$ rpki-client -vvf rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.mft File: pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.mft (raw, json) Hash identifier: w8U9qDDFgK4V5t+TwIpJTCBBb3T7+dT7sgc7OeYby6c= Subject key identifier: C5:84:CC:01:6A:9C:B2:18:3D:C4:54:A0:46:D5:BB:04:DC:64:AF:B2 Authority key identifier: A5:70:F3:70:D5:4E:D0:24:54:C5:7F:83:EE:C3:E4:F4:4A:7A:8B:76 Certificate issuer: /CN=A9199DF5/serialNumber=A570F370D54ED02454C57F83EEC3E4F44A7A8B76 Certificate serial: 0343 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.mft Manifest number: 033E Signing time: Thu 21 Aug 2025 01:15:14 +0000 Manifest this update: Thu 21 Aug 2025 01:15:13 +0000 Manifest next update: Thu 28 Aug 2025 01:15:13 +0000 Files and hashes: 1: pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.crl (hash: T6dA+3fJBDSRuyTDxM26DzF+OD1ElItft5QqLTPBHXw=) 2: B6EB7E8ED14511EC89527642C4F9AE02.roa (hash: zOa4PF6DbTNRPznC3F2BR2cHewtdmnvs1jqCDBbkuO0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.crl rsync://rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 01:15:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 835 (0x343) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199DF5, serialNumber=A570F370D54ED02454C57F83EEC3E4F44A7A8B76 Validity Not Before: Aug 21 01:15:13 2025 GMT Not After : Aug 28 01:15:13 2025 GMT Subject: CN=68a67322-8289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8f:a9:c7:91:e7:ff:d5:da:bd:88:79:af:60: 97:cd:08:92:ef:0f:f2:e2:3b:78:c1:a9:37:df:05: 6a:5a:43:60:4b:ed:7d:e6:4a:17:f9:25:a9:44:47: 06:11:0e:6a:76:d8:5b:50:45:33:d7:3b:98:26:0a: 64:50:fa:49:77:08:5e:cc:c6:ba:87:b7:52:00:fd: 93:0c:24:ed:dd:61:78:c5:7b:a7:25:79:1c:a5:03: 5b:15:46:c2:be:8d:9e:e9:ca:67:db:72:39:ca:60: 54:d0:af:69:4c:83:0a:77:e2:ed:c2:89:33:9c:e9: 6f:e7:38:07:3f:3d:f6:40:a4:5d:17:a9:07:1c:69: 8b:85:fd:28:26:be:cb:72:17:d2:20:21:bd:2a:a7: 68:37:94:27:c8:b0:bf:71:55:1f:37:0f:29:e7:d9: 23:ca:66:1d:b3:71:47:45:06:55:f1:52:a4:f6:0a: 80:ae:19:46:8a:f3:54:f3:07:40:f7:01:a4:fd:c0: 55:90:b1:92:b4:bc:e8:72:fe:d1:bd:6f:d9:3d:5b: 8f:8a:18:ff:e9:9e:a9:b3:d6:da:3c:1d:39:18:21: 76:24:1a:50:8d:ca:6c:2f:ae:3d:dd:1c:ed:d0:84: 28:40:9f:52:d3:87:a8:a7:ef:54:a3:56:9d:27:74: 52:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:84:CC:01:6A:9C:B2:18:3D:C4:54:A0:46:D5:BB:04:DC:64:AF:B2 X509v3 Authority Key Identifier: keyid:A5:70:F3:70:D5:4E:D0:24:54:C5:7F:83:EE:C3:E4:F4:4A:7A:8B:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:59:eb:54:35:bd:19:3e:c8:11:39:6f:09:b3:19:9b:81:76: dd:9b:09:ed:48:eb:46:d8:a2:e9:1c:df:08:43:a5:1a:c6:53: 68:c3:b4:7d:4c:8d:cc:24:96:cd:ae:cd:50:83:ce:3b:19:ee: 25:d9:8a:9b:f0:df:dd:0a:da:99:0b:4e:8d:36:19:44:0b:a7: cc:43:57:38:59:48:11:2b:6a:c1:54:28:54:d9:74:dc:25:08: a4:8b:c3:24:6e:d6:c5:3a:0d:0e:39:c5:78:6e:26:b9:0e:1c: ca:f9:3d:a2:b2:56:46:bf:ba:8e:90:ca:bd:02:90:ae:9b:94: 61:8f:41:d6:0f:19:89:f4:90:d1:af:37:49:7b:a8:e2:92:55: bf:97:8b:d4:56:dd:8e:3e:f7:43:9b:77:4b:f7:43:56:d7:a0: b9:fb:19:e0:b7:56:c3:b6:32:90:6a:fa:cb:2f:74:76:65:55: 7e:2a:96:c8:ca:51:52:8c:d5:26:51:ee:71:83:15:0b:46:fa: 77:f4:95:29:d7:df:7e:3e:88:f2:a6:a4:df:8c:3f:6c:e2:8d: 8f:22:49:17:4b:9f:1f:41:3b:e9:4a:27:b8:9f:66:a4:1e:c4: 9d:c5:b6:f7:a4:ae:47:7e:c4:a9:ee:34:ce:5a:bc:3e:8c:ae: 3e:25:1d:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlERjUxMTAvBgNVBAUTKEE1NzBGMzcwRDU0RUQwMjQ1NEM1N0Y4M0VFQzNFNEY0 NEE3QThCNzYwHhcNMjUwODIxMDExNTEzWhcNMjUwODI4MDExNTEzWjAYMRYwFAYD VQQDEw02OGE2NzMyMi04Mjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxo+px5Hn/9XavYh5r2CXzQiS7w/y4jt4wak33wVqWkNgS+195koX+SWpREcG EQ5qdthbUEUz1zuYJgpkUPpJdwhezMa6h7dSAP2TDCTt3WF4xXunJXkcpQNbFUbC vo2e6cpn23I5ymBU0K9pTIMKd+LtwokznOlv5zgHPz32QKRdF6kHHGmLhf0oJr7L chfSICG9KqdoN5QnyLC/cVUfNw8p59kjymYds3FHRQZV8VKk9gqArhlGivNU8wdA 9wGk/cBVkLGStLzocv7RvW/ZPVuPihj/6Z6ps9baPB05GCF2JBpQjcpsL6493Rzt 0IQoQJ9S04eop+9Uo1adJ3RSGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMWEzAFq nLIYPcRUoEbVuwTcZK+yMB8GA1UdIwQYMBaAFKVw83DVTtAkVMV/g+7D5PRKeot2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OURGNS9DMjQwQjc5NEQx NDExMUVDQTU1Mzg0M0FDNEY5QUUwMi9wWER6Y05WTzBDUlV4WC1EN3NQazlFcDZp M1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BYRHpjTlZPMENSVXhYLUQ3c1BrOUVwNmkzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OURGNS9DMjQwQjc5NEQxNDExMUVDQTU1Mzg0M0FDNEY5QUUwMi9wWER6Y05WTzBD UlV4WC1EN3NQazlFcDZpM1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkWetUNb0ZPsgROW8JsxmbgXbdmwntSOtG2KLpHN8IQ6UaxlNow7R9 TI3MJJbNrs1Qg847Ge4l2Yqb8N/dCtqZC06NNhlEC6fMQ1c4WUgRK2rBVChU2XTc JQiki8MkbtbFOg0OOcV4bia5DhzK+T2islZGv7qOkMq9ApCum5Rhj0HWDxmJ9JDR rzdJe6jiklW/l4vUVt2OPvdDm3dL90NW16C5+xngt1bDtjKQavrLL3R2ZVV+KpbI ylFSjNUmUe5xgxULRvp39JUp199+PojypqTfjD9s4o2PIkkXS58fQTvpSie4n2ak HsSdxbb3pK5HfsSp7jTOWrw+jK4+JR23 -----END CERTIFICATE-----Generated at Fri Aug 22 16:31:40 2025 by rpki-client