$ rpki-client -vvf rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.mft File: 9-pxtubNBKVdrrDRWOBE3poSIWo.mft (raw, json) Hash identifier: ofiKACU+r89HW1OFuOF83ByNP6qfv2dHt2gHII1f9+U= Subject key identifier: 45:24:37:12:03:DF:6C:33:9F:D6:29:0F:1C:31:F1:DB:0D:D5:3F:F5 Authority key identifier: F7:EA:71:B6:E6:CD:04:A5:5D:AE:B0:D1:58:E0:44:DE:9A:12:21:6A Certificate issuer: /CN=A914976C/serialNumber=F7EA71B6E6CD04A55DAEB0D158E044DE9A12216A Certificate serial: C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-pxtubNBKVdrrDRWOBE3poSIWo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.mft Manifest number: C5 Signing time: Sat 23 Aug 2025 05:57:09 +0000 Manifest this update: Sat 23 Aug 2025 05:57:08 +0000 Manifest next update: Sat 30 Aug 2025 05:57:08 +0000 Files and hashes: 1: 9-pxtubNBKVdrrDRWOBE3poSIWo.crl (hash: D9+YuuTOhxjidEzG+60sNIJDfdeMsN+eb3I0ckh0n74=) 2: D65DAE8A595C11EF8FABE750C4F9AE02.roa (hash: nYA6qJYLssodvPidYdiPlhElm9th4J64wlRbRyUbQK0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.crl rsync://rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-pxtubNBKVdrrDRWOBE3poSIWo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:57:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 201 (0xc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914976C, serialNumber=F7EA71B6E6CD04A55DAEB0D158E044DE9A12216A Validity Not Before: Aug 23 05:57:08 2025 GMT Not After : Aug 30 05:57:08 2025 GMT Subject: CN=68a95834-d68d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:37:26:e8:79:72:d6:57:fd:18:3a:66:21:28: 92:3c:46:b1:39:17:51:0b:2e:f1:e1:f0:06:23:e1: 68:a9:ee:8b:80:fe:f8:29:54:18:18:3c:91:b0:2c: 96:d5:9a:41:4d:ea:df:97:a6:25:6b:9f:79:3d:3c: d5:56:aa:a6:8a:b7:71:2a:1d:7f:08:11:ef:9e:8f: c8:0c:76:25:b3:1f:1c:d3:2b:90:ec:6a:67:05:1e: 44:30:9a:06:8f:fe:6f:a7:01:45:56:bc:f5:c6:2c: 54:10:96:4d:df:06:ec:bc:9a:d2:b0:95:91:43:fe: 30:44:a7:0d:dd:01:df:c0:02:3d:3f:3e:36:a5:ae: e1:15:18:3c:c9:2f:e3:d9:ee:0b:c7:20:53:7a:28: d2:a2:d5:2d:49:d3:13:c9:14:32:32:f2:d2:5b:50: c2:30:c0:43:1f:2b:ea:ec:99:1b:88:c5:42:92:5d: 60:fa:0c:08:c4:5a:20:57:00:07:70:87:94:c5:fb: 22:0e:9d:a2:c0:aa:81:59:3a:38:00:3c:75:f3:11: b7:ba:99:82:6e:0b:65:48:4a:1b:29:01:bf:38:4a: aa:67:8c:66:b5:ba:83:e8:18:34:07:96:d1:86:f0: 3a:36:f6:45:5b:43:88:97:be:64:b4:5d:7f:d6:0d: ac:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:24:37:12:03:DF:6C:33:9F:D6:29:0F:1C:31:F1:DB:0D:D5:3F:F5 X509v3 Authority Key Identifier: keyid:F7:EA:71:B6:E6:CD:04:A5:5D:AE:B0:D1:58:E0:44:DE:9A:12:21:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-pxtubNBKVdrrDRWOBE3poSIWo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:42:5c:3f:2e:e8:cb:fa:00:56:aa:c9:b8:e4:40:fb:25:38: 9c:1c:59:66:f3:5e:64:b6:c2:b5:b1:ca:9b:9e:ee:b8:6c:6f: a0:d7:f5:d4:ba:9a:50:28:7c:2d:8e:15:f0:d9:61:a8:24:e7: 94:b3:2d:ce:51:7f:9c:7d:31:e1:cc:f7:03:39:45:2d:c4:92: 86:ee:b9:c1:c5:9a:a8:3e:5a:fa:9c:46:2c:fe:fc:11:63:3e: 48:8f:2f:e1:e0:27:86:81:f7:d1:ba:9e:32:61:22:ec:d3:32: 8e:72:07:99:1a:99:ec:77:98:3c:2a:49:5f:4c:58:59:38:4e: 9e:b8:9d:e2:26:3c:68:09:83:08:c7:b6:d2:21:0c:84:2e:c1: f3:f7:6e:08:9b:8c:1e:ed:e3:5c:12:0c:f6:66:ca:bf:7b:fa: e8:bc:bd:d9:22:a3:85:5b:11:15:a4:79:53:fa:c6:9e:b8:05: bd:4c:06:4f:cf:a3:1f:4e:66:a9:61:f0:c0:a8:79:d4:5c:12: 73:0d:f9:8f:11:7c:72:c0:4e:8d:20:02:8c:08:50:1d:12:b3: 84:8a:2b:e6:5d:29:0b:14:70:34:52:0a:f3:e8:39:d5:ed:86: dc:ea:12:e2:7e:f7:74:2d:ea:6b:45:b8:11:c9:ab:6c:53:85: cb:e6:79:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDk3NkMxMTAvBgNVBAUTKEY3RUE3MUI2RTZDRDA0QTU1REFFQjBEMTU4RTA0NERF OUExMjIxNkEwHhcNMjUwODIzMDU1NzA4WhcNMjUwODMwMDU1NzA4WjAYMRYwFAYD VQQDEw02OGE5NTgzNC1kNjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7jcm6Hly1lf9GDpmISiSPEaxORdRCy7x4fAGI+Foqe6LgP74KVQYGDyRsCyW 1ZpBTerfl6Yla595PTzVVqqmirdxKh1/CBHvno/IDHYlsx8c0yuQ7GpnBR5EMJoG j/5vpwFFVrz1xixUEJZN3wbsvJrSsJWRQ/4wRKcN3QHfwAI9Pz42pa7hFRg8yS/j 2e4LxyBTeijSotUtSdMTyRQyMvLSW1DCMMBDHyvq7JkbiMVCkl1g+gwIxFogVwAH cIeUxfsiDp2iwKqBWTo4ADx18xG3upmCbgtlSEobKQG/OEqqZ4xmtbqD6Bg0B5bR hvA6NvZFW0OIl75ktF1/1g2sEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEUkNxID 32wzn9YpDxwx8dsN1T/1MB8GA1UdIwQYMBaAFPfqcbbmzQSlXa6w0VjgRN6aEiFq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTc2Qy84MzUwRDJCQzU5 NUMxMUVGOTE1OTYzNTBDNEY5QUUwMi85LXB4dHViTkJLVmRyckRSV09CRTNwb1NJ V28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzktcHh0dWJOQktWZHJyRFJXT0JFM3BvU0lXby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTc2Qy84MzUwRDJCQzU5NUMxMUVGOTE1OTYzNTBDNEY5QUUwMi85LXB4dHViTkJL VmRyckRSV09CRTNwb1NJV28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsQlw/LujL+gBWqsm45ED7JTicHFlm815ktsK1scqbnu64bG+g1/XU uppQKHwtjhXw2WGoJOeUsy3OUX+cfTHhzPcDOUUtxJKG7rnBxZqoPlr6nEYs/vwR Yz5Ijy/h4CeGgffRup4yYSLs0zKOcgeZGpnsd5g8KklfTFhZOE6euJ3iJjxoCYMI x7bSIQyELsHz924Im4we7eNcEgz2Zsq/e/rovL3ZIqOFWxEVpHlT+saeuAW9TAZP z6MfTmapYfDAqHnUXBJzDfmPEXxywE6NIAKMCFAdErOEiivmXSkLFHA0Ugrz6DnV 7Ybc6hLifvd0LeprRbgRyatsU4XL5nls -----END CERTIFICATE-----Generated at Sat Aug 23 21:33:08 2025 by rpki-client