$ rpki-client -vvf rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.mft File: pxA_0z9simRI_GOUCql9k_gfgQU.mft (raw, json) Hash identifier: R/dG/q2zWjShusjWt4amYB9bH0kmPoJ5iw1hqwPP5ys= Subject key identifier: B4:58:9A:86:69:A3:B1:5B:E6:60:B4:56:53:CC:91:19:1B:EB:24:2E Authority key identifier: A7:10:3F:D3:3F:6C:8A:64:48:FC:63:94:0A:A9:7D:93:F8:1F:81:05 Certificate issuer: /CN=A9126D40/serialNumber=A7103FD33F6C8A6448FC63940AA97D93F81F8105 Certificate serial: 0570 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pxA_0z9simRI_GOUCql9k_gfgQU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.mft Manifest number: 056B Signing time: Fri 22 Aug 2025 23:29:50 +0000 Manifest this update: Fri 22 Aug 2025 23:29:49 +0000 Manifest next update: Fri 29 Aug 2025 23:29:49 +0000 Files and hashes: 1: pxA_0z9simRI_GOUCql9k_gfgQU.crl (hash: Z8Nino2EyJo1cAEaP5KvIBL4Brj8mJc4Xl0No5oZTxI=) 2: 5B0A7AFCF3F611EB8DD81585C4F9AE02.roa (hash: R8hfJ5cUDeHXSHt31Yaxeq/Vdh/2fKfS7Ifq3y/hy0s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.crl rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pxA_0z9simRI_GOUCql9k_gfgQU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:29:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1392 (0x570) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126D40, serialNumber=A7103FD33F6C8A6448FC63940AA97D93F81F8105 Validity Not Before: Aug 22 23:29:49 2025 GMT Not After : Aug 29 23:29:49 2025 GMT Subject: CN=68a8fd6e-0d68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:66:85:46:75:90:df:17:24:5f:af:4a:02:80: f7:6e:aa:6d:92:01:68:b6:fa:43:42:1a:5f:ed:76: a7:80:a9:10:e7:da:cf:cc:eb:15:e2:33:c6:b4:16: 61:c1:f9:46:d0:ee:de:81:4d:fc:ac:a5:9e:a1:49: 89:01:ac:0d:df:59:f5:4f:44:05:15:c9:21:c6:44: c1:00:6b:72:1d:b6:ef:fd:b3:12:87:73:ba:4a:f3: a7:b1:fd:a2:76:c5:62:7d:6f:34:66:de:ad:a3:05: e3:0a:e2:51:13:f7:56:99:58:ea:91:ad:b3:d1:1c: 1f:2c:64:13:fe:d2:4c:86:df:f9:bd:e0:d7:19:f6: 41:7e:7b:6f:50:a6:b9:8b:a1:54:6f:38:1f:22:cf: 50:4d:ea:fb:b7:6c:3e:21:69:3c:73:21:99:3e:e6: 44:42:65:54:0a:af:96:dd:2f:4d:22:9c:8a:1a:9b: 53:a5:0b:7e:4e:06:a3:9b:69:ae:89:33:4a:79:e1: 14:d1:06:91:29:e1:63:e4:69:51:94:fb:a0:a8:c1: 66:5f:75:9c:e4:4c:8f:a6:a4:0f:c2:a2:f6:86:56: 8b:45:1b:84:0d:40:79:aa:0d:c1:c2:c6:03:b3:98: 07:08:8b:c9:b7:5a:32:12:87:f9:f1:3a:1c:d7:15: 6d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:58:9A:86:69:A3:B1:5B:E6:60:B4:56:53:CC:91:19:1B:EB:24:2E X509v3 Authority Key Identifier: keyid:A7:10:3F:D3:3F:6C:8A:64:48:FC:63:94:0A:A9:7D:93:F8:1F:81:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pxA_0z9simRI_GOUCql9k_gfgQU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:cb:8d:02:a6:c6:a7:e1:ff:58:ee:37:7d:09:e5:62:65:37: 54:6e:ac:cb:89:c1:06:a4:ce:b6:21:4a:a9:71:39:fe:d0:57: 8f:9f:53:f6:a8:f2:fa:b1:0b:d8:c8:08:79:27:d8:1f:d9:64: 7b:37:aa:e9:40:14:92:ff:d7:42:24:42:98:b8:2d:14:a2:47: 17:5b:b1:32:40:c5:9a:73:c0:15:3e:69:5d:2d:47:a1:5e:e5: 5f:ff:c5:9e:b3:55:2e:fe:9c:f8:36:bf:3a:be:55:4e:01:d4: f7:0b:e4:00:cd:5f:de:83:c6:9e:ea:5d:24:61:35:3b:cc:21: 3b:fe:e3:88:21:c0:b7:d1:54:93:86:5a:6d:df:2f:a4:bc:b8: 02:c2:8d:bf:2b:df:9e:b8:83:57:9f:83:04:c7:16:43:11:5e: bb:22:2f:3f:ee:41:f6:47:8a:87:fe:20:ac:8e:c3:89:a0:f4: 36:48:7b:d2:9c:e9:d4:83:84:33:a6:41:9e:df:02:28:2b:43: 8d:4b:5a:7f:80:f9:c2:32:f5:60:a7:c0:9f:a3:22:37:b5:76: 81:d2:f6:c1:f0:a6:0b:8f:1d:4b:0c:4c:43:76:d0:6e:0e:a7: 85:95:c4:a1:27:30:6d:df:79:23:c4:49:0a:69:df:ad:24:6b: 0b:6f:f0:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjZENDAxMTAvBgNVBAUTKEE3MTAzRkQzM0Y2QzhBNjQ0OEZDNjM5NDBBQTk3RDkz RjgxRjgxMDUwHhcNMjUwODIyMjMyOTQ5WhcNMjUwODI5MjMyOTQ5WjAYMRYwFAYD VQQDEw02OGE4ZmQ2ZS0wZDY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApWaFRnWQ3xckX69KAoD3bqptkgFotvpDQhpf7XangKkQ59rPzOsV4jPGtBZh wflG0O7egU38rKWeoUmJAawN31n1T0QFFckhxkTBAGtyHbbv/bMSh3O6SvOnsf2i dsVifW80Zt6towXjCuJRE/dWmVjqka2z0RwfLGQT/tJMht/5veDXGfZBfntvUKa5 i6FUbzgfIs9QTer7t2w+IWk8cyGZPuZEQmVUCq+W3S9NIpyKGptTpQt+Tgajm2mu iTNKeeEU0QaRKeFj5GlRlPugqMFmX3Wc5EyPpqQPwqL2hlaLRRuEDUB5qg3BwsYD s5gHCIvJt1oyEof58Toc1xVtAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLRYmoZp o7Fb5mC0VlPMkRkb6yQuMB8GA1UdIwQYMBaAFKcQP9M/bIpkSPxjlAqpfZP4H4EF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNkQ0MC8zQzYzMzNDNkYz RjMxMUVCQTI5MkU1ODBDNEY5QUUwMi9weEFfMHo5c2ltUklfR09VQ3FsOWtfZ2Zn UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3B4QV8wejlzaW1SSV9HT1VDcWw5a19nZmdRVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NkQ0MC8zQzYzMzNDNkYzRjMxMUVCQTI5MkU1ODBDNEY5QUUwMi9weEFfMHo5c2lt UklfR09VQ3FsOWtfZ2ZnUVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQy40Cpsan4f9Y7jd9CeViZTdUbqzLicEGpM62IUqpcTn+0FePn1P2 qPL6sQvYyAh5J9gf2WR7N6rpQBSS/9dCJEKYuC0UokcXW7EyQMWac8AVPmldLUeh XuVf/8Wes1Uu/pz4Nr86vlVOAdT3C+QAzV/eg8ae6l0kYTU7zCE7/uOIIcC30VST hlpt3y+kvLgCwo2/K9+euINXn4MExxZDEV67Ii8/7kH2R4qH/iCsjsOJoPQ2SHvS nOnUg4QzpkGe3wIoK0ONS1p/gPnCMvVgp8CfoyI3tXaB0vbB8KYLjx1LDExDdtBu DqeFlcShJzBt33kjxEkKad+tJGsLb/D3 -----END CERTIFICATE-----Generated at Sat Aug 23 19:39:32 2025 by rpki-client