$ rpki-client -vvf rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.mft File: PSzMkYN0TcaWqFVry5BDhI6V33A.mft (raw, json) Hash identifier: i6+0RPgfRlEgnVsLs8okDHGrxBwwCqT/PZ8DAKG5bqo= Subject key identifier: 59:80:C3:6B:00:76:9B:CD:57:1A:43:82:08:C6:4C:86:EA:E3:8A:36 Authority key identifier: 3D:2C:CC:91:83:74:4D:C6:96:A8:55:6B:CB:90:43:84:8E:95:DF:70 Certificate issuer: /CN=A912D826/serialNumber=3D2CCC9183744DC696A8556BCB9043848E95DF70 Certificate serial: 03A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSzMkYN0TcaWqFVry5BDhI6V33A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.mft Manifest number: 0398 Signing time: Mon 11 Aug 2025 01:00:22 +0000 Manifest this update: Mon 11 Aug 2025 01:00:21 +0000 Manifest next update: Mon 18 Aug 2025 01:00:21 +0000 Files and hashes: 1: PSzMkYN0TcaWqFVry5BDhI6V33A.crl (hash: 9V9Dwxy/CkzA3myV13nWF81L8IbLxfUSZy9K2p3xOwQ=) 2: 69A20286514B11F0B8A8C66DC4F9AE02.roa (hash: FMJfMOhKmr3+LIFoso7iYyeae1vQb80K64qzROcKGwI=) 3: 804B03560A7211EE8FA2CD58C4F9AE02.roa (hash: +4X61DthcWz4IP6DOyrL7Yd1Zc+RFVYAukm8M+MD8hs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.crl rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSzMkYN0TcaWqFVry5BDhI6V33A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 934 (0x3a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D826, serialNumber=3D2CCC9183744DC696A8556BCB9043848E95DF70 Validity Not Before: Aug 11 01:00:21 2025 GMT Not After : Aug 18 01:00:21 2025 GMT Subject: CN=689940a6-bed3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8a:9f:2b:e8:37:9d:bf:09:81:62:56:19:67: ed:3b:85:c5:43:2e:c8:80:08:db:9d:d4:6a:e3:84: fe:c3:66:f4:0d:4f:ef:7f:2b:d1:1e:0e:14:30:d5: 10:92:d9:fb:1a:e8:a8:cf:f5:00:69:48:45:5c:4c: e5:c2:70:0f:dd:cf:88:b0:a7:7e:5f:d1:0d:f8:03: 41:c3:30:b1:9f:76:ae:d1:35:9e:ea:ae:65:ae:44: c7:a6:dc:fe:ce:62:5f:55:ac:f9:04:21:91:76:5d: e6:1e:7f:a4:d2:f9:52:ec:7a:f0:d8:f0:5a:76:19: 0b:33:97:00:f1:65:83:61:47:52:43:17:f3:cc:5e: 12:0a:c0:e4:df:cb:c2:78:5d:12:a4:ce:40:1a:d6: 8c:7a:60:cc:6f:28:45:7d:f3:1c:55:58:b0:56:24: 8b:f3:a5:e8:79:91:0e:01:87:be:24:0c:df:22:ec: a9:58:cf:84:3c:0c:5b:62:d4:ff:a1:21:fb:98:16: b8:7c:f0:00:41:29:b0:f2:3c:d5:fe:43:84:d2:8b: 08:ba:de:b6:04:ca:0e:13:72:09:b3:9d:d6:57:9c: 5a:76:73:2a:0f:15:30:88:b1:9a:89:c5:bd:dd:2b: b8:2b:fd:de:3b:d2:d7:27:a8:b0:3a:b0:4b:57:4f: 8b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:80:C3:6B:00:76:9B:CD:57:1A:43:82:08:C6:4C:86:EA:E3:8A:36 X509v3 Authority Key Identifier: keyid:3D:2C:CC:91:83:74:4D:C6:96:A8:55:6B:CB:90:43:84:8E:95:DF:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSzMkYN0TcaWqFVry5BDhI6V33A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:04:fc:f3:b9:9e:70:05:3f:83:f9:1d:bb:61:4b:f2:48:15: 3b:c2:cc:d5:3a:f4:69:63:31:85:1e:3c:fb:cb:18:42:95:d0: 8b:59:d4:f8:e4:9f:62:b0:cb:2f:2f:26:10:d5:12:47:b7:ac: d0:24:01:bc:c6:3a:16:08:b7:96:eb:f2:94:b4:05:64:b9:ac: d2:ae:7e:d3:2b:b6:78:4a:17:6f:ff:5e:6d:2c:d1:1e:f1:1f: b6:14:17:c2:84:8b:70:a3:fe:b3:ba:20:81:18:eb:9e:a0:39: 19:79:45:f2:2d:85:31:7b:2f:18:9b:24:5e:a7:57:3b:61:15: 95:7f:59:51:3e:c4:8c:a4:b1:82:d5:f1:bb:75:77:af:b2:fe: 45:c3:3b:5a:4c:bd:99:f7:f4:bb:d8:3a:ba:44:dd:19:42:65: 2f:03:69:7b:6d:5a:52:d7:21:19:6a:d2:2b:6e:ed:02:8f:11: 18:bc:19:41:76:60:36:65:f9:6d:6d:17:7e:ef:49:ec:9a:f3: d6:85:be:f0:5f:6f:bf:0e:b3:ad:51:ec:b7:af:f6:27:8a:a3: ba:ec:dc:e1:c6:0e:e9:60:2e:a9:7a:39:dd:d3:f3:de:68:cc: 84:00:73:42:20:ae:77:cb:af:35:fa:53:2c:76:55:51:93:72: 19:22:fe:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQ4MjYxMTAvBgNVBAUTKDNEMkNDQzkxODM3NDREQzY5NkE4NTU2QkNCOTA0Mzg0 OEU5NURGNzAwHhcNMjUwODExMDEwMDIxWhcNMjUwODE4MDEwMDIxWjAYMRYwFAYD VQQDEw02ODk5NDBhNi1iZWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx4qfK+g3nb8JgWJWGWftO4XFQy7IgAjbndRq44T+w2b0DU/vfyvRHg4UMNUQ ktn7Guioz/UAaUhFXEzlwnAP3c+IsKd+X9EN+ANBwzCxn3au0TWe6q5lrkTHptz+ zmJfVaz5BCGRdl3mHn+k0vlS7Hrw2PBadhkLM5cA8WWDYUdSQxfzzF4SCsDk38vC eF0SpM5AGtaMemDMbyhFffMcVViwViSL86XoeZEOAYe+JAzfIuypWM+EPAxbYtT/ oSH7mBa4fPAAQSmw8jzV/kOE0osIut62BMoOE3IJs53WV5xadnMqDxUwiLGaicW9 3Su4K/3eO9LXJ6iwOrBLV0+LIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFmAw2sA dpvNVxpDggjGTIbq44o2MB8GA1UdIwQYMBaAFD0szJGDdE3GlqhVa8uQQ4SOld9w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDgyNi9DRjRFMUQ3NEFF NEExMUVDODQ2RjNGNjhDNEY5QUUwMi9QU3pNa1lOMFRjYVdxRlZyeTVCRGhJNlYz M0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BTek1rWU4wVGNhV3FGVnJ5NUJEaEk2VjMzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDgyNi9DRjRFMUQ3NEFFNEExMUVDODQ2RjNGNjhDNEY5QUUwMi9QU3pNa1lOMFRj YVdxRlZyeTVCRGhJNlYzM0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDBPzzuZ5wBT+D+R27YUvySBU7wszVOvRpYzGFHjz7yxhCldCLWdT4 5J9isMsvLyYQ1RJHt6zQJAG8xjoWCLeW6/KUtAVkuazSrn7TK7Z4Shdv/15tLNEe 8R+2FBfChItwo/6zuiCBGOueoDkZeUXyLYUxey8YmyRep1c7YRWVf1lRPsSMpLGC 1fG7dXevsv5FwztaTL2Z9/S72Dq6RN0ZQmUvA2l7bVpS1yEZatIrbu0CjxEYvBlB dmA2ZfltbRd+70nsmvPWhb7wX2+/DrOtUey3r/YniqO67Nzhxg7pYC6pejnd0/Pe aMyEAHNCIK53y681+lMsdlVRk3IZIv7s -----END CERTIFICATE-----Generated at Mon Aug 11 13:11:27 2025 by rpki-client