$ rpki-client -vvf rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/PXe1hqP2gsVjtkJlJiiR1NpGp6g.mft File: PXe1hqP2gsVjtkJlJiiR1NpGp6g.mft (raw, json) Hash identifier: NoDU6pev8cyp5q9oOm53uqeuTHxX7Eib68JPKcFl1Mk= Subject key identifier: F8:ED:E6:2D:1B:9A:4E:33:05:02:09:F9:4A:8C:27:E5:B6:0F:D7:C8 Authority key identifier: 3D:77:B5:86:A3:F6:82:C5:63:B6:42:65:26:28:91:D4:DA:46:A7:A8 Certificate issuer: /CN=A91B10B9/serialNumber=3D77B586A3F682C563B64265262891D4DA46A7A8 Certificate serial: 03BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXe1hqP2gsVjtkJlJiiR1NpGp6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/PXe1hqP2gsVjtkJlJiiR1NpGp6g.mft Manifest number: 03B8 Signing time: Sat 23 Aug 2025 00:57:53 +0000 Manifest this update: Sat 23 Aug 2025 00:57:52 +0000 Manifest next update: Sat 30 Aug 2025 00:57:52 +0000 Files and hashes: 1: PXe1hqP2gsVjtkJlJiiR1NpGp6g.crl (hash: HJou0aGBSWI69emV9MiHAljIb/iwdRdo1Cb64yWpORE=) 2: BCD0F6B0A0FF11EC924D4461C4F9AE02.roa (hash: eYkm574zXfPZBssf+KqgdlPvB8riPVJCVgCP7O8B6S0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/PXe1hqP2gsVjtkJlJiiR1NpGp6g.crl rsync://rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/PXe1hqP2gsVjtkJlJiiR1NpGp6g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXe1hqP2gsVjtkJlJiiR1NpGp6g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 957 (0x3bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B10B9, serialNumber=3D77B586A3F682C563B64265262891D4DA46A7A8 Validity Not Before: Aug 23 00:57:52 2025 GMT Not After : Aug 30 00:57:52 2025 GMT Subject: CN=68a91210-49e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:c7:23:05:d1:54:03:f6:6d:cf:b5:fc:e5:d7: 89:24:46:49:66:9b:b5:2b:78:38:a5:b3:d6:a0:92: 80:c1:d1:00:cb:eb:01:fb:65:88:9a:4c:57:3f:32: 26:d8:6e:ea:e0:42:40:5d:ae:68:22:77:5f:48:ef: 02:47:5a:00:45:11:93:c4:4f:83:b3:b8:36:75:92: 16:bf:eb:2b:b0:bd:ec:43:70:4e:ca:d6:45:b3:7d: 44:8c:29:03:44:6d:13:77:49:fe:8f:7f:d1:8a:f8: 39:7f:d1:14:ad:a5:3e:38:83:cf:70:d4:b5:5f:47: d7:ad:6f:71:3c:65:dd:e1:dd:09:b3:94:5b:3f:7b: 89:72:20:02:95:2b:8f:1f:49:61:49:4d:19:18:ea: 1d:61:d0:fe:3d:dd:70:b5:1b:41:66:68:04:13:c3: 6f:a7:8c:c6:2c:ed:f7:33:db:6d:df:65:10:74:90: c9:5d:8a:81:f3:f1:85:44:ac:f2:42:e8:83:63:51: c9:46:4a:ee:71:20:c1:ed:94:af:6c:18:46:c3:6c: ba:44:c0:0e:4e:b9:a5:c3:00:59:3b:5a:9b:41:f7: a8:9f:51:60:82:c1:26:24:73:7c:fd:e0:47:43:18: 01:1f:51:55:58:49:e4:98:0a:7f:12:65:07:87:5f: 1d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:ED:E6:2D:1B:9A:4E:33:05:02:09:F9:4A:8C:27:E5:B6:0F:D7:C8 X509v3 Authority Key Identifier: keyid:3D:77:B5:86:A3:F6:82:C5:63:B6:42:65:26:28:91:D4:DA:46:A7:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/PXe1hqP2gsVjtkJlJiiR1NpGp6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXe1hqP2gsVjtkJlJiiR1NpGp6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/PXe1hqP2gsVjtkJlJiiR1NpGp6g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:df:f4:ce:60:28:d0:8f:7d:c5:3b:b9:0d:4b:4c:24:57:44: 78:b9:ca:f2:7c:59:43:81:d6:ea:c0:47:9d:be:6f:20:d2:b8: 68:02:cf:3c:80:4d:46:3d:73:6e:a5:52:a8:7b:d4:d9:53:91: a8:9e:b7:cb:4f:83:07:e3:69:be:7e:fe:51:2c:04:c6:d5:b7: db:49:9e:02:79:53:32:39:25:13:2f:55:93:77:5c:0c:85:d2: 1c:a0:ac:5d:ef:7d:7a:35:2f:ee:25:ff:cb:b5:18:77:44:1a: 05:82:64:04:a9:06:95:65:b5:ea:ce:93:3f:e2:c5:82:42:0f: 10:02:74:fc:3e:b3:7e:0b:80:75:e8:c9:cd:ba:a5:53:91:e0: c7:a4:99:e1:0d:d1:86:f4:e1:60:ae:c3:89:52:a1:78:fd:80: 0c:bd:fb:5c:7a:2e:6f:f5:38:e1:14:98:f4:0a:a5:04:12:12: 0b:9a:1b:53:4f:1b:7d:ee:3b:9a:c7:e6:e7:d1:7d:92:73:f3: 34:13:b3:86:bf:bb:53:d5:47:62:3f:96:c3:87:63:7a:00:dc: 02:c9:fd:8c:0c:07:5e:b5:5f:10:95:a6:96:86:93:4e:93:33: 42:b8:47:82:de:0b:a6:53:90:04:16:93:14:82:4a:56:9b:89: 6d:19:df:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA70wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjEwQjkxMTAvBgNVBAUTKDNENzdCNTg2QTNGNjgyQzU2M0I2NDI2NTI2Mjg5MUQ0 REE0NkE3QTgwHhcNMjUwODIzMDA1NzUyWhcNMjUwODMwMDA1NzUyWjAYMRYwFAYD VQQDEw02OGE5MTIxMC00OWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6McjBdFUA/Ztz7X85deJJEZJZpu1K3g4pbPWoJKAwdEAy+sB+2WImkxXPzIm 2G7q4EJAXa5oIndfSO8CR1oARRGTxE+Ds7g2dZIWv+srsL3sQ3BOytZFs31EjCkD RG0Td0n+j3/Rivg5f9EUraU+OIPPcNS1X0fXrW9xPGXd4d0Js5RbP3uJciAClSuP H0lhSU0ZGOodYdD+Pd1wtRtBZmgEE8Nvp4zGLO33M9tt32UQdJDJXYqB8/GFRKzy QuiDY1HJRkrucSDB7ZSvbBhGw2y6RMAOTrmlwwBZO1qbQfeon1FggsEmJHN8/eBH QxgBH1FVWEnkmAp/EmUHh18dyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPjt5i0b mk4zBQIJ+UqMJ+W2D9fIMB8GA1UdIwQYMBaAFD13tYaj9oLFY7ZCZSYokdTaRqeo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTBCOS9EMTNCRUFBQUEw RkIxMUVDQTVEMURGNUJDNEY5QUUwMi9QWGUxaHFQMmdzVmp0a0psSmlpUjFOcEdw NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BYZTFocVAyZ3NWanRrSmxKaWlSMU5wR3A2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTBCOS9EMTNCRUFBQUEwRkIxMUVDQTVEMURGNUJDNEY5QUUwMi9QWGUxaHFQMmdz Vmp0a0psSmlpUjFOcEdwNmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAS3/TOYCjQj33FO7kNS0wkV0R4ucryfFlDgdbqwEedvm8g0rhoAs88 gE1GPXNupVKoe9TZU5GonrfLT4MH42m+fv5RLATG1bfbSZ4CeVMyOSUTL1WTd1wM hdIcoKxd7316NS/uJf/LtRh3RBoFgmQEqQaVZbXqzpM/4sWCQg8QAnT8PrN+C4B1 6MnNuqVTkeDHpJnhDdGG9OFgrsOJUqF4/YAMvftcei5v9TjhFJj0CqUEEhILmhtT Txt97juax+bn0X2Sc/M0E7OGv7tT1UdiP5bDh2N6ANwCyf2MDAdetV8QlaaWhpNO kzNCuEeC3gumU5AEFpMUgkpWm4ltGd8S -----END CERTIFICATE-----Generated at Sat Aug 23 18:33:14 2025 by rpki-client