$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.mft File: PzbQyAdues-oPQS3IwcXKogp1bM.mft (raw, json) Hash identifier: E8sOp+kRN9Leiqq4PhlkXQlIkOpQLRcWfYjZQ4sz41s= Subject key identifier: B9:B0:14:D0:56:7C:5A:91:FC:6D:68:FF:54:29:5B:6A:78:DA:6C:99 Authority key identifier: 3F:36:D0:C8:07:6E:7A:CF:A8:3D:04:B7:23:07:17:2A:88:29:D5:B3 Certificate issuer: /CN=A9172B65/serialNumber=3F36D0C8076E7ACFA83D04B72307172A8829D5B3 Certificate serial: D7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PzbQyAdues-oPQS3IwcXKogp1bM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.mft Manifest number: D5 Signing time: Fri 05 Sep 2025 06:02:13 +0000 Manifest this update: Fri 05 Sep 2025 06:02:12 +0000 Manifest next update: Fri 12 Sep 2025 06:02:12 +0000 Files and hashes: 1: PzbQyAdues-oPQS3IwcXKogp1bM.crl (hash: 5fPbGeXn8XaostnqNx+w0Ps5WLu7DhbTydfsqgorUCg=) 2: 76C3F7C645B711EFA2F0C732C4F9AE02.roa (hash: 6KE/6WiXMHutimLQnkuyk/FwzPL7cpRiOFuQR2vWv2I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.crl rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PzbQyAdues-oPQS3IwcXKogp1bM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 06:02:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 215 (0xd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172B65, serialNumber=3F36D0C8076E7ACFA83D04B72307172A8829D5B3 Validity Not Before: Sep 5 06:02:12 2025 GMT Not After : Sep 12 06:02:12 2025 GMT Subject: CN=68ba7ce4-87b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:06:34:10:a3:86:9d:b7:b0:65:7d:3f:4f:de: 21:55:db:7f:d9:77:8a:b1:83:1f:18:19:88:72:61: a2:f9:3d:b6:0e:2e:ea:99:69:fc:e2:f8:0d:cd:b9: 05:a5:25:64:81:01:7c:38:42:fb:33:bb:2b:b1:0e: b2:35:aa:e5:86:2b:4d:da:d4:f1:b8:9a:fa:08:d8: db:74:9c:0e:04:37:b2:d7:44:e0:38:a8:ec:39:96: 1a:80:6f:0e:4d:c6:c8:e2:2d:73:cf:1b:69:db:6e: 9b:44:0f:6b:be:a1:8a:82:a3:50:14:39:bc:16:4f: 3f:27:8d:d1:70:f4:a2:8b:43:ae:bf:bb:b6:70:05: 9f:26:d4:e7:41:70:14:ac:03:63:97:a8:b1:b0:40: 6e:3e:d6:c5:06:ec:23:55:b0:28:64:76:e0:55:db: e5:6d:5f:19:4a:67:dd:0e:d9:13:d7:0e:0e:3f:cb: 81:97:c4:34:c6:c5:8e:ac:8e:77:a0:29:44:ac:01: 61:4a:72:cb:00:cd:35:2a:94:10:81:95:66:d1:74: 4b:96:3f:5f:93:17:6a:d9:80:83:60:c3:30:5a:bb: 6a:33:16:1b:f2:b8:19:fb:37:bf:d9:d3:7c:d9:af: fe:3a:36:fe:b0:69:74:9e:64:da:d3:47:20:38:88: 74:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:B0:14:D0:56:7C:5A:91:FC:6D:68:FF:54:29:5B:6A:78:DA:6C:99 X509v3 Authority Key Identifier: keyid:3F:36:D0:C8:07:6E:7A:CF:A8:3D:04:B7:23:07:17:2A:88:29:D5:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PzbQyAdues-oPQS3IwcXKogp1bM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:b9:3e:6e:d9:e5:ef:d2:60:92:4f:a6:12:f5:8a:95:f8:a1: 21:7e:eb:c9:24:5c:f1:0b:b5:5f:99:23:0e:0f:1c:43:7b:cb: 06:94:8e:70:17:f6:d9:bb:76:34:66:12:32:59:bb:dd:9a:fe: 0b:bf:40:98:18:59:96:78:ae:40:b7:e4:52:2f:68:8f:4a:68: 6d:fa:fe:5c:4b:82:5f:da:53:d4:26:a4:b3:98:24:24:de:b6: 87:b7:54:f7:a6:85:1c:b0:5d:30:a9:c4:ff:53:41:c5:6a:e1: 76:46:eb:be:8e:8d:a7:d3:ef:9c:59:a7:09:6e:9b:78:e2:11: a3:58:35:da:ac:7c:1d:f8:01:5a:86:d5:67:8a:0f:23:80:46: 16:dc:6c:39:cb:8d:36:c9:14:01:ed:8c:1a:aa:00:54:be:7a: 93:92:71:21:68:4d:ac:b1:07:a4:d4:7f:a0:23:8f:dd:df:52: 54:ea:b3:ea:8a:e8:af:3a:75:9a:60:10:f5:54:22:95:e4:b8: 85:68:6f:b2:20:eb:d9:40:49:1d:86:eb:7d:18:c6:3f:03:83: 88:c5:b9:88:c1:2b:09:6d:9f:9b:8b:01:46:61:2f:e4:e6:85: 5e:8d:4c:e4:5c:d5:93:d7:3f:dd:d6:ba:e9:e3:a6:3a:bb:c8: 6c:83:87:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJCNjUxMTAvBgNVBAUTKDNGMzZEMEM4MDc2RTdBQ0ZBODNEMDRCNzIzMDcxNzJB ODgyOUQ1QjMwHhcNMjUwOTA1MDYwMjEyWhcNMjUwOTEyMDYwMjEyWjAYMRYwFAYD VQQDEw02OGJhN2NlNC04N2IzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyAY0EKOGnbewZX0/T94hVdt/2XeKsYMfGBmIcmGi+T22Di7qmWn84vgNzbkF pSVkgQF8OEL7M7srsQ6yNarlhitN2tTxuJr6CNjbdJwOBDey10TgOKjsOZYagG8O TcbI4i1zzxtp226bRA9rvqGKgqNQFDm8Fk8/J43RcPSii0Ouv7u2cAWfJtTnQXAU rANjl6ixsEBuPtbFBuwjVbAoZHbgVdvlbV8ZSmfdDtkT1w4OP8uBl8Q0xsWOrI53 oClErAFhSnLLAM01KpQQgZVm0XRLlj9fkxdq2YCDYMMwWrtqMxYb8rgZ+ze/2dN8 2a/+Ojb+sGl0nmTa00cgOIh0fQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLmwFNBW fFqR/G1o/1QpW2p42myZMB8GA1UdIwQYMBaAFD820MgHbnrPqD0EtyMHFyqIKdWz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkI2NS8wMTVGNkRFRTQ1 QjcxMUVGQTU5RTEzMzJDNEY5QUUwMi9QemJReUFkdWVzLW9QUVMzSXdjWEtvZ3Ax Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1B6YlF5QWR1ZXMtb1BRUzNJd2NYS29ncDFiTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkI2NS8wMTVGNkRFRTQ1QjcxMUVGQTU5RTEzMzJDNEY5QUUwMi9QemJReUFkdWVz LW9QUVMzSXdjWEtvZ3AxYk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXuT5u2eXv0mCST6YS9YqV+KEhfuvJJFzxC7VfmSMODxxDe8sGlI5w F/bZu3Y0ZhIyWbvdmv4Lv0CYGFmWeK5At+RSL2iPSmht+v5cS4Jf2lPUJqSzmCQk 3raHt1T3poUcsF0wqcT/U0HFauF2Ruu+jo2n0++cWacJbpt44hGjWDXarHwd+AFa htVnig8jgEYW3Gw5y402yRQB7YwaqgBUvnqTknEhaE2ssQek1H+gI4/d31JU6rPq iuivOnWaYBD1VCKV5LiFaG+yIOvZQEkdhut9GMY/A4OIxbmIwSsJbZ+biwFGYS/k 5oVejUzkXNWT1z/d1rrp46Y6u8hsg4fg -----END CERTIFICATE-----Generated at Sat Sep 6 21:12:13 2025 by rpki-client