$ rpki-client -vvf rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.mft File: P9UxYCV9sBsu4O8BPB4tQusaKI0.mft (raw, json) Hash identifier: /J2JuWouwTYC53njdjs5DlMK4b4jbiyyIi3tbG/axfE= Subject key identifier: 79:AE:4A:93:70:DE:9A:33:C9:7D:8A:22:08:0F:05:5E:C0:A8:73:A9 Authority key identifier: 3F:D5:31:60:25:7D:B0:1B:2E:E0:EF:01:3C:1E:2D:42:EB:1A:28:8D Certificate issuer: /CN=A911D51C/serialNumber=3FD53160257DB01B2EE0EF013C1E2D42EB1A288D Certificate serial: 0518 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9UxYCV9sBsu4O8BPB4tQusaKI0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.mft Manifest number: 0514 Signing time: Sun 10 Aug 2025 23:42:56 +0000 Manifest this update: Sun 10 Aug 2025 23:42:55 +0000 Manifest next update: Sun 17 Aug 2025 23:42:55 +0000 Files and hashes: 1: P9UxYCV9sBsu4O8BPB4tQusaKI0.crl (hash: 8Sk82fDqWZaopvznbCFnIVkU8v0WxQ1T5LnfMoxASBk=) 2: A7493DA6145611ECAA3B5769C4F9AE02.roa (hash: ECduF6HgxTLoDLFAm0PdDIfSdNYqt9EVcY+nm8e4XyU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.crl rsync://rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9UxYCV9sBsu4O8BPB4tQusaKI0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 Aug 2025 23:42:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1304 (0x518) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D51C, serialNumber=3FD53160257DB01B2EE0EF013C1E2D42EB1A288D Validity Not Before: Aug 10 23:42:55 2025 GMT Not After : Aug 17 23:42:55 2025 GMT Subject: CN=68992e80-10fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9a:20:19:30:65:3d:84:94:3b:0a:0b:60:5d: 88:9d:02:6d:2c:18:9b:fc:f5:02:a0:b1:a1:ba:69: b0:a0:e5:a8:c3:75:b6:ae:6d:d4:e2:36:36:58:a4: 37:96:01:dc:12:3a:a1:16:a0:6d:1c:85:42:3c:80: 8e:d5:5e:f2:4f:14:a1:c8:af:d3:c3:ca:90:c4:00: de:28:de:b4:54:bc:f4:98:d8:c5:b1:b6:4a:5f:43: 5d:91:49:d3:13:b1:16:ac:cb:c9:77:73:e2:4e:8e: 4e:81:68:32:a6:87:39:da:4d:63:33:56:9c:3f:ac: 7c:4e:60:df:7c:85:13:62:10:8f:aa:3e:b8:7a:d6: 1a:7b:6c:88:8e:7b:22:c7:fe:c8:39:fd:18:79:dd: 27:f4:52:a9:8c:04:2b:c1:61:aa:5e:34:c3:0c:e9: 15:d0:7f:41:ea:55:1c:01:27:fe:9c:e9:b7:32:07: 4f:67:66:9f:22:f6:a8:d4:b9:52:58:6b:7d:04:32: 7e:a8:94:35:4d:04:f8:cc:c8:20:1a:0e:a7:1c:47: 51:1d:4f:15:5d:4b:f5:10:b9:3a:64:25:3a:fb:25: a9:d8:c6:62:17:58:2d:e4:fb:df:0a:92:93:e3:c9: 28:55:0d:c3:6f:d7:0f:d1:22:64:d2:7a:0c:a1:97: 60:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:AE:4A:93:70:DE:9A:33:C9:7D:8A:22:08:0F:05:5E:C0:A8:73:A9 X509v3 Authority Key Identifier: keyid:3F:D5:31:60:25:7D:B0:1B:2E:E0:EF:01:3C:1E:2D:42:EB:1A:28:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9UxYCV9sBsu4O8BPB4tQusaKI0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:4c:d5:cd:42:62:2f:4a:7e:1f:ee:21:9c:27:3f:d8:fb:51: 14:df:73:06:95:6c:f5:20:db:a4:3e:c4:9e:90:d5:e2:69:c0: 28:2b:1b:ba:0c:97:a8:85:2f:b6:5c:ce:eb:f3:30:b9:31:87: b7:1c:58:42:d1:89:cb:a5:50:21:9b:05:18:33:21:92:5d:67: 26:45:01:d7:3e:e7:64:69:d4:5f:8c:be:93:97:e1:42:18:fb: eb:e0:06:df:6d:0e:ad:96:05:50:5e:bb:00:37:86:e2:2e:26: e9:82:5c:a4:ad:c2:0d:22:0f:f5:42:b2:b4:d1:8b:dd:1c:89: 0e:c1:be:5a:97:0d:71:f9:ea:72:42:eb:1c:a5:7e:d2:29:a0: 5a:d4:bd:31:90:4d:7f:22:45:50:2e:a8:08:8f:d5:65:e5:81: 3d:33:8b:2f:49:fe:90:c6:3d:08:6d:e7:6b:56:5c:50:5a:52: 38:bc:a2:b7:89:97:4b:b7:c3:c3:d5:08:52:2f:db:7b:47:1c: 25:06:0e:25:4d:94:d0:1b:38:da:58:81:f9:2a:75:4c:2d:5b: 12:ca:28:08:ac:2c:0c:fe:51:19:e1:ca:35:24:50:ea:28:6c: cd:ab:9b:50:30:b9:bf:d6:29:f6:e6:04:67:5a:6d:f1:9c:27: 26:80:d5:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBRgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ1MUMxMTAvBgNVBAUTKDNGRDUzMTYwMjU3REIwMUIyRUUwRUYwMTNDMUUyRDQy RUIxQTI4OEQwHhcNMjUwODEwMjM0MjU1WhcNMjUwODE3MjM0MjU1WjAYMRYwFAYD VQQDEw02ODk5MmU4MC0xMGZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsZogGTBlPYSUOwoLYF2InQJtLBib/PUCoLGhummwoOWow3W2rm3U4jY2WKQ3 lgHcEjqhFqBtHIVCPICO1V7yTxShyK/Tw8qQxADeKN60VLz0mNjFsbZKX0NdkUnT E7EWrMvJd3PiTo5OgWgypoc52k1jM1acP6x8TmDffIUTYhCPqj64etYae2yIjnsi x/7IOf0Yed0n9FKpjAQrwWGqXjTDDOkV0H9B6lUcASf+nOm3MgdPZ2afIvao1LlS WGt9BDJ+qJQ1TQT4zMggGg6nHEdRHU8VXUv1ELk6ZCU6+yWp2MZiF1gt5PvfCpKT 48koVQ3Db9cP0SJk0noMoZdgLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHmuSpNw 3pozyX2KIggPBV7AqHOpMB8GA1UdIwQYMBaAFD/VMWAlfbAbLuDvATweLULrGiiN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDUxQy9CRDMxMjcxNjE0 NTQxMUVDQTQ2ODcyNjhDNEY5QUUwMi9QOVV4WUNWOXNCc3U0TzhCUEI0dFF1c2FL STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A5VXhZQ1Y5c0JzdTRPOEJQQjR0UXVzYUtJMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDUxQy9CRDMxMjcxNjE0NTQxMUVDQTQ2ODcyNjhDNEY5QUUwMi9QOVV4WUNWOXNC c3U0TzhCUEI0dFF1c2FLSTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDBTNXNQmIvSn4f7iGcJz/Y+1EU33MGlWz1INukPsSekNXiacAoKxu6 DJeohS+2XM7r8zC5MYe3HFhC0YnLpVAhmwUYMyGSXWcmRQHXPudkadRfjL6Tl+FC GPvr4AbfbQ6tlgVQXrsAN4biLibpglykrcINIg/1QrK00YvdHIkOwb5alw1x+epy QuscpX7SKaBa1L0xkE1/IkVQLqgIj9Vl5YE9M4svSf6Qxj0IbedrVlxQWlI4vKK3 iZdLt8PD1QhSL9t7RxwlBg4lTZTQGzjaWIH5KnVMLVsSyigIrCwM/lEZ4co1JFDq KGzNq5tQMLm/1in25gRnWm3xnCcmgNUo -----END CERTIFICATE-----Generated at Tue Aug 12 14:02:09 2025 by rpki-client