$ rpki-client -vvf rpki.apnic.net/member_repository/A9166292/AEB56750468C11EC8D7BF268C4F9AE02/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.mft File: pPsgxySXJi3Ed_FJQwCPkQd-ZZs.mft (raw, json) Hash identifier: 7CQuqOTrSrfYikVgDnyNQ5l/diQETwRYwSIERjtDNCc= Subject key identifier: 2A:F4:19:34:63:6F:91:05:5D:A2:24:8E:77:1D:14:BC:A5:B2:C2:0D Authority key identifier: A4:FB:20:C7:24:97:26:2D:C4:77:F1:49:43:00:8F:91:07:7E:65:9B Certificate issuer: /CN=A9166292/serialNumber=A4FB20C72497262DC477F14943008F91077E659B Certificate serial: 04A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166292/AEB56750468C11EC8D7BF268C4F9AE02/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.mft Manifest number: 049A Signing time: Sat 09 Aug 2025 00:28:37 +0000 Manifest this update: Sat 09 Aug 2025 00:28:37 +0000 Manifest next update: Sat 16 Aug 2025 00:28:37 +0000 Files and hashes: 1: pPsgxySXJi3Ed_FJQwCPkQd-ZZs.crl (hash: eo2Qo5giz+65KPv/oTBbR224tTis01DNIkzlirzcnTU=) 2: 78771A0C490D11EC8E4D1136C4F9AE02.roa (hash: SSW9TV8jZN6fvYq4gIStDsbEdDvovlOhUtObC7g07YA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166292/AEB56750468C11EC8D7BF268C4F9AE02/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.crl rsync://rpki.apnic.net/member_repository/A9166292/AEB56750468C11EC8D7BF268C4F9AE02/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1186 (0x4a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166292, serialNumber=A4FB20C72497262DC477F14943008F91077E659B Validity Not Before: Aug 9 00:28:37 2025 GMT Not After : Aug 16 00:28:37 2025 GMT Subject: CN=68969635-a5ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8e:c7:6d:af:48:c2:58:ca:19:e9:84:33:33: 8d:4f:f5:78:f1:12:e9:85:d5:52:8b:5a:2e:63:af: 20:6e:77:74:ca:82:b2:77:4f:38:b1:23:6b:d2:e4: f3:b6:45:73:b2:41:f8:82:69:6b:3b:55:e2:27:2c: 02:39:95:0a:7a:a1:64:5f:11:b0:ee:af:85:0f:be: c1:8a:0d:2d:53:bb:c2:b8:49:d7:a4:17:80:d8:e3: 6c:db:3d:e6:82:e4:02:69:28:45:17:07:30:e5:59: a5:f0:ed:41:25:39:a2:db:ab:8a:cf:3b:f4:14:ef: eb:8c:5e:5b:e1:3c:17:43:f7:ad:6d:52:67:60:6a: f5:ee:66:b6:3c:ad:4a:95:97:d5:3b:78:c0:c9:6a: f6:fe:21:41:1a:37:bc:79:83:e9:3c:30:85:4e:83: c6:bb:97:10:58:82:6c:79:2e:5a:86:f6:07:2f:49: 53:69:10:7f:0d:27:e0:aa:30:67:e5:3a:9f:ba:9e: 03:23:55:d0:3a:21:92:e5:a2:5b:a0:cc:a2:ca:d2: 15:b1:02:df:f4:7e:1b:36:75:97:69:af:81:91:e1: d4:9a:d5:3f:6e:3d:e6:09:6a:36:49:59:4d:7b:28: 34:2e:dd:23:55:d9:71:9a:ef:69:ef:e6:18:88:c6: cb:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:F4:19:34:63:6F:91:05:5D:A2:24:8E:77:1D:14:BC:A5:B2:C2:0D X509v3 Authority Key Identifier: