$ rpki-client -vvf rpki.apnic.net/member_repository/A9138EEB/F49114802BC311EFB85FFB65C4F9AE02/phmVDMpkZIerm9RKQff2ybQJs9c.mft File: phmVDMpkZIerm9RKQff2ybQJs9c.mft (raw, json) Hash identifier: Lw7sKfPPC0Iae5x7V2lDCEQxxp8cWsOrFxdGcO8uXzA= Subject key identifier: 6D:C2:BB:94:F9:2D:1C:53:2F:98:B5:83:22:0F:DF:CF:45:4B:C0:95 Authority key identifier: A6:19:95:0C:CA:64:64:87:AB:9B:D4:4A:41:F7:F6:C9:B4:09:B3:D7 Certificate issuer: /CN=A9138EEB/serialNumber=A619950CCA646487AB9BD44A41F7F6C9B409B3D7 Certificate serial: E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phmVDMpkZIerm9RKQff2ybQJs9c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138EEB/F49114802BC311EFB85FFB65C4F9AE02/phmVDMpkZIerm9RKQff2ybQJs9c.mft Manifest number: E2 Signing time: Sat 23 Aug 2025 05:37:15 +0000 Manifest this update: Sat 23 Aug 2025 05:37:15 +0000 Manifest next update: Sat 30 Aug 2025 05:37:15 +0000 Files and hashes: 1: phmVDMpkZIerm9RKQff2ybQJs9c.crl (hash: 2KJNBnvIBHeTkDgEH9Qz7BemrZja+0FC+rZcYNz7g9Y=) 2: DBF621F42C7211EF8FB22F85C4F9AE02.roa (hash: RJoaBkivOrsbbGOk4+rF7GV3mPNikd+l5jkX1SaMaN0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138EEB/F49114802BC311EFB85FFB65C4F9AE02/phmVDMpkZIerm9RKQff2ybQJs9c.crl rsync://rpki.apnic.net/member_repository/A9138EEB/F49114802BC311EFB85FFB65C4F9AE02/phmVDMpkZIerm9RKQff2ybQJs9c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phmVDMpkZIerm9RKQff2ybQJs9c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:37:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 230 (0xe6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138EEB, serialNumber=A619950CCA646487AB9BD44A41F7F6C9B409B3D7 Validity Not Before: Aug 23 05:37:15 2025 GMT Not After : Aug 30 05:37:15 2025 GMT Subject: CN=68a9538b-9d98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:f0:07:20:f7:99:9f:e1:a5:b7:97:23:6d:a4: 1a:d6:23:94:23:5c:13:9e:65:29:a0:6f:bf:54:53: 75:37:45:57:9c:68:34:07:4b:ea:9b:07:c8:34:68: 8b:ef:a0:f7:e4:5e:fa:d7:88:5f:7c:48:f3:38:c9: d7:0c:bc:9a:5b:55:1f:e4:80:c5:25:5b:93:15:8b: ab:f4:f9:7d:f6:31:b9:ac:6d:53:cf:6e:4c:fa:57: 33:d3:fb:e9:7b:02:3e:ab:c4:cf:fe:65:66:1b:ec: 65:f9:62:9a:2b:59:b4:3f:0e:8c:72:6a:e9:fd:b3: c5:df:37:57:90:ec:22:f3:ff:b4:39:d3:3f:68:d6: ea:7a:4e:d3:4a:d9:f2:7a:57:95:d6:96:72:0f:71: f4:72:4e:82:6c:ff:8b:10:80:9e:e8:f8:7a:65:36: 3f:af:cb:71:0a:c6:ab:2f:fe:ec:61:98:af:cb:a4: 1d:67:32:fe:c7:47:1c:5d:44:39:43:29:ce:09:04: 21:d7:4f:1e:2d:cd:37:39:bc:0e:12:68:5c:83:a3: b9:87:a2:ca:ea:ce:79:6a:65:61:cf:ee:50:29:cb: 7d:fb:e4:05:f2:aa:6c:46:3c:d3:6b:fe:aa:0e:24: 3e:e6:a3:19:12:35:25:0b:5c:ea:65:fd:f1:29:70: 75:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:C2:BB:94:F9:2D:1C:53:2F:98:B5:83:22:0F:DF:CF:45:4B:C0:95 X509v3 Authority Key Identifier: keyid:A6:19:95:0C:CA:64:64:87:AB:9B:D4:4A:41:F7:F6:C9:B4:09:B3:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138EEB/F49114802BC311EFB85FFB65C4F9AE02/phmVDMpkZIerm9RKQff2ybQJs9c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phmVDMpkZIerm9RKQff2ybQJs9c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138EEB/F49114802BC311EFB85FFB65C4F9AE02/phmVDMpkZIerm9RKQff2ybQJs9c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:c3:68:a9:e1:d6:2b:0e:28:8d:07:b6:56:3c:dc:3c:47:22: 90:f6:61:20:40:30:cd:bc:18:7c:ea:b4:80:46:42:b4:90:7d: 20:5b:dd:eb:0b:5a:f3:9e:24:1b:ed:84:1e:37:76:36:a4:da: 13:10:9f:5e:1e:5f:f0:d8:7a:97:49:2e:05:cf:02:50:4d:c4: 78:50:e9:11:75:f2:f7:1d:5e:eb:d1:3e:d1:68:d6:57:89:61: cd:15:92:3e:3e:b4:5b:63:e7:5c:68:5b:73:0c:bf:f0:76:84: c8:3b:89:d6:46:47:08:8b:67:81:ce:cc:61:7b:6c:50:65:da: fc:98:d8:d7:30:ce:ef:f3:b5:71:e8:3d:12:a3:5f:50:e6:9f: bc:bc:e1:1a:dc:e7:d8:ab:2c:1a:e4:af:6d:b7:32:24:bf:86: f9:d3:d1:5a:c2:e8:37:6f:7c:aa:8b:74:a1:9b:54:44:cc:85: 4e:2f:52:77:19:d7:a5:58:54:9b:f9:d3:2d:c4:b3:1d:b3:89: 4a:ee:67:cd:3e:39:6a:bc:45:ad:b2:49:b7:b3:c5:ba:15:3a: 5c:33:4b:7c:14:41:9c:63:8c:25:d1:b1:31:51:98:2b:60:d7: 93:d4:ac:9e:ae:5e:6d:c8:85:a5:75:65:59:fb:a6:0c:81:51: 83:b3:0b:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzhFRUIxMTAvBgNVBAUTKEE2MTk5NTBDQ0E2NDY0ODdBQjlCRDQ0QTQxRjdGNkM5 QjQwOUIzRDcwHhcNMjUwODIzMDUzNzE1WhcNMjUwODMwMDUzNzE1WjAYMRYwFAYD VQQDEw02OGE5NTM4Yi05ZDk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7/AHIPeZn+Glt5cjbaQa1iOUI1wTnmUpoG+/VFN1N0VXnGg0B0vqmwfINGiL 76D35F7614hffEjzOMnXDLyaW1Uf5IDFJVuTFYur9Pl99jG5rG1Tz25M+lcz0/vp ewI+q8TP/mVmG+xl+WKaK1m0Pw6Mcmrp/bPF3zdXkOwi8/+0OdM/aNbqek7TStny eleV1pZyD3H0ck6CbP+LEICe6Ph6ZTY/r8txCsarL/7sYZivy6QdZzL+x0ccXUQ5 QynOCQQh108eLc03ObwOEmhcg6O5h6LK6s55amVhz+5QKct9++QF8qpsRjzTa/6q DiQ+5qMZEjUlC1zqZf3xKXB1CwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG3Cu5T5 LRxTL5i1gyIP389FS8CVMB8GA1UdIwQYMBaAFKYZlQzKZGSHq5vUSkH39sm0CbPX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEVFQi9GNDkxMTQ4MDJC QzMxMUVGQjg1RkZCNjVDNEY5QUUwMi9waG1WRE1wa1pJZXJtOVJLUWZmMnliUUpz OWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BobVZETXBrWkllcm05UktRZmYyeWJRSnM5Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OEVFQi9GNDkxMTQ4MDJCQzMxMUVGQjg1RkZCNjVDNEY5QUUwMi9waG1WRE1wa1pJ ZXJtOVJLUWZmMnliUUpzOWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTw2ip4dYrDiiNB7ZWPNw8RyKQ9mEgQDDNvBh86rSARkK0kH0gW93r C1rzniQb7YQeN3Y2pNoTEJ9eHl/w2HqXSS4FzwJQTcR4UOkRdfL3HV7r0T7RaNZX iWHNFZI+PrRbY+dcaFtzDL/wdoTIO4nWRkcIi2eBzsxhe2xQZdr8mNjXMM7v87Vx 6D0So19Q5p+8vOEa3OfYqywa5K9ttzIkv4b509Fawug3b3yqi3Shm1REzIVOL1J3 GdelWFSb+dMtxLMds4lK7mfNPjlqvEWtskm3s8W6FTpcM0t8FEGcY4wl0bExUZgr YNeT1Kyerl5tyIWldWVZ+6YMgVGDswv2 -----END CERTIFICATE-----Generated at Sat Aug 23 19:02:34 2025 by rpki-client