$ rpki-client -vvf rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.mft File: pxA_0z9simRI_GOUCql9k_gfgQU.mft (raw, json) Hash identifier: AU8p8kOnPc39AdLonJFxZXMoqQ2soBiVpWHsC6Mw40E= Subject key identifier: 0A:38:2E:CE:90:BE:58:E9:B0:13:69:36:D2:CB:A1:A4:F0:BA:A3:93 Authority key identifier: A7:10:3F:D3:3F:6C:8A:64:48:FC:63:94:0A:A9:7D:93:F8:1F:81:05 Certificate issuer: /CN=A9126D40/serialNumber=A7103FD33F6C8A6448FC63940AA97D93F81F8105 Certificate serial: 0594 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pxA_0z9simRI_GOUCql9k_gfgQU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.mft Manifest number: 058F Signing time: Sun 02 Nov 2025 23:11:11 +0000 Manifest this update: Sun 02 Nov 2025 23:11:10 +0000 Manifest next update: Sun 09 Nov 2025 23:11:10 +0000 Files and hashes: 1: pxA_0z9simRI_GOUCql9k_gfgQU.crl (hash: ATTaaVfWxXEfZ9LJElpabOjzLxwFp0TeYd+EamGz7bU=) 2: 5B0A7AFCF3F611EB8DD81585C4F9AE02.roa (hash: R8hfJ5cUDeHXSHt31Yaxeq/Vdh/2fKfS7Ifq3y/hy0s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.crl rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pxA_0z9simRI_GOUCql9k_gfgQU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:11:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1428 (0x594) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126D40, serialNumber=A7103FD33F6C8A6448FC63940AA97D93F81F8105 Validity Not Before: Nov 2 23:11:10 2025 GMT Not After : Nov 9 23:11:10 2025 GMT Subject: CN=6907e50f-3389 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ec:e1:6a:2b:03:a0:d8:c2:75:59:33:e3:bd: ab:77:2a:c5:e4:b0:42:ea:04:59:06:0b:29:8a:cd: db:48:90:c8:7f:e5:72:d7:2e:ff:30:95:55:c6:33: e4:82:ac:05:0b:15:44:90:c7:cb:2c:92:aa:cb:f3: a5:88:3d:63:35:2d:f2:c1:67:6d:35:1a:7a:68:a1: e6:ae:b9:ce:8c:6b:37:77:2a:f7:c0:cc:82:ef:ca: e8:eb:19:55:64:06:f0:77:e5:13:43:61:68:a5:05: 0f:c2:ac:68:70:d5:d5:c6:8c:51:c3:e2:1b:76:c8: 2a:26:03:eb:bd:85:a0:be:38:28:ef:0b:5d:cd:91: f9:ee:9d:1a:ed:82:78:9a:89:92:28:b1:0d:0e:8e: 95:12:55:88:63:32:e1:19:33:ac:0a:cb:22:b8:60: 11:ba:d0:79:25:18:1a:78:df:c0:3a:09:c7:3a:80: 8f:8c:5b:86:fd:1e:dd:36:dc:e0:81:ac:15:fc:32: 78:30:e2:71:1b:d8:52:af:5a:10:3b:a6:53:e9:14: 79:bf:51:c7:be:83:82:02:1e:5d:71:16:28:f4:18: be:c9:b5:3f:12:f0:c0:c7:ae:70:85:35:a5:ef:56: f3:04:f2:36:e6:0d:cf:c5:ea:ed:c8:c5:15:47:7b: 8c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:38:2E:CE:90:BE:58:E9:B0:13:69:36:D2:CB:A1:A4:F0:BA:A3:93 X509v3 Authority Key Identifier: keyid:A7:10:3F:D3:3F:6C:8A:64:48:FC:63:94:0A:A9:7D:93:F8:1F:81:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pxA_0z9simRI_GOUCql9k_gfgQU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:5a:cf:34:fe:f4:6c:09:ec:d0:2b:d1:4b:8d:1e:84:1d:e5: f8:bf:30:be:44:d4:55:d9:46:34:4c:81:27:ec:4c:f4:21:3e: 83:3c:b5:99:21:e1:bb:b2:e7:76:ec:e8:f4:6a:7d:56:78:68: 0e:b8:56:78:aa:03:02:1b:d6:b5:d1:e7:15:c5:90:61:b9:1d: 68:e8:2b:6a:68:44:89:2c:21:b4:f3:9a:38:69:5f:d9:a4:7e: 77:49:3b:ee:91:86:72:3c:69:e5:3b:1b:5f:f9:b7:bd:80:69: 07:47:1d:11:be:ef:26:59:f6:e1:5f:02:41:2c:38:f9:ff:e7: 3f:8d:e7:fb:2a:f5:cc:e4:12:26:9b:f4:22:f9:20:41:16:04: e7:99:7d:e0:6f:2e:7e:61:3e:a4:bb:23:99:08:cd:d2:19:d6: 51:21:ba:93:ef:b7:39:f4:69:a3:62:d8:d3:42:34:b2:3b:e3: ac:bb:71:7d:9f:c5:51:74:de:5e:b1:cf:23:91:f3:a9:79:be: a7:69:70:95:f4:80:da:5d:60:dd:5e:11:49:9a:e9:64:54:f3: 15:f7:0d:8b:ff:f4:1b:e5:8d:3a:11:3e:93:f7:05:7f:36:55: ad:df:11:67:eb:3f:57:cf:f6:df:d4:de:2d:58:0b:2d:9e:14: da:cc:46:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjZENDAxMTAvBgNVBAUTKEE3MTAzRkQzM0Y2QzhBNjQ0OEZDNjM5NDBBQTk3RDkz RjgxRjgxMDUwHhcNMjUxMTAyMjMxMTEwWhcNMjUxMTA5MjMxMTEwWjAYMRYwFAYD VQQDEw02OTA3ZTUwZi0zMzg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs+zhaisDoNjCdVkz472rdyrF5LBC6gRZBgspis3bSJDIf+Vy1y7/MJVVxjPk gqwFCxVEkMfLLJKqy/OliD1jNS3ywWdtNRp6aKHmrrnOjGs3dyr3wMyC78ro6xlV ZAbwd+UTQ2FopQUPwqxocNXVxoxRw+IbdsgqJgPrvYWgvjgo7wtdzZH57p0a7YJ4 momSKLENDo6VElWIYzLhGTOsCssiuGARutB5JRgaeN/AOgnHOoCPjFuG/R7dNtzg gawV/DJ4MOJxG9hSr1oQO6ZT6RR5v1HHvoOCAh5dcRYo9Bi+ybU/EvDAx65whTWl 71bzBPI25g3PxertyMUVR3uMQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAo4Ls6Q vljpsBNpNtLLoaTwuqOTMB8GA1UdIwQYMBaAFKcQP9M/bIpkSPxjlAqpfZP4H4EF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNkQ0MC8zQzYzMzNDNkYz RjMxMUVCQTI5MkU1ODBDNEY5QUUwMi9weEFfMHo5c2ltUklfR09VQ3FsOWtfZ2Zn UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3B4QV8wejlzaW1SSV9HT1VDcWw5a19nZmdRVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NkQ0MC8zQzYzMzNDNkYzRjMxMUVCQTI5MkU1ODBDNEY5QUUwMi9weEFfMHo5c2lt UklfR09VQ3FsOWtfZ2ZnUVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyWs80/vRsCezQK9FLjR6EHeX4vzC+RNRV2UY0TIEn7Ez0IT6DPLWZ IeG7sud27Oj0an1WeGgOuFZ4qgMCG9a10ecVxZBhuR1o6CtqaESJLCG085o4aV/Z pH53STvukYZyPGnlOxtf+be9gGkHRx0Rvu8mWfbhXwJBLDj5/+c/jef7KvXM5BIm m/Qi+SBBFgTnmX3gby5+YT6kuyOZCM3SGdZRIbqT77c59GmjYtjTQjSyO+Osu3F9 n8VRdN5esc8jkfOpeb6naXCV9IDaXWDdXhFJmulkVPMV9w2L//Qb5Y06ET6T9wV/ NlWt3xFn6z9Xz/bf1N4tWAstnhTazEZV -----END CERTIFICATE-----Generated at Tue Nov 4 21:36:58 2025 by rpki-client