb4UKpY4d EaNm1Vhm7+3T8QFhjg/4a3CDTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIYqDlro r50u77RxZrCP+MPUlSBbMB8GA1UdIwQYMBaAFD0szJGDdE3GlqhVa8uQQ4SOld9w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDgyNi9DRjRFMUQ3NEFF NEExMUVDODQ2RjNGNjhDNEY5QUUwMi9QU3pNa1lOMFRjYVdxRlZyeTVCRGhJNlYz M0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BTek1rWU4wVGNhV3FGVnJ5NUJEaEk2VjMzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDgyNi9DRjRFMUQ3NEFFNEExMUVDODQ2RjNGNjhDNEY5QUUwMi9QU3pNa1lOMFRj YVdxRlZyeTVCRGhJNlYzM0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwKR0jTQQrfFl9Mbm6xFllYdKk9DWCd3koXEd+xMqIKg8LeC/QLUny bLeGN1KbYwg1pqgEP8trYNQdDzONR9uv5xSpe4y1jgOPaRajKfdrHNR4/fK56LFr KHFx8pbUL9T+pvd14fjeAlEeEVqTy2u2zGVGknxOonDvQcKX29UY87jPupC1fTFj W0TU4RSERGEI30kd7evpAtnvsg/g0hQefKW6U/NOAUpPeBEkqoR9/vH3vIxnVONl TLtokDCoDB5+SwXGwZo6h0ZnaybruHGfxl8v+RKsQSqvNXrLiHsDpIiDcmq5b4gM 1mtJDOI7cf2BEICYuY2Jtz2VCYa1+UE8 -----END CERTIFICATE-----Generated at Mon Sep 8 14:38:48 2025 by rpki-client