$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.mft File: CaPsxJ-Dp5iuE58dy8U27m9nzn4.mft (raw, json) Hash identifier: ZNTmaTuFByKWoT4XpgUyjRGEvgkNS7uXYM03zzGp3mQ= Subject key identifier: 9E:7E:A9:A4:6A:0D:BD:58:C2:12:27:1F:BF:A6:5A:43:98:20:13:AE Authority key identifier: 09:A3:EC:C4:9F:83:A7:98:AE:13:9F:1D:CB:C5:36:EE:6F:67:CE:7E Certificate issuer: /CN=A91CE533/serialNumber=09A3ECC49F83A798AE139F1DCBC536EE6F67CE7E Certificate serial: 1985 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CaPsxJ-Dp5iuE58dy8U27m9nzn4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.mft Manifest number: 1979 Signing time: Thu 18 Sep 2025 16:31:25 +0000 Manifest this update: Thu 18 Sep 2025 16:31:24 +0000 Manifest next update: Thu 25 Sep 2025 16:31:24 +0000 Files and hashes: 1: CaPsxJ-Dp5iuE58dy8U27m9nzn4.crl (hash: fbHF9nMTS8/E21J5hqWrnzDEl3gtGMa/IlF/5ADAeOg=) 2: 290732FC79A211E79F34D81FC4F9AE02.roa (hash: SR7eVnerj/ud7fW+5gtERIt5ClN7aXRbGYLPuzi6Nlc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.crl rsync://rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CaPsxJ-Dp5iuE58dy8U27m9nzn4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 16:31:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6533 (0x1985) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE533, serialNumber=09A3ECC49F83A798AE139F1DCBC536EE6F67CE7E Validity Not Before: Sep 18 16:31:24 2025 GMT Not After : Sep 25 16:31:24 2025 GMT Subject: CN=68cc33dd-0097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:61:79:8e:0b:e9:3f:7b:0b:bf:44:dd:45:db: e5:f1:ca:a8:39:44:71:51:40:38:9b:ea:53:ab:8f: 4d:c4:53:f2:5e:24:70:4e:27:d6:19:77:ad:6c:af: 22:40:a0:f6:49:80:b7:34:14:4d:a5:9e:90:8b:f9: 99:13:a5:6c:cc:f6:38:d4:fd:c0:8d:58:8b:10:d8: 29:94:26:41:2d:cf:07:8b:52:41:f9:41:a5:37:27: 26:b8:eb:01:23:85:34:e8:73:f3:bf:9b:c0:c2:7a: 7a:16:8a:b4:d4:44:16:c9:8d:b3:a8:0f:66:bf:4f: e3:a7:46:1c:eb:00:ce:bb:35:2b:a5:2a:0f:6d:59: 0b:c9:26:bd:6a:1b:2b:e2:e4:97:fb:c6:ac:7e:c5: 6e:49:55:0d:51:d6:9c:45:18:f5:70:3d:37:f4:d3: ee:53:d7:a5:7a:1f:ad:bf:1e:6f:8b:0f:01:a4:26: db:71:b0:fd:61:d6:d3:07:89:3c:8c:f3:c6:60:dc: d4:16:d5:3e:b1:c5:8c:35:f1:51:1d:50:8d:f4:f8: 97:72:e1:62:4d:e2:e4:83:f0:13:19:ff:d8:7d:f4: 06:4c:1b:b7:fc:c8:45:75:94:19:73:53:a8:57:bd: af:5c:a9:6a:a3:33:ff:50:61:0c:8e:54:e1:e8:2c: 2c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:7E:A9:A4:6A:0D:BD:58:C2:12:27:1F:BF:A6:5A:43:98:20:13:AE X509v3 Authority Key Identifier: keyid:09:A3:EC:C4:9F:83:A7:98:AE:13:9F:1D:CB:C5:36:EE:6F:67:CE:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CaPsxJ-Dp5iuE58dy8U27m9nzn4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:c0:3a:56:0f:92:4f:1b:0e:1c:99:21:8d:fa:b5:94:bb:eb: 79:ca:da:f6:14:9a:b2:bf:0a:52:6b:9d:a7:5c:26:41:97:ee: 3f:74:67:ba:00:8d:a2:71:9e:cc:32:3a:40:c7:01:86:5b:3d: cf:f5:34:aa:fa:cc:58:c8:b7:29:66:c5:40:87:93:a6:bf:43: 35:2e:d5:e4:1a:17:22:23:eb:af:55:5d:ed:ba:a4:18:e5:25: 55:c0:21:ab:00:28:41:02:d3:7a:69:85:05:31:21:6f:43:33: 73:0f:16:8d:67:a2:47:6b:a9:90:fc:0a:4f:50:f2:2a:f5:17: d0:fb:cf:da:be:54:87:22:00:d2:34:01:62:a7:25:9c:d9:0f: df:37:d9:6a:a1:33:2f:80:36:46:a0:73:b2:4b:8a:0d:44:d9: 41:ff:77:59:fb:ba:73:a2:f7:17:82:02:5c:ab:e8:cb:80:76: 7d:2b:db:42:06:d5:a8:53:b2:85:d4:51:8c:31:74:88:8c:18: 45:80:20:fa:3b:08:6f:36:46:4f:ae:a1:9d:d8:85:fc:a9:f7: ea:43:27:17:f2:f1:9d:e7:67:e2:48:50:fb:f5:92:92:ca:28: 38:ff:0c:93:25:b1:f6:5f:df:71:0d:b2:24:93:be:26:1c:3f: 27:ab:1c:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U1MzMxMTAvBgNVBAUTKDA5QTNFQ0M0OUY4M0E3OThBRTEzOUYxRENCQzUzNkVF NkY2N0NFN0UwHhcNMjUwOTE4MTYzMTI0WhcNMjUwOTI1MTYzMTI0WjAYMRYwFAYD VQQDEw02OGNjMzNkZC0wMDk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp2F5jgvpP3sLv0TdRdvl8cqoOURxUUA4m+pTq49NxFPyXiRwTifWGXetbK8i QKD2SYC3NBRNpZ6Qi/mZE6VszPY41P3AjViLENgplCZBLc8Hi1JB+UGlNycmuOsB I4U06HPzv5vAwnp6Foq01EQWyY2zqA9mv0/jp0Yc6wDOuzUrpSoPbVkLySa9ahsr 4uSX+8asfsVuSVUNUdacRRj1cD039NPuU9eleh+tvx5viw8BpCbbcbD9YdbTB4k8 jPPGYNzUFtU+scWMNfFRHVCN9PiXcuFiTeLkg/ATGf/YffQGTBu3/MhFdZQZc1Oo V72vXKlqozP/UGEMjlTh6Cws7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ5+qaRq Db1YwhInH7+mWkOYIBOuMB8GA1UdIwQYMBaAFAmj7MSfg6eYrhOfHcvFNu5vZ85+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTUzMy9FOEZENEZBNDc5 OUYxMUU3Qjg3OTEwMURDNEY5QUUwMi9DYVBzeEotRHA1aXVFNThkeThVMjdtOW56 bjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NhUHN4Si1EcDVpdUU1OGR5OFUyN205bnpuNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTUzMy9FOEZENEZBNDc5OUYxMUU3Qjg3OTEwMURDNEY5QUUwMi9DYVBzeEotRHA1 aXVFNThkeThVMjdtOW56bjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcwDpWD5JPGw4cmSGN+rWUu+t5ytr2FJqyvwpSa52nXCZBl+4/dGe6 AI2icZ7MMjpAxwGGWz3P9TSq+sxYyLcpZsVAh5Omv0M1LtXkGhciI+uvVV3tuqQY 5SVVwCGrAChBAtN6aYUFMSFvQzNzDxaNZ6JHa6mQ/ApPUPIq9RfQ+8/avlSHIgDS NAFipyWc2Q/fN9lqoTMvgDZGoHOyS4oNRNlB/3dZ+7pzovcXggJcq+jLgHZ9K9tC BtWoU7KF1FGMMXSIjBhFgCD6OwhvNkZPrqGd2IX8qffqQycX8vGd52fiSFD79ZKS yig4/wyTJbH2X99xDbIkk74mHD8nqxwk -----END CERTIFICATE-----Generated at Fri Sep 19 07:45:03 2025 by rpki-client