$ rpki-client -vvf rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft File: P-xz79qKnlyT0KYKshWc4HCDC3E.mft (raw, json) Hash identifier: 8/AF+JEqawXsokAbdsKZ2te1Zlc+2MhB0dSLWv6vCR4= Subject key identifier: A4:98:9E:0C:77:CB:A0:0C:54:7F:E6:5C:0D:D0:5D:0B:04:BD:50:B9 Authority key identifier: 3F:EC:73:EF:DA:8A:9E:5C:93:D0:A6:0A:B2:15:9C:E0:70:83:0B:71 Certificate issuer: /CN=A9135597/serialNumber=3FEC73EFDA8A9E5C93D0A60AB2159CE070830B71 Certificate serial: 021D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-xz79qKnlyT0KYKshWc4HCDC3E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft Manifest number: 0214 Signing time: Wed 05 Nov 2025 02:26:14 +0000 Manifest this update: Wed 05 Nov 2025 02:26:14 +0000 Manifest next update: Wed 12 Nov 2025 02:26:14 +0000 Files and hashes: 1: P-xz79qKnlyT0KYKshWc4HCDC3E.crl (hash: ae6krY4Zn5ymTOu1hWigcAMHIB57w8TaaknyC5QZYng=) 2: 3F6EE8E42D4211F09E0C422AC4F9AE02.roa (hash: V96z6p8lv3v3DbzjaaBJkTxNIi5ZsjxmKx2jknu2pAQ=) 3: 8140448E2D4211F0AB8B522BC4F9AE02.roa (hash: SvTUBZIdDCre/uFlRBRgrIMaL1ITzuHCA8WYxGN/4tM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.crl rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-xz79qKnlyT0KYKshWc4HCDC3E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:26:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 541 (0x21d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135597, serialNumber=3FEC73EFDA8A9E5C93D0A60AB2159CE070830B71 Validity Not Before: Nov 5 02:26:14 2025 GMT Not After : Nov 12 02:26:14 2025 GMT Subject: CN=690ab5c6-b749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3b:6b:2a:8c:eb:82:95:60:6d:7f:6d:16:59: 5b:b8:3b:f9:ce:7c:49:3d:c2:30:47:75:b3:ec:16: e4:0c:3c:6b:0c:74:5f:c5:0e:7c:bf:bc:56:32:d3: 63:70:57:40:ea:31:96:ad:2f:95:30:62:e3:69:97: f3:c5:d2:29:e8:6b:72:cc:f0:c4:40:06:76:56:6b: 4a:d5:87:dd:42:05:76:bf:ea:77:1f:6d:00:03:9f: b1:28:ac:42:b1:23:bb:f8:c7:33:da:80:fe:33:12: ce:62:ac:2f:15:a8:cb:20:d0:f3:00:f2:fe:94:92: 3e:77:4f:35:78:d6:fd:bf:5d:bc:e5:e6:7e:46:1c: ad:61:38:f9:62:fc:e9:95:ca:41:63:a6:02:b0:5b: 4f:07:5e:ff:b6:52:4f:22:a5:9d:fd:06:63:73:5d: 74:a0:d0:03:ff:6a:0d:6f:eb:2d:78:58:65:14:d2: 8e:08:af:5c:65:42:b3:c9:64:22:bc:7e:4f:09:b9: 48:4a:47:e7:63:67:f0:cf:b1:c2:75:0c:b0:19:4a: 6d:7e:50:0c:87:4e:f3:b3:c4:16:4c:be:d1:8d:d5: 56:af:24:3b:21:39:fa:cf:82:1f:7d:83:65:ff:de: 4d:e1:89:bb:9f:eb:35:7f:f6:24:a7:8d:30:34:c5: 58:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:98:9E:0C:77:CB:A0:0C:54:7F:E6:5C:0D:D0:5D:0B:04:BD:50:B9 X509v3 Authority Key Identifier: keyid:3F:EC:73:EF:DA:8A:9E:5C:93:D0:A6:0A:B2:15:9C:E0:70:83:0B:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-xz79qKnlyT0KYKshWc4HCDC3E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:c9:fa:b7:b2:38:fb:ac:ad:6e:0e:da:17:02:f8:6f:31:de: 72:91:9c:c5:3e:0e:ef:3c:4f:3a:be:5d:d0:1c:7d:11:3f:ba: 6b:7a:fa:8a:de:2f:ac:f6:23:9b:fc:ed:11:af:fe:1a:a9:4b: b5:a3:8c:a3:33:19:62:39:46:58:57:ef:f7:44:d9:75:16:00: 82:ad:e8:16:f9:42:83:41:1b:a2:f5:d2:dd:5c:9f:a3:86:14: 26:61:4f:76:39:f8:af:8c:c3:c8:16:db:7c:cd:fc:62:07:e5: d8:0d:0e:26:e2:29:c4:1a:24:90:d1:e7:cc:9f:04:69:0b:6c: 9c:2b:44:87:c9:fe:96:0f:e1:c0:d9:7b:8a:8b:15:5e:46:54: 68:11:a4:1a:f3:81:8e:cb:22:45:72:41:32:ee:5a:92:70:45: a5:98:c8:d3:72:5f:a2:ba:31:23:f4:d8:7c:44:e7:ee:aa:7f: 34:a2:92:b2:97:42:c3:db:00:b6:d8:1e:31:0a:6c:c8:bc:48: 51:49:1c:a6:20:7d:4c:5c:82:71:e8:bd:63:e6:92:9d:4d:08: db:ce:7d:7a:15:29:be:a3:02:29:6b:68:2b:b4:8c:10:d1:ee: 09:00:07:ef:d8:d9:ce:89:22:b1:91:73:2d:09:05:66:1c:80: 3b:36:ee:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU1OTcxMTAvBgNVBAUTKDNGRUM3M0VGREE4QTlFNUM5M0QwQTYwQUIyMTU5Q0Uw NzA4MzBCNzEwHhcNMjUxMTA1MDIyNjE0WhcNMjUxMTEyMDIyNjE0WjAYMRYwFAYD VQQDEw02OTBhYjVjNi1iNzQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvjtrKozrgpVgbX9tFllbuDv5znxJPcIwR3Wz7BbkDDxrDHRfxQ58v7xWMtNj cFdA6jGWrS+VMGLjaZfzxdIp6GtyzPDEQAZ2VmtK1YfdQgV2v+p3H20AA5+xKKxC sSO7+Mcz2oD+MxLOYqwvFajLINDzAPL+lJI+d081eNb9v1285eZ+RhytYTj5Yvzp lcpBY6YCsFtPB17/tlJPIqWd/QZjc110oNAD/2oNb+steFhlFNKOCK9cZUKzyWQi vH5PCblISkfnY2fwz7HCdQywGUptflAMh07zs8QWTL7RjdVWryQ7ITn6z4IffYNl /95N4Ym7n+s1f/Ykp40wNMVYnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKSYngx3 y6AMVH/mXA3QXQsEvVC5MB8GA1UdIwQYMBaAFD/sc+/aip5ck9CmCrIVnOBwgwtx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTU5Ny9FOTcwN0QxRTlB M0ExMUVEODFCMTI3MURDNEY5QUUwMi9QLXh6NzlxS25seVQwS1lLc2hXYzRIQ0RD M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AteHo3OXFLbmx5VDBLWUtzaFdjNEhDREMzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTU5Ny9FOTcwN0QxRTlBM0ExMUVEODFCMTI3MURDNEY5QUUwMi9QLXh6NzlxS25s eVQwS1lLc2hXYzRIQ0RDM0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBayfq3sjj7rK1uDtoXAvhvMd5ykZzFPg7vPE86vl3QHH0RP7prevqK 3i+s9iOb/O0Rr/4aqUu1o4yjMxliOUZYV+/3RNl1FgCCregW+UKDQRui9dLdXJ+j hhQmYU92OfivjMPIFtt8zfxiB+XYDQ4m4inEGiSQ0efMnwRpC2ycK0SHyf6WD+HA 2XuKixVeRlRoEaQa84GOyyJFckEy7lqScEWlmMjTcl+iujEj9Nh8ROfuqn80opKy l0LD2wC22B4xCmzIvEhRSRymIH1MXIJx6L1j5pKdTQjbzn16FSm+owIpa2grtIwQ 0e4JAAfv2NnOiSKxkXMtCQVmHIA7Nu5y -----END CERTIFICATE-----Generated at Wed Nov 5 16:39:32 2025 by rpki-client