$ rpki-client -vvf rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft File: P-xz79qKnlyT0KYKshWc4HCDC3E.mft (raw, json) Hash identifier: rOCcbZEwv+VI9r5VFANtyru3fPV5wfZXj8LX2/3/naE= Subject key identifier: 73:A1:34:EA:72:C2:73:66:62:D6:4D:E4:35:45:98:39:47:18:2A:EC Authority key identifier: 3F:EC:73:EF:DA:8A:9E:5C:93:D0:A6:0A:B2:15:9C:E0:70:83:0B:71 Certificate issuer: /CN=A9135597/serialNumber=3FEC73EFDA8A9E5C93D0A60AB2159CE070830B71 Certificate serial: 0201 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-xz79qKnlyT0KYKshWc4HCDC3E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft Manifest number: 01F8 Signing time: Tue 09 Sep 2025 02:36:43 +0000 Manifest this update: Tue 09 Sep 2025 02:36:42 +0000 Manifest next update: Tue 16 Sep 2025 02:36:42 +0000 Files and hashes: 1: P-xz79qKnlyT0KYKshWc4HCDC3E.crl (hash: 2DmKb6xlpdDdq6c9EsORBHC0tqBH9RE8ocFt8E4dwfE=) 2: 3F6EE8E42D4211F09E0C422AC4F9AE02.roa (hash: V96z6p8lv3v3DbzjaaBJkTxNIi5ZsjxmKx2jknu2pAQ=) 3: 8140448E2D4211F0AB8B522BC4F9AE02.roa (hash: SvTUBZIdDCre/uFlRBRgrIMaL1ITzuHCA8WYxGN/4tM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.crl rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-xz79qKnlyT0KYKshWc4HCDC3E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 02:36:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 513 (0x201) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135597, serialNumber=3FEC73EFDA8A9E5C93D0A60AB2159CE070830B71 Validity Not Before: Sep 9 02:36:42 2025 GMT Not After : Sep 16 02:36:42 2025 GMT Subject: CN=68bf92bb-dd94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d3:8d:b1:33:1f:42:31:3a:cb:73:4c:2b:3a: cb:f1:29:1e:c1:b6:01:cf:f1:93:51:2c:58:fe:08: 6c:7b:8c:da:fb:5d:be:25:ec:d5:94:cc:44:0d:ee: 77:fb:cd:50:c0:e8:f8:09:1a:a8:d2:79:1d:f1:d9: 8f:71:46:5e:76:f7:e3:d8:fb:5b:13:3f:56:89:6b: 2a:73:3a:3b:fd:f2:5e:7f:e4:28:2d:d0:01:a1:b4: 84:eb:bc:aa:ca:b3:b6:82:43:d4:8e:bf:03:1e:be: 33:ea:5c:31:c7:22:b7:93:54:8d:28:d2:6e:6a:83: 4d:b2:6f:52:cb:49:58:56:5e:b5:51:41:45:b7:15: 7c:a5:86:6d:ea:67:bb:9a:a4:b6:e9:30:6f:33:aa: 85:0c:ff:29:c3:ec:c6:7f:73:90:fd:af:5e:df:e6: b3:18:46:23:ca:3f:f6:4f:c3:35:aa:4c:79:7a:f8: 2f:4b:2c:c9:16:a5:8d:48:db:e2:12:c9:47:65:d7: f9:3a:14:e4:b6:eb:cd:00:91:a3:53:8b:37:c5:6e: 9c:02:3b:d8:23:cd:73:bb:83:40:52:95:26:8b:dc: 5e:24:e1:95:9a:fb:78:2c:f5:82:48:9b:99:a4:12: 95:aa:cf:ed:1f:56:5c:22:7e:aa:29:73:8e:f3:54: b0:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:A1:34:EA:72:C2:73:66:62:D6:4D:E4:35:45:98:39:47:18:2A:EC X509v3 Authority Key Identifier: keyid:3F:EC:73:EF:DA:8A:9E:5C:93:D0:A6:0A:B2:15:9C:E0:70:83:0B:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-xz79qKnlyT0KYKshWc4HCDC3E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:fb:dc:29:b3:f8:ef:4e:b5:86:f3:76:32:44:b5:57:33:6b: 2a:c7:a2:9c:f3:b6:5e:b4:94:6c:b0:d3:07:93:c3:42:1c:ae: 98:f7:63:64:96:35:52:04:e8:be:ab:b4:c6:33:9d:da:32:05: 64:31:3b:09:b2:05:c1:9e:62:c3:ae:66:67:76:5b:c9:6f:a0: 5a:50:2b:89:a0:d0:38:7e:66:c6:bd:72:29:4f:51:93:ca:37: 1e:96:b9:d0:42:31:6e:7e:46:88:d1:81:a8:c3:d3:2d:68:ee: 79:6c:6e:52:89:98:f0:38:6b:8d:d9:b0:de:8b:8a:4b:17:9a: 37:08:dc:d3:c1:5e:52:1a:f4:42:47:fe:66:a9:ee:a3:18:5a: 80:cd:ef:74:93:26:5c:3c:01:38:f5:1a:d7:95:b7:37:76:01: 1e:99:72:2e:c4:9b:a1:63:ee:8b:18:c9:54:27:76:97:0b:70: e3:ef:b3:1b:34:e5:7c:6a:45:6b:89:62:c0:b6:6c:f0:21:c0: de:02:44:57:e8:b6:1c:8f:23:c6:a6:dc:d5:96:2b:43:74:dc: e9:0d:ad:d9:55:80:27:96:14:fa:9b:12:99:57:15:1c:c1:e9: 71:af:00:d6:6e:dc:4e:bd:3a:77:6e:36:23:6c:3a:f2:c0:21: 77:5e:d3:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU1OTcxMTAvBgNVBAUTKDNGRUM3M0VGREE4QTlFNUM5M0QwQTYwQUIyMTU5Q0Uw NzA4MzBCNzEwHhcNMjUwOTA5MDIzNjQyWhcNMjUwOTE2MDIzNjQyWjAYMRYwFAYD VQQDEw02OGJmOTJiYi1kZDk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu9ONsTMfQjE6y3NMKzrL8SkewbYBz/GTUSxY/ghse4za+12+JezVlMxEDe53 +81QwOj4CRqo0nkd8dmPcUZedvfj2PtbEz9WiWsqczo7/fJef+QoLdABobSE67yq yrO2gkPUjr8DHr4z6lwxxyK3k1SNKNJuaoNNsm9Sy0lYVl61UUFFtxV8pYZt6me7 mqS26TBvM6qFDP8pw+zGf3OQ/a9e3+azGEYjyj/2T8M1qkx5evgvSyzJFqWNSNvi EslHZdf5OhTktuvNAJGjU4s3xW6cAjvYI81zu4NAUpUmi9xeJOGVmvt4LPWCSJuZ pBKVqs/tH1ZcIn6qKXOO81SwKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHOhNOpy wnNmYtZN5DVFmDlHGCrsMB8GA1UdIwQYMBaAFD/sc+/aip5ck9CmCrIVnOBwgwtx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTU5Ny9FOTcwN0QxRTlB M0ExMUVEODFCMTI3MURDNEY5QUUwMi9QLXh6NzlxS25seVQwS1lLc2hXYzRIQ0RD M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AteHo3OXFLbmx5VDBLWUtzaFdjNEhDREMzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTU5Ny9FOTcwN0QxRTlBM0ExMUVEODFCMTI3MURDNEY5QUUwMi9QLXh6NzlxS25s eVQwS1lLc2hXYzRIQ0RDM0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJ+9wps/jvTrWG83YyRLVXM2sqx6Kc87ZetJRssNMHk8NCHK6Y92Nk ljVSBOi+q7TGM53aMgVkMTsJsgXBnmLDrmZndlvJb6BaUCuJoNA4fmbGvXIpT1GT yjcelrnQQjFufkaI0YGow9MtaO55bG5SiZjwOGuN2bDei4pLF5o3CNzTwV5SGvRC R/5mqe6jGFqAze90kyZcPAE49RrXlbc3dgEemXIuxJuhY+6LGMlUJ3aXC3Dj77Mb NOV8akVriWLAtmzwIcDeAkRX6LYcjyPGptzVlitDdNzpDa3ZVYAnlhT6mxKZVxUc welxrwDWbtxOvTp3bjYjbDrywCF3XtMt -----END CERTIFICATE-----Generated at Tue Sep 9 17:13:26 2025 by rpki-client