$ rpki-client -vvf rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.mft File: pRz7iig43CPyh2RKRzXvwT2MMRM.mft (raw, json) Hash identifier: SFWy4IkNgTkR9jg2L7rJZQf6eYxaFomyiSeRxAYV4xc= Subject key identifier: 90:55:03:33:9E:02:7E:E5:64:3A:03:5F:83:B1:FC:B3:AC:03:AA:3B Authority key identifier: A5:1C:FB:8A:28:38:DC:23:F2:87:64:4A:47:35:EF:C1:3D:8C:31:13 Certificate issuer: /CN=A9197724/serialNumber=A51CFB8A2838DC23F287644A4735EFC13D8C3113 Certificate serial: A6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pRz7iig43CPyh2RKRzXvwT2MMRM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.mft Manifest number: A5 Signing time: Fri 05 Sep 2025 06:40:03 +0000 Manifest this update: Fri 05 Sep 2025 06:40:03 +0000 Manifest next update: Fri 12 Sep 2025 06:40:03 +0000 Files and hashes: 1: pRz7iig43CPyh2RKRzXvwT2MMRM.crl (hash: or7kCRVFL1RBkI+tJCFQKbRIzxlzPMsDjKWHW2mQZwk=) 2: A2C3AA7E904E11EF9FC6B922C4F9AE02.roa (hash: bRFbzj6pr/OF3ESUy9ky5waEguFBGACn3nS0+utKTXI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.crl rsync://rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pRz7iig43CPyh2RKRzXvwT2MMRM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 06:40:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 166 (0xa6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197724, serialNumber=A51CFB8A2838DC23F287644A4735EFC13D8C3113 Validity Not Before: Sep 5 06:40:03 2025 GMT Not After : Sep 12 06:40:03 2025 GMT Subject: CN=68ba85c3-aec0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e4:29:bc:1e:68:f4:d1:e7:5e:00:05:39:ac: 29:d5:b5:05:b6:a6:b4:81:ab:5b:82:72:3a:cd:74: 67:fb:88:7b:2a:b7:13:db:ed:5b:18:6e:a1:76:d7: 8c:49:fa:83:c8:87:1a:8e:b2:19:a8:d8:70:b1:c5: 93:da:77:ce:98:b5:aa:a3:1e:1e:dc:df:ed:82:ff: 80:bb:70:a6:93:2d:8f:e9:c7:c6:0b:25:c1:52:75: 86:98:ed:be:f7:38:71:88:7b:90:ba:3b:2d:23:8f: dd:a0:1d:4d:bb:c5:dc:b6:5a:51:af:01:55:6a:ad: 28:1a:ca:27:32:51:55:85:1b:8b:65:a5:22:b6:d0: 01:87:ba:94:3e:66:ed:59:d4:06:c5:e8:22:8e:57: ef:53:4a:ca:9b:0f:79:06:47:54:28:11:80:d2:e6: 67:e8:f8:38:45:27:96:87:8d:2a:92:4a:d1:ac:fa: e5:c0:6e:a7:ba:f3:07:ff:f4:a3:30:8e:09:b8:19: 1e:08:49:94:ce:e1:bb:fb:1e:3f:0d:55:ad:b6:86: 5b:1f:31:7e:dd:cd:de:e2:8d:6b:8e:8b:53:32:e1: 74:9f:08:48:2a:2c:84:68:32:48:b4:ec:2f:e3:d1: ab:a5:a5:56:1a:ea:71:29:03:c7:09:5f:7e:2f:98: 25:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:55:03:33:9E:02:7E:E5:64:3A:03:5F:83:B1:FC:B3:AC:03:AA:3B X509v3 Authority Key Identifier: keyid:A5:1C:FB:8A:28:38:DC:23:F2:87:64:4A:47:35:EF:C1:3D:8C:31:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pRz7iig43CPyh2RKRzXvwT2MMRM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:41:70:c3:02:c7:66:fc:9b:34:f0:5a:76:4d:39:67:5a:f4: fd:ae:84:b1:b6:dc:28:ba:de:92:f2:af:d4:17:13:06:b0:25: bc:93:f0:e4:78:19:ac:9e:29:7d:54:09:5c:dd:52:3b:e8:6a: 7c:a4:3b:cf:a2:34:2a:9d:0c:92:ca:02:f8:d7:e6:8c:a5:9d: 9a:b1:5b:91:6b:39:2e:4e:5a:a6:45:4f:f2:54:4b:b3:9e:e0: 41:ee:21:ab:79:05:4b:de:eb:c1:1d:e9:5d:ad:23:2f:8c:bc: 8a:c3:68:ad:01:bb:c4:48:3f:af:3f:f1:dd:86:aa:eb:e2:be: b3:4e:ae:bc:21:6c:73:e7:ae:44:c0:25:bb:6c:58:91:36:dc: bc:ee:91:8e:34:1f:30:9d:f0:96:e4:35:16:f3:cd:01:5e:57: 27:52:ae:40:19:d6:95:44:e5:85:75:b0:48:41:9b:8c:ae:72: 40:9b:87:5d:a7:a3:ad:20:16:8b:1a:95:71:33:b8:6b:bc:a1: 00:fc:18:ba:02:be:dc:fb:25:49:3e:95:cd:61:61:55:f3:e7: 03:3f:5e:de:1b:6d:25:1c:30:5f:ff:cb:79:3e:8f:67:5b:9f: 9a:47:15:25:42:dc:39:81:e4:fe:45:0d:98:de:ce:7d:7b:5d: 46:5b:c2:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTc3MjQxMTAvBgNVBAUTKEE1MUNGQjhBMjgzOERDMjNGMjg3NjQ0QTQ3MzVFRkMx M0Q4QzMxMTMwHhcNMjUwOTA1MDY0MDAzWhcNMjUwOTEyMDY0MDAzWjAYMRYwFAYD VQQDEw02OGJhODVjMy1hZWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyOQpvB5o9NHnXgAFOawp1bUFtqa0gatbgnI6zXRn+4h7KrcT2+1bGG6hdteM SfqDyIcajrIZqNhwscWT2nfOmLWqox4e3N/tgv+Au3Cmky2P6cfGCyXBUnWGmO2+ 9zhxiHuQujstI4/doB1Nu8XctlpRrwFVaq0oGsonMlFVhRuLZaUittABh7qUPmbt WdQGxegijlfvU0rKmw95BkdUKBGA0uZn6Pg4RSeWh40qkkrRrPrlwG6nuvMH//Sj MI4JuBkeCEmUzuG7+x4/DVWttoZbHzF+3c3e4o1rjotTMuF0nwhIKiyEaDJItOwv 49GrpaVWGupxKQPHCV9+L5glqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJBVAzOe An7lZDoDX4Ox/LOsA6o7MB8GA1UdIwQYMBaAFKUc+4ooONwj8odkSkc178E9jDET MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzcyNC81NkM2NzA3Njkw NEQxMUVGQTExMDM4NjRDNEY5QUUwMi9wUno3aWlnNDNDUHloMlJLUnpYdndUMk1N Uk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3BSejdpaWc0M0NQeWgyUktSelh2d1QyTU1STS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzcyNC81NkM2NzA3NjkwNEQxMUVGQTExMDM4NjRDNEY5QUUwMi9wUno3aWlnNDND UHloMlJLUnpYdndUMk1NUk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzQXDDAsdm/Js08Fp2TTlnWvT9roSxttwout6S8q/UFxMGsCW8k/Dk eBmsnil9VAlc3VI76Gp8pDvPojQqnQySygL41+aMpZ2asVuRazkuTlqmRU/yVEuz nuBB7iGreQVL3uvBHeldrSMvjLyKw2itAbvESD+vP/Hdhqrr4r6zTq68IWxz565E wCW7bFiRNty87pGONB8wnfCW5DUW880BXlcnUq5AGdaVROWFdbBIQZuMrnJAm4dd p6OtIBaLGpVxM7hrvKEA/Bi6Ar7c+yVJPpXNYWFV8+cDP17eG20lHDBf/8t5Po9n W5+aRxUlQtw5geT+RQ2Y3s59e11GW8JS -----END CERTIFICATE-----Generated at Sat Sep 6 21:09:04 2025 by rpki-client