$ rpki-client -vvf rpki.apnic.net/member_repository/A9166292/AEB56750468C11EC8D7BF268C4F9AE02/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.mft File: pPsgxySXJi3Ed_FJQwCPkQd-ZZs.mft (raw, json) Hash identifier: FSwFjhBeMOfBUyo4QSDBv6wlXsts+7Xw+V4w0nqJgV8= Subject key identifier: 6E:5A:4F:1F:45:B3:1F:7A:74:61:8C:1A:6E:87:A8:9D:B1:D0:8F:3E Authority key identifier: A4:FB:20:C7:24:97:26:2D:C4:77:F1:49:43:00:8F:91:07:7E:65:9B Certificate issuer: /CN=A9166292/serialNumber=A4FB20C72497262DC477F14943008F91077E659B Certificate serial: 04A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166292/AEB56750468C11EC8D7BF268C4F9AE02/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.mft Manifest number: 04A1 Signing time: Sat 23 Aug 2025 00:10:52 +0000 Manifest this update: Sat 23 Aug 2025 00:10:51 +0000 Manifest next update: Sat 30 Aug 2025 00:10:51 +0000 Files and hashes: 1: pPsgxySXJi3Ed_FJQwCPkQd-ZZs.crl (hash: W8A3Pa1Pt5xq+XTALx8EWMjR6vMicUgLg/DSOHt3TQI=) 2: 78771A0C490D11EC8E4D1136C4F9AE02.roa (hash: SSW9TV8jZN6fvYq4gIStDsbEdDvovlOhUtObC7g07YA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166292/AEB56750468C11EC8D7BF268C4F9AE02/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.crl rsync://rpki.apnic.net/member_repository/A9166292/AEB56750468C11EC8D7BF268C4F9AE02/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:10:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1193 (0x4a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166292, serialNumber=A4FB20C72497262DC477F14943008F91077E659B Validity Not Before: Aug 23 00:10:51 2025 GMT Not After : Aug 30 00:10:51 2025 GMT Subject: CN=68a9070c-91b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c5:94:8d:05:78:26:7a:67:5f:42:a8:40:c5: 8d:a1:4d:03:68:50:6c:13:08:a3:07:8f:a8:b9:7a: e3:9c:51:4f:ed:16:77:c0:c7:27:09:88:7e:82:11: 02:2f:bd:a0:f5:d7:46:63:93:49:57:ec:13:4e:5e: 0f:c8:22:90:ea:7c:04:75:39:f4:58:5a:15:46:fd: a0:05:a1:14:09:41:a0:3a:eb:4d:75:7f:60:80:97: 08:34:0e:ee:32:34:72:98:24:dc:8d:af:3f:73:b1: ef:28:5c:44:48:ee:f9:d2:1b:c8:46:c5:4c:65:ba: 28:f7:81:02:95:38:93:7b:4c:fe:96:3b:3c:f6:3e: 50:1b:9c:12:50:c5:44:bf:a6:e1:2e:7a:e0:13:17: 6d:d8:c6:00:cf:8e:cb:b1:d1:5a:f5:41:b0:8d:30: 0b:d7:70:47:d1:dd:ae:70:95:04:a0:5f:45:df:1f: 13:66:49:f6:a7:3d:04:63:34:91:32:ca:72:77:a5: a4:04:ee:72:cc:dc:ad:0b:64:b4:02:4e:c4:d4:28: 19:af:11:8e:8e:ca:8e:3c:4e:11:43:59:a8:c8:d1: f0:7f:dd:e7:e9:28:60:3c:84:85:e0:9e:41:c3:39: 7a:e9:36:80:9a:9a:2d:a5:1a:e9:f8:a7:8e:2e:27: 09:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:5A:4F:1F:45:B3:1F:7A:74:61:8C:1A:6E:87:A8:9D:B1:D0:8F:3E X509v3 Authority Key Identifier: