$ rpki-client -vvf rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.mft File: PWRH1yl0gylOzsuFOl5QCTXRuNc.mft (raw, json) Hash identifier: jgwN5n51N7tkOQ2730qc3dxl4Et+Ki70JAy3OjvbFU8= Subject key identifier: DE:22:18:24:68:63:ED:48:64:EF:BE:18:7C:36:EE:D7:B1:3C:91:6D Authority key identifier: 3D:64:47:D7:29:74:83:29:4E:CE:CB:85:3A:5E:50:09:35:D1:B8:D7 Certificate issuer: /CN=A9170E11/serialNumber=3D6447D7297483294ECECB853A5E500935D1B8D7 Certificate serial: 049A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PWRH1yl0gylOzsuFOl5QCTXRuNc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.mft Manifest number: 0474 Signing time: Sat 09 Aug 2025 00:40:15 +0000 Manifest this update: Sat 09 Aug 2025 00:40:14 +0000 Manifest next update: Sat 16 Aug 2025 00:40:14 +0000 Files and hashes: 1: PWRH1yl0gylOzsuFOl5QCTXRuNc.crl (hash: iKCnjnw+xjZVk7yK7qnC3jq/mAzHVvnjUIWJdi92SCE=) 2: 5997A6A624E011EDAEC0E529C4F9AE02.roa (hash: 264WZ0f5FSYRLcE55bzQKj/lfReOWZZQL9W6/+XrL50=) 3: 793803867DEA11EC9FC67D66C4F9AE02.roa (hash: vRD5gvetOl4M72g0Ox/17wn2gRRkZ+MKIO7MmLjvLgg=) 4: 2CE5BE065BDA11ECAA855355C4F9AE02.roa (hash: K/T3wX+b6EJFTbJdX5T/49+xTnSJoc5fKtBw2NmgoBw=) 5: 18611004B42A11EC9BD3DE42C4F9AE02.roa (hash: MrOehOXflQUhc9W+FdP7kViEOIm0zhC3RKvz9jpM7pY=) 6: 27992F96832811EFA1BAAC4FC4F9AE02.roa (hash: 9hr8e6Q+evY4tAAVgrktH6R5E0K57yFV9RXeFdQNtLw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.crl rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PWRH1yl0gylOzsuFOl5QCTXRuNc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1178 (0x49a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170E11, serialNumber=3D6447D7297483294ECECB853A5E500935D1B8D7 Validity Not Before: Aug 9 00:40:14 2025 GMT Not After : Aug 16 00:40:14 2025 GMT Subject: CN=689698ee-f07f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:af:02:b9:20:73:ca:3c:28:f7:fc:a0:bf:fb: e4:93:ee:76:89:9d:ee:1b:42:e3:8d:2f:99:06:36: 95:56:b9:24:a0:08:7b:04:f0:ab:8f:a0:bc:b7:7c: 52:68:64:d9:16:2d:c9:8d:b9:af:e6:41:d6:2a:13: 97:82:c5:b1:3d:63:bc:36:63:e3:83:4d:e8:56:d6: aa:f0:17:0a:49:b3:19:c4:dd:95:88:e1:e8:27:76: c0:10:74:07:7b:9f:0f:68:fe:9b:41:e6:4b:c3:c0: c7:c5:62:f3:49:11:5c:ab:69:b7:b0:75:d4:0b:ae: b3:15:1d:08:20:da:5d:f7:e3:19:e3:e0:51:d2:61: 39:7a:db:52:d9:f4:b6:d5:a4:3d:34:e3:34:3b:97: be:4b:a2:4d:02:6b:b4:36:14:78:7a:ce:69:04:58: 92:73:f7:c4:5d:7d:64:e5:03:47:5a:9d:ab:53:e9: 50:e2:c4:28:70:1f:0d:87:0a:0f:8e:c2:ca:29:56: 5b:82:61:52:c5:21:24:3d:86:19:54:d8:2c:06:5d: a1:fa:1a:8a:60:e7:4c:06:f0:7b:6f:83:84:37:55: ae:ed:f8:0b:6f:13:f3:2a:81:88:68:79:67:e4:79: 1c:69:64:30:1f:f1:4c:c9:9c:3f:1f:ea:6a:33:ae: 11:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:22:18:24:68:63:ED:48:64:EF:BE:18:7C:36:EE:D7:B1:3C:91:6D X509v3 Authority Key Identifier: keyid:3D:64:47:D7:29:74:83:29:4E:CE:CB:85:3A:5E:50:09:35:D1:B8:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PWRH1yl0gylOzsuFOl5QCTXRuNc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:02:95:ca:c1:a3:f6:50:b4:32:b2:f4:71:59:1f:76:a1:c8: a9:e1:66:dc:10:26:f5:a7:45:01:a5:f3:b3:48:1f:90:e6:63: 91:bf:4d:a0:1c:cd:9a:5b:ec:d0:0f:a9:98:06:d7:98:cf:60: b9:4a:62:94:63:34:ad:fe:a2:0e:17:c5:5b:9b:dc:1d:8c:65: 15:1c:e3:b4:d7:71:6a:18:e0:2c:64:29:74:a0:30:ad:97:4c: 2a:51:20:48:17:25:fa:9f:74:b7:a1:b9:e3:e6:fa:7d:a7:4a: c8:f1:35:fd:4d:3b:d5:97:38:7d:d7:b7:0a:cc:11:35:44:a3: bf:ce:33:58:69:55:cf:f3:1a:b2:ac:47:94:15:70:39:94:2b: 88:c5:cf:8b:b2:64:80:5e:74:e3:88:11:5b:18:70:9f:7f:3b: 60:fd:b0:04:10:de:a4:28:6b:c9:90:d8:28:8a:b6:15:ab:3d: 01:ff:ef:9a:e9:4a:47:a8:2a:b2:8d:2c:e9:d3:4f:02:8c:85: 58:6f:7b:bc:f9:17:bb:88:dd:9e:87:9b:17:e9:97:62:de:9a: 28:fe:af:73:65:9d:0d:91:93:11:35:93:f5:bb:aa:1c:d9:db: 6c:fa:e1:cc:ea:08:68:48:e7:d3:0f:52:18:cd:81:62:60:8f: b0:16:15:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBFMTExMTAvBgNVBAUTKDNENjQ0N0Q3Mjk3NDgzMjk0RUNFQ0I4NTNBNUU1MDA5 MzVEMUI4RDcwHhcNMjUwODA5MDA0MDE0WhcNMjUwODE2MDA0MDE0WjAYMRYwFAYD VQQDEw02ODk2OThlZS1mMDdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArq8CuSBzyjwo9/ygv/vkk+52iZ3uG0LjjS+ZBjaVVrkkoAh7BPCrj6C8t3xS aGTZFi3Jjbmv5kHWKhOXgsWxPWO8NmPjg03oVtaq8BcKSbMZxN2ViOHoJ3bAEHQH e58PaP6bQeZLw8DHxWLzSRFcq2m3sHXUC66zFR0IINpd9+MZ4+BR0mE5ettS2fS2 1aQ9NOM0O5e+S6JNAmu0NhR4es5pBFiSc/fEXX1k5QNHWp2rU+lQ4sQocB8NhwoP jsLKKVZbgmFSxSEkPYYZVNgsBl2h+hqKYOdMBvB7b4OEN1Wu7fgLbxPzKoGIaHln 5HkcaWQwH/FMyZw/H+pqM64R7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN4iGCRo Y+1IZO++GHw27texPJFtMB8GA1UdIwQYMBaAFD1kR9cpdIMpTs7LhTpeUAk10bjX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEUxMS9EMDYwQzlCMjVC RDYxMUVDQUQ4MzM2NTFDNEY5QUUwMi9QV1JIMXlsMGd5bE96c3VGT2w1UUNUWFJ1 TmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BXUkgxeWwwZ3lsT3pzdUZPbDVRQ1RYUnVOYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEUxMS9EMDYwQzlCMjVCRDYxMUVDQUQ4MzM2NTFDNEY5QUUwMi9QV1JIMXlsMGd5 bE96c3VGT2w1UUNUWFJ1TmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtApXKwaP2ULQysvRxWR92ocip4WbcECb1p0UBpfOzSB+Q5mORv02g HM2aW+zQD6mYBteYz2C5SmKUYzSt/qIOF8Vbm9wdjGUVHOO013FqGOAsZCl0oDCt l0wqUSBIFyX6n3S3obnj5vp9p0rI8TX9TTvVlzh917cKzBE1RKO/zjNYaVXP8xqy rEeUFXA5lCuIxc+LsmSAXnTjiBFbGHCffztg/bAEEN6kKGvJkNgoirYVqz0B/++a 6UpHqCqyjSzp008CjIVYb3u8+Re7iN2eh5sX6Zdi3poo/q9zZZ0NkZMRNZP1u6oc 2dts+uHM6ghoSOfTD1IYzYFiYI+wFhWV -----END CERTIFICATE-----Generated at Sun Aug 10 18:59:04 2025 by rpki-client