$ rpki-client -vvf rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.mft File: pXN62XE221PCG287HU13Hc1XMTo.mft (raw, json) Hash identifier: jgEOihOW99fphsQF2jIrVlrOkmC5nFB3KeAGRUtidZw= Subject key identifier: 6D:D3:59:49:BA:E5:B0:88:3E:25:B3:C7:87:31:8B:F6:60:29:C4:94 Authority key identifier: A5:73:7A:D9:71:36:DB:53:C2:1B:6F:3B:1D:4D:77:1D:CD:57:31:3A Certificate issuer: /CN=A9146F33/serialNumber=A5737AD97136DB53C21B6F3B1D4D771DCD57313A Certificate serial: 040E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXN62XE221PCG287HU13Hc1XMTo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.mft Manifest number: 0406 Signing time: Sat 23 Aug 2025 00:42:05 +0000 Manifest this update: Sat 23 Aug 2025 00:42:04 +0000 Manifest next update: Sat 30 Aug 2025 00:42:04 +0000 Files and hashes: 1: pXN62XE221PCG287HU13Hc1XMTo.crl (hash: AmSA5AS0780Vp5fawnyX6KrqLxL1vmf7ipZEVFxL50M=) 2: EE23EF6E857B11ECA3F32D50C4F9AE02.roa (hash: 2pNsdUTXJ21ZMGMJibEjsxpDH0Z9Fw35noblZo6xKpE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.crl rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXN62XE221PCG287HU13Hc1XMTo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:42:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1038 (0x40e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146F33, serialNumber=A5737AD97136DB53C21B6F3B1D4D771DCD57313A Validity Not Before: Aug 23 00:42:04 2025 GMT Not After : Aug 30 00:42:04 2025 GMT Subject: CN=68a90e5d-4e75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:52:5a:c5:eb:e3:ca:9e:37:dc:83:b4:21:fe: 9e:61:73:d8:55:81:22:79:c7:09:36:8f:3b:ea:2e: e2:12:36:55:df:a8:51:73:16:43:aa:05:6d:1a:10: 65:d7:ac:3d:f9:be:20:25:ee:60:3e:09:5a:3a:12: 35:a7:a8:e9:82:3d:8a:6e:9f:e3:05:71:f4:67:16: 6f:f5:83:6a:92:24:1d:cf:b1:92:85:36:48:bf:74: 51:0f:4f:52:7b:d0:f6:b5:51:93:13:14:c4:79:e1: 9f:ae:68:92:3f:fc:94:09:49:74:cc:0c:44:3b:c5: ec:54:33:ae:70:17:9b:f1:e1:46:99:51:5d:c0:13: 96:07:d2:71:26:3e:f2:5a:7a:08:cf:ce:1e:2f:1d: 13:10:57:9a:69:d9:f8:ee:83:92:1b:fb:e9:24:cb: ee:5f:de:ff:d9:65:e4:d6:ca:05:09:28:ca:e8:4e: 85:a5:75:85:2c:9e:cc:79:56:00:f1:de:d5:da:bc: 68:f8:e3:8b:7d:05:37:af:5f:f2:00:30:9d:3c:90: 09:98:23:53:d2:4a:f6:58:9e:40:14:7c:5d:72:b7: ac:26:63:dd:35:70:5f:7c:82:8a:d4:1c:2c:85:61: 2c:c8:db:8b:ac:62:3c:25:b8:bc:77:93:17:a6:bc: 7d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:D3:59:49:BA:E5:B0:88:3E:25:B3:C7:87:31:8B:F6:60:29:C4:94 X509v3 Authority Key Identifier: keyid:A5:73:7A:D9:71:36:DB:53:C2:1B:6F:3B:1D:4D:77:1D:CD:57:31:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXN62XE221PCG287HU13Hc1XMTo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:97:9d:95:1e:d3:a6:ba:ba:d6:47:fd:f7:00:41:bb:6a:b6: 6d:10:48:6f:9c:44:b5:bd:e4:20:14:8d:46:b0:aa:2d:d2:da: 1c:84:c3:fc:8a:25:1e:49:03:69:5e:b5:96:92:50:12:99:59: ea:be:d3:f5:3a:f3:ee:43:f2:71:a2:3b:85:14:74:df:33:11: 2d:6c:ff:0d:1a:99:aa:6c:d0:b2:23:70:a3:77:74:8b:d4:6f: 3b:20:5f:81:06:df:19:45:76:b1:43:c8:df:61:ee:45:0d:e4: c6:ad:ff:11:08:86:5e:6a:20:cb:6e:4c:89:5a:47:8a:eb:6a: 95:31:8e:c3:2e:71:c7:6f:2a:76:72:20:fe:82:59:d4:fb:34: 17:dc:84:40:15:68:2c:e6:1e:3c:3f:f3:46:19:b0:b4:84:1b: 0d:aa:b0:88:c1:82:35:09:a2:15:05:1d:22:f1:5d:80:b8:e8: d9:ae:f2:21:f2:90:2e:08:85:d9:7b:44:59:c8:dd:b9:a9:e0: 05:83:6e:c1:68:c8:12:36:2d:10:f1:52:d9:62:c5:8c:4b:eb: d5:c4:51:2d:1d:ea:3b:29:41:66:a0:46:e3:bd:5a:7e:cb:99: 3b:72:4f:da:50:5d:42:c8:8f:03:fc:46:77:e2:36:6d:24:3b: 25:07:5d:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBA4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZGMzMxMTAvBgNVBAUTKEE1NzM3QUQ5NzEzNkRCNTNDMjFCNkYzQjFENEQ3NzFE Q0Q1NzMxM0EwHhcNMjUwODIzMDA0MjA0WhcNMjUwODMwMDA0MjA0WjAYMRYwFAYD VQQDEw02OGE5MGU1ZC00ZTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7VJaxevjyp433IO0If6eYXPYVYEieccJNo876i7iEjZV36hRcxZDqgVtGhBl 16w9+b4gJe5gPglaOhI1p6jpgj2Kbp/jBXH0ZxZv9YNqkiQdz7GShTZIv3RRD09S e9D2tVGTExTEeeGfrmiSP/yUCUl0zAxEO8XsVDOucBeb8eFGmVFdwBOWB9JxJj7y WnoIz84eLx0TEFeaadn47oOSG/vpJMvuX97/2WXk1soFCSjK6E6FpXWFLJ7MeVYA 8d7V2rxo+OOLfQU3r1/yADCdPJAJmCNT0kr2WJ5AFHxdcresJmPdNXBffIKK1Bws hWEsyNuLrGI8Jbi8d5MXprx9rQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG3TWUm6 5bCIPiWzx4cxi/ZgKcSUMB8GA1UdIwQYMBaAFKVzetlxNttTwhtvOx1Ndx3NVzE6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkYzMy9CMTY1QkI4QTg1 MTExMUVDQjlEMzM1N0NDNEY5QUUwMi9wWE42MlhFMjIxUENHMjg3SFUxM0hjMVhN VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BYTjYyWEUyMjFQQ0cyODdIVTEzSGMxWE1Uby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkYzMy9CMTY1QkI4QTg1MTExMUVDQjlEMzM1N0NDNEY5QUUwMi9wWE42MlhFMjIx UENHMjg3SFUxM0hjMVhNVG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdl52VHtOmurrWR/33AEG7arZtEEhvnES1veQgFI1GsKot0tochMP8 iiUeSQNpXrWWklASmVnqvtP1OvPuQ/JxojuFFHTfMxEtbP8NGpmqbNCyI3Cjd3SL 1G87IF+BBt8ZRXaxQ8jfYe5FDeTGrf8RCIZeaiDLbkyJWkeK62qVMY7DLnHHbyp2 ciD+glnU+zQX3IRAFWgs5h48P/NGGbC0hBsNqrCIwYI1CaIVBR0i8V2AuOjZrvIh 8pAuCIXZe0RZyN25qeAFg27BaMgSNi0Q8VLZYsWMS+vVxFEtHeo7KUFmoEbjvVp+ y5k7ck/aUF1CyI8D/EZ34jZtJDslB13r -----END CERTIFICATE-----Generated at Sat Aug 23 16:31:35 2025 by rpki-client