keyid:A4:FB:20:C7:24:97:26:2D:C4:77:F1:49:43:00:8F:91:07:7E:65:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166292/AEB56750468C11EC8D7BF268C4F9AE02/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166292/AEB56750468C11EC8D7BF268C4F9AE02/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:b0:cb:7d:df:8f:17:b5:e1:45:cc:c3:ab:3b:ec:be:3e:f8: fc:24:39:ed:3f:d8:c4:68:97:76:ff:ca:a4:0b:fe:36:ac:4e: 47:d7:dc:7d:46:7d:e2:cc:34:76:3e:f3:c7:ec:7b:42:96:d1: 70:86:40:89:4f:fe:24:3f:46:1a:67:f4:19:ab:35:65:70:59: c1:ed:ee:ca:ac:28:ca:9d:8f:d8:7a:1f:d7:bb:ec:0c:42:f9: 5c:1f:e6:b3:b5:d3:88:f4:be:1e:60:ab:0d:10:de:1a:28:90: 21:8c:aa:48:59:85:7d:4b:ea:8a:fc:4c:ea:42:7c:3a:ef:36: 89:53:db:40:18:ff:02:97:5d:cf:f6:4b:4b:1d:50:ed:fd:94: 47:b8:a5:cf:18:a1:62:81:6b:fc:c7:70:c1:15:62:0f:3d:d0: 8e:dd:7f:c3:3d:24:ac:79:00:f6:f2:f2:ee:04:57:a7:f3:75: c4:43:16:59:e9:6f:6e:c5:0f:46:29:6d:2b:48:12:fd:1b:5b: 2d:29:63:44:69:1d:d4:4a:53:80:24:2f:8f:59:0b:05:2e:c9: 10:9c:40:f4:f3:3e:0e:44:2f:26:c9:91:46:78:06:f5:2a:60: 43:1f:c9:af:d2:e5:64:27:0b:e4:6e:47:36:58:84:eb:32:b4: 3f:53:c8:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjYyOTIxMTAvBgNVBAUTKEE0RkIyMEM3MjQ5NzI2MkRDNDc3RjE0OTQzMDA4Rjkx MDc3RTY1OUIwHhcNMjUwODA5MDAyODM3WhcNMjUwODE2MDAyODM3WjAYMRYwFAYD VQQDEw02ODk2OTYzNS1hNWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu47Hba9IwljKGemEMzONT/V48RLphdVSi1ouY68gbnd0yoKyd084sSNr0uTz tkVzskH4gmlrO1XiJywCOZUKeqFkXxGw7q+FD77Big0tU7vCuEnXpBeA2ONs2z3m guQCaShFFwcw5Vml8O1BJTmi26uKzzv0FO/rjF5b4TwXQ/etbVJnYGr17ma2PK1K lZfVO3jAyWr2/iFBGje8eYPpPDCFToPGu5cQWIJseS5ahvYHL0lTaRB/DSfgqjBn 5Tqfup4DI1XQOiGS5aJboMyiytIVsQLf9H4bNnWXaa+BkeHUmtU/bj3mCWo2SVlN eyg0Lt0jVdlxmu9p7+YYiMbLDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCr0GTRj b5EFXaIkjncdFLylssINMB8GA1UdIwQYMBaAFKT7IMcklyYtxHfxSUMAj5EHfmWb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NjI5Mi9BRUI1Njc1MDQ2 OEMxMUVDOEQ3QkYyNjhDNEY5QUUwMi9wUHNneHlTWEppM0VkX0ZKUXdDUGtRZC1a WnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BQc2d4eVNYSmkzRWRfRkpRd0NQa1FkLVpacy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NjI5Mi9BRUI1Njc1MDQ2OEMxMUVDOEQ3QkYyNjhDNEY5QUUwMi9wUHNneHlTWEpp M0VkX0ZKUXdDUGtRZC1aWnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCosMt9348XteFFzMOrO+y+Pvj8JDntP9jEaJd2/8qkC/42rE5H19x9 Rn3izDR2PvPH7HtCltFwhkCJT/4kP0YaZ/QZqzVlcFnB7e7KrCjKnY/Yeh/Xu+wM QvlcH+aztdOI9L4eYKsNEN4aKJAhjKpIWYV9S+qK/EzqQnw67zaJU9tAGP8Cl13P 9ktLHVDt/ZRHuKXPGKFigWv8x3DBFWIPPdCO3X/DPSSseQD28vLuBFen83XEQxZZ 6W9uxQ9GKW0rSBL9G1stKWNEaR3USlOAJC+PWQsFLskQnED08z4ORC8myZFGeAb1 KmBDH8mv0uVkJwvkbkc2WITrMrQ/U8iA -----END CERTIFICATE-----Generated at Sat Aug 9 02:46:16 2025 by rpki-client