$ rpki-client -vvf rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft File: PX_qy2M6a4KTI7HplE1K-Y3do3I.mft (raw, json) Hash identifier: p07hNNafmnRSHX/ZGGjB3UIVlwSwpBuYNbrrxENP+EU= Subject key identifier: A5:9B:05:F3:C4:1B:2F:71:0B:87:A4:E9:46:4F:FC:82:B7:53:66:02 Authority key identifier: 3D:7F:EA:CB:63:3A:6B:82:93:23:B1:E9:94:4D:4A:F9:8D:DD:A3:72 Certificate issuer: /CN=A9172BD3/serialNumber=3D7FEACB633A6B829323B1E9944D4AF98DDDA372 Certificate serial: 0133 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PX_qy2M6a4KTI7HplE1K-Y3do3I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft Manifest number: 012D Signing time: Sat 09 Aug 2025 05:03:24 +0000 Manifest this update: Sat 09 Aug 2025 05:03:23 +0000 Manifest next update: Sat 16 Aug 2025 05:03:23 +0000 Files and hashes: 1: PX_qy2M6a4KTI7HplE1K-Y3do3I.crl (hash: Q/T/AJgTy7duNANHwatTLgjWhSTVK3vNs+kOAkZN0TQ=) 2: 78321A66068D11EF92608943C4F9AE02.roa (hash: t3FRQePlchRMM21FbtXsaZzbDzSWRANgfDaLHDn0f9I=) 3: 97F15FD8068D11EF839A3054C4F9AE02.roa (hash: vjgahSKHgAt0pKH9ZvyBQssVmzZCnj8JvOvCUHQg/Eg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.crl rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PX_qy2M6a4KTI7HplE1K-Y3do3I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 307 (0x133) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172BD3, serialNumber=3D7FEACB633A6B829323B1E9944D4AF98DDDA372 Validity Not Before: Aug 9 05:03:23 2025 GMT Not After : Aug 16 05:03:23 2025 GMT Subject: CN=6896d69c-c3e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:0b:30:7d:ff:e7:08:a2:ca:a1:66:e9:87:d1: 68:6c:5c:ac:56:85:67:5a:2b:b0:b7:6a:e9:57:a8: e6:f1:55:84:cd:8c:b7:b0:53:df:d4:86:9c:de:a7: 65:7e:66:35:5f:29:b3:49:78:3a:89:63:03:3c:2c: 4b:2b:99:52:67:e1:6f:8d:25:8c:c8:e2:82:37:03: 15:01:6e:2e:47:c8:3b:50:e1:3c:4c:ae:cb:03:c1: a7:03:c5:4d:76:d0:26:94:f5:58:d5:cc:ff:77:2f: 21:a2:67:41:24:ac:a3:ed:cc:bb:c3:92:1d:c9:6d: 62:f1:ec:da:77:60:2f:89:90:26:98:77:fc:00:68: 43:31:9a:ed:cd:ec:89:bc:e7:ca:06:45:e5:3f:65: ec:44:21:b1:71:a5:b5:51:10:28:31:bf:05:f2:41: dc:96:34:ed:02:24:52:f1:0d:1a:97:0b:a7:20:ad: 22:45:47:bc:b2:22:7f:d8:94:bd:fb:0c:b6:d1:b2: 6e:6f:9b:f4:ff:78:ad:0d:9b:a4:80:80:ca:1a:7a: fa:37:23:09:e4:16:ce:43:cd:a7:3c:c1:87:22:b4: 82:7d:a5:b3:41:ae:db:70:db:6b:43:5b:29:de:30: d4:81:42:8f:a4:14:15:41:e2:ef:06:99:af:87:f8: 76:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:9B:05:F3:C4:1B:2F:71:0B:87:A4:E9:46:4F:FC:82:B7:53:66:02 X509v3 Authority Key Identifier: