$ rpki-client -vvf rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.mft File: 9-pxtubNBKVdrrDRWOBE3poSIWo.mft (raw, json) Hash identifier: Lp7bE0Sz2J2X2B6CtNV+x1/9VTff4Mfmg/MQ91BBncA= Subject key identifier: AD:56:0E:30:0C:32:7A:D8:1C:00:B8:8C:74:66:BC:BC:D9:E1:28:36 Authority key identifier: F7:EA:71:B6:E6:CD:04:A5:5D:AE:B0:D1:58:E0:44:DE:9A:12:21:6A Certificate issuer: /CN=A914976C/serialNumber=F7EA71B6E6CD04A55DAEB0D158E044DE9A12216A Certificate serial: AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-pxtubNBKVdrrDRWOBE3poSIWo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.mft Manifest number: AA Signing time: Tue 01 Jul 2025 06:47:52 +0000 Manifest this update: Tue 01 Jul 2025 06:47:51 +0000 Manifest next update: Tue 08 Jul 2025 06:47:51 +0000 Files and hashes: 1: 9-pxtubNBKVdrrDRWOBE3poSIWo.crl (hash: NmoeZcAtnWbuWhI/LwscXswzULawIOuJHKUls/YJ+YI=) 2: D65DAE8A595C11EF8FABE750C4F9AE02.roa (hash: nYA6qJYLssodvPidYdiPlhElm9th4J64wlRbRyUbQK0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.crl rsync://rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-pxtubNBKVdrrDRWOBE3poSIWo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 06:47:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 174 (0xae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914976C, serialNumber=F7EA71B6E6CD04A55DAEB0D158E044DE9A12216A Validity Not Before: Jul 1 06:47:51 2025 GMT Not After : Jul 8 06:47:51 2025 GMT Subject: CN=68638498-0390 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:28:63:a7:c1:4e:15:12:c3:b8:b4:af:2a:d6: dd:b2:04:21:9f:64:53:f0:d5:e2:d6:76:57:6b:cc: d5:20:c0:e4:6e:18:18:d0:78:47:b0:06:97:06:08: fe:69:6f:6f:79:2c:16:cd:fe:20:7e:b2:1c:e9:aa: be:d2:22:21:3d:da:d4:3c:68:98:db:d2:50:12:4c: 96:52:51:b9:d6:29:51:ac:74:14:42:16:7f:e3:dc: 86:92:4b:38:4e:96:93:ef:e8:82:eb:31:9e:a6:77: 8f:c5:88:a5:64:85:cd:e8:3c:f6:4d:ad:5c:d5:8e: 84:2d:75:58:5f:0c:a6:43:50:10:42:15:7d:3d:2f: 08:d5:75:52:39:19:fa:3c:b3:5e:03:34:54:f7:db: 50:f9:4d:fe:98:32:7a:dc:da:5d:d2:ed:91:23:00: b5:c2:73:7f:d2:10:25:7b:e9:ac:70:20:96:62:f1: ac:77:ef:a1:bf:8c:56:cb:bb:5e:f1:50:55:c7:48: 97:30:ab:18:ab:17:b2:0f:8b:5b:ce:8d:3d:99:81: c0:10:b5:fe:52:c1:0f:b8:e0:0a:8f:7f:61:9c:be: de:10:b3:ec:8d:53:c7:91:73:74:fb:9b:38:a5:10: aa:21:88:5a:91:12:fa:ad:d5:91:28:36:03:eb:20: 76:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:56:0E:30:0C:32:7A:D8:1C:00:B8:8C:74:66:BC:BC:D9:E1:28:36 X509v3 Authority Key Identifier: