$ rpki-client -vvf rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft File: P-xz79qKnlyT0KYKshWc4HCDC3E.mft (raw, json) Hash identifier: heCpdHwRn2wUnDRHu0/o7p8t8/FHKpzs/yMYnZePNtk= Subject key identifier: 68:C7:38:F1:7B:89:E7:7A:4A:53:CE:50:F7:FE:72:53:59:8B:D4:F3 Authority key identifier: 3F:EC:73:EF:DA:8A:9E:5C:93:D0:A6:0A:B2:15:9C:E0:70:83:0B:71 Certificate issuer: /CN=A9135597/serialNumber=3FEC73EFDA8A9E5C93D0A60AB2159CE070830B71 Certificate serial: 0215 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-xz79qKnlyT0KYKshWc4HCDC3E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft Manifest number: 020C Signing time: Sun 19 Oct 2025 04:44:33 +0000 Manifest this update: Sun 19 Oct 2025 04:44:32 +0000 Manifest next update: Sun 26 Oct 2025 04:44:32 +0000 Files and hashes: 1: P-xz79qKnlyT0KYKshWc4HCDC3E.crl (hash: cWTFWWO02RkTbUiYXiVBlVa/SbEte1hauU5KzmhyEM8=) 2: 3F6EE8E42D4211F09E0C422AC4F9AE02.roa (hash: V96z6p8lv3v3DbzjaaBJkTxNIi5ZsjxmKx2jknu2pAQ=) 3: 8140448E2D4211F0AB8B522BC4F9AE02.roa (hash: SvTUBZIdDCre/uFlRBRgrIMaL1ITzuHCA8WYxGN/4tM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.crl rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-xz79qKnlyT0KYKshWc4HCDC3E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:44:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 533 (0x215) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135597, serialNumber=3FEC73EFDA8A9E5C93D0A60AB2159CE070830B71 Validity Not Before: Oct 19 04:44:32 2025 GMT Not After : Oct 26 04:44:32 2025 GMT Subject: CN=68f46cb1-1ae0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d3:57:3f:43:78:b0:a6:eb:9b:36:f4:48:dd: 3b:c2:6a:46:d6:1d:ec:a2:d5:48:d6:f2:85:84:8a: 0c:70:a1:61:0d:67:a9:09:22:08:9d:a1:43:d5:8e: a8:2e:64:14:ea:06:61:1e:83:b6:fa:df:75:1d:47: fb:f6:03:cf:0f:26:d6:c4:3f:56:4d:82:7b:b3:76: 12:85:db:82:46:5a:9d:ba:15:a6:6b:f7:28:1b:65: f7:d3:59:c9:04:b8:ce:9e:d7:0b:0d:9c:2d:13:36: 8d:c8:39:aa:71:64:07:4f:dc:86:97:cd:6b:c8:5c: 37:64:4c:99:2f:57:d3:95:d8:54:7c:21:4a:a2:7b: 63:bb:eb:ec:f0:bc:fb:42:16:44:e2:76:21:48:ab: 32:62:2f:d8:1d:04:40:7a:1d:23:98:0d:e4:86:7e: 8d:96:c7:17:84:8e:33:32:d3:32:2b:79:1a:08:5a: ec:08:7c:d5:7d:0d:dc:03:03:1c:6c:0f:e9:38:34: 56:a2:d2:5f:56:cd:35:18:af:64:08:bd:88:6d:0d: 91:79:9b:1c:12:20:83:e7:7d:37:ee:78:ee:57:3b: 9c:c8:88:1c:1f:6a:76:32:35:00:19:7b:e1:fe:2d: 99:8c:67:02:cc:55:b0:58:b2:53:3a:8a:11:31:85: e8:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:C7:38:F1:7B:89:E7:7A:4A:53:CE:50:F7:FE:72:53:59:8B:D4:F3 X509v3 Authority Key Identifier: keyid:3F:EC:73:EF:DA:8A:9E:5C:93:D0:A6:0A:B2:15:9C:E0:70:83:0B:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-xz79qKnlyT0KYKshWc4HCDC3E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:d7:b7:30:7b:d9:35:48:48:89:fa:a1:ce:d0:e9:7f:93:53: 3c:94:f9:1b:1b:1b:4e:09:b8:a6:4d:c0:19:c7:7f:4e:c7:ae: 17:e1:30:ae:5a:49:2f:eb:87:c8:f5:ac:d8:e6:11:87:79:72: 92:11:08:6c:86:20:35:a3:4f:d2:cc:a6:a3:4f:91:3c:01:f3: 8b:3b:55:ab:00:cb:9d:9f:5f:fe:be:e4:b7:64:f1:d2:8c:51: 05:cb:a2:ab:3c:f6:6a:97:7c:eb:c0:46:b3:50:5c:ba:bf:b0: a9:f0:aa:78:8f:d1:79:1d:35:2b:99:29:35:b8:82:4c:ff:89: 72:21:25:ce:81:0b:e7:ea:1a:b3:5c:27:da:d4:77:9a:72:cd: 1a:f9:f0:f4:00:c6:ad:4e:50:27:9e:a0:48:68:5b:55:d4:53: 28:72:56:eb:cf:47:24:90:0e:fd:11:fc:5c:c4:82:f2:8b:c7: 0c:5a:a4:73:21:a4:df:fe:8d:2e:a8:2c:f7:ba:ec:1e:99:e8: 9e:79:f3:a9:95:a2:39:5b:b7:4a:90:ee:e0:26:f7:93:7d:29: 75:94:7c:bd:9c:66:aa:6e:d6:df:f2:9c:fe:8c:63:27:26:50: c6:01:ee:39:26:cf:fa:9d:89:01:b7:4e:39:72:d8:0a:9d:61: e8:a3:c3:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU1OTcxMTAvBgNVBAUTKDNGRUM3M0VGREE4QTlFNUM5M0QwQTYwQUIyMTU5Q0Uw NzA4MzBCNzEwHhcNMjUxMDE5MDQ0NDMyWhcNMjUxMDI2MDQ0NDMyWjAYMRYwFAYD VQQDEw02OGY0NmNiMS0xYWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAydNXP0N4sKbrmzb0SN07wmpG1h3sotVI1vKFhIoMcKFhDWepCSIInaFD1Y6o LmQU6gZhHoO2+t91HUf79gPPDybWxD9WTYJ7s3YShduCRlqduhWma/coG2X301nJ BLjOntcLDZwtEzaNyDmqcWQHT9yGl81ryFw3ZEyZL1fTldhUfCFKontju+vs8Lz7 QhZE4nYhSKsyYi/YHQRAeh0jmA3khn6NlscXhI4zMtMyK3kaCFrsCHzVfQ3cAwMc bA/pODRWotJfVs01GK9kCL2IbQ2ReZscEiCD53037njuVzucyIgcH2p2MjUAGXvh /i2ZjGcCzFWwWLJTOooRMYXoRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGjHOPF7 ied6SlPOUPf+clNZi9TzMB8GA1UdIwQYMBaAFD/sc+/aip5ck9CmCrIVnOBwgwtx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTU5Ny9FOTcwN0QxRTlB M0ExMUVEODFCMTI3MURDNEY5QUUwMi9QLXh6NzlxS25seVQwS1lLc2hXYzRIQ0RD M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AteHo3OXFLbmx5VDBLWUtzaFdjNEhDREMzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTU5Ny9FOTcwN0QxRTlBM0ExMUVEODFCMTI3MURDNEY5QUUwMi9QLXh6NzlxS25s eVQwS1lLc2hXYzRIQ0RDM0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAV17cwe9k1SEiJ+qHO0Ol/k1M8lPkbGxtOCbimTcAZx39Ox64X4TCu Wkkv64fI9azY5hGHeXKSEQhshiA1o0/SzKajT5E8AfOLO1WrAMudn1/+vuS3ZPHS jFEFy6KrPPZql3zrwEazUFy6v7Cp8Kp4j9F5HTUrmSk1uIJM/4lyISXOgQvn6hqz XCfa1Heacs0a+fD0AMatTlAnnqBIaFtV1FMoclbrz0ckkA79EfxcxILyi8cMWqRz IaTf/o0uqCz3uuwemeieefOplaI5W7dKkO7gJveTfSl1lHy9nGaqbtbf8pz+jGMn JlDGAe45Js/6nYkBt045ctgKnWHoo8MG -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:52 2025 by rpki-client