$ rpki-client -vvf rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/psUEnf_CZCcfSnelrurkd9fu6vM.mft File: psUEnf_CZCcfSnelrurkd9fu6vM.mft (raw, json) Hash identifier: 8aMjKwy8Ch25uOZyWxp0dq7vCxRyjgCqdO4O7IqJgjA= Subject key identifier: CD:22:5F:43:28:4E:A7:5F:47:C9:9E:37:69:75:4F:8F:41:32:F4:E2 Authority key identifier: A6:C5:04:9D:FF:C2:64:27:1F:4A:77:A5:AE:EA:E4:77:D7:EE:EA:F3 Certificate issuer: /CN=A916683C/serialNumber=A6C5049DFFC264271F4A77A5AEEAE477D7EEEAF3 Certificate serial: 0A0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/psUEnf_CZCcfSnelrurkd9fu6vM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/psUEnf_CZCcfSnelrurkd9fu6vM.mft Manifest number: 0A00 Signing time: Wed 20 Aug 2025 19:56:07 +0000 Manifest this update: Wed 20 Aug 2025 19:56:07 +0000 Manifest next update: Wed 27 Aug 2025 19:56:07 +0000 Files and hashes: 1: psUEnf_CZCcfSnelrurkd9fu6vM.crl (hash: iPHIfEYbJw7W+l8NPVBJCcedM7ITcpNEWYa0cS/0CmA=) 2: 800F1868BEB311EAAFE28B42C4F9AE02.roa (hash: wpAzbtu5F53kU4ooHDJQYR2Sx5W2H0NgT0BgO9+1V88=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/psUEnf_CZCcfSnelrurkd9fu6vM.crl rsync://rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/psUEnf_CZCcfSnelrurkd9fu6vM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/psUEnf_CZCcfSnelrurkd9fu6vM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 19:56:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2571 (0xa0b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916683C, serialNumber=A6C5049DFFC264271F4A77A5AEEAE477D7EEEAF3 Validity Not Before: Aug 20 19:56:07 2025 GMT Not After : Aug 27 19:56:07 2025 GMT Subject: CN=68a62857-1ff8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:45:56:e6:d1:a2:9a:1b:e1:c7:ac:30:02:6e: 6b:88:d5:15:25:73:82:b8:7d:bb:03:d9:b2:09:4b: 2f:c6:b0:0c:f4:28:ad:9f:c5:c1:6a:ec:c8:5b:0a: 3b:fe:14:9c:27:3c:2c:c0:27:13:ad:e0:cd:70:2e: 16:81:98:cd:08:a4:d7:8e:1b:94:25:82:6a:b0:55: e2:58:98:ca:92:f2:62:07:fe:55:bf:00:e5:2c:27: 6e:69:8e:1e:7f:fc:9e:0d:18:a3:f5:ed:58:b2:b9: bc:12:18:55:cc:fd:8e:bd:48:42:26:65:ab:56:73: dd:bc:99:a1:0f:b8:3b:f7:73:24:bd:79:b5:96:b9: ab:ed:28:af:c2:4a:a8:5b:08:fd:8a:1b:25:44:18: 9f:5e:ec:8a:f6:55:65:a7:b5:a3:fc:ae:68:47:6d: 4c:fc:fa:c2:7c:72:71:a9:f6:95:ba:d0:23:eb:67: cf:f6:a7:5c:96:67:69:dd:14:4c:dc:c2:6b:24:fa: 7d:0f:a7:20:0e:32:1c:b7:6f:02:b8:03:f4:94:c3: de:b8:7a:4f:c3:7c:46:a5:27:4f:09:53:6f:03:d5: 6e:0d:e9:65:af:a6:b6:fd:9c:a7:4a:f7:ec:47:26: a7:45:62:06:f9:f1:28:d7:ca:83:88:30:42:ca:0e: 8b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:22:5F:43:28:4E:A7:5F:47:C9:9E:37:69:75:4F:8F:41:32:F4:E2 X509v3 Authority Key Identifier: