$ rpki-client -vvf rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.mft File: pXN62XE221PCG287HU13Hc1XMTo.mft (raw, json) Hash identifier: LSgvmc7z1216T28Q8AyP6sXExVDIbdKX453QcE4QNq0= Subject key identifier: 3D:AC:2F:D6:73:01:04:97:93:CC:42:B2:AA:E2:D9:58:AE:BD:CB:83 Authority key identifier: A5:73:7A:D9:71:36:DB:53:C2:1B:6F:3B:1D:4D:77:1D:CD:57:31:3A Certificate issuer: /CN=A9146F33/serialNumber=A5737AD97136DB53C21B6F3B1D4D771DCD57313A Certificate serial: 0406 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXN62XE221PCG287HU13Hc1XMTo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.mft Manifest number: 03FE Signing time: Thu 07 Aug 2025 01:02:31 +0000 Manifest this update: Thu 07 Aug 2025 01:02:31 +0000 Manifest next update: Thu 14 Aug 2025 01:02:31 +0000 Files and hashes: 1: pXN62XE221PCG287HU13Hc1XMTo.crl (hash: muKFgsNFLJURY9q1bI92R+49vn6nat2PCfkx+wJz/IU=) 2: EE23EF6E857B11ECA3F32D50C4F9AE02.roa (hash: 2pNsdUTXJ21ZMGMJibEjsxpDH0Z9Fw35noblZo6xKpE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.crl rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXN62XE221PCG287HU13Hc1XMTo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 01:02:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1030 (0x406) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146F33, serialNumber=A5737AD97136DB53C21B6F3B1D4D771DCD57313A Validity Not Before: Aug 7 01:02:31 2025 GMT Not After : Aug 14 01:02:31 2025 GMT Subject: CN=6893fb27-a87a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d4:2c:85:18:48:b7:01:b9:d7:1d:e2:70:36: 0d:d8:81:74:f8:9a:fa:7d:38:69:56:20:67:6a:47: a2:45:ca:24:57:dc:82:0b:b4:09:a6:6c:77:8d:61: 32:98:ab:2e:8a:32:4b:9a:86:0d:ec:d8:74:d2:a4: 8b:12:8f:30:18:e8:ba:41:4a:29:2e:75:c3:26:33: 10:5c:2d:44:73:b1:47:92:96:a3:bf:89:8b:e4:6b: 62:70:a3:16:97:d2:f9:4f:3e:3e:20:b8:a3:37:0f: 1d:15:f7:64:d8:8f:cd:51:0c:4a:bf:9f:8e:81:f2: 57:e3:8b:35:80:21:26:9f:88:4a:80:13:b1:d0:1e: 56:b7:ba:c0:be:ac:8e:71:77:3e:35:91:61:2a:99: 24:ce:83:c8:e7:1d:eb:a1:f7:8d:2f:6c:9d:a8:4e: 2d:b4:b6:00:3f:f9:78:b2:4b:5a:bd:db:e1:4e:cd: 1c:b9:0a:e6:ba:4e:b2:7e:c0:c5:88:2f:93:27:34: 82:8f:37:39:94:5e:68:ac:83:f3:a4:cd:87:65:c6: 30:7f:66:43:be:62:3d:02:5a:f9:4e:ee:de:a5:63: 3b:56:4d:5c:c6:24:cf:6d:4f:55:cc:14:5f:73:97: 9f:67:20:9f:1d:3a:f6:82:b8:26:f5:81:e5:06:4b: ba:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:AC:2F:D6:73:01:04:97:93:CC:42:B2:AA:E2:D9:58:AE:BD:CB:83 X509v3 Authority Key Identifier: keyid:A5:73:7A:D9:71:36:DB:53:C2:1B:6F:3B:1D:4D:77:1D:CD:57:31:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXN62XE221PCG287HU13Hc1XMTo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:7c:c7:87:dd:aa:61:a8:c1:13:b8:6e:a1:2c:c7:6e:56:15: 84:95:94:53:1c:ac:d1:78:46:f2:2b:7c:43:f8:ba:b2:a4:45: 95:33:da:c3:6d:e1:f4:4e:e7:2f:8f:b0:93:60:0d:75:03:9e: 44:72:50:0f:92:43:82:31:69:82:36:36:a1:10:11:a4:e1:c5: cb:f8:62:23:e2:6d:71:00:04:c8:dc:d9:c3:db:ae:97:38:04: a8:7a:57:e0:aa:30:47:97:a9:bb:2e:d0:72:52:9d:e7:8d:04: ae:6d:ab:9c:3c:fa:6c:56:bd:10:6b:41:fb:97:bb:cc:7d:11: 5b:ba:d2:d5:81:bf:63:f2:39:73:af:f2:47:a8:29:35:f1:ff: a4:40:ba:ba:2d:f0:dd:89:38:ae:84:1b:e0:8c:06:7f:c0:ea: d3:0b:6c:da:88:ba:ed:7a:a8:8b:4c:8f:1e:bc:b9:60:44:34: 64:ea:28:75:63:5a:49:ac:be:50:ec:87:0a:4f:9a:54:90:14: 17:38:27:50:94:4e:df:9a:84:7e:ad:a2:71:68:71:c2:26:f5: 97:8c:77:39:d8:03:c9:4d:70:ff:49:30:e6:f4:fc:56:65:f0: fc:b8:f5:c8:c2:48:fe:3a:e7:ff:2d:ce:d0:8d:8f:02:27:4f: 5a:2c:0c:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZGMzMxMTAvBgNVBAUTKEE1NzM3QUQ5NzEzNkRCNTNDMjFCNkYzQjFENEQ3NzFE Q0Q1NzMxM0EwHhcNMjUwODA3MDEwMjMxWhcNMjUwODE0MDEwMjMxWjAYMRYwFAYD VQQDEw02ODkzZmIyNy1hODdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAudQshRhItwG51x3icDYN2IF0+Jr6fThpViBnakeiRcokV9yCC7QJpmx3jWEy mKsuijJLmoYN7Nh00qSLEo8wGOi6QUopLnXDJjMQXC1Ec7FHkpajv4mL5GticKMW l9L5Tz4+ILijNw8dFfdk2I/NUQxKv5+OgfJX44s1gCEmn4hKgBOx0B5Wt7rAvqyO cXc+NZFhKpkkzoPI5x3rofeNL2ydqE4ttLYAP/l4sktavdvhTs0cuQrmuk6yfsDF iC+TJzSCjzc5lF5orIPzpM2HZcYwf2ZDvmI9Alr5Tu7epWM7Vk1cxiTPbU9VzBRf c5efZyCfHTr2grgm9YHlBku6EwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD2sL9Zz AQSXk8xCsqri2ViuvcuDMB8GA1UdIwQYMBaAFKVzetlxNttTwhtvOx1Ndx3NVzE6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkYzMy9CMTY1QkI4QTg1 MTExMUVDQjlEMzM1N0NDNEY5QUUwMi9wWE42MlhFMjIxUENHMjg3SFUxM0hjMVhN VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BYTjYyWEUyMjFQQ0cyODdIVTEzSGMxWE1Uby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkYzMy9CMTY1QkI4QTg1MTExMUVDQjlEMzM1N0NDNEY5QUUwMi9wWE42MlhFMjIx UENHMjg3SFUxM0hjMVhNVG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEfMeH3aphqMETuG6hLMduVhWElZRTHKzReEbyK3xD+LqypEWVM9rD beH0Tucvj7CTYA11A55EclAPkkOCMWmCNjahEBGk4cXL+GIj4m1xAATI3NnD266X OASoelfgqjBHl6m7LtByUp3njQSubaucPPpsVr0Qa0H7l7vMfRFbutLVgb9j8jlz r/JHqCk18f+kQLq6LfDdiTiuhBvgjAZ/wOrTC2zaiLrteqiLTI8evLlgRDRk6ih1 Y1pJrL5Q7IcKT5pUkBQXOCdQlE7fmoR+raJxaHHCJvWXjHc52APJTXD/STDm9PxW ZfD8uPXIwkj+Ouf/Lc7QjY8CJ09aLAzL -----END CERTIFICATE-----Generated at Fri Aug 8 00:35:12 2025 by rpki-client