$ rpki-client -vvf rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft File: PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft (raw, json) Hash identifier: fOjkB4W+rMGpTikx2GUa8oV7McLHFedFIhsBDGvxPcc= Subject key identifier: EF:E3:ED:D8:18:DF:86:EE:35:BA:9B:E2:5E:15:87:96:50:AB:BD:62 Authority key identifier: 3D:7A:4E:0A:99:AF:15:EF:0B:37:90:D0:E7:96:1E:88:75:28:19:83 Certificate issuer: /CN=A915B880/serialNumber=3D7A4E0A99AF15EF0B3790D0E7961E8875281983 Certificate serial: 0E66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXpOCpmvFe8LN5DQ55YeiHUoGYM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft Manifest number: 0E5E Signing time: Fri 22 Aug 2025 17:51:39 +0000 Manifest this update: Fri 22 Aug 2025 17:51:38 +0000 Manifest next update: Fri 29 Aug 2025 17:51:38 +0000 Files and hashes: 1: PXpOCpmvFe8LN5DQ55YeiHUoGYM.crl (hash: LPmk7DYPj9fYOx4sFQekEdTgQ/F9qbMIrlb1Tnful70=) 2: 0853C13CA2F011E9B721795CC4F9AE02.roa (hash: PT85jOUkAj1X0WXEwRPCdUqy+wM3om5TOq/+D9IWTpU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.crl rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXpOCpmvFe8LN5DQ55YeiHUoGYM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:51:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3686 (0xe66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B880, serialNumber=3D7A4E0A99AF15EF0B3790D0E7961E8875281983 Validity Not Before: Aug 22 17:51:38 2025 GMT Not After : Aug 29 17:51:38 2025 GMT Subject: CN=68a8ae2a-ab81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6f:fc:b0:2b:7b:8f:15:29:b8:a1:8e:ed:86: 9e:2e:b4:30:39:f6:6e:c0:37:14:4a:c3:a7:c6:34: 12:6e:ff:94:7c:b9:21:72:ab:d3:b7:ae:da:c2:5c: be:2b:5e:0c:65:f4:fb:36:7c:d0:b8:02:fe:3c:1d: 18:cb:91:c6:4c:fc:d9:3d:ab:a6:05:00:75:a0:83: f2:77:18:b6:3b:3a:5a:26:de:09:1b:3a:49:f5:0e: ca:3e:ef:3e:29:a0:5a:e4:36:02:8d:7a:52:05:71: 09:89:15:52:2e:fb:c2:aa:1d:46:19:a8:e6:1a:e6: 94:75:a9:d2:88:ef:75:05:25:38:5c:8e:73:b4:83: 8f:9b:b1:8b:92:12:bf:e4:86:2d:73:e8:cc:9a:79: e7:24:8e:74:bf:82:ef:95:19:a6:61:3f:9f:a7:86: c8:99:dc:e8:36:70:42:e7:45:02:24:76:9c:70:8f: b1:08:87:5c:1e:72:49:7b:63:0a:c6:18:73:c5:8e: c7:b3:84:5e:cb:90:1f:13:9f:15:0a:a1:63:f5:77: 83:ff:91:db:42:49:a9:09:20:b8:c3:bc:b4:9e:ad: eb:a0:6f:37:8d:e6:3a:14:8b:e2:dd:fe:5e:76:6a: 8b:17:cb:14:41:45:2a:91:c4:07:e5:bc:0f:46:52: ba:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:E3:ED:D8:18:DF:86:EE:35:BA:9B:E2:5E:15:87:96:50:AB:BD:62 X509v3 Authority Key Identifier: keyid:3D:7A:4E:0A:99:AF:15:EF:0B:37:90:D0:E7:96:1E:88:75:28:19:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXpOCpmvFe8LN5DQ55YeiHUoGYM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:f7:fc:48:8e:7c:6c:07:93:33:7a:ed:96:b1:e5:e6:7e:62: 69:22:66:d4:3c:88:44:89:f2:eb:d9:29:1f:07:91:fa:d1:5c: 2b:b8:62:ca:08:b8:08:95:10:69:00:68:96:68:19:8b:de:c1: 7d:8e:04:d7:6e:44:0e:21:31:69:96:01:a9:b7:5f:dc:b1:b3: b9:43:8d:6c:a7:9c:a2:07:e6:03:81:33:1f:bb:a6:4d:19:0e: 73:7e:14:40:f0:53:44:ef:4c:6a:58:62:e6:95:82:e7:26:3d: bf:52:b3:32:e1:e2:14:8d:17:58:e5:39:5a:e3:db:dd:16:99: ed:2c:a9:37:dc:b9:88:13:c9:14:3b:e8:d2:3e:07:71:a4:9a: af:7c:39:6a:64:42:bf:61:10:5a:0e:7e:7b:46:d3:22:47:eb: 2a:44:fe:d1:e8:78:28:e3:fd:6e:1e:2c:fe:08:9c:30:65:0f: 04:e5:64:9c:a9:02:3b:d1:4b:f7:14:89:39:a8:6f:6c:13:54: 64:54:7c:30:76:a1:9a:41:c8:43:b0:3b:68:00:a6:ed:a6:66: c8:21:90:e5:62:af:a2:7f:95:d9:fe:f9:5f:e0:c8:8c:38:8e: 44:2c:31:e7:e0:30:05:be:ef:fc:3e:84:d9:3a:5e:e4:45:ef: 96:1f:92:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDmYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI4ODAxMTAvBgNVBAUTKDNEN0E0RTBBOTlBRjE1RUYwQjM3OTBEMEU3OTYxRTg4 NzUyODE5ODMwHhcNMjUwODIyMTc1MTM4WhcNMjUwODI5MTc1MTM4WjAYMRYwFAYD VQQDEw02OGE4YWUyYS1hYjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw2/8sCt7jxUpuKGO7YaeLrQwOfZuwDcUSsOnxjQSbv+UfLkhcqvTt67awly+ K14MZfT7NnzQuAL+PB0Yy5HGTPzZPaumBQB1oIPydxi2OzpaJt4JGzpJ9Q7KPu8+ KaBa5DYCjXpSBXEJiRVSLvvCqh1GGajmGuaUdanSiO91BSU4XI5ztIOPm7GLkhK/ 5IYtc+jMmnnnJI50v4LvlRmmYT+fp4bImdzoNnBC50UCJHaccI+xCIdcHnJJe2MK xhhzxY7Hs4Rey5AfE58VCqFj9XeD/5HbQkmpCSC4w7y0nq3roG83jeY6FIvi3f5e dmqLF8sUQUUqkcQH5bwPRlK6+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO/j7dgY 34buNbqb4l4Vh5ZQq71iMB8GA1UdIwQYMBaAFD16TgqZrxXvCzeQ0OeWHoh1KBmD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Qjg4MC8xRjUxMThBNEEy RUYxMUU5OUQ0RTBBNUJDNEY5QUUwMi9QWHBPQ3BtdkZlOExONURRNTVZZWlIVW9H WU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BYcE9DcG12RmU4TE41RFE1NVllaUhVb0dZTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Qjg4MC8xRjUxMThBNEEyRUYxMUU5OUQ0RTBBNUJDNEY5QUUwMi9QWHBPQ3BtdkZl OExONURRNTVZZWlIVW9HWU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBT9/xIjnxsB5Mzeu2WseXmfmJpImbUPIhEifLr2SkfB5H60VwruGLK CLgIlRBpAGiWaBmL3sF9jgTXbkQOITFplgGpt1/csbO5Q41sp5yiB+YDgTMfu6ZN GQ5zfhRA8FNE70xqWGLmlYLnJj2/UrMy4eIUjRdY5Tla49vdFpntLKk33LmIE8kU O+jSPgdxpJqvfDlqZEK/YRBaDn57RtMiR+sqRP7R6Hgo4/1uHiz+CJwwZQ8E5WSc qQI70Uv3FIk5qG9sE1RkVHwwdqGaQchDsDtoAKbtpmbIIZDlYq+if5XZ/vlf4MiM OI5ELDHn4DAFvu/8PoTZOl7kRe+WH5Jv -----END CERTIFICATE-----Generated at Sat Aug 23 20:29:08 2025 by rpki-client