$ rpki-client -vvf rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft File: P-xz79qKnlyT0KYKshWc4HCDC3E.mft (raw, json) Hash identifier: hKqe0zLbP2zuYaGdlQbuXis06sA/fnDXoy9qQ7E+E0A= Subject key identifier: B4:EA:14:2C:81:D9:70:D0:3E:25:51:03:69:ED:F8:13:18:09:72:18 Authority key identifier: 3F:EC:73:EF:DA:8A:9E:5C:93:D0:A6:0A:B2:15:9C:E0:70:83:0B:71 Certificate issuer: /CN=A9135597/serialNumber=3FEC73EFDA8A9E5C93D0A60AB2159CE070830B71 Certificate serial: 01F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-xz79qKnlyT0KYKshWc4HCDC3E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft Manifest number: 01EF Signing time: Sat 23 Aug 2025 02:45:59 +0000 Manifest this update: Sat 23 Aug 2025 02:45:58 +0000 Manifest next update: Sat 30 Aug 2025 02:45:58 +0000 Files and hashes: 1: P-xz79qKnlyT0KYKshWc4HCDC3E.crl (hash: qCrDh99AGXFJJ1vRJOhlHv5cElPcz1U96hv80S+Aphc=) 2: 3F6EE8E42D4211F09E0C422AC4F9AE02.roa (hash: V96z6p8lv3v3DbzjaaBJkTxNIi5ZsjxmKx2jknu2pAQ=) 3: 8140448E2D4211F0AB8B522BC4F9AE02.roa (hash: SvTUBZIdDCre/uFlRBRgrIMaL1ITzuHCA8WYxGN/4tM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.crl rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-xz79qKnlyT0KYKshWc4HCDC3E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:45:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 504 (0x1f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135597, serialNumber=3FEC73EFDA8A9E5C93D0A60AB2159CE070830B71 Validity Not Before: Aug 23 02:45:58 2025 GMT Not After : Aug 30 02:45:58 2025 GMT Subject: CN=68a92b67-d229 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:5c:6c:24:c3:60:da:45:dd:66:b2:b2:4b:08: a3:a8:15:83:3c:c2:44:c5:1a:bd:59:d0:32:bb:48: 87:ff:cf:a5:c9:9e:28:cf:d0:a0:71:37:d8:54:0b: 3f:3b:80:bb:17:69:de:8a:b5:62:51:7b:e7:a8:86: ae:c2:e0:6b:c8:45:bb:80:c5:b7:77:71:0b:b4:d5: 90:c5:8f:f7:38:a5:91:38:9c:53:c6:26:5f:52:8b: 72:77:70:d9:83:9a:f7:50:a6:b7:42:34:59:ac:78: 2b:07:16:a1:6e:70:5a:ac:15:f5:f8:ad:6c:13:84: 8f:94:1f:a8:92:55:3b:d7:95:fd:c1:7e:62:f4:65: c5:9c:c3:21:60:92:46:f3:ce:01:97:4d:1b:f4:c9: af:c9:09:f6:d9:4d:02:97:3f:d5:7b:46:b2:29:69: 8f:25:4d:02:5a:de:e1:36:a8:4d:40:3a:1b:4d:6d: 6a:34:a6:d0:a2:ba:2e:8f:a8:a8:bc:ab:4f:eb:6b: 74:0f:ae:40:cf:9d:db:83:d4:52:70:7c:db:95:c1: 5e:53:55:ba:67:33:da:29:b3:8a:0e:f0:a0:87:dd: 9c:de:6e:cf:f1:5f:33:a9:76:7c:3b:32:03:7f:f1: 97:34:8a:da:27:59:1e:84:40:85:a4:0e:2f:ef:80: b5:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:EA:14:2C:81:D9:70:D0:3E:25:51:03:69:ED:F8:13:18:09:72:18 X509v3 Authority Key Identifier: keyid:3F:EC:73:EF:DA:8A:9E:5C:93:D0:A6:0A:B2:15:9C:E0:70:83:0B:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-xz79qKnlyT0KYKshWc4HCDC3E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:50:b1:b1:a1:80:13:58:2c:05:8b:00:45:89:c6:f9:56:7a: 34:be:9c:0d:14:cf:5d:85:8b:ac:55:78:4e:05:10:ed:98:be: 73:34:82:3e:f3:90:20:55:46:5f:69:1a:51:c3:3d:72:d9:7a: fc:07:c4:5e:b3:5e:f0:c2:f9:75:22:59:df:3d:75:eb:e2:92: 2e:74:65:80:d8:c4:03:f6:76:87:d8:7a:14:9a:52:76:f3:c8: b0:99:a2:65:16:55:a6:92:95:f8:d0:5a:03:4e:91:5f:99:80: e6:3e:52:af:10:19:7c:4b:30:ec:1a:24:72:63:61:46:cc:2a: a7:0b:24:f4:84:ed:7a:da:7f:f9:ed:d7:1c:30:59:05:5d:12: 22:6b:b3:3f:e0:25:e3:cd:12:1b:34:47:05:bd:08:af:30:14: 83:fb:d7:ee:fe:31:54:69:bf:d5:89:28:43:70:c5:b0:7f:63: a5:a7:0b:be:7f:f3:f7:4d:05:ca:d0:1d:50:f0:fc:df:14:1b: 9c:bb:e7:89:cc:3e:ea:6b:b7:6c:a3:c2:5e:96:a6:52:43:b1: 12:15:4e:74:17:7e:b3:df:df:c8:cc:c6:d5:4b:26:59:94:bc: ba:37:1a:bf:d8:5a:bc:cd:37:5b:c9:c5:a9:0a:fb:a3:65:02: 3f:dc:ab:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU1OTcxMTAvBgNVBAUTKDNGRUM3M0VGREE4QTlFNUM5M0QwQTYwQUIyMTU5Q0Uw NzA4MzBCNzEwHhcNMjUwODIzMDI0NTU4WhcNMjUwODMwMDI0NTU4WjAYMRYwFAYD VQQDEw02OGE5MmI2Ny1kMjI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAylxsJMNg2kXdZrKySwijqBWDPMJExRq9WdAyu0iH/8+lyZ4oz9CgcTfYVAs/ O4C7F2neirViUXvnqIauwuBryEW7gMW3d3ELtNWQxY/3OKWROJxTxiZfUotyd3DZ g5r3UKa3QjRZrHgrBxahbnBarBX1+K1sE4SPlB+oklU715X9wX5i9GXFnMMhYJJG 884Bl00b9MmvyQn22U0Clz/Ve0ayKWmPJU0CWt7hNqhNQDobTW1qNKbQorouj6io vKtP62t0D65Az53bg9RScHzblcFeU1W6ZzPaKbOKDvCgh92c3m7P8V8zqXZ8OzID f/GXNIraJ1kehECFpA4v74C1iQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLTqFCyB 2XDQPiVRA2nt+BMYCXIYMB8GA1UdIwQYMBaAFD/sc+/aip5ck9CmCrIVnOBwgwtx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTU5Ny9FOTcwN0QxRTlB M0ExMUVEODFCMTI3MURDNEY5QUUwMi9QLXh6NzlxS25seVQwS1lLc2hXYzRIQ0RD M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AteHo3OXFLbmx5VDBLWUtzaFdjNEhDREMzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTU5Ny9FOTcwN0QxRTlBM0ExMUVEODFCMTI3MURDNEY5QUUwMi9QLXh6NzlxS25s eVQwS1lLc2hXYzRIQ0RDM0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdULGxoYATWCwFiwBFicb5Vno0vpwNFM9dhYusVXhOBRDtmL5zNII+ 85AgVUZfaRpRwz1y2Xr8B8Res17wwvl1IlnfPXXr4pIudGWA2MQD9naH2HoUmlJ2 88iwmaJlFlWmkpX40FoDTpFfmYDmPlKvEBl8SzDsGiRyY2FGzCqnCyT0hO162n/5 7dccMFkFXRIia7M/4CXjzRIbNEcFvQivMBSD+9fu/jFUab/ViShDcMWwf2Olpwu+ f/P3TQXK0B1Q8PzfFBucu+eJzD7qa7dso8JelqZSQ7ESFU50F36z39/IzMbVSyZZ lLy6Nxq/2Fq8zTdbycWpCvujZQI/3KtA -----END CERTIFICATE-----Generated at Sat Aug 23 19:16:20 2025 by rpki-client