$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.mft File: PzbQyAdues-oPQS3IwcXKogp1bM.mft (raw, json) Hash identifier: 4hNEoSnMWmw9ATmY62zOGR3VhDK3FNGoAHnV0fRc3iY= Subject key identifier: 7B:AB:38:F1:D4:8E:B9:8D:E8:47:02:D7:EF:39:F4:14:F3:16:00:19 Authority key identifier: 3F:36:D0:C8:07:6E:7A:CF:A8:3D:04:B7:23:07:17:2A:88:29:D5:B3 Certificate issuer: /CN=A9172B65/serialNumber=3F36D0C8076E7ACFA83D04B72307172A8829D5B3 Certificate serial: D0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PzbQyAdues-oPQS3IwcXKogp1bM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.mft Manifest number: CE Signing time: Sat 23 Aug 2025 05:51:57 +0000 Manifest this update: Sat 23 Aug 2025 05:51:56 +0000 Manifest next update: Sat 30 Aug 2025 05:51:56 +0000 Files and hashes: 1: PzbQyAdues-oPQS3IwcXKogp1bM.crl (hash: uRIEpeuHXabcyseflAqqXOyGIdHeH/RZwZvWcdT0glA=) 2: 76C3F7C645B711EFA2F0C732C4F9AE02.roa (hash: 6KE/6WiXMHutimLQnkuyk/FwzPL7cpRiOFuQR2vWv2I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.crl rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PzbQyAdues-oPQS3IwcXKogp1bM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:51:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 208 (0xd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172B65, serialNumber=3F36D0C8076E7ACFA83D04B72307172A8829D5B3 Validity Not Before: Aug 23 05:51:56 2025 GMT Not After : Aug 30 05:51:56 2025 GMT Subject: CN=68a956fd-26bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0a:9c:7d:fd:7c:4d:9a:da:70:50:b7:ca:56: 95:97:18:d2:23:e7:6a:6f:d2:eb:27:5c:3d:8e:09: b4:d1:0b:8a:83:cd:91:a2:68:02:35:c9:3d:09:86: 5f:52:18:f9:1f:c2:4b:83:08:84:8d:2e:c6:42:1c: f6:02:a2:74:35:f8:34:15:2d:ac:7e:d5:60:72:7b: 60:31:58:eb:e7:63:4a:ea:c1:da:f3:0b:9a:26:73: 91:f0:e4:b5:72:6a:df:20:54:03:c2:a4:bd:2b:8b: 9e:89:52:73:c7:02:66:74:01:3d:c4:71:05:6c:77: 18:9d:bd:a9:ac:d8:32:6e:78:d8:29:c4:77:79:4c: 66:69:c3:62:e7:50:0c:5e:cd:6b:0b:8e:54:47:9d: fd:31:3f:3e:a7:77:4e:ca:83:58:70:aa:84:5c:eb: f2:d4:61:7a:f0:00:5d:cc:3f:05:e9:c1:95:7c:17: 71:d6:53:5b:fd:17:8c:d5:41:6c:38:77:91:5c:e4: e8:c1:13:82:dd:fe:3f:c2:87:a6:b9:83:5c:cb:a6: 3a:5a:b4:fe:ff:28:5a:7c:02:72:1a:ba:24:bd:53: 66:46:76:1b:43:63:08:fc:6b:c1:59:84:96:ac:c1: c1:27:0e:68:d8:2a:d0:78:b8:e3:78:44:0b:06:e1: 88:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:AB:38:F1:D4:8E:B9:8D:E8:47:02:D7:EF:39:F4:14:F3:16:00:19 X509v3 Authority Key Identifier: keyid:3F:36:D0:C8:07:6E:7A:CF:A8:3D:04:B7:23:07:17:2A:88:29:D5:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PzbQyAdues-oPQS3IwcXKogp1bM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:55:26:a8:9a:d9:ed:5e:24:d1:be:bd:88:a8:6c:8e:55:69: 03:b1:3d:78:30:99:76:ea:0f:e4:f5:ba:9a:99:86:b5:f1:95: e3:08:3e:78:59:96:26:0e:f0:d1:a9:34:79:56:cf:a7:a2:a3: d7:46:7b:7c:f7:31:62:ed:58:a1:43:b8:86:97:6e:56:34:a6: 9f:aa:80:33:84:63:d0:e7:f5:72:1a:36:75:2c:7f:44:c8:fc: 35:36:60:47:80:14:4d:46:93:3a:35:89:bd:2d:44:cb:26:e6: 88:8c:64:0e:db:2b:c2:d3:78:f5:71:ef:f2:b8:fe:9f:e6:e2: 05:6c:f3:9c:35:e6:74:cc:d5:b1:e0:aa:79:af:71:a5:53:48: e6:67:8a:35:f8:7a:ff:3a:4d:a5:39:2e:15:66:ed:6e:f2:4c: 23:4c:30:43:7e:b0:5c:40:5c:b6:55:96:cc:55:f4:56:0c:c8: e1:2e:08:e7:86:c4:91:a6:6f:46:14:db:49:d4:f2:57:b6:73: 48:de:a5:60:ca:31:61:c5:7c:c3:72:99:b6:e6:63:45:ff:9a: 4a:08:aa:e5:6a:89:55:da:15:fc:92:ef:68:9d:41:db:0c:21: 0e:2c:ad:52:62:1d:f1:04:da:05:52:36:38:5e:35:e0:84:d5: 3e:99:80:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJCNjUxMTAvBgNVBAUTKDNGMzZEMEM4MDc2RTdBQ0ZBODNEMDRCNzIzMDcxNzJB ODgyOUQ1QjMwHhcNMjUwODIzMDU1MTU2WhcNMjUwODMwMDU1MTU2WjAYMRYwFAYD VQQDEw02OGE5NTZmZC0yNmJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAygqcff18TZracFC3ylaVlxjSI+dqb9LrJ1w9jgm00QuKg82RomgCNck9CYZf Uhj5H8JLgwiEjS7GQhz2AqJ0Nfg0FS2sftVgcntgMVjr52NK6sHa8wuaJnOR8OS1 cmrfIFQDwqS9K4ueiVJzxwJmdAE9xHEFbHcYnb2prNgybnjYKcR3eUxmacNi51AM Xs1rC45UR539MT8+p3dOyoNYcKqEXOvy1GF68ABdzD8F6cGVfBdx1lNb/ReM1UFs OHeRXOTowROC3f4/woemuYNcy6Y6WrT+/yhafAJyGrokvVNmRnYbQ2MI/GvBWYSW rMHBJw5o2CrQeLjjeEQLBuGIkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHurOPHU jrmN6EcC1+859BTzFgAZMB8GA1UdIwQYMBaAFD820MgHbnrPqD0EtyMHFyqIKdWz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkI2NS8wMTVGNkRFRTQ1 QjcxMUVGQTU5RTEzMzJDNEY5QUUwMi9QemJReUFkdWVzLW9QUVMzSXdjWEtvZ3Ax Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1B6YlF5QWR1ZXMtb1BRUzNJd2NYS29ncDFiTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkI2NS8wMTVGNkRFRTQ1QjcxMUVGQTU5RTEzMzJDNEY5QUUwMi9QemJReUFkdWVz LW9QUVMzSXdjWEtvZ3AxYk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdVSaomtntXiTRvr2IqGyOVWkDsT14MJl26g/k9bqamYa18ZXjCD54 WZYmDvDRqTR5Vs+noqPXRnt89zFi7VihQ7iGl25WNKafqoAzhGPQ5/VyGjZ1LH9E yPw1NmBHgBRNRpM6NYm9LUTLJuaIjGQO2yvC03j1ce/yuP6f5uIFbPOcNeZ0zNWx 4Kp5r3GlU0jmZ4o1+Hr/Ok2lOS4VZu1u8kwjTDBDfrBcQFy2VZbMVfRWDMjhLgjn hsSRpm9GFNtJ1PJXtnNI3qVgyjFhxXzDcpm25mNF/5pKCKrlaolV2hX8ku9onUHb DCEOLK1SYh3xBNoFUjY4XjXghNU+mYB3 -----END CERTIFICATE-----Generated at Sat Aug 23 10:30:59 2025 by rpki-client