$ rpki-client -vvf rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft File: PX_qy2M6a4KTI7HplE1K-Y3do3I.mft (raw, json) Hash identifier: PXqH4x/zXMNRWedR2w/TiW/JKKV1OugmCdle1BP1vk8= Subject key identifier: BF:5B:37:F6:42:FD:8D:5B:44:DC:65:5E:56:B5:DD:02:CA:FF:87:D1 Authority key identifier: 3D:7F:EA:CB:63:3A:6B:82:93:23:B1:E9:94:4D:4A:F9:8D:DD:A3:72 Certificate issuer: /CN=A9172BD3/serialNumber=3D7FEACB633A6B829323B1E9944D4AF98DDDA372 Certificate serial: 0141 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PX_qy2M6a4KTI7HplE1K-Y3do3I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft Manifest number: 013B Signing time: Fri 05 Sep 2025 04:52:38 +0000 Manifest this update: Fri 05 Sep 2025 04:52:38 +0000 Manifest next update: Fri 12 Sep 2025 04:52:38 +0000 Files and hashes: 1: PX_qy2M6a4KTI7HplE1K-Y3do3I.crl (hash: b+ovN+RygZWd6X1/uDddJT1QNCR3hTm0i2KJN/10MnY=) 2: 78321A66068D11EF92608943C4F9AE02.roa (hash: t3FRQePlchRMM21FbtXsaZzbDzSWRANgfDaLHDn0f9I=) 3: 97F15FD8068D11EF839A3054C4F9AE02.roa (hash: vjgahSKHgAt0pKH9ZvyBQssVmzZCnj8JvOvCUHQg/Eg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.crl rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PX_qy2M6a4KTI7HplE1K-Y3do3I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 04:52:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 321 (0x141) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172BD3, serialNumber=3D7FEACB633A6B829323B1E9944D4AF98DDDA372 Validity Not Before: Sep 5 04:52:38 2025 GMT Not After : Sep 12 04:52:38 2025 GMT Subject: CN=68ba6c96-2027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ec:29:b5:b2:98:d0:2d:f6:40:8d:4c:31:ef: 96:94:94:f2:14:3c:7a:95:d8:0a:55:3c:c6:ce:a1: ed:65:a7:0f:d9:7e:6a:87:b5:01:23:5d:75:11:12: a2:be:a4:68:e4:08:69:1d:50:f6:4b:63:51:35:17: 19:44:46:e2:65:73:9d:22:3a:50:b5:72:61:b5:f7: 40:06:28:4e:c5:e1:44:b1:31:96:59:42:d4:1c:9f: fc:a4:3a:df:29:60:67:32:33:cf:98:5a:8b:05:7c: c5:3f:9e:1f:8a:e6:f0:f9:da:e1:c3:ce:4c:5e:a1: e0:de:fe:1e:d8:42:b4:17:17:82:21:71:20:c6:41: 9e:92:8c:5e:03:eb:16:ac:1f:24:6e:bc:67:68:58: 71:d6:a3:7f:df:9a:21:a3:21:77:d3:bb:cf:83:6e: 36:8f:3e:8e:e0:58:38:88:61:bd:b4:00:02:00:fe: 4f:dd:9c:99:dd:39:54:02:1a:aa:35:1c:80:03:af: 67:38:10:0c:58:6d:28:9d:8a:6f:2c:c7:3d:6d:d6: b0:41:06:22:e6:82:e3:5c:e1:22:94:ea:e7:ec:bb: ca:22:c2:d6:cd:ad:8a:5a:9e:25:30:dc:11:e7:c1: 40:cd:29:07:bc:a5:6e:92:eb:1f:2a:1a:38:2b:f4: fe:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:5B:37:F6:42:FD:8D:5B:44:DC:65:5E:56:B5:DD:02:CA:FF:87:D1 X509v3 Authority Key Identifier: keyid:3D:7F:EA:CB:63:3A:6B:82:93:23:B1:E9:94:4D:4A:F9:8D:DD:A3:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PX_qy2M6a4KTI7HplE1K-Y3do3I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:97:6a:7f:91:00:6d:ab:e3:00:ed:48:2d:5c:d5:93:c3:42: 92:b6:f8:a4:87:77:83:5e:24:fe:c7:91:3b:9a:8c:ce:79:4b: f9:14:cf:cf:e4:db:22:a0:af:40:a8:47:54:73:d9:d9:df:10: e9:81:57:c0:16:8b:1c:b4:47:ac:40:0f:e4:73:b0:68:67:3b: 64:1d:c4:2f:15:c1:2d:43:25:06:35:61:40:e0:8c:6f:dc:25: 69:ba:72:76:9f:58:14:49:8f:de:25:55:2a:07:29:0b:42:6f: 6d:be:15:2c:56:cd:78:ec:90:0d:00:f5:5d:c8:d0:39:b8:7c: ef:a5:83:22:bc:d4:bf:80:54:2a:46:4f:ba:4b:da:68:e8:3b: 73:fe:45:ab:a0:e5:b2:39:28:fb:df:34:2c:fb:b7:90:4a:eb: f9:d0:c2:78:5c:53:44:8c:13:8a:25:a4:e8:60:ee:e8:8e:d2: 33:75:33:b4:d9:55:ff:65:b4:15:e0:1c:1b:43:77:7c:99:af: d6:7f:76:79:f6:39:9a:ad:fc:90:76:e9:33:75:f3:0e:5d:6a: d5:ee:a9:10:6e:05:fc:3c:e3:81:ae:ab:4e:80:b0:e0:bb:98: 18:7f:84:a9:63:74:3e:8d:ac:ba:50:b8:68:82:b6:fa:d5:99: 9d:ab:b6:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJCRDMxMTAvBgNVBAUTKDNEN0ZFQUNCNjMzQTZCODI5MzIzQjFFOTk0NEQ0QUY5 OEREREEzNzIwHhcNMjUwOTA1MDQ1MjM4WhcNMjUwOTEyMDQ1MjM4WjAYMRYwFAYD VQQDEw02OGJhNmM5Ni0yMDI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv+wptbKY0C32QI1MMe+WlJTyFDx6ldgKVTzGzqHtZacP2X5qh7UBI111ERKi vqRo5AhpHVD2S2NRNRcZREbiZXOdIjpQtXJhtfdABihOxeFEsTGWWULUHJ/8pDrf KWBnMjPPmFqLBXzFP54fiubw+drhw85MXqHg3v4e2EK0FxeCIXEgxkGekoxeA+sW rB8kbrxnaFhx1qN/35ohoyF307vPg242jz6O4Fg4iGG9tAACAP5P3ZyZ3TlUAhqq NRyAA69nOBAMWG0onYpvLMc9bdawQQYi5oLjXOEilOrn7LvKIsLWza2KWp4lMNwR 58FAzSkHvKVukusfKho4K/T+GwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL9bN/ZC /Y1bRNxlXla13QLK/4fRMB8GA1UdIwQYMBaAFD1/6stjOmuCkyOx6ZRNSvmN3aNy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkJEMy82NEJGRjE0RUIz RjcxMUVFOTJBNDc3MTdDNEY5QUUwMi9QWF9xeTJNNmE0S1RJN0hwbEUxSy1ZM2Rv M0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BYX3F5Mk02YTRLVEk3SHBsRTFLLVkzZG8zSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkJEMy82NEJGRjE0RUIzRjcxMUVFOTJBNDc3MTdDNEY5QUUwMi9QWF9xeTJNNmE0 S1RJN0hwbEUxSy1ZM2RvM0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARl2p/kQBtq+MA7UgtXNWTw0KStvikh3eDXiT+x5E7mozOeUv5FM/P 5NsioK9AqEdUc9nZ3xDpgVfAFosctEesQA/kc7BoZztkHcQvFcEtQyUGNWFA4Ixv 3CVpunJ2n1gUSY/eJVUqBykLQm9tvhUsVs147JANAPVdyNA5uHzvpYMivNS/gFQq Rk+6S9po6Dtz/kWroOWyOSj73zQs+7eQSuv50MJ4XFNEjBOKJaToYO7ojtIzdTO0 2VX/ZbQV4BwbQ3d8ma/Wf3Z59jmarfyQdukzdfMOXWrV7qkQbgX8POOBrqtOgLDg u5gYf4SpY3Q+jay6ULhogrb61Zmdq7aY -----END CERTIFICATE-----Generated at Fri Sep 5 11:29:52 2025 by rpki-client