$ rpki-client -vvf rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.mft File: PXdT_euyLwk6cQIag9ZYZlXpJKA.mft (raw, json) Hash identifier: rhB4ZR42/GjS1D2zlOPSobAa+2ujZmwvb1eTrPka9vs= Subject key identifier: 5B:A0:66:BB:F9:18:F5:4C:C9:23:FF:9B:35:C9:B2:37:52:8E:04:32 Authority key identifier: 3D:77:53:FD:EB:B2:2F:09:3A:71:02:1A:83:D6:58:66:55:E9:24:A0 Certificate issuer: /CN=A911D857/serialNumber=3D7753FDEBB22F093A71021A83D6586655E924A0 Certificate serial: 08A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXdT_euyLwk6cQIag9ZYZlXpJKA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.mft Manifest number: 0899 Signing time: Wed 02 Jul 2025 20:50:37 +0000 Manifest this update: Wed 02 Jul 2025 20:50:36 +0000 Manifest next update: Wed 09 Jul 2025 20:50:36 +0000 Files and hashes: 1: PXdT_euyLwk6cQIag9ZYZlXpJKA.crl (hash: OhIUNy41VNZIL8r+MBHYBrmJrCZo0ROk9GFJr60YeoY=) 2: 162EA00C442411EB911D086BC4F9AE02.roa (hash: hcolG+bA9kqJJPc6IsihTDFxcpdloDt804WFQ6sb6CQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.crl rsync://rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXdT_euyLwk6cQIag9ZYZlXpJKA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:50:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2212 (0x8a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D857, serialNumber=3D7753FDEBB22F093A71021A83D6586655E924A0 Validity Not Before: Jul 2 20:50:36 2025 GMT Not After : Jul 9 20:50:36 2025 GMT Subject: CN=68659b9d-3366 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:36:27:3e:8c:7d:39:c3:15:46:d7:35:92:d7: 3d:41:da:88:cf:6c:67:4a:f2:31:29:a1:ad:c5:5d: cd:dd:b8:d5:0d:d8:88:bf:a6:68:af:b6:d4:2d:05: 6a:4b:3f:76:ff:b3:f1:80:f4:d3:2d:b5:42:86:05: 53:ba:f1:b0:e7:1d:74:9e:a4:bc:a9:4d:39:3e:06: ce:f1:57:7c:98:08:74:61:c6:36:0f:82:07:a7:ac: 40:a8:c5:b2:42:82:19:db:f4:f7:6a:b3:75:06:99: 0c:e0:e1:43:67:57:39:e4:ba:43:79:b7:b6:ea:22: 46:ab:25:c4:4b:7e:e4:7e:ba:c4:a3:07:7a:d0:7c: ac:0b:fc:80:90:ac:bd:09:cd:db:f9:4c:12:f7:f0: 8f:ff:5c:4e:a8:eb:11:e2:86:d2:10:5b:1b:59:8e: 98:90:a9:79:b6:af:85:82:a9:58:e4:15:e3:96:88: 03:56:ce:fa:c0:ca:b1:8d:4d:5a:dc:7e:ef:56:18: 73:59:cb:af:5f:64:0c:ac:e9:85:75:cd:43:1f:a6: 71:d6:cc:91:b5:a0:fa:5a:30:0b:82:f5:92:5a:02: 72:1c:3a:c4:4c:16:a4:0b:87:4f:6b:92:93:06:e6: 07:ff:e2:d5:09:30:66:68:b1:f5:7f:e8:30:f0:d8: 0b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:A0:66:BB:F9:18:F5:4C:C9:23:FF:9B:35:C9:B2:37:52:8E:04:32 X509v3 Authority Key Identifier: