$ rpki-client -vvf rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.mft File: pxA_0z9simRI_GOUCql9k_gfgQU.mft (raw, json) Hash identifier: T7slquFmPx0CvL8W6HvlbwZGgfmP9MSx3Zp9zRp8X+Y= Subject key identifier: ED:25:0A:3A:D2:67:69:0A:19:77:E5:57:A7:8F:A2:D5:A9:F9:A2:EB Authority key identifier: A7:10:3F:D3:3F:6C:8A:64:48:FC:63:94:0A:A9:7D:93:F8:1F:81:05 Certificate issuer: /CN=A9126D40/serialNumber=A7103FD33F6C8A6448FC63940AA97D93F81F8105 Certificate serial: 0556 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pxA_0z9simRI_GOUCql9k_gfgQU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.mft Manifest number: 0551 Signing time: Wed 02 Jul 2025 23:42:27 +0000 Manifest this update: Wed 02 Jul 2025 23:42:26 +0000 Manifest next update: Wed 09 Jul 2025 23:42:26 +0000 Files and hashes: 1: pxA_0z9simRI_GOUCql9k_gfgQU.crl (hash: QXNgYbSJRNDq5alNNjsUe1hMLEDMQ569D5a9peIAXPQ=) 2: 5B0A7AFCF3F611EB8DD81585C4F9AE02.roa (hash: R8hfJ5cUDeHXSHt31Yaxeq/Vdh/2fKfS7Ifq3y/hy0s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.crl rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pxA_0z9simRI_GOUCql9k_gfgQU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 23:42:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1366 (0x556) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126D40, serialNumber=A7103FD33F6C8A6448FC63940AA97D93F81F8105 Validity Not Before: Jul 2 23:42:26 2025 GMT Not After : Jul 9 23:42:26 2025 GMT Subject: CN=6865c3e3-c9f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:3e:0a:db:cb:b4:f8:d3:f9:bb:ae:0a:cf:96: 29:73:14:df:b5:2e:64:e4:69:8d:cf:43:3c:c1:17: 20:ff:7a:7a:2c:e1:49:04:2a:be:32:ba:94:ab:6d: 67:7f:b1:1d:a3:46:17:b8:93:46:31:2b:d7:88:f2: 10:06:fb:fb:2e:57:da:0b:f6:9a:1c:c0:81:c5:50: c1:8e:78:ab:bb:9c:8a:dc:1c:89:43:6a:8a:50:d3: ad:d8:c0:df:41:16:13:8d:29:4d:71:49:a9:5f:c0: cc:56:b5:ed:b1:92:e3:81:32:26:67:2a:d6:2c:02: 82:64:56:72:63:8f:18:f9:25:2f:53:19:3a:01:59: 81:19:7f:98:84:6e:c5:92:de:cc:c6:8d:b3:f3:b8: 6a:df:88:25:27:62:72:6b:95:0a:26:20:57:b5:42: 8b:fd:a1:2e:f4:6a:10:3b:1d:2c:94:57:f4:82:d7: 74:09:97:46:5a:c5:3f:5a:1f:ae:31:b6:96:63:0a: b1:3b:19:03:8a:a1:ba:da:6c:2c:de:f8:c5:b7:c8: ca:f9:c1:56:94:7d:d7:c4:e4:7b:a4:56:2d:00:a4: 5a:c3:bd:b1:ac:81:85:76:17:97:32:da:c1:e5:25: 43:92:d7:83:0c:98:9f:b7:65:dc:23:fa:65:cd:4b: 0b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:25:0A:3A:D2:67:69:0A:19:77:E5:57:A7:8F:A2:D5:A9:F9:A2:EB X509v3 Authority Key Identifier: keyid:A7:10:3F:D3:3F:6C:8A:64:48:FC:63:94:0A:A9:7D:93:F8:1F:81:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pxA_0z9simRI_GOUCql9k_gfgQU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:8a:f1:18:f2:54:d7:70:06:94:32:f5:33:c4:89:93:19:09: f7:b9:d7:f5:c2:ae:54:f5:9f:b1:0e:b8:52:9e:03:2d:5c:f5: 2e:b9:53:68:a5:54:50:f1:85:0c:15:28:51:87:0a:27:05:6a: 54:52:a0:71:d7:d9:d2:2e:d0:4d:6a:87:a7:10:2c:7d:02:38: ee:b2:e3:46:fc:ee:30:08:04:4a:9a:bd:8b:e7:03:cf:3d:05: 58:01:cd:e7:25:1b:7f:0a:84:f8:40:da:41:26:3e:90:43:15: 33:4b:70:c1:a3:05:f6:e9:4a:45:1f:45:92:66:02:e5:c8:40: b6:4e:62:74:06:32:53:36:6c:6c:d3:e7:e7:55:03:5b:ea:ff: b9:7d:05:0b:dc:ff:45:e1:49:1a:99:58:fd:01:c9:d1:ee:ae: 4f:55:c8:5e:2a:b9:e8:b9:17:88:1c:e2:1a:7d:ce:e2:cb:40: d7:8d:1a:1d:54:87:99:7a:18:20:fe:77:05:a6:fc:40:c6:03: ca:ff:08:f9:cf:68:6a:7f:a7:f3:6b:a9:d3:21:db:b2:8a:a7: 47:b2:80:f3:99:66:0c:c6:b1:68:3c:06:4f:dc:20:14:66:ee: e9:12:65:d6:07:b1:8e:b5:cb:73:83:41:76:25:fb:0c:bf:57: 83:7d:43:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjZENDAxMTAvBgNVBAUTKEE3MTAzRkQzM0Y2QzhBNjQ0OEZDNjM5NDBBQTk3RDkz RjgxRjgxMDUwHhcNMjUwNzAyMjM0MjI2WhcNMjUwNzA5MjM0MjI2WjAYMRYwFAYD VQQDEw02ODY1YzNlMy1jOWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnz4K28u0+NP5u64Kz5YpcxTftS5k5GmNz0M8wRcg/3p6LOFJBCq+MrqUq21n f7Edo0YXuJNGMSvXiPIQBvv7LlfaC/aaHMCBxVDBjniru5yK3ByJQ2qKUNOt2MDf QRYTjSlNcUmpX8DMVrXtsZLjgTImZyrWLAKCZFZyY48Y+SUvUxk6AVmBGX+YhG7F kt7Mxo2z87hq34glJ2Jya5UKJiBXtUKL/aEu9GoQOx0slFf0gtd0CZdGWsU/Wh+u MbaWYwqxOxkDiqG62mws3vjFt8jK+cFWlH3XxOR7pFYtAKRaw72xrIGFdheXMtrB 5SVDkteDDJift2XcI/plzUsL/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO0lCjrS Z2kKGXflV6ePotWp+aLrMB8GA1UdIwQYMBaAFKcQP9M/bIpkSPxjlAqpfZP4H4EF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNkQ0MC8zQzYzMzNDNkYz RjMxMUVCQTI5MkU1ODBDNEY5QUUwMi9weEFfMHo5c2ltUklfR09VQ3FsOWtfZ2Zn UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3B4QV8wejlzaW1SSV9HT1VDcWw5a19nZmdRVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NkQ0MC8zQzYzMzNDNkYzRjMxMUVCQTI5MkU1ODBDNEY5QUUwMi9weEFfMHo5c2lt UklfR09VQ3FsOWtfZ2ZnUVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3ivEY8lTXcAaUMvUzxImTGQn3udf1wq5U9Z+xDrhSngMtXPUuuVNo pVRQ8YUMFShRhwonBWpUUqBx19nSLtBNaoenECx9AjjusuNG/O4wCARKmr2L5wPP PQVYAc3nJRt/CoT4QNpBJj6QQxUzS3DBowX26UpFH0WSZgLlyEC2TmJ0BjJTNmxs 0+fnVQNb6v+5fQUL3P9F4UkamVj9AcnR7q5PVcheKrnouReIHOIafc7iy0DXjRod VIeZehgg/ncFpvxAxgPK/wj5z2hqf6fza6nTIduyiqdHsoDzmWYMxrFoPAZP3CAU Zu7pEmXWB7GOtctzg0F2JfsMv1eDfUMA -----END CERTIFICATE-----Generated at Fri Jul 4 18:37:05 2025 by rpki-client