$ rpki-client -vvf rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft File: PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft (raw, json) Hash identifier: S7NWctfWxYgRJVwJbSajfxQj6Pd1h3vaV8Xb43oQSAE= Subject key identifier: 12:01:E3:F7:97:BA:5A:37:19:27:37:88:B8:43:04:5C:61:4E:E2:B9 Authority key identifier: 3D:7A:4E:0A:99:AF:15:EF:0B:37:90:D0:E7:96:1E:88:75:28:19:83 Certificate issuer: /CN=A915B880/serialNumber=3D7A4E0A99AF15EF0B3790D0E7961E8875281983 Certificate serial: 0E67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXpOCpmvFe8LN5DQ55YeiHUoGYM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft Manifest number: 0E5F Signing time: Sun 24 Aug 2025 17:42:30 +0000 Manifest this update: Sun 24 Aug 2025 17:42:29 +0000 Manifest next update: Sun 31 Aug 2025 17:42:29 +0000 Files and hashes: 1: PXpOCpmvFe8LN5DQ55YeiHUoGYM.crl (hash: H5rlpiMEy5HsqG9TV4e+a+//tl0ccRbdJzZkOfAhauU=) 2: 0853C13CA2F011E9B721795CC4F9AE02.roa (hash: PT85jOUkAj1X0WXEwRPCdUqy+wM3om5TOq/+D9IWTpU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.crl rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXpOCpmvFe8LN5DQ55YeiHUoGYM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 17:42:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3687 (0xe67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B880, serialNumber=3D7A4E0A99AF15EF0B3790D0E7961E8875281983 Validity Not Before: Aug 24 17:42:29 2025 GMT Not After : Aug 31 17:42:29 2025 GMT Subject: CN=68ab4f06-8717 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f3:94:96:56:14:62:78:23:ff:65:87:a4:a8: 60:55:57:2d:9f:80:eb:80:cb:bb:0d:10:0d:1d:14: f3:31:51:5a:95:62:4d:d1:be:c8:a8:fc:0f:63:2a: 8c:ad:e7:08:77:de:73:f9:68:14:40:a7:14:c3:72: 9f:5a:5a:07:8e:f4:0c:79:b9:91:d8:b7:51:7a:80: d8:da:a6:3a:be:1e:d9:74:16:7b:26:9a:3a:e0:e9: 5a:fc:3c:6d:62:59:9c:ec:b5:9f:74:54:70:de:40: 14:ca:a6:27:6e:97:4c:a7:dd:13:97:d2:e7:77:9e: 3c:97:85:25:6a:5a:50:4e:46:1e:cb:e5:fd:61:5f: db:3a:ca:4a:3c:2f:25:e4:80:62:67:43:49:50:88: 2b:96:2e:62:50:4e:4c:29:10:c8:d2:8f:58:bd:d5: 4b:b8:29:4a:97:d7:d4:aa:13:8b:5d:3d:0a:44:9e: 6a:71:09:50:dd:55:91:c8:0b:c9:7f:79:f5:5f:7c: cf:56:0d:1c:58:83:3a:cb:e4:28:a8:25:55:18:7b: c8:07:ce:a0:64:4c:85:f6:af:1b:61:2e:a2:b8:c0: 90:83:5b:29:a1:22:ea:a7:2b:b6:a2:32:f7:bd:e7: 4f:a3:4f:e1:d0:00:f0:72:92:f2:63:d4:d0:14:3a: 2a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:01:E3:F7:97:BA:5A:37:19:27:37:88:B8:43:04:5C:61:4E:E2:B9 X509v3 Authority Key Identifier: keyid:3D:7A:4E:0A:99:AF:15:EF:0B:37:90:D0:E7:96:1E:88:75:28:19:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXpOCpmvFe8LN5DQ55YeiHUoGYM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:1f:0f:8f:a1:88:6e:02:35:8d:38:d1:cf:3c:06:73:05:82: 6c:45:60:ad:99:ff:78:9f:58:42:ee:d4:2c:dc:b7:c9:10:7d: 85:6a:fa:7b:e7:2b:a2:42:28:90:ac:0a:41:05:d9:b7:7b:fc: 52:3f:5a:84:25:16:8d:3e:61:20:4b:3c:66:6e:ac:e6:3a:c3: 4e:14:48:9c:f1:81:ae:70:60:d6:cf:70:24:7f:5a:06:fb:7d: de:71:d0:a3:79:d2:f0:57:2f:ed:cf:ac:4f:b6:1c:cf:ec:af: 11:03:a3:38:bd:17:16:64:24:2a:71:6a:b7:45:02:23:41:de: 1f:de:21:b5:55:e8:26:a4:5b:ec:55:59:c9:ba:98:22:a3:bf: f6:4d:1d:4f:bc:c6:d8:60:64:a3:4d:78:bd:c2:c7:a0:b3:0e: 36:cb:ec:ce:bc:47:31:3d:69:67:57:c4:76:e4:d5:75:51:60: 64:17:28:a4:bd:d0:6d:4a:16:a5:9b:0b:9a:ce:3c:f2:76:45: a9:0a:f3:9d:41:a0:00:f1:75:19:99:42:69:9b:b2:25:65:e6: 65:4f:bf:67:31:a2:dd:6c:73:7d:92:6a:f7:4c:0e:20:3c:e9: 72:e8:92:cf:b1:16:7d:f6:73:18:d5:0f:0b:be:e6:d5:1a:56: 62:7a:cd:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDmcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI4ODAxMTAvBgNVBAUTKDNEN0E0RTBBOTlBRjE1RUYwQjM3OTBEMEU3OTYxRTg4 NzUyODE5ODMwHhcNMjUwODI0MTc0MjI5WhcNMjUwODMxMTc0MjI5WjAYMRYwFAYD VQQDEw02OGFiNGYwNi04NzE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArPOUllYUYngj/2WHpKhgVVctn4DrgMu7DRANHRTzMVFalWJN0b7IqPwPYyqM recId95z+WgUQKcUw3KfWloHjvQMebmR2LdReoDY2qY6vh7ZdBZ7Jpo64Ola/Dxt Ylmc7LWfdFRw3kAUyqYnbpdMp90Tl9Lnd548l4UlalpQTkYey+X9YV/bOspKPC8l 5IBiZ0NJUIgrli5iUE5MKRDI0o9YvdVLuClKl9fUqhOLXT0KRJ5qcQlQ3VWRyAvJ f3n1X3zPVg0cWIM6y+QoqCVVGHvIB86gZEyF9q8bYS6iuMCQg1spoSLqpyu2ojL3 vedPo0/h0ADwcpLyY9TQFDoqXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBIB4/eX ulo3GSc3iLhDBFxhTuK5MB8GA1UdIwQYMBaAFD16TgqZrxXvCzeQ0OeWHoh1KBmD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Qjg4MC8xRjUxMThBNEEy RUYxMUU5OUQ0RTBBNUJDNEY5QUUwMi9QWHBPQ3BtdkZlOExONURRNTVZZWlIVW9H WU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BYcE9DcG12RmU4TE41RFE1NVllaUhVb0dZTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Qjg4MC8xRjUxMThBNEEyRUYxMUU5OUQ0RTBBNUJDNEY5QUUwMi9QWHBPQ3BtdkZl OExONURRNTVZZWlIVW9HWU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdHw+PoYhuAjWNONHPPAZzBYJsRWCtmf94n1hC7tQs3LfJEH2Favp7 5yuiQiiQrApBBdm3e/xSP1qEJRaNPmEgSzxmbqzmOsNOFEic8YGucGDWz3Akf1oG +33ecdCjedLwVy/tz6xPthzP7K8RA6M4vRcWZCQqcWq3RQIjQd4f3iG1VegmpFvs VVnJupgio7/2TR1PvMbYYGSjTXi9wsegsw42y+zOvEcxPWlnV8R25NV1UWBkFyik vdBtShalmwuazjzydkWpCvOdQaAA8XUZmUJpm7IlZeZlT79nMaLdbHN9kmr3TA4g POly6JLPsRZ99nMY1Q8LvubVGlZies0B -----END CERTIFICATE-----Generated at Sun Aug 24 21:56:20 2025 by rpki-client