keyid:3D:77:53:FD:EB:B2:2F:09:3A:71:02:1A:83:D6:58:66:55:E9:24:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXdT_euyLwk6cQIag9ZYZlXpJKA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:ac:6f:0d:6a:b1:08:64:bf:95:0b:15:29:f6:60:74:ea:a2: 23:91:68:13:fb:77:8f:21:04:18:76:e4:d0:95:1c:f2:47:18: b9:91:20:f9:6a:60:aa:5a:34:8a:08:86:25:db:37:96:67:63: d9:97:e2:a8:b3:0d:43:b9:b0:00:91:0a:49:b8:f3:e3:77:83: ff:f9:53:72:62:80:cb:34:fc:1e:e2:e0:c7:8f:fc:15:2d:54: a3:d5:73:e3:90:07:03:00:74:8b:18:59:2a:0b:2a:46:91:dc: 20:ee:62:14:ca:e7:5a:9f:ea:13:43:c6:46:b4:88:99:18:06: 4b:12:c6:6b:88:88:dd:60:43:db:c8:b8:2b:56:0e:5f:9d:19: c4:07:cf:88:e0:91:1e:58:ef:23:ba:77:8b:ec:43:0e:52:ae: 91:02:bf:78:08:80:e4:12:ea:6c:4a:f4:57:1f:09:59:74:f6: 6c:45:86:8e:aa:ca:1e:23:0d:f7:c3:74:38:f8:f3:bd:ba:bd: d4:37:2c:58:e6:f2:e7:d1:75:9c:31:60:7e:2d:8a:e3:65:17: 55:57:bc:23:d1:0e:3d:23:af:e6:2a:25:70:db:a6:79:79:1d: 9f:72:95:3c:94:69:b8:85:e9:85:89:67:6c:06:91:79:24:84: da:7b:b6:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ4NTcxMTAvBgNVBAUTKDNENzc1M0ZERUJCMjJGMDkzQTcxMDIxQTgzRDY1ODY2 NTVFOTI0QTAwHhcNMjUwNzAyMjA1MDM2WhcNMjUwNzA5MjA1MDM2WjAYMRYwFAYD VQQDEw02ODY1OWI5ZC0zMzY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwTYnPox9OcMVRtc1ktc9QdqIz2xnSvIxKaGtxV3N3bjVDdiIv6Zor7bULQVq Sz92/7PxgPTTLbVChgVTuvGw5x10nqS8qU05PgbO8Vd8mAh0YcY2D4IHp6xAqMWy QoIZ2/T3arN1BpkM4OFDZ1c55LpDebe26iJGqyXES37kfrrEowd60HysC/yAkKy9 Cc3b+UwS9/CP/1xOqOsR4obSEFsbWY6YkKl5tq+FgqlY5BXjlogDVs76wMqxjU1a 3H7vVhhzWcuvX2QMrOmFdc1DH6Zx1syRtaD6WjALgvWSWgJyHDrETBakC4dPa5KT BuYH/+LVCTBmaLH1f+gw8NgLLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFugZrv5 GPVMySP/mzXJsjdSjgQyMB8GA1UdIwQYMBaAFD13U/3rsi8JOnECGoPWWGZV6SSg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDg1Ny81MzgwRUY2Q0JG N0UxMUVBQjZGQTM3NUZDNEY5QUUwMi9QWGRUX2V1eUx3azZjUUlhZzlaWVpsWHBK S0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BYZFRfZXV5THdrNmNRSWFnOVpZWmxYcEpLQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDg1Ny81MzgwRUY2Q0JGN0UxMUVBQjZGQTM3NUZDNEY5QUUwMi9QWGRUX2V1eUx3 azZjUUlhZzlaWVpsWHBKS0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOrG8NarEIZL+VCxUp9mB06qIjkWgT+3ePIQQYduTQlRzyRxi5kSD5 amCqWjSKCIYl2zeWZ2PZl+Kosw1DubAAkQpJuPPjd4P/+VNyYoDLNPwe4uDHj/wV LVSj1XPjkAcDAHSLGFkqCypGkdwg7mIUyudan+oTQ8ZGtIiZGAZLEsZriIjdYEPb yLgrVg5fnRnEB8+I4JEeWO8juneL7EMOUq6RAr94CIDkEupsSvRXHwlZdPZsRYaO qsoeIw33w3Q4+PO9ur3UNyxY5vLn0XWcMWB+LYrjZRdVV7wj0Q49I6/mKiVw26Z5 eR2fcpU8lGm4hemFiWdsBpF5JITae7Za -----END CERTIFICATE-----Generated at Thu Jul 3 09:00:29 2025 by rpki-client