$ rpki-client -vvf rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.mft File: pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.mft (raw, json) Hash identifier: FVOJO60hzS3JDaZRbVUK6Va2qRQLbeIscY6DZl3slWs= Subject key identifier: 52:83:9B:A0:38:0A:73:6E:41:08:13:06:1C:90:44:1E:2A:83:53:9D Authority key identifier: A5:70:F3:70:D5:4E:D0:24:54:C5:7F:83:EE:C3:E4:F4:4A:7A:8B:76 Certificate issuer: /CN=A9199DF5/serialNumber=A570F370D54ED02454C57F83EEC3E4F44A7A8B76 Certificate serial: 0329 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.mft Manifest number: 0324 Signing time: Tue 01 Jul 2025 02:07:44 +0000 Manifest this update: Tue 01 Jul 2025 02:07:44 +0000 Manifest next update: Tue 08 Jul 2025 02:07:44 +0000 Files and hashes: 1: pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.crl (hash: Mkjiv0UQzsbmhe31eI/hgAzM/0GSYWmBHiQz3PuJYXo=) 2: B6EB7E8ED14511EC89527642C4F9AE02.roa (hash: zOa4PF6DbTNRPznC3F2BR2cHewtdmnvs1jqCDBbkuO0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.crl rsync://rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 02:07:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 809 (0x329) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199DF5, serialNumber=A570F370D54ED02454C57F83EEC3E4F44A7A8B76 Validity Not Before: Jul 1 02:07:44 2025 GMT Not After : Jul 8 02:07:44 2025 GMT Subject: CN=686342f0-6495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:36:25:eb:09:1a:09:e1:be:f7:da:e0:97:4d: 45:e8:96:77:79:7f:9e:65:24:39:9a:a5:ce:a5:92: f8:e9:7d:1a:84:44:e3:5a:b9:d6:dd:8b:40:74:b1: 30:5e:9f:c9:46:7d:20:30:58:3e:df:1e:8b:2a:dc: 09:65:2b:06:d0:dd:91:d0:9f:b4:df:17:a1:aa:d4: 7a:92:d7:f0:28:c4:24:e0:65:fb:0f:2e:ea:54:7a: f1:98:6e:20:33:0b:2a:a3:20:45:66:b1:23:4c:ee: df:c5:b1:45:6f:38:29:b0:c5:3f:6a:ab:ae:50:93: df:2a:00:cc:7f:6c:d5:06:b0:45:0f:d6:77:7b:62: 79:5e:c6:d6:01:58:5f:52:11:b7:d7:4d:c4:72:c7: de:c7:6e:59:57:31:90:9e:9f:77:2e:9f:9d:b7:4c: 59:1c:23:72:f0:0d:64:d6:83:fb:32:7e:d6:e8:48: 31:f9:48:ea:f8:e9:81:b0:a9:38:ae:31:3e:84:ea: bf:de:75:d0:a3:9a:54:ad:18:24:41:74:74:2d:55: 1d:6a:2b:fd:53:a9:0d:97:11:3c:08:e5:52:e8:fc: a3:f8:99:62:ce:59:e3:a9:1c:aa:1c:ad:a7:8d:6e: 7a:2f:35:2b:2b:ce:a6:77:be:25:9d:f2:f8:11:50: d3:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:83:9B:A0:38:0A:73:6E:41:08:13:06:1C:90:44:1E:2A:83:53:9D X509v3 Authority Key Identifier: keyid:A5:70:F3:70:D5:4E:D0:24:54:C5:7F:83:EE:C3:E4:F4:4A:7A:8B:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:33:e0:ae:b7:40:e9:07:4a:5a:fd:09:1d:36:dc:57:5d:63: 