$ rpki-client -vvf rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.mft File: pxA_0z9simRI_GOUCql9k_gfgQU.mft (raw, json) Hash identifier: /QLWBw3ceUOdmi244mwLeuu77sHRZvBA/LTBPczQTe8= Subject key identifier: 28:A7:E9:FD:ED:FD:BF:03:97:DA:63:8C:B9:2E:68:32:3A:DF:1E:FD Authority key identifier: A7:10:3F:D3:3F:6C:8A:64:48:FC:63:94:0A:A9:7D:93:F8:1F:81:05 Certificate issuer: /CN=A9126D40/serialNumber=A7103FD33F6C8A6448FC63940AA97D93F81F8105 Certificate serial: 058D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pxA_0z9simRI_GOUCql9k_gfgQU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.mft Manifest number: 0588 Signing time: Sun 19 Oct 2025 00:54:16 +0000 Manifest this update: Sun 19 Oct 2025 00:54:15 +0000 Manifest next update: Sun 26 Oct 2025 00:54:15 +0000 Files and hashes: 1: pxA_0z9simRI_GOUCql9k_gfgQU.crl (hash: tX4mowPrl3hgJ8seB4cPo2drzVr1SEPqzVh7iiBO/Lo=) 2: 5B0A7AFCF3F611EB8DD81585C4F9AE02.roa (hash: R8hfJ5cUDeHXSHt31Yaxeq/Vdh/2fKfS7Ifq3y/hy0s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.crl rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pxA_0z9simRI_GOUCql9k_gfgQU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:54:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1421 (0x58d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126D40, serialNumber=A7103FD33F6C8A6448FC63940AA97D93F81F8105 Validity Not Before: Oct 19 00:54:15 2025 GMT Not After : Oct 26 00:54:15 2025 GMT Subject: CN=68f436b7-8b65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:6d:16:34:76:66:3f:87:f7:14:aa:14:23:ac: 7d:f9:17:3a:77:93:9f:32:ec:c9:e3:bb:06:db:a3: 04:d6:d9:49:ff:56:95:5e:4d:3d:c4:2d:8c:13:66: 0b:45:06:25:4f:d3:d6:37:f0:5e:dc:3b:e7:7d:7c: f7:8f:37:81:04:2d:65:b9:e4:6f:e6:de:ca:69:c3: 23:63:11:b3:78:56:9f:77:f3:3d:eb:2a:d2:b2:26: 8c:66:a6:97:9f:fb:b8:ff:f6:9f:72:30:6c:a4:c9: e0:af:89:05:95:37:60:f7:27:9c:51:bb:35:9e:e6: 5d:72:8f:83:0e:81:86:d2:5d:fc:34:27:4e:2c:98: 69:10:98:23:44:da:8a:44:03:a6:99:31:0f:29:10: f1:8c:f0:37:19:52:66:6c:46:15:c6:dc:31:22:12: 49:a9:19:f0:31:d3:14:20:38:20:70:d2:a1:dd:20: 04:36:61:bf:78:04:9f:3a:ba:85:43:26:a3:5d:c0: a0:31:ec:e5:b9:23:49:7e:a3:3f:22:13:ae:ea:98: 74:28:90:b1:fa:a0:e2:75:5e:5a:8d:e8:38:ea:56: 4c:9b:55:a7:a1:be:75:9b:36:bd:75:5e:67:e5:1a: d0:de:9b:e7:23:82:60:01:d0:2a:7a:46:4e:7f:13: b0:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:A7:E9:FD:ED:FD:BF:03:97:DA:63:8C:B9:2E:68:32:3A:DF:1E:FD X509v3 Authority Key Identifier: keyid:A7:10:3F:D3:3F:6C:8A:64:48:FC:63:94:0A:A9:7D:93:F8:1F:81:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pxA_0z9simRI_GOUCql9k_gfgQU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:44:7d:a1:c8:0a:a0:44:38:c6:a9:d3:c0:c7:89:a2:54:05: a0:5f:43:35:ec:2b:f3:6c:c5:cf:e5:59:e5:d0:17:a1:43:6d: aa:d7:d3:8b:b0:4d:15:02:6b:33:5b:ff:a6:7f:6c:c3:bb:d4: 11:72:79:f7:7d:59:1a:04:3c:f6:d9:dd:2a:85:4f:d2:a1:47: e1:24:18:5f:7a:c7:4f:4f:2c:48:b2:14:b5:04:c5:a3:90:aa: 43:12:57:0b:3b:5e:a7:9a:24:47:15:a5:7f:0c:60:1a:65:94: 32:47:b1:d3:f4:fb:a7:a8:77:65:28:ca:9e:97:27:5c:02:65: 1a:58:33:6a:df:79:14:ea:53:10:c5:fa:6a:05:51:72:2f:3f: 9d:21:2a:46:17:02:41:32:a1:72:34:85:aa:fc:74:90:db:e6: 41:ae:ac:cb:9b:20:00:dd:36:a1:54:ff:9b:45:a7:cb:3b:0d: 70:50:14:3e:45:3a:d0:70:99:35:4e:a5:90:79:02:4d:f1:8c: 9d:6d:9d:1e:70:42:ba:17:84:46:f0:0f:b2:bb:ee:63:48:9c: 19:a8:5b:71:5c:75:3c:81:ca:ed:9a:c9:7b:6a:59:cd:86:1e: a5:83:e4:8f:01:70:31:8f:50:a2:65:a6:76:c6:0f:84:49:b6: 0c:ee:c7:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjZENDAxMTAvBgNVBAUTKEE3MTAzRkQzM0Y2QzhBNjQ0OEZDNjM5NDBBQTk3RDkz RjgxRjgxMDUwHhcNMjUxMDE5MDA1NDE1WhcNMjUxMDI2MDA1NDE1WjAYMRYwFAYD VQQDEw02OGY0MzZiNy04YjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8G0WNHZmP4f3FKoUI6x9+Rc6d5OfMuzJ47sG26ME1tlJ/1aVXk09xC2ME2YL RQYlT9PWN/Be3DvnfXz3jzeBBC1lueRv5t7KacMjYxGzeFafd/M96yrSsiaMZqaX n/u4//afcjBspMngr4kFlTdg9yecUbs1nuZdco+DDoGG0l38NCdOLJhpEJgjRNqK RAOmmTEPKRDxjPA3GVJmbEYVxtwxIhJJqRnwMdMUIDggcNKh3SAENmG/eASfOrqF QyajXcCgMezluSNJfqM/IhOu6ph0KJCx+qDidV5ajeg46lZMm1Wnob51mza9dV5n 5RrQ3pvnI4JgAdAqekZOfxOwbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCin6f3t /b8Dl9pjjLkuaDI63x79MB8GA1UdIwQYMBaAFKcQP9M/bIpkSPxjlAqpfZP4H4EF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNkQ0MC8zQzYzMzNDNkYz RjMxMUVCQTI5MkU1ODBDNEY5QUUwMi9weEFfMHo5c2ltUklfR09VQ3FsOWtfZ2Zn UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3B4QV8wejlzaW1SSV9HT1VDcWw5a19nZmdRVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NkQ0MC8zQzYzMzNDNkYzRjMxMUVCQTI5MkU1ODBDNEY5QUUwMi9weEFfMHo5c2lt UklfR09VQ3FsOWtfZ2ZnUVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDFRH2hyAqgRDjGqdPAx4miVAWgX0M17CvzbMXP5Vnl0BehQ22q19OL sE0VAmszW/+mf2zDu9QRcnn3fVkaBDz22d0qhU/SoUfhJBhfesdPTyxIshS1BMWj kKpDElcLO16nmiRHFaV/DGAaZZQyR7HT9PunqHdlKMqelydcAmUaWDNq33kU6lMQ xfpqBVFyLz+dISpGFwJBMqFyNIWq/HSQ2+ZBrqzLmyAA3TahVP+bRafLOw1wUBQ+ RTrQcJk1TqWQeQJN8YydbZ0ecEK6F4RG8A+yu+5jSJwZqFtxXHU8gcrtmsl7alnN hh6lg+SPAXAxj1CiZaZ2xg+ESbYM7seF -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:32 2025 by rpki-client