$ rpki-client -vvf rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.mft File: 9-pxtubNBKVdrrDRWOBE3poSIWo.mft (raw, json) Hash identifier: zE/Af5F3iJAKx5QoVRbwVEbYpjJn274RwrCZEWoJVls= Subject key identifier: 36:8C:DB:68:03:1D:EC:60:D7:CD:2F:FA:61:C8:EF:C0:78:42:30:EF Authority key identifier: F7:EA:71:B6:E6:CD:04:A5:5D:AE:B0:D1:58:E0:44:DE:9A:12:21:6A Certificate issuer: /CN=A914976C/serialNumber=F7EA71B6E6CD04A55DAEB0D158E044DE9A12216A Certificate serial: D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-pxtubNBKVdrrDRWOBE3poSIWo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.mft Manifest number: CE Signing time: Tue 09 Sep 2025 05:47:01 +0000 Manifest this update: Tue 09 Sep 2025 05:47:01 +0000 Manifest next update: Tue 16 Sep 2025 05:47:01 +0000 Files and hashes: 1: 9-pxtubNBKVdrrDRWOBE3poSIWo.crl (hash: hMy+oBwPwnUAqZ+sj7lVoZDNiPJnK6TXJorS2ft96RA=) 2: D65DAE8A595C11EF8FABE750C4F9AE02.roa (hash: nYA6qJYLssodvPidYdiPlhElm9th4J64wlRbRyUbQK0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.crl rsync://rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-pxtubNBKVdrrDRWOBE3poSIWo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 05:47:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 210 (0xd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914976C, serialNumber=F7EA71B6E6CD04A55DAEB0D158E044DE9A12216A Validity Not Before: Sep 9 05:47:01 2025 GMT Not After : Sep 16 05:47:01 2025 GMT Subject: CN=68bfbf55-cd60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a2:95:20:bc:b3:ed:13:54:fa:80:e4:d2:5d: 94:73:f6:e4:58:06:4a:3a:af:fc:cc:dc:ed:ef:72: 58:e6:90:0f:67:98:54:4f:bd:28:fd:93:06:51:00: 25:ad:19:0e:63:aa:e6:9c:fa:0f:87:bc:73:55:54: e2:2d:af:59:93:03:40:3d:d9:7c:6c:17:fb:18:33: f0:02:7b:5c:10:e8:b5:59:0d:4a:55:3a:33:4b:67: 5e:cf:59:6e:c6:e0:05:11:be:6e:54:8f:7f:37:bb: c9:a2:ee:67:b8:5a:f7:e9:2e:fc:51:15:e4:30:1b: 89:ce:2a:58:9a:24:ac:1b:9c:49:09:8b:9b:c0:da: 33:5d:ea:11:f7:6f:a4:29:91:c2:da:d1:ce:1d:e1: 4e:9c:c1:33:48:af:3b:09:87:82:6e:fb:26:d3:1c: 2d:fe:70:2f:3b:4d:44:4d:2f:fa:0f:1e:c2:48:41: 27:e6:b1:b4:19:74:f7:52:dd:cc:14:bb:a2:0c:6f: 3d:e8:52:ac:54:57:b7:63:8b:ff:f0:d9:a1:bc:0e: 5a:2c:ac:75:a9:5a:58:e7:db:71:28:70:11:82:3b: c3:96:d7:eb:7f:4c:4e:24:85:7c:ef:4b:a8:fe:6c: 76:ca:c2:bb:75:75:91:ad:8a:33:7e:59:ee:12:34: a0:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:8C:DB:68:03:1D:EC:60:D7:CD:2F:FA:61:C8:EF:C0:78:42:30:EF X509v3 Authority Key Identifier: keyid:F7:EA:71:B6:E6:CD:04:A5:5D:AE:B0:D1:58:E0:44:DE:9A:12:21:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-pxtubNBKVdrrDRWOBE3poSIWo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:f4:7c:b7:fd:52:f9:74:31:64:3d:3a:11:94:6e:b8:5a:f8: ec:3c:ef:b0:6b:40:e3:45:39:88:5a:fc:45:49:9e:95:28:d9: 76:50:db:2b:77:6e:4a:d8:17:1a:c1:23:1a:b5:95:84:31:b0: 31:94:38:c7:56:9c:62:4d:ec:fb:09:78:90:20:29:fe:2e:f1: a2:0e:bf:90:8e:fd:f6:7d:c4:e8:46:03:a5:3a:35:83:d1:95: 84:72:ab:de:8e:53:bf:59:ae:54:18:39:d0:0b:52:42:db:61: 89:65:18:61:15:a9:c0:c4:cb:01:61:ff:78:fd:27:e0:df:75: 8c:bd:d9:11:e2:1e:7c:e3:c2:72:3c:28:d4:f4:1a:22:b9:68: 7b:ac:43:06:64:8b:e6:0e:8f:a1:e7:15:8b:e6:7b:8d:45:10: ef:76:be:3f:2b:bd:a2:fd:5b:0f:1b:58:ad:c0:9d:46:b8:45: 5d:a2:c7:13:34:88:44:d5:df:ab:af:e6:2b:11:54:f8:10:a9: 7d:04:e7:ff:75:c5:b6:55:e6:58:3e:72:dd:76:70:1e:ff:8e: 0c:dd:e5:8c:4c:c6:94:7c:09:f6:fb:10:f0:1f:e2:f8:df:4f: be:14:3e:23:82:63:f1:5f:13:f3:eb:1a:ce:61:e9:8a:25:23: b4:da:0e:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDk3NkMxMTAvBgNVBAUTKEY3RUE3MUI2RTZDRDA0QTU1REFFQjBEMTU4RTA0NERF OUExMjIxNkEwHhcNMjUwOTA5MDU0NzAxWhcNMjUwOTE2MDU0NzAxWjAYMRYwFAYD VQQDEw02OGJmYmY1NS1jZDYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwaKVILyz7RNU+oDk0l2Uc/bkWAZKOq/8zNzt73JY5pAPZ5hUT70o/ZMGUQAl rRkOY6rmnPoPh7xzVVTiLa9ZkwNAPdl8bBf7GDPwAntcEOi1WQ1KVTozS2dez1lu xuAFEb5uVI9/N7vJou5nuFr36S78URXkMBuJzipYmiSsG5xJCYubwNozXeoR92+k KZHC2tHOHeFOnMEzSK87CYeCbvsm0xwt/nAvO01ETS/6Dx7CSEEn5rG0GXT3Ut3M FLuiDG896FKsVFe3Y4v/8NmhvA5aLKx1qVpY59txKHARgjvDltfrf0xOJIV870uo /mx2ysK7dXWRrYozflnuEjSgAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDaM22gD Hexg180v+mHI78B4QjDvMB8GA1UdIwQYMBaAFPfqcbbmzQSlXa6w0VjgRN6aEiFq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTc2Qy84MzUwRDJCQzU5 NUMxMUVGOTE1OTYzNTBDNEY5QUUwMi85LXB4dHViTkJLVmRyckRSV09CRTNwb1NJ V28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzktcHh0dWJOQktWZHJyRFJXT0JFM3BvU0lXby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTc2Qy84MzUwRDJCQzU5NUMxMUVGOTE1OTYzNTBDNEY5QUUwMi85LXB4dHViTkJL VmRyckRSV09CRTNwb1NJV28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAX9Hy3/VL5dDFkPToRlG64WvjsPO+wa0DjRTmIWvxFSZ6VKNl2UNsr d25K2BcawSMatZWEMbAxlDjHVpxiTez7CXiQICn+LvGiDr+Qjv32fcToRgOlOjWD 0ZWEcqvejlO/Wa5UGDnQC1JC22GJZRhhFanAxMsBYf94/Sfg33WMvdkR4h5848Jy PCjU9BoiuWh7rEMGZIvmDo+h5xWL5nuNRRDvdr4/K72i/VsPG1itwJ1GuEVdoscT NIhE1d+rr+YrEVT4EKl9BOf/dcW2VeZYPnLddnAe/44M3eWMTMaUfAn2+xDwH+L4 30++FD4jgmPxXxPz6xrOYemKJSO02g6J -----END CERTIFICATE-----Generated at Tue Sep 9 14:19:48 2025 by rpki-client