$ rpki-client -vvf rpki.apnic.net/member_repository/A9196D9E/77BB984C7D6111EEB463C85AC4F9AE02/PS2TrIsQhlgX2adMyBoDDX010HQ.mft File: PS2TrIsQhlgX2adMyBoDDX010HQ.mft (raw, json) Hash identifier: TmLlha0Lf3zJXbfWQK9QAKAgRQ1y3IhCp+OWXwbzUPw= Subject key identifier: 52:B4:C9:95:80:A3:75:92:A4:73:76:CA:C9:64:44:BD:F0:B4:31:61 Authority key identifier: 3D:2D:93:AC:8B:10:86:58:17:D9:A7:4C:C8:1A:03:0D:7D:35:D0:74 Certificate issuer: /CN=A9196D9E/serialNumber=3D2D93AC8B10865817D9A74CC81A030D7D35D074 Certificate serial: 015D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PS2TrIsQhlgX2adMyBoDDX010HQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196D9E/77BB984C7D6111EEB463C85AC4F9AE02/PS2TrIsQhlgX2adMyBoDDX010HQ.mft Manifest number: 015C Signing time: Fri 19 Sep 2025 04:35:21 +0000 Manifest this update: Fri 19 Sep 2025 04:35:20 +0000 Manifest next update: Fri 26 Sep 2025 04:35:20 +0000 Files and hashes: 1: PS2TrIsQhlgX2adMyBoDDX010HQ.crl (hash: KjEcnVgjCekvMd9O4xIqgXURC/N5v0w0/Fm4NOiXIUQ=) 2: C8BDA37CF68A11EFB7F91E24C4F9AE02.roa (hash: aRDWwCB81f6X4Sbu5aqqdwftigSG3lRUiRjjd/98tJw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196D9E/77BB984C7D6111EEB463C85AC4F9AE02/PS2TrIsQhlgX2adMyBoDDX010HQ.crl rsync://rpki.apnic.net/member_repository/A9196D9E/77BB984C7D6111EEB463C85AC4F9AE02/PS2TrIsQhlgX2adMyBoDDX010HQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PS2TrIsQhlgX2adMyBoDDX010HQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 04:23:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 349 (0x15d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196D9E, serialNumber=3D2D93AC8B10865817D9A74CC81A030D7D35D074 Validity Not Before: Sep 19 04:35:20 2025 GMT Not After : Sep 26 04:35:20 2025 GMT Subject: CN=68ccdd88-4428 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:bd:c3:60:d4:c1:4c:fb:3c:8b:c3:b9:ed:49: 7e:fd:90:18:6b:6c:4c:8b:89:fa:9a:1c:a7:1b:89: 82:8a:d1:f6:3f:61:a6:df:46:62:84:85:a6:a6:7f: 04:a8:6d:86:2f:27:23:82:f5:83:03:80:d8:4d:55: 30:a8:59:b3:17:ad:5c:f7:56:12:79:aa:61:a7:99: f7:b4:74:5d:57:b3:49:7d:45:43:8f:03:d9:bd:b1: b2:a3:81:a5:cb:26:50:ab:5f:8f:95:27:2c:73:57: 98:39:a7:10:4e:b5:6c:fd:6f:e2:4b:6a:54:95:97: 31:df:17:d9:9f:20:20:10:28:61:e1:06:d0:98:70: 54:1a:7f:3b:aa:5c:ca:ed:c4:6e:d2:f9:0b:5d:d7: 50:49:75:9b:01:be:a2:73:32:cd:35:0c:1f:9e:18: b3:a2:a4:19:0a:8f:9b:ed:10:7b:72:73:0c:2c:97: 6a:f9:84:d8:81:87:59:90:0c:6d:36:16:b2:49:67: ae:ae:93:f4:49:88:46:25:0c:f6:fa:aa:fe:a8:b6: b0:53:ba:6e:77:9b:d1:cb:7b:b6:c4:95:62:9c:71: f2:bc:cc:80:9f:5e:c2:a7:17:63:14:9f:5f:d0:4f: ba:f1:4e:26:b3:36:1b:d5:a0:41:2e:6d:85:71:64: 75:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:B4:C9:95:80:A3:75:92:A4:73:76:CA:C9:64:44:BD:F0:B4:31:61 X509v3 Authority Key Identifier: keyid:3D:2D:93:AC:8B:10:86:58:17:D9:A7:4C:C8:1A:03:0D:7D:35:D0:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196D9E/77BB984C7D6111EEB463C85AC4F9AE02/PS2TrIsQhlgX2adMyBoDDX010HQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PS2TrIsQhlgX2adMyBoDDX010HQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196D9E/77BB984C7D6111EEB463C85AC4F9AE02/PS2TrIsQhlgX2adMyBoDDX010HQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:53:15:86:69:ab:df:2f:46:f8:c0:6d:15:3f:76:f5:88:52: cc:bc:7b:b9:cd:ae:3a:f3:c3:b0:5d:f4:40:20:2a:aa:25:d4: e1:28:49:42:25:a6:47:42:14:cb:b6:1b:18:6b:b3:2e:c3:8b: 91:e5:64:37:70:16:df:d9:93:a8:c5:54:96:aa:28:7b:dd:9e: 37:77:cd:e3:de:0c:c9:d9:c8:4d:bf:ab:ab:0c:d6:8b:f2:6b: d9:35:16:66:4f:1e:1a:c7:47:2d:6d:cf:7d:ee:cc:66:04:d5: 74:f0:ba:0a:62:16:32:77:7b:7c:ce:29:60:2e:d9:95:59:18: 55:50:ce:51:ba:d9:0a:e1:52:ac:ba:75:88:19:af:1d:5b:09: 3d:3c:53:4e:ee:41:c9:8d:5e:7b:79:4b:3a:22:83:10:de:0f: 02:56:58:bd:1e:0c:cc:81:4b:27:d0:e8:12:59:68:f4:20:43: a8:38:39:a5:33:df:c4:1d:81:54:c1:19:64:22:d4:97:c9:8b: eb:64:0d:36:4c:df:20:a4:4e:d0:db:60:91:d7:be:ae:96:c4: fb:c9:20:2f:53:b7:ef:71:e9:82:b6:ec:21:82:83:ac:2e:71: fa:20:fc:bf:f1:e6:8f:49:d7:e0:9e:d3:59:f2:8d:cc:d5:ac: 04:e8:d4:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZEOUUxMTAvBgNVBAUTKDNEMkQ5M0FDOEIxMDg2NTgxN0Q5QTc0Q0M4MUEwMzBE N0QzNUQwNzQwHhcNMjUwOTE5MDQzNTIwWhcNMjUwOTI2MDQzNTIwWjAYMRYwFAYD VQQDEw02OGNjZGQ4OC00NDI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr73DYNTBTPs8i8O57Ul+/ZAYa2xMi4n6mhynG4mCitH2P2Gm30ZihIWmpn8E qG2GLycjgvWDA4DYTVUwqFmzF61c91YSeaphp5n3tHRdV7NJfUVDjwPZvbGyo4Gl yyZQq1+PlScsc1eYOacQTrVs/W/iS2pUlZcx3xfZnyAgEChh4QbQmHBUGn87qlzK 7cRu0vkLXddQSXWbAb6iczLNNQwfnhizoqQZCo+b7RB7cnMMLJdq+YTYgYdZkAxt NhaySWeurpP0SYhGJQz2+qr+qLawU7pud5vRy3u2xJVinHHyvMyAn17CpxdjFJ9f 0E+68U4mszYb1aBBLm2FcWR1GwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFK0yZWA o3WSpHN2yslkRL3wtDFhMB8GA1UdIwQYMBaAFD0tk6yLEIZYF9mnTMgaAw19NdB0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkQ5RS83N0JCOTg0QzdE NjExMUVFQjQ2M0M4NUFDNEY5QUUwMi9QUzJUcklzUWhsZ1gyYWRNeUJvRERYMDEw SFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BTMlRySXNRaGxnWDJhZE15Qm9ERFgwMTBIUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkQ5RS83N0JCOTg0QzdENjExMUVFQjQ2M0M4NUFDNEY5QUUwMi9QUzJUcklzUWhs Z1gyYWRNeUJvRERYMDEwSFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGUxWGaavfL0b4wG0VP3b1iFLMvHu5za4688OwXfRAICqqJdThKElC JaZHQhTLthsYa7Muw4uR5WQ3cBbf2ZOoxVSWqih73Z43d83j3gzJ2chNv6urDNaL 8mvZNRZmTx4ax0ctbc997sxmBNV08LoKYhYyd3t8zilgLtmVWRhVUM5RutkK4VKs unWIGa8dWwk9PFNO7kHJjV57eUs6IoMQ3g8CVli9HgzMgUsn0OgSWWj0IEOoODml M9/EHYFUwRlkItSXyYvrZA02TN8gpE7Q22CR176ulsT7ySAvU7fvcemCtuwhgoOs LnH6IPy/8eaPSdfgntNZ8o3M1awE6NQk -----END CERTIFICATE-----Generated at Fri Sep 19 06:49:25 2025 by rpki-client