6a:df:bc:98:f5:33:16:73:8d:84:8d:17:16:a8:3d:30:5c:44: 41:a2:fa:ef:fc:bc:eb:01:9c:a9:55:d6:5e:98:77:2a:64:93: 21:21:9e:69:2a:32:42:89:19:6d:88:ea:ec:8e:f0:e1:cd:ba: 44:f0:60:d0:a1:93:90:e0:9d:08:31:d1:d5:93:3a:f4:4a:23: 74:14:ec:72:6a:2f:cf:31:ac:8d:89:75:c7:ed:34:b0:8b:7f: e0:7f:3a:8b:60:41:6a:68:06:e1:6b:30:8c:a5:7a:cf:8c:d7: 2b:88:0f:42:94:8a:1f:20:b2:71:ab:cb:6f:41:1c:01:92:71: 84:9d:10:64:f0:e1:2a:1b:75:e3:76:8c:b6:78:98:5b:e5:1c: 9c:32:26:6a:c8:a4:a8:b9:25:64:72:81:f2:cb:7f:d4:48:ce: 7c:da:fa:82:11:36:a2:5f:68:b0:a7:ac:02:91:5f:a7:6d:46: 5f:22:d0:84:4d:b0:0c:22:64:ac:c9:6b:b6:77:f8:bd:76:82: 1c:89:92:e2:ec:2b:e1:8a:91:51:e3:85:87:a8:ad:c3:d7:0a: b0:75:c6:9e:19:7c:e4:c7:71:6f:90:6f:91:e1:ee:59:e6:23: a6:37:d2:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAykwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlERjUxMTAvBgNVBAUTKEE1NzBGMzcwRDU0RUQwMjQ1NEM1N0Y4M0VFQzNFNEY0 NEE3QThCNzYwHhcNMjUwNzAxMDIwNzQ0WhcNMjUwNzA4MDIwNzQ0WjAYMRYwFAYD VQQDEw02ODYzNDJmMC02NDk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5TYl6wkaCeG+99rgl01F6JZ3eX+eZSQ5mqXOpZL46X0ahETjWrnW3YtAdLEw Xp/JRn0gMFg+3x6LKtwJZSsG0N2R0J+03xehqtR6ktfwKMQk4GX7Dy7qVHrxmG4g MwsqoyBFZrEjTO7fxbFFbzgpsMU/aquuUJPfKgDMf2zVBrBFD9Z3e2J5XsbWAVhf UhG3103Ecsfex25ZVzGQnp93Lp+dt0xZHCNy8A1k1oP7Mn7W6Egx+Ujq+OmBsKk4 rjE+hOq/3nXQo5pUrRgkQXR0LVUdaiv9U6kNlxE8COVS6Pyj+JlizlnjqRyqHK2n jW56LzUrK86md74lnfL4EVDTDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFKDm6A4 CnNuQQgTBhyQRB4qg1OdMB8GA1UdIwQYMBaAFKVw83DVTtAkVMV/g+7D5PRKeot2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OURGNS9DMjQwQjc5NEQx NDExMUVDQTU1Mzg0M0FDNEY5QUUwMi9wWER6Y05WTzBDUlV4WC1EN3NQazlFcDZp M1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BYRHpjTlZPMENSVXhYLUQ3c1BrOUVwNmkzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OURGNS9DMjQwQjc5NEQxNDExMUVDQTU1Mzg0M0FDNEY5QUUwMi9wWER6Y05WTzBD UlV4WC1EN3NQazlFcDZpM1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcM+Cut0DpB0pa/QkdNtxXXWNq37yY9TMWc42EjRcWqD0wXERBovrv /LzrAZypVdZemHcqZJMhIZ5pKjJCiRltiOrsjvDhzbpE8GDQoZOQ4J0IMdHVkzr0 SiN0FOxyai/PMayNiXXH7TSwi3/gfzqLYEFqaAbhazCMpXrPjNcriA9ClIofILJx q8tvQRwBknGEnRBk8OEqG3Xjdoy2eJhb5RycMiZqyKSouSVkcoHyy3/USM582vqC ETaiX2iwp6wCkV+nbUZfItCETbAMImSsyWu2d/i9doIciZLi7CvhipFR44WHqK3D 1wqwdcaeGXzkx3FvkG+R4e5Z5iOmN9Ls -----END CERTIFICATE-----Generated at Tue Jul 1 19:43:28 2025 by rpki-client