$ rpki-client -vvf rpki.apnic.net/member_repository/A911FCFC/0EF3B3887D3E11EB9EDF687CC4F9AE02/PSZeQBIxQ3qRDsIf5O1O47EmnI0.mft File: PSZeQBIxQ3qRDsIf5O1O47EmnI0.mft (raw, json) Hash identifier: o/3JOgBzT0JoGGKZz5W682T2wshUpnSzssMGeULTXeA= Subject key identifier: E4:41:42:E6:A2:20:ED:24:64:FE:57:26:58:2C:E2:30:6F:C9:E8:2B Authority key identifier: 3D:26:5E:40:12:31:43:7A:91:0E:C2:1F:E4:ED:4E:E3:B1:26:9C:8D Certificate issuer: /CN=A911FCFC/serialNumber=3D265E401231437A910EC21FE4ED4EE3B1269C8D Certificate serial: 06A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSZeQBIxQ3qRDsIf5O1O47EmnI0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FCFC/0EF3B3887D3E11EB9EDF687CC4F9AE02/PSZeQBIxQ3qRDsIf5O1O47EmnI0.mft Manifest number: 069D Signing time: Fri 22 Aug 2025 22:23:30 +0000 Manifest this update: Fri 22 Aug 2025 22:23:29 +0000 Manifest next update: Fri 29 Aug 2025 22:23:29 +0000 Files and hashes: 1: PSZeQBIxQ3qRDsIf5O1O47EmnI0.crl (hash: mAKBgOL0eRmjl47DNQSwUFtmoKKz5bzOUtPVYZi2YwQ=) 2: 584CC9ACEA0911EF91395D2BC4F9AE02.roa (hash: 0CvjA6RG6CwLDhsi+lvIuB2qC+UIcfKPm+dtie8AJzA=) 3: 3A542BE0BC7511EBBB084D27C4F9AE02.roa (hash: h6cfh4R2DSVctuRgtsUmGsASm4gMo0dIEjDPej0xQNc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FCFC/0EF3B3887D3E11EB9EDF687CC4F9AE02/PSZeQBIxQ3qRDsIf5O1O47EmnI0.crl rsync://rpki.apnic.net/member_repository/A911FCFC/0EF3B3887D3E11EB9EDF687CC4F9AE02/PSZeQBIxQ3qRDsIf5O1O47EmnI0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSZeQBIxQ3qRDsIf5O1O47EmnI0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:23:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1704 (0x6a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FCFC, serialNumber=3D265E401231437A910EC21FE4ED4EE3B1269C8D Validity Not Before: Aug 22 22:23:29 2025 GMT Not After : Aug 29 22:23:29 2025 GMT Subject: CN=68a8ede1-279e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:67:e0:c9:75:b7:70:ac:97:09:96:41:42:d9: 37:ce:bd:eb:2c:be:eb:75:80:2b:89:34:0a:43:07: 54:6d:eb:f4:10:0a:07:d7:c3:e4:b3:6e:6c:9c:3d: b5:e5:5f:bd:28:35:66:e8:5b:73:55:af:02:78:19: 41:23:a2:ea:e8:13:30:59:0b:15:fa:37:3b:4f:3c: 63:3b:38:81:ca:19:06:b0:9b:e8:18:bd:0a:e3:36: 3d:66:17:50:af:61:1a:4a:70:b2:2a:54:da:5f:63: 41:2f:9a:17:f6:49:66:10:d3:3d:91:0e:cd:b0:c2: 71:c2:52:14:aa:12:da:93:5f:56:b9:78:c3:6c:9a: 5c:26:d3:8c:11:8c:b8:1f:50:d3:32:11:16:e4:0a: 49:f0:d1:88:11:72:80:19:df:a7:2d:db:71:08:e2: 5c:b9:f4:78:c5:e3:fb:09:54:28:ee:7b:9d:3e:37: 5e:2c:49:44:a5:72:d1:17:33:ae:ff:68:a9:4c:9c: 2b:85:93:64:c4:42:9f:f9:d4:3e:80:c8:40:6a:2a: 00:40:9e:2c:bb:5b:83:60:dc:af:b7:3c:0a:aa:23: f8:ee:ce:8f:14:25:9a:94:e7:1b:ba:91:ae:ab:47: 03:ec:c5:95:0b:dd:23:7e:2f:a1:5b:32:70:a7:54: b6:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:41:42:E6:A2:20:ED:24:64:FE:57:26:58:2C:E2:30:6F:C9:E8:2B X509v3 Authority