keyid:A4:FB:20:C7:24:97:26:2D:C4:77:F1:49:43:00:8F:91:07:7E:65:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166292/AEB56750468C11EC8D7BF268C4F9AE02/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166292/AEB56750468C11EC8D7BF268C4F9AE02/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:44:74:dc:b8:d0:a1:59:90:5a:67:82:73:f0:a0:4e:6b:cb: 6f:3c:86:13:e9:d6:1b:41:bc:02:94:ad:c9:1d:d6:55:46:ec: 85:1b:7b:2f:8a:be:3d:af:40:bb:b4:4f:6a:bd:e4:cd:05:0d: 5e:40:45:c2:41:73:c4:2c:8e:a2:43:16:6f:23:ed:cb:dd:e8: 3f:b5:e7:b3:b3:a7:3a:30:b6:cf:4b:3d:27:c4:4f:1d:e4:cb: 7f:0f:54:32:64:84:79:96:58:6e:0d:08:76:46:fc:94:a8:47: 47:db:cb:54:10:e8:c3:85:9c:c5:ca:2c:25:3e:ae:3c:17:19: cd:f2:ff:37:07:63:d6:10:fd:91:2b:cd:ff:81:e1:24:52:a0: cf:36:b8:ac:94:85:20:97:ac:89:91:23:67:f4:3b:34:5c:ea: 21:e5:45:0c:95:14:3e:0c:44:88:99:71:21:a4:8f:da:c9:c2: 18:00:07:d6:5b:b6:6e:7f:88:53:15:3e:ce:f7:1c:14:4f:13: 67:26:1d:6d:83:a7:4f:12:bc:a7:05:f0:29:d7:45:79:f0:b7: e0:70:f4:4b:1a:b5:a5:4d:ff:3b:ef:a5:4c:5f:84:74:34:5e: df:32:03:f8:d9:4d:d2:1a:a5:f1:55:4e:fc:27:cf:ff:4b:af: d2:ed:c3:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjYyOTIxMTAvBgNVBAUTKEE0RkIyMEM3MjQ5NzI2MkRDNDc3RjE0OTQzMDA4Rjkx MDc3RTY1OUIwHhcNMjUwODIzMDAxMDUxWhcNMjUwODMwMDAxMDUxWjAYMRYwFAYD VQQDEw02OGE5MDcwYy05MWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvcWUjQV4JnpnX0KoQMWNoU0DaFBsEwijB4+ouXrjnFFP7RZ3wMcnCYh+ghEC L72g9ddGY5NJV+wTTl4PyCKQ6nwEdTn0WFoVRv2gBaEUCUGgOutNdX9ggJcINA7u MjRymCTcja8/c7HvKFxESO750hvIRsVMZboo94EClTiTe0z+ljs89j5QG5wSUMVE v6bhLnrgExdt2MYAz47LsdFa9UGwjTAL13BH0d2ucJUEoF9F3x8TZkn2pz0EYzSR Mspyd6WkBO5yzNytC2S0Ak7E1CgZrxGOjsqOPE4RQ1moyNHwf93n6ShgPISF4J5B wzl66TaAmpotpRrp+KeOLicJXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG5aTx9F sx96dGGMGm6HqJ2x0I8+MB8GA1UdIwQYMBaAFKT7IMcklyYtxHfxSUMAj5EHfmWb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NjI5Mi9BRUI1Njc1MDQ2 OEMxMUVDOEQ3QkYyNjhDNEY5QUUwMi9wUHNneHlTWEppM0VkX0ZKUXdDUGtRZC1a WnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BQc2d4eVNYSmkzRWRfRkpRd0NQa1FkLVpacy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NjI5Mi9BRUI1Njc1MDQ2OEMxMUVDOEQ3QkYyNjhDNEY5QUUwMi9wUHNneHlTWEpp M0VkX0ZKUXdDUGtRZC1aWnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApRHTcuNChWZBaZ4Jz8KBOa8tvPIYT6dYbQbwClK3JHdZVRuyFG3sv ir49r0C7tE9qveTNBQ1eQEXCQXPELI6iQxZvI+3L3eg/teezs6c6MLbPSz0nxE8d 5Mt/D1QyZIR5llhuDQh2RvyUqEdH28tUEOjDhZzFyiwlPq48FxnN8v83B2PWEP2R K83/geEkUqDPNrislIUgl6yJkSNn9Ds0XOoh5UUMlRQ+DESImXEhpI/aycIYAAfW W7Zuf4hTFT7O9xwUTxNnJh1tg6dPErynBfAp10V58LfgcPRLGrWlTf8776VMX4R0 NF7fMgP42U3SGqXxVU78J8//S6/S7cPg -----END CERTIFICATE-----Generated at Sat Aug 23 17:07:39 2025 by rpki-client