$ rpki-client -vvf rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft File: PX_qy2M6a4KTI7HplE1K-Y3do3I.mft (raw, json) Hash identifier: xQXq80Dij+knE2Wz38Gj4PR83CLAZptsIo9YpBednnE= Subject key identifier: 26:86:D4:8A:D9:AE:4B:52:68:4F:7C:B6:7E:2A:80:D2:0A:46:B3:AF Authority key identifier: 3D:7F:EA:CB:63:3A:6B:82:93:23:B1:E9:94:4D:4A:F9:8D:DD:A3:72 Certificate issuer: /CN=A9172BD3/serialNumber=3D7FEACB633A6B829323B1E9944D4AF98DDDA372 Certificate serial: 010F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PX_qy2M6a4KTI7HplE1K-Y3do3I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft Manifest number: 0109 Signing time: Sat 31 May 2025 05:15:54 +0000 Manifest this update: Sat 31 May 2025 05:15:53 +0000 Manifest next update: Sat 07 Jun 2025 05:15:53 +0000 Files and hashes: 1: PX_qy2M6a4KTI7HplE1K-Y3do3I.crl (hash: nfOimPX1vZQrv82XWaNc4tfifGP5SjhW3D6tx3aVaY8=) 2: 78321A66068D11EF92608943C4F9AE02.roa (hash: t3FRQePlchRMM21FbtXsaZzbDzSWRANgfDaLHDn0f9I=) 3: 97F15FD8068D11EF839A3054C4F9AE02.roa (hash: vjgahSKHgAt0pKH9ZvyBQssVmzZCnj8JvOvCUHQg/Eg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.crl rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PX_qy2M6a4KTI7HplE1K-Y3do3I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:15:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 271 (0x10f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172BD3, serialNumber=3D7FEACB633A6B829323B1E9944D4AF98DDDA372 Validity Not Before: May 31 05:15:53 2025 GMT Not After : Jun 7 05:15:53 2025 GMT Subject: CN=683a908a-a2d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:bd:21:4e:df:ea:f2:4c:94:54:32:75:fb:47: c1:3e:98:47:cd:06:3c:8a:6e:8c:87:c5:47:57:dc: 19:3a:8e:66:0f:90:32:c0:34:67:75:26:2d:5a:98: bc:72:61:4d:a2:c0:71:2a:5a:82:2c:12:3c:8b:96: ab:d0:00:54:2d:f0:9f:bd:ec:41:03:f0:93:94:da: 10:d5:9c:c7:02:d9:d3:15:ec:25:a3:8d:03:14:e9: d8:dc:0a:59:46:d2:1c:df:5a:66:84:a1:e7:53:68: 9e:88:72:3f:69:cc:1d:84:16:62:0d:e4:11:c6:c9: c9:a9:ac:2a:0c:5b:fd:25:cb:86:ce:4f:b5:d4:41: fa:33:78:8e:e4:37:b2:34:9e:cb:4b:3c:81:c4:24: b8:4b:7b:50:df:a4:24:9e:6f:d7:fc:c5:4f:cd:df: 92:b4:86:31:f0:db:fe:88:6d:04:9c:81:bc:f8:69: 29:ab:dd:8c:c6:8b:3c:49:cd:67:9d:1b:d1:82:9b: c2:0e:71:59:a4:9c:bd:75:c2:01:67:e1:6a:bd:8b: 0c:c6:6f:10:59:6b:2b:76:95:78:36:c4:60:bb:85: 2d:f4:6d:d2:0e:f0:9f:d1:9d:41:96:f1:45:b9:2a: 6d:a5:ac:0e:ea:fc:7f:aa:45:34:8b:1b:21:99:8b: e3:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:86:D4:8A:D9:AE:4B:52:68:4F:7C:B6:7E:2A:80:D2:0A:46:B3:AF X509v3 Authority Key Identifier: keyid:3D:7F:EA:CB:63:3A:6B:82:93:23:B1:E9:94:4D:4A:F9:8D:DD:A3:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PX_qy2M6a4KTI7HplE1K-Y3do3I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:3d:bb:f1:18:99:b2:e3:22:f5:d3:eb:72:07:64:8d:a8:18: ba:ce:e6:1a:31:03:99:14:85:3e:aa:b4:f2:d3:2e:d4:25:a7: 40:b0:f0:8e:3d:57:84:1c:b5:94:b2:fa:a8:1d:70:ab:0d:2b: a9:4a:0b:2c:fd:62:9c:e6:74:f5:cd:9f:df:73:0e:b7:54:7e: f2:0a:d3:0a:ff:ae:57:ba:ca:e9:14:c3:75:77:a6:87:70:ff: d0:bb:a4:2a:2c:03:6c:9a:08:10:ea:ec:84:fe:ae:be:25:4c: 9e:9a:c1:04:ef:3e:ec:bb:4c:41:ae:b6:23:4f:7c:7e:a9:68: 95:de:4c:e1:0b:08:d8:e0:07:6b:f7:3d:45:fa:f1:40:d0:74: a5:d0:ba:cb:62:6e:45:da:6e:c8:73:3c:27:a8:53:99:8d:85: 28:21:0b:11:4a:86:4b:0f:fa:9d:e2:f0:00:74:dd:27:a2:06: 9a:2e:65:9d:92:dd:da:45:80:dc:3d:23:1a:f7:0d:67:e3:43: 29:91:33:af:f4:a5:ef:5f:02:4f:c7:94:70:31:44:c4:5d:34: 63:a2:bd:66:87:4e:4f:c8:ea:e7:6a:3f:ea:c0:22:ed:05:c6: b3:f9:1f:90:31:e0:57:f0:6f:eb:07:f2:90:94:c3:d8:63:d8: c8:52:2f:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJCRDMxMTAvBgNVBAUTKDNEN0ZFQUNCNjMzQTZCODI5MzIzQjFFOTk0NEQ0QUY5 OEREREEzNzIwHhcNMjUwNTMxMDUxNTUzWhcNMjUwNjA3MDUxNTUzWjAYMRYwFAYD VQQDEw02ODNhOTA4YS1hMmQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1b0hTt/q8kyUVDJ1+0fBPphHzQY8im6Mh8VHV9wZOo5mD5AywDRndSYtWpi8 cmFNosBxKlqCLBI8i5ar0ABULfCfvexBA/CTlNoQ1ZzHAtnTFewlo40DFOnY3ApZ RtIc31pmhKHnU2ieiHI/acwdhBZiDeQRxsnJqawqDFv9JcuGzk+11EH6M3iO5Dey NJ7LSzyBxCS4S3tQ36Qknm/X/MVPzd+StIYx8Nv+iG0EnIG8+Gkpq92Mxos8Sc1n nRvRgpvCDnFZpJy9dcIBZ+FqvYsMxm8QWWsrdpV4NsRgu4Ut9G3SDvCf0Z1BlvFF uSptpawO6vx/qkU0ixshmYvjCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCaG1IrZ rktSaE98tn4qgNIKRrOvMB8GA1UdIwQYMBaAFD1/6stjOmuCkyOx6ZRNSvmN3aNy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkJEMy82NEJGRjE0RUIz RjcxMUVFOTJBNDc3MTdDNEY5QUUwMi9QWF9xeTJNNmE0S1RJN0hwbEUxSy1ZM2Rv M0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BYX3F5Mk02YTRLVEk3SHBsRTFLLVkzZG8zSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkJEMy82NEJGRjE0RUIzRjcxMUVFOTJBNDc3MTdDNEY5QUUwMi9QWF9xeTJNNmE0 S1RJN0hwbEUxSy1ZM2RvM0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtPbvxGJmy4yL10+tyB2SNqBi6zuYaMQOZFIU+qrTy0y7UJadAsPCO PVeEHLWUsvqoHXCrDSupSgss/WKc5nT1zZ/fcw63VH7yCtMK/65XusrpFMN1d6aH cP/Qu6QqLANsmggQ6uyE/q6+JUyemsEE7z7su0xBrrYjT3x+qWiV3kzhCwjY4Adr 9z1F+vFA0HSl0LrLYm5F2m7IczwnqFOZjYUoIQsRSoZLD/qd4vAAdN0nogaaLmWd kt3aRYDcPSMa9w1n40MpkTOv9KXvXwJPx5RwMUTEXTRjor1mh05PyOrnaj/qwCLt Bcaz+R+QMeBX8G/rB/KQlMPYY9jIUi+n -----END CERTIFICATE-----Generated at Sat May 31 17:02:24 2025 by rpki-client