keyid:3D:7F:EA:CB:63:3A:6B:82:93:23:B1:E9:94:4D:4A:F9:8D:DD:A3:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PX_qy2M6a4KTI7HplE1K-Y3do3I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d9:77:80:f9:06:80:1a:21:03:e5:31:4d:b6:35:99:1a:ba:c8: fc:68:e0:cc:d1:6f:44:bf:74:e5:df:40:77:5f:47:23:14:30: f1:ba:67:5a:4b:06:54:fc:93:78:36:77:23:97:f6:dd:49:cd: f9:cb:23:5a:51:64:2b:75:ab:6c:3a:ce:17:59:96:d8:9e:16: c8:f8:fb:f8:63:ee:28:7e:4d:8b:9e:97:f9:02:78:1b:17:06: b0:68:2f:1f:17:1c:73:9a:e2:da:fe:df:8b:07:85:5f:fb:71: 54:08:63:8b:d9:be:51:17:ac:b9:b5:25:51:5c:56:37:36:6b: ad:5f:c2:67:ce:c8:ee:cc:93:fa:dd:bf:c1:d7:92:fc:44:1e: f1:3d:c5:fc:8c:52:cb:ae:b9:21:3f:c6:98:c2:65:e5:2d:70: 48:58:eb:5d:55:d0:03:e8:2a:c1:fd:d4:4d:04:59:78:ee:e2: 68:99:8e:ff:62:27:f9:5f:96:92:99:fa:85:82:3f:2d:6f:d5: fd:32:a0:87:45:aa:d1:5a:c7:0e:c3:54:77:79:19:dd:30:45: f8:45:6a:8e:69:f7:1f:8c:0a:c4:e1:84:08:5c:f4:d5:a8:01: f5:72:ab:7c:ae:1a:75:47:f3:2a:92:d8:23:fa:44:55:e9:b1: a8:af:0b:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJCRDMxMTAvBgNVBAUTKDNEN0ZFQUNCNjMzQTZCODI5MzIzQjFFOTk0NEQ0QUY5 OEREREEzNzIwHhcNMjUwODA5MDUwMzIzWhcNMjUwODE2MDUwMzIzWjAYMRYwFAYD VQQDEw02ODk2ZDY5Yy1jM2U2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9gswff/nCKLKoWbph9FobFysVoVnWiuwt2rpV6jm8VWEzYy3sFPf1Iac3qdl fmY1XymzSXg6iWMDPCxLK5lSZ+FvjSWMyOKCNwMVAW4uR8g7UOE8TK7LA8GnA8VN dtAmlPVY1cz/dy8homdBJKyj7cy7w5IdyW1i8ezad2AviZAmmHf8AGhDMZrtzeyJ vOfKBkXlP2XsRCGxcaW1URAoMb8F8kHcljTtAiRS8Q0alwunIK0iRUe8siJ/2JS9 +wy20bJub5v0/3itDZukgIDKGnr6NyMJ5BbOQ82nPMGHIrSCfaWzQa7bcNtrQ1sp 3jDUgUKPpBQVQeLvBpmvh/h2qQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKWbBfPE Gy9xC4ek6UZP/IK3U2YCMB8GA1UdIwQYMBaAFD1/6stjOmuCkyOx6ZRNSvmN3aNy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkJEMy82NEJGRjE0RUIz RjcxMUVFOTJBNDc3MTdDNEY5QUUwMi9QWF9xeTJNNmE0S1RJN0hwbEUxSy1ZM2Rv M0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BYX3F5Mk02YTRLVEk3SHBsRTFLLVkzZG8zSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkJEMy82NEJGRjE0RUIzRjcxMUVFOTJBNDc3MTdDNEY5QUUwMi9QWF9xeTJNNmE0 S1RJN0hwbEUxSy1ZM2RvM0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDZd4D5BoAaIQPlMU22NZkausj8aODM0W9Ev3Tl30B3X0cjFDDxumda SwZU/JN4Nncjl/bdSc35yyNaUWQrdatsOs4XWZbYnhbI+Pv4Y+4ofk2Lnpf5Angb FwawaC8fFxxzmuLa/t+LB4Vf+3FUCGOL2b5RF6y5tSVRXFY3NmutX8JnzsjuzJP6 3b/B15L8RB7xPcX8jFLLrrkhP8aYwmXlLXBIWOtdVdAD6CrB/dRNBFl47uJomY7/ Yif5X5aSmfqFgj8tb9X9MqCHRarRWscOw1R3eRndMEX4RWqOafcfjArE4YQIXPTV qAH1cqt8rhp1R/Mqktgj+kRV6bGorwup -----END CERTIFICATE-----Generated at Sat Aug 9 15:08:50 2025 by rpki-client