$ rpki-client -vvf rpki.apnic.net/member_repository/A9166292/AEB56750468C11EC8D7BF268C4F9AE02/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.mft File: pPsgxySXJi3Ed_FJQwCPkQd-ZZs.mft (raw, json) Hash identifier: mYn7c22aVgIFIp2SeWxknYQto24pwckGMXf+SiiPY1Y= Subject key identifier: AD:39:5D:F1:2A:5C:A1:93:74:BD:D9:67:F8:7A:D4:D3:88:F1:FD:DA Authority key identifier: A4:FB:20:C7:24:97:26:2D:C4:77:F1:49:43:00:8F:91:07:7E:65:9B Certificate issuer: /CN=A9166292/serialNumber=A4FB20C72497262DC477F14943008F91077E659B Certificate serial: 04B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166292/AEB56750468C11EC8D7BF268C4F9AE02/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.mft Manifest number: 04AF Signing time: Fri 19 Sep 2025 00:16:52 +0000 Manifest this update: Fri 19 Sep 2025 00:16:52 +0000 Manifest next update: Fri 26 Sep 2025 00:16:52 +0000 Files and hashes: 1: pPsgxySXJi3Ed_FJQwCPkQd-ZZs.crl (hash: FCE5jdaYdHdk3OJ+q7+891TSmQhJqkOtBXmBnT18LHQ=) 2: 78771A0C490D11EC8E4D1136C4F9AE02.roa (hash: SSW9TV8jZN6fvYq4gIStDsbEdDvovlOhUtObC7g07YA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166292/AEB56750468C11EC8D7BF268C4F9AE02/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.crl rsync://rpki.apnic.net/member_repository/A9166292/AEB56750468C11EC8D7BF268C4F9AE02/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 00:16:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1207 (0x4b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166292, serialNumber=A4FB20C72497262DC477F14943008F91077E659B Validity Not Before: Sep 19 00:16:52 2025 GMT Not After : Sep 26 00:16:52 2025 GMT Subject: CN=68cca0f4-e99e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d3:ae:ba:67:9f:8c:18:28:4c:b4:dd:73:f9: 35:24:1d:99:ba:f5:75:60:3d:b7:f5:a2:81:5c:d1: 81:ed:d8:2a:ae:d6:34:84:32:64:09:a9:cd:ea:44: c4:c6:1b:32:2d:42:1f:f3:2a:88:2f:a7:f9:16:dc: 18:4d:aa:56:5f:03:cc:9a:08:dd:e7:e7:ec:45:4a: 2e:a2:a8:42:d1:57:8f:44:e8:d7:5e:6a:74:22:6f: 6a:1d:02:96:2d:89:91:5a:2b:0a:81:3d:cc:a4:ec: b9:13:0a:9c:4a:cf:15:98:2a:3d:59:32:6e:c5:f8: 0c:61:ea:f5:0d:ac:df:47:08:99:0c:ac:2b:01:5e: f6:b3:3e:4a:88:ba:84:f0:66:5a:03:a6:4f:a6:7b: 19:cb:31:ec:b0:9c:88:de:f7:9e:11:80:ff:20:97: a1:54:27:64:3d:97:1a:7b:c9:4f:26:18:95:37:dd: af:76:45:c5:cb:98:bb:f8:cb:05:07:ea:06:c4:a8: 2e:f0:b6:90:ca:c1:3d:24:c3:48:27:03:b0:1a:b9: 04:75:4f:d1:3f:a6:55:bb:7e:5d:89:8e:e3:65:6b: 79:e8:09:93:70:10:31:ca:ef:9b:ff:fb:8d:e8:d3: 7b:00:aa:ab:48:a0:d9:b4:51:e5:fc:e0:10:ed:ac: 55:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:39:5D:F1:2A:5C:A1:93:74:BD:D9:67:F8:7A:D4:D3:88:F1:FD:DA X509v3 Authority Key Identifier: keyid:A4:FB:20:C7:24:97:26:2D:C4:77:F1:49:43:00:8F:91:07:7E:65:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166292/AEB56750468C11EC8D7BF268C4F9AE02/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166292/AEB56750468C11EC8D7BF268C4F9AE02/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:06:99:a6:d3:e7:e2:3e:a2:89:cd:7c:80:02:a1:e5:a1:37: 22:18:ff:a7:0e:b2:48:05:83:64:1d:d4:b8:00:7c:16:4f:cc: df:e2:3e:dc:62:be:a8:d9:6c:98:3e:ac:84:53:9e:40:74:5c: df:18:57:26:1a:a6:62:22:7b:57:8a:27:25:63:88:41:52:8d: eb:94:41:fe:37:ab:c0:71:92:a0:e9:88:77:b8:e7:ba:80:63: cf:58:d8:80:f3:59:42:ff:37:82:74:fd:93:3d:b1:5c:25:9b: ab:d3:c8:2c:ba:b6:97:34:ec:ae:34:8b:c5:60:02:ab:36:a1: 12:15:fc:20:de:6c:73:c3:dd:f0:cd:16:47:00:85:b3:da:d0: 33:5c:d8:a9:14:89:4d:c1:bb:9f:2a:0f:84:1b:4e:fc:1d:81: 95:f1:ee:9e:4f:b7:d8:41:1d:19:07:d1:e1:d5:ab:cd:f2:a7: 5e:ea:65:12:88:fb:76:d5:53:9d:db:e4:ef:52:53:79:9f:06: 38:89:c7:c2:ae:53:39:ed:b6:7d:66:75:12:1e:54:4a:cf:54: 3c:00:90:91:93:51:98:db:d1:b2:64:97:e6:d7:2d:80:48:15: ca:cf:69:72:d3:14:29:0e:e9:17:90:5a:81:97:88:6c:db:65: 78:ed:e4:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjYyOTIxMTAvBgNVBAUTKEE0RkIyMEM3MjQ5NzI2MkRDNDc3RjE0OTQzMDA4Rjkx MDc3RTY1OUIwHhcNMjUwOTE5MDAxNjUyWhcNMjUwOTI2MDAxNjUyWjAYMRYwFAYD VQQDEw02OGNjYTBmNC1lOTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApNOuumefjBgoTLTdc/k1JB2ZuvV1YD239aKBXNGB7dgqrtY0hDJkCanN6kTE xhsyLUIf8yqIL6f5FtwYTapWXwPMmgjd5+fsRUouoqhC0VePROjXXmp0Im9qHQKW LYmRWisKgT3MpOy5EwqcSs8VmCo9WTJuxfgMYer1DazfRwiZDKwrAV72sz5KiLqE 8GZaA6ZPpnsZyzHssJyI3veeEYD/IJehVCdkPZcae8lPJhiVN92vdkXFy5i7+MsF B+oGxKgu8LaQysE9JMNIJwOwGrkEdU/RP6ZVu35diY7jZWt56AmTcBAxyu+b//uN 6NN7AKqrSKDZtFHl/OAQ7axVuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK05XfEq XKGTdL3ZZ/h61NOI8f3aMB8GA1UdIwQYMBaAFKT7IMcklyYtxHfxSUMAj5EHfmWb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NjI5Mi9BRUI1Njc1MDQ2 OEMxMUVDOEQ3QkYyNjhDNEY5QUUwMi9wUHNneHlTWEppM0VkX0ZKUXdDUGtRZC1a WnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BQc2d4eVNYSmkzRWRfRkpRd0NQa1FkLVpacy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NjI5Mi9BRUI1Njc1MDQ2OEMxMUVDOEQ3QkYyNjhDNEY5QUUwMi9wUHNneHlTWEpp M0VkX0ZKUXdDUGtRZC1aWnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGBpmm0+fiPqKJzXyAAqHloTciGP+nDrJIBYNkHdS4AHwWT8zf4j7c Yr6o2WyYPqyEU55AdFzfGFcmGqZiIntXiiclY4hBUo3rlEH+N6vAcZKg6Yh3uOe6 gGPPWNiA81lC/zeCdP2TPbFcJZur08gsuraXNOyuNIvFYAKrNqESFfwg3mxzw93w zRZHAIWz2tAzXNipFIlNwbufKg+EG078HYGV8e6eT7fYQR0ZB9Hh1avN8qde6mUS iPt21VOd2+TvUlN5nwY4icfCrlM57bZ9ZnUSHlRKz1Q8AJCRk1GY29GyZJfm1y2A SBXKz2ly0xQpDukXkFqBl4hs22V47eTI -----END CERTIFICATE-----Generated at Fri Sep 19 05:10:09 2025 by rpki-client