$ rpki-client -vvf rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.mft File: PXdT_euyLwk6cQIag9ZYZlXpJKA.mft (raw, json) Hash identifier: F+jQ+9WzQ8FxLRfuAdp5uENg3MxT7khbolUH7ta02o4= Subject key identifier: 87:79:8F:11:80:A7:B0:BA:9F:04:63:A1:93:E9:52:5B:21:8A:29:EB Authority key identifier: 3D:77:53:FD:EB:B2:2F:09:3A:71:02:1A:83:D6:58:66:55:E9:24:A0 Certificate issuer: /CN=A911D857/serialNumber=3D7753FDEBB22F093A71021A83D6586655E924A0 Certificate serial: 08C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXdT_euyLwk6cQIag9ZYZlXpJKA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.mft Manifest number: 08B5 Signing time: Fri 22 Aug 2025 20:38:23 +0000 Manifest this update: Fri 22 Aug 2025 20:38:22 +0000 Manifest next update: Fri 29 Aug 2025 20:38:22 +0000 Files and hashes: 1: PXdT_euyLwk6cQIag9ZYZlXpJKA.crl (hash: WfG1dqAc5wTPsmMGVuaOQ/4OmZDSfG9i8aS7SKOYJoc=) 2: 162EA00C442411EB911D086BC4F9AE02.roa (hash: +enQgUid53gMaFPCBDOzsd0TE3j6ha7MQxAZKWnZpAQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.crl rsync://rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXdT_euyLwk6cQIag9ZYZlXpJKA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:38:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2241 (0x8c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D857, serialNumber=3D7753FDEBB22F093A71021A83D6586655E924A0 Validity Not Before: Aug 22 20:38:22 2025 GMT Not After : Aug 29 20:38:22 2025 GMT Subject: CN=68a8d53e-ee82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:0c:41:27:17:1a:82:7a:40:97:f0:37:a2:7d: 8d:73:fd:0c:eb:92:e3:92:f8:fc:99:10:dd:ff:53: 07:74:89:22:b7:5f:bd:77:47:4c:c7:1c:ef:94:c0: 52:8c:c2:cd:75:66:87:85:66:56:1a:61:b1:c2:7a: fc:50:3f:3d:0c:27:ca:6a:9c:92:52:f8:7f:e9:91: 07:e7:80:85:96:7e:5b:79:36:30:83:77:81:24:2b: 89:45:32:f5:1d:20:ad:ff:fa:0d:67:a3:2f:99:47: 6e:ab:16:8b:d1:02:97:60:d6:da:60:b8:31:5c:88: b0:d0:dc:05:3d:9c:76:1d:51:bf:57:37:e9:05:a4: 8c:6b:37:c3:0a:85:8a:1d:9c:55:18:13:e8:d3:f8: 84:15:4a:ac:d8:4b:4c:89:80:c1:f0:b7:aa:19:69: c7:ad:58:39:4b:45:69:78:32:6b:9c:12:49:ed:a7: e1:1b:c2:b9:4d:b2:66:af:52:3f:d9:77:11:f3:25: 70:ec:34:3e:c7:5c:03:de:69:b1:92:cc:1b:8e:05: b7:c9:f4:58:8b:5d:05:14:58:af:c6:f7:41:6c:82: 11:f6:6f:82:2e:14:2e:7d:4c:89:89:cd:ec:f4:88: 77:12:d8:70:07:71:e8:71:4b:fd:3b:11:4a:a8:d1: 3a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:79:8F:11:80:A7:B0:BA:9F:04:63:A1:93:E9:52:5B:21:8A:29:EB X509v3 Authority Key Identifier: keyid:3D:77:53:FD:EB:B2:2F:09:3A:71:02:1A:83:D6:58:66:55:E9:24:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXdT_euyLwk6cQIag9ZYZlXpJKA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:d6:2f:11:b0:b5:aa:b4:18:43:f9:2c:c8:b1:92:cf:6f:2d: 68:d2:66:4b:03:7d:17:94:39:2c:8d:ac:0e:94:80:42:98:48: a4:3e:f0:69:34:c3:3d:35:02:da:25:2d:c3:bd:ed:7c:b3:3d: bf:bd:96:4d:c7:34:aa:95:b1:7c:a7:23:d5:ab:5e:3d:86:ff: 49:01:ff:43:03:07:76:57:61:9e:0f:9e:ab:42:68:6c:9d:77: 75:16:2c:7c:02:7e:ab:f1:ab:a5:ca:ba:69:c8:f2:d3:0e:36: 09:7e:bc:8d:55:dc:71:da:47:05:94:7c:76:f2:e9:30:1d:ae: aa:1b:5e:1e:d7:fb:0a:29:ae:62:54:1e:13:1f:ec:ad:75:8a: 62:2f:8b:47:97:db:82:f8:b0:91:12:f4:76:d8:a8:42:a1:f0: d4:3c:a0:a6:53:27:53:53:4d:25:bc:66:29:a7:90:ea:36:2d: 6b:43:ed:6b:6d:02:1b:f9:4c:f4:62:52:ba:7b:36:c1:20:3f: f6:e0:de:33:f3:52:47:d3:69:da:da:f2:39:1e:c6:68:dc:6c: 18:b3:73:80:13:ab:99:a9:c0:27:ee:ee:c0:7a:48:e6:bd:d8: 50:1a:c9:c1:f0:67:77:8f:f3:b9:ce:6b:dd:6e:e2:a5:11:16: 99:aa:0e:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ4NTcxMTAvBgNVBAUTKDNENzc1M0ZERUJCMjJGMDkzQTcxMDIxQTgzRDY1ODY2 NTVFOTI0QTAwHhcNMjUwODIyMjAzODIyWhcNMjUwODI5MjAzODIyWjAYMRYwFAYD VQQDEw02OGE4ZDUzZS1lZTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8wxBJxcagnpAl/A3on2Nc/0M65Ljkvj8mRDd/1MHdIkit1+9d0dMxxzvlMBS jMLNdWaHhWZWGmGxwnr8UD89DCfKapySUvh/6ZEH54CFln5beTYwg3eBJCuJRTL1 HSCt//oNZ6MvmUduqxaL0QKXYNbaYLgxXIiw0NwFPZx2HVG/VzfpBaSMazfDCoWK HZxVGBPo0/iEFUqs2EtMiYDB8LeqGWnHrVg5S0VpeDJrnBJJ7afhG8K5TbJmr1I/ 2XcR8yVw7DQ+x1wD3mmxkswbjgW3yfRYi10FFFivxvdBbIIR9m+CLhQufUyJic3s 9Ih3EthwB3HocUv9OxFKqNE6TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFId5jxGA p7C6nwRjoZPpUlshiinrMB8GA1UdIwQYMBaAFD13U/3rsi8JOnECGoPWWGZV6SSg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDg1Ny81MzgwRUY2Q0JG N0UxMUVBQjZGQTM3NUZDNEY5QUUwMi9QWGRUX2V1eUx3azZjUUlhZzlaWVpsWHBK S0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BYZFRfZXV5THdrNmNRSWFnOVpZWmxYcEpLQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDg1Ny81MzgwRUY2Q0JGN0UxMUVBQjZGQTM3NUZDNEY5QUUwMi9QWGRUX2V1eUx3 azZjUUlhZzlaWVpsWHBKS0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAX1i8RsLWqtBhD+SzIsZLPby1o0mZLA30XlDksjawOlIBCmEikPvBp NMM9NQLaJS3Dve18sz2/vZZNxzSqlbF8pyPVq149hv9JAf9DAwd2V2GeD56rQmhs nXd1Fix8An6r8aulyrppyPLTDjYJfryNVdxx2kcFlHx28ukwHa6qG14e1/sKKa5i VB4TH+ytdYpiL4tHl9uC+LCREvR22KhCofDUPKCmUydTU00lvGYpp5DqNi1rQ+1r bQIb+Uz0YlK6ezbBID/24N4z81JH02na2vI5HsZo3GwYs3OAE6uZqcAn7u7Aekjm vdhQGsnB8Gd3j/O5zmvdbuKlERaZqg6Z -----END CERTIFICATE-----Generated at Sun Aug 24 00:48:01 2025 by rpki-client