$ rpki-client -vvf rpki.apnic.net/member_repository/A9173FAC/B8F5C76A101811F080BCC348C4F9AE02/PxqOo9KtxuyyNg4MN2zlWbn_cfI.mft File: PxqOo9KtxuyyNg4MN2zlWbn_cfI.mft (raw, json) Hash identifier: MdpKdrdNJ0jtrhzU4EH09+FKxjC3XgxlZDThLq2zXfY= Subject key identifier: 19:5E:BE:70:63:0F:A4:29:66:5F:B5:CD:9A:27:D4:5D:7D:B0:86:E4 Authority key identifier: 3F:1A:8E:A3:D2:AD:C6:EC:B2:36:0E:0C:37:6C:E5:59:B9:FF:71:F2 Certificate issuer: /CN=A9173FAC/serialNumber=3F1A8EA3D2ADC6ECB2360E0C376CE559B9FF71F2 Certificate serial: 57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxqOo9KtxuyyNg4MN2zlWbn_cfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173FAC/B8F5C76A101811F080BCC348C4F9AE02/PxqOo9KtxuyyNg4MN2zlWbn_cfI.mft Manifest number: 57 Signing time: Fri 19 Sep 2025 07:56:29 +0000 Manifest this update: Fri 19 Sep 2025 07:56:29 +0000 Manifest next update: Fri 26 Sep 2025 07:56:28 +0000 Files and hashes: 1: PxqOo9KtxuyyNg4MN2zlWbn_cfI.crl (hash: 7o+CJ7+75oIc4KtEOI1cIBRXJZJg8e1B9NA1ncHHerk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173FAC/B8F5C76A101811F080BCC348C4F9AE02/PxqOo9KtxuyyNg4MN2zlWbn_cfI.crl rsync://rpki.apnic.net/member_repository/A9173FAC/B8F5C76A101811F080BCC348C4F9AE02/PxqOo9KtxuyyNg4MN2zlWbn_cfI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxqOo9KtxuyyNg4MN2zlWbn_cfI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 07:06:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 87 (0x57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173FAC, serialNumber=3F1A8EA3D2ADC6ECB2360E0C376CE559B9FF71F2 Validity Not Before: Sep 19 07:56:29 2025 GMT Not After : Sep 26 07:56:28 2025 GMT Subject: CN=68cd0cad-bade Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3c:50:27:f9:78:54:d7:04:f8:f5:1c:83:93: 96:1f:40:68:62:bc:78:11:9c:4f:f7:41:b1:f3:65: 4d:16:20:0c:b3:33:49:a7:14:6d:79:7e:66:ff:cb: c0:ae:41:73:91:5a:a3:32:40:57:8b:0d:25:92:c8: 07:0b:67:88:1a:39:e9:af:8d:eb:c3:a1:c4:ba:8f: a6:dd:b7:20:6a:a3:76:2d:30:1d:b6:b5:14:34:ad: e4:34:32:1b:8a:dd:0a:24:8d:61:19:e7:63:bf:61: 8c:e3:0e:6c:e6:0e:17:a9:91:a0:fd:02:89:31:4e: 2c:37:a5:9f:58:02:f8:53:24:c8:a6:e1:37:b9:02: e7:f6:1e:28:c3:d3:37:21:f0:97:30:63:92:b1:db: 52:b3:4c:c3:49:0d:9b:ef:96:2d:cc:d9:8b:e5:f7: 62:13:fe:08:1f:79:56:84:22:5a:af:6a:d0:af:e8: c1:ee:a5:bb:77:f7:26:3d:97:68:7f:d7:8b:a5:bd: bb:ba:e8:d0:ff:4d:7e:b5:b0:74:cd:7d:4e:08:6b: a7:a5:1b:fc:94:b8:b1:f3:63:4f:e5:34:e4:2f:79: 40:7e:7f:e1:a2:b9:27:c5:98:e2:97:14:e4:4a:3d: f9:96:de:ff:a5:54:fb:29:dc:c3:81:b7:9b:40:d8: 1f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:5E:BE:70:63:0F:A4:29:66:5F:B5:CD:9A:27:D4:5D:7D:B0:86:E4 X509v3 Authority Key Identifier: keyid:3F:1A:8E:A3:D2:AD:C6:EC:B2:36:0E:0C:37:6C:E5:59:B9:FF:71:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173FAC/B8F5C76A101811F080BCC348C4F9AE02/PxqOo9KtxuyyNg4MN2zlWbn_cfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxqOo9KtxuyyNg4MN2zlWbn_cfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173FAC/B8F5C76A101811F080BCC348C4F9AE02/PxqOo9KtxuyyNg4MN2zlWbn_cfI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:6e:63:26:e8:76:b6:5c:cf:83:3c:6e:bc:b7:28:5c:f7:92: 29:90:d8:80:f5:9e:7c:c1:6e:8c:77:f9:de:9c:93:ce:4b:5d: e9:3c:7e:53:07:03:49:52:03:aa:ba:d3:61:af:64:10:9f:71: a4:86:cd:d7:14:c1:93:9b:86:b9:7b:ca:f5:93:b2:14:82:62: 53:e2:71:b8:a8:e8:d0:66:2b:0c:4c:aa:1e:d2:09:22:5b:ff: a9:b7:4b:de:9a:18:2b:ee:28:79:93:7d:de:d3:07:c6:dd:76: bc:b3:a3:71:09:38:27:95:b9:b3:27:be:3e:eb:dd:94:1b:df: e3:dd:22:c4:6e:23:fa:24:96:14:5b:25:12:33:b4:e4:92:a7: dd:3e:0c:43:b4:01:39:b2:62:1d:6e:57:2d:6d:7f:b5:3c:79: 0c:70:64:48:97:d4:1f:74:5c:e3:c4:59:c2:59:9e:14:a5:d5: 6e:84:a1:38:dd:a3:a7:35:0d:6f:c4:70:6f:cb:8a:29:30:fa: 1c:3e:a9:c1:98:c0:7c:3c:2a:ac:09:2c:73:ed:bf:8b:3d:a8: a2:ca:7b:07:22:be:67:cf:e1:d6:cc:1a:b3:72:7e:d2:64:0c: 8f:b2:23:e1:19:67:d5:c5:6c:ee:23:47:c6:ee:f7:d7:64:66: 81:d4:c8:e2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 M0ZBQzExMC8GA1UEBRMoM0YxQThFQTNEMkFEQzZFQ0IyMzYwRTBDMzc2Q0U1NTlC OUZGNzFGMjAeFw0yNTA5MTkwNzU2MjlaFw0yNTA5MjYwNzU2MjhaMBgxFjAUBgNV BAMTDTY4Y2QwY2FkLWJhZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0PFAn+XhU1wT49RyDk5YfQGhivHgRnE/3QbHzZU0WIAyzM0mnFG15fmb/y8Cu QXORWqMyQFeLDSWSyAcLZ4gaOemvjevDocS6j6bdtyBqo3YtMB22tRQ0reQ0MhuK 3QokjWEZ52O/YYzjDmzmDhepkaD9AokxTiw3pZ9YAvhTJMim4Te5Auf2HijD0zch 8JcwY5Kx21KzTMNJDZvvli3M2Yvl92IT/ggfeVaEIlqvatCv6MHupbt39yY9l2h/ 14ulvbu66ND/TX61sHTNfU4Ia6elG/yUuLHzY0/lNOQveUB+f+GiuSfFmOKXFORK PfmW3v+lVPsp3MOBt5tA2B9XAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUGV6+cGMP pClmX7XNmifUXX2whuQwHwYDVR0jBBgwFoAUPxqOo9KtxuyyNg4MN2zlWbn/cfIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTczRkFDL0I4RjVDNzZBMTAx ODExRjA4MEJDQzM0OEM0RjlBRTAyL1B4cU9vOUt0eHV5eU5nNE1OMnpsV2JuX2Nm SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUHhxT285S3R4dXl5Tmc0TU4yemxXYm5fY2ZJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcz RkFDL0I4RjVDNzZBMTAxODExRjA4MEJDQzM0OEM0RjlBRTAyL1B4cU9vOUt0eHV5 eU5nNE1OMnpsV2JuX2NmSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG9uYybodrZcz4M8bry3KFz3kimQ2ID1nnzBbox3+d6ck85LXek8flMH A0lSA6q602GvZBCfcaSGzdcUwZObhrl7yvWTshSCYlPicbio6NBmKwxMqh7SCSJb /6m3S96aGCvuKHmTfd7TB8bddryzo3EJOCeVubMnvj7r3ZQb3+PdIsRuI/oklhRb JRIztOSSp90+DEO0ATmyYh1uVy1tf7U8eQxwZEiX1B90XOPEWcJZnhSl1W6EoTjd o6c1DW/EcG/Liikw+hw+qcGYwHw8KqwJLHPtv4s9qKLKewcivmfP4dbMGrNyftJk DI+yI+EZZ9XFbO4jR8bu99dkZoHUyOI= -----END CERTIFICATE-----Generated at Fri Sep 19 09:15:41 2025 by rpki-client