Key Identifier: keyid:3D:26:5E:40:12:31:43:7A:91:0E:C2:1F:E4:ED:4E:E3:B1:26:9C:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FCFC/0EF3B3887D3E11EB9EDF687CC4F9AE02/PSZeQBIxQ3qRDsIf5O1O47EmnI0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSZeQBIxQ3qRDsIf5O1O47EmnI0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FCFC/0EF3B3887D3E11EB9EDF687CC4F9AE02/PSZeQBIxQ3qRDsIf5O1O47EmnI0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:f4:b3:ba:15:23:38:b3:fc:c1:4f:9f:01:cb:82:c1:2b:d4: 89:19:b1:78:02:10:c4:84:95:68:3d:2e:49:2e:23:48:2d:05: c3:b9:24:02:ac:9a:ac:10:d3:e8:ae:29:e6:d5:c4:fc:9c:9c: a1:af:6c:de:63:3b:49:56:4f:33:a0:87:b4:6c:b3:23:55:dc: 8e:52:b2:2c:1a:3c:85:d5:83:75:ea:09:c2:a2:ed:cd:12:24: 53:40:06:e4:11:04:44:5d:2f:83:97:38:f4:58:22:03:95:bf: 2c:65:13:09:e9:80:16:a4:d0:6a:ad:d9:f6:36:66:f6:7a:a1: 92:b5:05:00:74:0b:a7:0f:68:cf:8a:87:a5:c5:74:d6:14:17: c6:4a:57:c0:7e:b9:8a:f6:f5:55:dc:fe:bf:18:14:21:8b:6d: 92:f3:3c:64:81:a2:e4:fd:8f:61:70:e4:ee:7a:83:60:61:a5: 88:c2:46:9d:88:ab:2a:c2:7d:b9:1c:b1:8d:6a:5b:20:2e:09: 3c:d4:0b:b9:87:9a:5e:80:9d:4e:1d:f5:07:a0:d4:4e:fc:23: 3f:51:13:5c:21:1b:1c:2b:ba:35:cc:35:fd:82:33:e0:bc:cb: 94:11:0e:0a:ac:04:6c:50:02:f2:88:76:9b:d1:59:f5:1c:dc: ff:33:a9:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZDRkMxMTAvBgNVBAUTKDNEMjY1RTQwMTIzMTQzN0E5MTBFQzIxRkU0RUQ0RUUz QjEyNjlDOEQwHhcNMjUwODIyMjIyMzI5WhcNMjUwODI5MjIyMzI5WjAYMRYwFAYD VQQDEw02OGE4ZWRlMS0yNzllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5WfgyXW3cKyXCZZBQtk3zr3rLL7rdYAriTQKQwdUbev0EAoH18Pks25snD21 5V+9KDVm6FtzVa8CeBlBI6Lq6BMwWQsV+jc7TzxjOziByhkGsJvoGL0K4zY9ZhdQ r2EaSnCyKlTaX2NBL5oX9klmENM9kQ7NsMJxwlIUqhLak19WuXjDbJpcJtOMEYy4 H1DTMhEW5ApJ8NGIEXKAGd+nLdtxCOJcufR4xeP7CVQo7nudPjdeLElEpXLRFzOu /2ipTJwrhZNkxEKf+dQ+gMhAaioAQJ4su1uDYNyvtzwKqiP47s6PFCWalOcbupGu q0cD7MWVC90jfi+hWzJwp1S2mQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFORBQuai IO0kZP5XJlgs4jBvyegrMB8GA1UdIwQYMBaAFD0mXkASMUN6kQ7CH+TtTuOxJpyN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkNGQy8wRUYzQjM4ODdE M0UxMUVCOUVERjY4N0NDNEY5QUUwMi9QU1plUUJJeFEzcVJEc0lmNU8xTzQ3RW1u STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BTWmVRQkl4UTNxUkRzSWY1TzFPNDdFbW5JMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkNGQy8wRUYzQjM4ODdEM0UxMUVCOUVERjY4N0NDNEY5QUUwMi9QU1plUUJJeFEz cVJEc0lmNU8xTzQ3RW1uSTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCb9LO6FSM4s/zBT58By4LBK9SJGbF4AhDEhJVoPS5JLiNILQXDuSQC rJqsENPorinm1cT8nJyhr2zeYztJVk8zoIe0bLMjVdyOUrIsGjyF1YN16gnCou3N EiRTQAbkEQREXS+Dlzj0WCIDlb8sZRMJ6YAWpNBqrdn2Nmb2eqGStQUAdAunD2jP ioelxXTWFBfGSlfAfrmK9vVV3P6/GBQhi22S8zxkgaLk/Y9hcOTueoNgYaWIwkad iKsqwn25HLGNalsgLgk81Au5h5pegJ1OHfUHoNRO/CM/URNcIRscK7o1zDX9gjPg vMuUEQ4KrARsUALyiHab0Vn1HNz/M6nj -----END CERTIFICATE-----Generated at Sat Aug 23 13:43:57 2025 by rpki-client