keyid:F7:EA:71:B6:E6:CD:04:A5:5D:AE:B0:D1:58:E0:44:DE:9A:12:21:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-pxtubNBKVdrrDRWOBE3poSIWo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:78:83:aa:4b:d3:3f:fd:3f:bd:4d:db:f7:1a:e4:c3:19:e3: b3:4c:01:48:18:c9:7b:b6:95:c5:28:50:13:82:1e:8a:43:f7: 76:30:ed:86:6b:c0:73:e1:2f:c4:51:8f:27:c0:7f:26:49:31: bb:1b:67:6b:d6:29:3e:d9:a8:7b:32:31:3c:37:4a:80:9e:e8: 67:59:5c:40:e7:40:2f:92:d3:55:06:f3:d0:91:7d:07:4b:ad: 0e:ab:c8:90:57:9f:68:f8:07:d1:e2:3c:a3:d0:09:c2:05:21: 6f:79:67:04:99:ac:d0:cb:56:91:c1:ce:94:5e:10:d2:06:4d: ef:f3:27:39:95:b5:d5:f7:fd:c3:8a:44:d9:89:56:bd:ab:57: 30:c2:54:eb:e0:90:c1:1b:bc:76:7e:04:c0:20:b9:bf:e7:46: 06:0c:00:e6:45:79:ea:fd:d8:43:7f:61:a6:fe:05:20:5f:eb: d2:05:73:6a:0a:3a:f0:fc:c6:7c:16:f7:01:4b:9c:fc:41:6a: ce:9f:1a:5d:6a:05:bf:6e:72:d3:b7:72:73:1e:21:bf:f3:75: ba:ca:7d:07:df:4c:58:05:39:47:50:71:e1:70:5e:9a:64:dd: 44:bf:14:cd:be:39:53:c3:d6:d3:26:dd:83:13:10:66:d9:5a: cc:dd:13:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDk3NkMxMTAvBgNVBAUTKEY3RUE3MUI2RTZDRDA0QTU1REFFQjBEMTU4RTA0NERF OUExMjIxNkEwHhcNMjUwNzAxMDY0NzUxWhcNMjUwNzA4MDY0NzUxWjAYMRYwFAYD VQQDEw02ODYzODQ5OC0wMzkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9Shjp8FOFRLDuLSvKtbdsgQhn2RT8NXi1nZXa8zVIMDkbhgY0HhHsAaXBgj+ aW9veSwWzf4gfrIc6aq+0iIhPdrUPGiY29JQEkyWUlG51ilRrHQUQhZ/49yGkks4 TpaT7+iC6zGepnePxYilZIXN6Dz2Ta1c1Y6ELXVYXwymQ1AQQhV9PS8I1XVSORn6 PLNeAzRU99tQ+U3+mDJ63Npd0u2RIwC1wnN/0hAle+mscCCWYvGsd++hv4xWy7te 8VBVx0iXMKsYqxeyD4tbzo09mYHAELX+UsEPuOAKj39hnL7eELPsjVPHkXN0+5s4 pRCqIYhakRL6rdWRKDYD6yB2ywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK1WDjAM MnrYHAC4jHRmvLzZ4Sg2MB8GA1UdIwQYMBaAFPfqcbbmzQSlXa6w0VjgRN6aEiFq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTc2Qy84MzUwRDJCQzU5 NUMxMUVGOTE1OTYzNTBDNEY5QUUwMi85LXB4dHViTkJLVmRyckRSV09CRTNwb1NJ V28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzktcHh0dWJOQktWZHJyRFJXT0JFM3BvU0lXby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTc2Qy84MzUwRDJCQzU5NUMxMUVGOTE1OTYzNTBDNEY5QUUwMi85LXB4dHViTkJL VmRyckRSV09CRTNwb1NJV28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBleIOqS9M//T+9Tdv3GuTDGeOzTAFIGMl7tpXFKFATgh6KQ/d2MO2G a8Bz4S/EUY8nwH8mSTG7G2dr1ik+2ah7MjE8N0qAnuhnWVxA50AvktNVBvPQkX0H S60Oq8iQV59o+AfR4jyj0AnCBSFveWcEmazQy1aRwc6UXhDSBk3v8yc5lbXV9/3D ikTZiVa9q1cwwlTr4JDBG7x2fgTAILm/50YGDADmRXnq/dhDf2Gm/gUgX+vSBXNq Cjrw/MZ8FvcBS5z8QWrOnxpdagW/bnLTt3JzHiG/83W6yn0H30xYBTlHUHHhcF6a ZN1EvxTNvjlTw9bTJt2DExBm2VrM3RM/ -----END CERTIFICATE-----Generated at Thu Jul 3 06:03:45 2025 by rpki-client