keyid:A6:C5:04:9D:FF:C2:64:27:1F:4A:77:A5:AE:EA:E4:77:D7:EE:EA:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/psUEnf_CZCcfSnelrurkd9fu6vM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/psUEnf_CZCcfSnelrurkd9fu6vM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/psUEnf_CZCcfSnelrurkd9fu6vM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:63:6e:0c:df:a9:86:07:3f:18:a1:6e:a1:0c:2d:55:f2:ff: 92:d3:90:2f:7e:ad:6d:f0:b3:10:02:07:06:d8:75:39:e5:30: c7:72:0c:87:65:7d:56:c7:61:3f:ae:41:02:00:66:0e:76:11: 48:c3:2b:3a:93:fd:30:c4:25:39:4f:23:f9:82:45:97:74:de: 17:20:c1:93:19:9a:09:89:ac:50:5b:95:c9:7f:92:bc:c1:a7: e6:75:57:6a:71:56:5e:09:03:a6:62:15:2e:64:bf:63:59:3d: 61:93:72:30:9b:23:dc:76:7e:aa:68:e9:52:55:91:01:66:55: bd:73:99:b6:44:92:da:da:29:9e:bd:11:fe:8b:2a:06:50:a0: 81:9a:7f:0a:ce:98:55:f4:fb:9b:a8:de:2d:e9:fd:3d:91:c4: 3c:9b:5f:db:5f:e7:c3:a2:d4:25:86:87:ba:95:2a:f3:41:01: 0c:ef:4f:ca:e7:57:a0:ff:04:23:96:f3:42:d0:21:3c:ca:01: cd:73:ef:08:0b:ea:3b:27:7d:45:c5:11:4b:4a:61:09:de:54: 6d:a7:d2:ff:eb:63:2d:f6:f1:83:8a:48:8e:58:6f:c5:a0:04: 25:a8:9f:1f:97:11:10:90:89:4c:6d:9c:0b:8a:69:7d:ac:ed: 5e:fa:58:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCgswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjY4M0MxMTAvBgNVBAUTKEE2QzUwNDlERkZDMjY0MjcxRjRBNzdBNUFFRUFFNDc3 RDdFRUVBRjMwHhcNMjUwODIwMTk1NjA3WhcNMjUwODI3MTk1NjA3WjAYMRYwFAYD VQQDEw02OGE2Mjg1Ny0xZmY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2kVW5tGimhvhx6wwAm5riNUVJXOCuH27A9myCUsvxrAM9Citn8XBauzIWwo7 /hScJzwswCcTreDNcC4WgZjNCKTXjhuUJYJqsFXiWJjKkvJiB/5VvwDlLCduaY4e f/yeDRij9e1Ysrm8EhhVzP2OvUhCJmWrVnPdvJmhD7g793MkvXm1lrmr7Sivwkqo Wwj9ihslRBifXuyK9lVlp7Wj/K5oR21M/PrCfHJxqfaVutAj62fP9qdclmdp3RRM 3MJrJPp9D6cgDjIct28CuAP0lMPeuHpPw3xGpSdPCVNvA9VuDellr6a2/ZynSvfs RyanRWIG+fEo18qDiDBCyg6LuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM0iX0Mo TqdfR8meN2l1T49BMvTiMB8GA1UdIwQYMBaAFKbFBJ3/wmQnH0p3pa7q5HfX7urz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NjgzQy9FMEI1ODAyRTgw N0IxMUVBODI0NDYxMjVDNEY5QUUwMi9wc1VFbmZfQ1pDY2ZTbmVscnVya2Q5ZnU2 dk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BzVUVuZl9DWkNjZlNuZWxydXJrZDlmdTZ2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NjgzQy9FMEI1ODAyRTgwN0IxMUVBODI0NDYxMjVDNEY5QUUwMi9wc1VFbmZfQ1pD Y2ZTbmVscnVya2Q5ZnU2dk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVY24M36mGBz8YoW6hDC1V8v+S05Avfq1t8LMQAgcG2HU55TDHcgyH ZX1Wx2E/rkECAGYOdhFIwys6k/0wxCU5TyP5gkWXdN4XIMGTGZoJiaxQW5XJf5K8 wafmdVdqcVZeCQOmYhUuZL9jWT1hk3IwmyPcdn6qaOlSVZEBZlW9c5m2RJLa2ime vRH+iyoGUKCBmn8KzphV9PubqN4t6f09kcQ8m1/bX+fDotQlhoe6lSrzQQEM70/K 51eg/wQjlvNC0CE8ygHNc+8IC+o7J31FxRFLSmEJ3lRtp9L/62Mt9vGDikiOWG/F oAQlqJ8flxEQkIlMbZwLiml9rO1e+lg/ -----END CERTIFICATE-----Generated at Fri Aug 22 16:22:28 2025 by rpki-client