$ rpki-client -vvf rpki.apnic.net/member_repository/A9196D9E/77BB984C7D6111EEB463C85AC4F9AE02/PS2TrIsQhlgX2adMyBoDDX010HQ.mft File: PS2TrIsQhlgX2adMyBoDDX010HQ.mft (raw, json) Hash identifier: Ov/BjdqaiFqmClkpqUhEhXVw4N8AioWsvRmChDId4UA= Subject key identifier: 89:66:21:1C:37:69:A5:71:D9:0F:BD:A3:AB:C5:15:C2:8B:E1:68:CA Authority key identifier: 3D:2D:93:AC:8B:10:86:58:17:D9:A7:4C:C8:1A:03:0D:7D:35:D0:74 Certificate issuer: /CN=A9196D9E/serialNumber=3D2D93AC8B10865817D9A74CC81A030D7D35D074 Certificate serial: 0144 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PS2TrIsQhlgX2adMyBoDDX010HQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196D9E/77BB984C7D6111EEB463C85AC4F9AE02/PS2TrIsQhlgX2adMyBoDDX010HQ.mft Manifest number: 0143 Signing time: Fri 01 Aug 2025 05:37:23 +0000 Manifest this update: Fri 01 Aug 2025 05:37:22 +0000 Manifest next update: Fri 08 Aug 2025 05:37:22 +0000 Files and hashes: 1: PS2TrIsQhlgX2adMyBoDDX010HQ.crl (hash: giybHF7CcOqlstcYIcuqgIfq5zqp04DqH/id+ZLOXNw=) 2: C8BDA37CF68A11EFB7F91E24C4F9AE02.roa (hash: aRDWwCB81f6X4Sbu5aqqdwftigSG3lRUiRjjd/98tJw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196D9E/77BB984C7D6111EEB463C85AC4F9AE02/PS2TrIsQhlgX2adMyBoDDX010HQ.crl rsync://rpki.apnic.net/member_repository/A9196D9E/77BB984C7D6111EEB463C85AC4F9AE02/PS2TrIsQhlgX2adMyBoDDX010HQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PS2TrIsQhlgX2adMyBoDDX010HQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 05:37:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 324 (0x144) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196D9E, serialNumber=3D2D93AC8B10865817D9A74CC81A030D7D35D074 Validity Not Before: Aug 1 05:37:22 2025 GMT Not After : Aug 8 05:37:22 2025 GMT Subject: CN=688c5292-a043 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b5:0e:70:3d:58:02:e7:c6:a8:5a:47:7c:1d: fa:26:7f:a5:00:ce:c0:e6:06:1c:2c:53:25:cb:d0: 88:47:b6:8a:a1:d2:e8:42:c5:62:89:9d:66:c9:86: 0e:00:9e:1a:72:09:d3:32:5a:76:a7:20:21:fb:dc: 1e:d8:fb:33:a1:7d:a5:60:de:6e:92:c7:b7:d4:0c: e4:74:f9:59:12:22:c8:6c:d4:85:7a:d5:8f:1c:48: 00:43:65:69:7e:98:02:8a:60:47:b4:91:21:5d:cf: da:ef:55:c3:3e:cf:34:0d:0b:5a:13:c5:c8:e9:e7: 04:51:50:d3:cc:5f:ce:5d:75:61:50:7f:a2:f3:ca: 60:da:33:61:ba:e9:39:01:e3:09:ab:00:ae:3a:4f: 8c:7e:24:b3:cb:91:2f:78:ce:ef:07:9b:52:c2:c0: 6d:f4:1c:bc:cb:e3:33:ad:7c:3f:db:ae:15:25:5b: da:9c:7e:5c:ed:9a:02:83:bf:35:e0:25:8f:49:65: 1b:18:dc:7e:84:6e:c8:bd:95:bd:e7:89:97:b3:6f: 64:5a:24:57:9c:16:9f:0d:7f:11:e5:33:3e:9f:5b: bf:85:fa:80:04:94:e1:cd:a6:85:f2:05:ca:85:3d: 6d:da:a7:2f:16:1c:4a:ca:49:f6:f0:11:65:ac:0e: ff:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:66:21:1C:37:69:A5:71:D9:0F:BD:A3:AB:C5:15:C2:8B:E1:68:CA X509v3 Authority Key Identifier: keyid:3D:2D:93:AC:8B:10:86:58:17:D9:A7:4C:C8:1A:03:0D:7D:35:D0:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196D9E/77BB984C7D6111EEB463C85AC4F9AE02/PS2TrIsQhlgX2adMyBoDDX010HQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PS2TrIsQhlgX2adMyBoDDX010HQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196D9E/77BB984C7D6111EEB463C85AC4F9AE02/PS2TrIsQhlgX2adMyBoDDX010HQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:82:44:47:b8:85:50:fa:87:16:74:04:b1:3a:40:11:88:fb: 4d:56:aa:ee:a4:71:2c:97:9b:71:96:66:c7:ad:fe:28:48:58: 38:9d:f3:52:26:88:80:18:30:de:7c:26:25:dc:84:9a:69:f9: 5d:33:31:f5:2c:bf:e2:10:0b:93:7a:9e:33:52:c3:8c:e8:49: 40:c0:fa:9c:87:9b:5b:6e:71:5b:3f:e1:43:07:1b:96:d5:59: c4:33:a4:e7:5b:68:3f:20:ee:e6:6f:e2:75:ca:98:ce:cf:c6: 54:08:69:82:2a:0b:99:18:83:b2:a3:3d:9d:af:3a:a3:b0:83: 76:6f:07:8d:9f:69:f3:c1:5a:c9:c3:7d:e8:a0:5d:a8:66:d5: 69:b4:b5:a8:e5:88:23:22:92:99:71:5c:d9:8d:37:08:5d:12: 7e:5d:12:e1:5b:44:1d:9d:8e:f1:10:82:98:4e:66:33:a2:c1: 47:39:db:d4:7f:d6:e8:06:ea:a6:ce:c7:ef:95:03:b2:c7:2e: b1:11:7d:f3:62:b7:8e:5e:9a:e2:33:b0:b9:44:83:33:6b:89: e1:cb:45:4b:0a:d2:de:04:fa:79:1c:ce:fb:cd:27:a2:f1:17: 17:1f:3c:5c:e0:78:f5:16:31:32:5a:e4:f6:03:14:67:c6:4b: 46:d2:04:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZEOUUxMTAvBgNVBAUTKDNEMkQ5M0FDOEIxMDg2NTgxN0Q5QTc0Q0M4MUEwMzBE N0QzNUQwNzQwHhcNMjUwODAxMDUzNzIyWhcNMjUwODA4MDUzNzIyWjAYMRYwFAYD VQQDEw02ODhjNTI5Mi1hMDQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwbUOcD1YAufGqFpHfB36Jn+lAM7A5gYcLFMly9CIR7aKodLoQsViiZ1myYYO AJ4acgnTMlp2pyAh+9we2PszoX2lYN5ukse31AzkdPlZEiLIbNSFetWPHEgAQ2Vp fpgCimBHtJEhXc/a71XDPs80DQtaE8XI6ecEUVDTzF/OXXVhUH+i88pg2jNhuuk5 AeMJqwCuOk+MfiSzy5EveM7vB5tSwsBt9By8y+MzrXw/264VJVvanH5c7ZoCg781 4CWPSWUbGNx+hG7IvZW954mXs29kWiRXnBafDX8R5TM+n1u/hfqABJThzaaF8gXK hT1t2qcvFhxKykn28BFlrA7/hQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIlmIRw3 aaVx2Q+9o6vFFcKL4WjKMB8GA1UdIwQYMBaAFD0tk6yLEIZYF9mnTMgaAw19NdB0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkQ5RS83N0JCOTg0QzdE NjExMUVFQjQ2M0M4NUFDNEY5QUUwMi9QUzJUcklzUWhsZ1gyYWRNeUJvRERYMDEw SFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BTMlRySXNRaGxnWDJhZE15Qm9ERFgwMTBIUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkQ5RS83N0JCOTg0QzdENjExMUVFQjQ2M0M4NUFDNEY5QUUwMi9QUzJUcklzUWhs Z1gyYWRNeUJvRERYMDEwSFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQgkRHuIVQ+ocWdASxOkARiPtNVqrupHEsl5txlmbHrf4oSFg4nfNS JoiAGDDefCYl3ISaafldMzH1LL/iEAuTep4zUsOM6ElAwPqch5tbbnFbP+FDBxuW 1VnEM6TnW2g/IO7mb+J1ypjOz8ZUCGmCKguZGIOyoz2drzqjsIN2bweNn2nzwVrJ w33ooF2oZtVptLWo5YgjIpKZcVzZjTcIXRJ+XRLhW0QdnY7xEIKYTmYzosFHOdvU f9boBuqmzsfvlQOyxy6xEX3zYreOXpriM7C5RIMza4nhy0VLCtLeBPp5HM77zSei 8RcXHzxc4Hj1FjEyWuT2AxRnxktG0gSa -----END CERTIFICATE-----Generated at Sun Aug 3 00:47:03 2025 by rpki-client