$ rpki-client -vvf rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.mft File: Ps7q_orHtLE44oRfeGEtk9XFMMY.mft (raw, json) Hash identifier: 24GknEhg2RLLjp53qtJ3uf02pS+GvKmMTHC/ujdmKFQ= Subject key identifier: 6A:5A:BA:DD:20:82:E3:E0:3B:91:04:59:BF:B1:F3:5F:09:D8:0F:EF Authority key identifier: 3E:CE:EA:FE:8A:C7:B4:B1:38:E2:84:5F:78:61:2D:93:D5:C5:30:C6 Certificate issuer: /CN=A9186537/serialNumber=3ECEEAFE8AC7B4B138E2845F78612D93D5C530C6 Certificate serial: 0A65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ps7q_orHtLE44oRfeGEtk9XFMMY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.mft Manifest number: 0A5C Signing time: Wed 20 Aug 2025 19:45:44 +0000 Manifest this update: Wed 20 Aug 2025 19:45:44 +0000 Manifest next update: Wed 27 Aug 2025 19:45:44 +0000 Files and hashes: 1: Ps7q_orHtLE44oRfeGEtk9XFMMY.crl (hash: iVm+MJ+4XGzd3VjlDuApGabGg7ON9hvnBYmhpzKhPqQ=) 2: C50E0D60B31F11EF9044054FC4F9AE02.roa (hash: 1XQOV4wSru0rmXvpwZfW5uyJwqkmGZ4/nFxMyl/NDpA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.crl rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ps7q_orHtLE44oRfeGEtk9XFMMY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 19:45:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2661 (0xa65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186537, serialNumber=3ECEEAFE8AC7B4B138E2845F78612D93D5C530C6 Validity Not Before: Aug 20 19:45:44 2025 GMT Not After : Aug 27 19:45:44 2025 GMT Subject: CN=68a625e8-a430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:94:f9:13:82:3e:c4:5e:28:c9:e4:5d:4e:17: 77:cf:c4:93:0f:39:7c:75:2d:f4:11:10:e7:9d:2d: 69:ab:be:85:6f:a7:66:d8:87:87:76:dc:d2:22:da: b6:60:00:e8:6c:17:97:ed:0e:7a:bb:54:61:9a:b0: d0:f3:b4:5c:d3:8c:25:c0:4e:7b:40:25:32:33:6a: b5:1a:46:fa:58:ea:fb:ac:88:58:99:36:34:99:eb: 4d:17:17:c4:0d:4f:cf:03:e3:81:03:93:1c:e8:dc: 2d:81:04:58:62:f2:f5:3b:52:b6:e0:37:2c:42:23: ce:e3:31:bf:45:61:1f:f1:8e:56:9e:61:41:3e:ed: 9a:ff:1f:99:d1:cd:7a:d0:69:c2:b5:fc:67:ae:2a: 0a:8b:82:0f:38:18:8f:8b:23:b4:2a:31:70:b5:c7: bc:3f:47:d5:21:98:74:90:4d:8f:2d:98:a6:26:14: 15:d2:44:3e:21:8d:93:59:d7:33:0d:1d:d8:1d:8d: 28:e9:f3:88:06:4b:8f:8f:2a:be:6d:5f:8b:7f:1b: a3:f1:4e:9c:b7:ba:38:08:79:16:29:4b:3a:24:eb: 4c:f2:f2:3a:dd:a7:8d:de:9c:6f:b5:65:24:e8:fd: 9c:86:b8:d7:e3:3a:44:ee:0d:ce:a3:16:ea:cc:71: 19:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:5A:BA:DD:20:82:E3:E0:3B:91:04:59:BF:B1:F3:5F:09:D8:0F:EF X509v3 Authority Key Identifier: keyid:3E:CE:EA:FE:8A:C7:B4:B1:38:E2:84:5F:78:61:2D:93:D5:C5:30:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ps7q_orHtLE44oRfeGEtk9XFMMY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:87:bd:79:55:e4:0c:eb:ed:42:58:14:39:6a:cf:12:b9:ad: 57:98:95:7d:25:9f:89:6d:c5:d7:64:83:eb:bd:56:78:e3:80: 9e:22:f7:7a:c0:c6:c6:5f:ae:b6:45:90:58:84:60:42:b3:fe: f2:f1:11:cc:c3:eb:3d:29:d6:57:e8:f8:67:41:27:af:35:f8: 7c:b6:00:a5:db:03:c9:2e:d4:f8:e9:ac:5d:0f:ab:13:03:92: dd:90:05:ce:b4:e0:0f:ae:f7:4f:70:a0:68:4f:6f:4e:65:db: 1f:d0:8f:17:b2:c3:a7:14:9f:94:1f:3d:83:82:d6:e3:1e:14: c2:8e:08:b6:7c:cb:db:e3:fc:51:2a:9f:98:a9:9b:1a:f1:8f: d9:3e:37:b9:a8:d6:32:bc:d1:3b:ef:4d:70:5c:4d:31:38:93: bb:96:9d:c0:9b:9a:c8:b5:7c:0a:a1:79:71:3e:a5:0c:ff:62: 21:89:93:30:77:d9:93:07:c9:71:df:e2:a3:91:f0:5b:d8:e0: 9e:7d:f9:73:5b:3e:0c:62:f0:f4:48:15:55:01:2b:c5:57:c2: 59:31:29:3f:4f:6f:23:5c:91:f3:a4:f6:cc:15:1d:57:34:c8: 5d:12:15:b7:b6:9d:09:70:98:4f:7a:2b:40:de:8c:0e:68:b8: 93:ec:9b:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCmUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY1MzcxMTAvBgNVBAUTKDNFQ0VFQUZFOEFDN0I0QjEzOEUyODQ1Rjc4NjEyRDkz RDVDNTMwQzYwHhcNMjUwODIwMTk0NTQ0WhcNMjUwODI3MTk0NTQ0WjAYMRYwFAYD VQQDEw02OGE2MjVlOC1hNDMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy5T5E4I+xF4oyeRdThd3z8STDzl8dS30ERDnnS1pq76Fb6dm2IeHdtzSItq2 YADobBeX7Q56u1RhmrDQ87Rc04wlwE57QCUyM2q1Gkb6WOr7rIhYmTY0metNFxfE DU/PA+OBA5Mc6NwtgQRYYvL1O1K24DcsQiPO4zG/RWEf8Y5WnmFBPu2a/x+Z0c16 0GnCtfxnrioKi4IPOBiPiyO0KjFwtce8P0fVIZh0kE2PLZimJhQV0kQ+IY2TWdcz DR3YHY0o6fOIBkuPjyq+bV+Lfxuj8U6ct7o4CHkWKUs6JOtM8vI63aeN3pxvtWUk 6P2chrjX4zpE7g3OoxbqzHEZUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGpaut0g guPgO5EEWb+x818J2A/vMB8GA1UdIwQYMBaAFD7O6v6Kx7SxOOKEX3hhLZPVxTDG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjUzNy9CRUIwRDkxQTZE OUQxMUVBOUE1RjI4MDlDNEY5QUUwMi9QczdxX29ySHRMRTQ0b1JmZUdFdGs5WEZN TVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BzN3Ffb3JIdExFNDRvUmZlR0V0azlYRk1NWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjUzNy9CRUIwRDkxQTZEOUQxMUVBOUE1RjI4MDlDNEY5QUUwMi9QczdxX29ySHRM RTQ0b1JmZUdFdGs5WEZNTVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvh715VeQM6+1CWBQ5as8Sua1XmJV9JZ+JbcXXZIPrvVZ444CeIvd6 wMbGX662RZBYhGBCs/7y8RHMw+s9KdZX6PhnQSevNfh8tgCl2wPJLtT46axdD6sT A5LdkAXOtOAPrvdPcKBoT29OZdsf0I8XssOnFJ+UHz2DgtbjHhTCjgi2fMvb4/xR Kp+YqZsa8Y/ZPje5qNYyvNE7701wXE0xOJO7lp3Am5rItXwKoXlxPqUM/2IhiZMw d9mTB8lx3+KjkfBb2OCefflzWz4MYvD0SBVVASvFV8JZMSk/T28jXJHzpPbMFR1X NMhdEhW3tp0JcJhPeitA3owOaLiT7Jvx -----END CERTIFICATE-----Generated at Fri Aug 22 16:31:41 2025 by rpki-client