$ rpki-client -vvf rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.mft File: pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.mft (raw, json) Hash identifier: /CKcKgHtb2/jeoPl3dH5n0ND2Z8rDKSJRDOgEFeBDq0= Subject key identifier: 8E:BC:C0:B3:F5:E6:C5:B2:9B:97:E2:92:95:07:63:DB:F3:0A:04:29 Authority key identifier: A5:70:F3:70:D5:4E:D0:24:54:C5:7F:83:EE:C3:E4:F4:4A:7A:8B:76 Certificate issuer: /CN=A9199DF5/serialNumber=A570F370D54ED02454C57F83EEC3E4F44A7A8B76 Certificate serial: 033E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.mft Manifest number: 0339 Signing time: Mon 11 Aug 2025 01:18:47 +0000 Manifest this update: Mon 11 Aug 2025 01:18:46 +0000 Manifest next update: Mon 18 Aug 2025 01:18:46 +0000 Files and hashes: 1: pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.crl (hash: VnDDAGRCe2zjjrF0yB6JT+atGKAETQx/wbjfh6n9wrE=) 2: B6EB7E8ED14511EC89527642C4F9AE02.roa (hash: zOa4PF6DbTNRPznC3F2BR2cHewtdmnvs1jqCDBbkuO0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.crl rsync://rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 830 (0x33e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199DF5, serialNumber=A570F370D54ED02454C57F83EEC3E4F44A7A8B76 Validity Not Before: Aug 11 01:18:46 2025 GMT Not After : Aug 18 01:18:46 2025 GMT Subject: CN=689944f6-6ee7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:2e:80:c5:c1:eb:d9:65:c5:17:e5:95:d5:74: ef:e4:92:b5:49:f9:c8:30:7a:2c:b9:4b:19:53:0a: 15:b1:a2:0f:64:fe:d3:e3:f7:c3:d1:8b:a4:83:15: 9e:24:83:98:2c:95:5a:47:66:c3:81:75:65:51:cd: 06:21:5b:65:ee:54:57:b0:d7:09:54:11:35:68:77: 82:a5:4a:88:19:50:9d:55:83:17:6a:7b:f0:3f:5d: a3:0e:c0:49:74:0a:30:60:aa:9f:29:fc:cf:de:ec: a8:12:68:37:4f:5c:5f:1a:df:fe:3a:98:f6:49:0a: 01:05:27:e9:35:dc:ff:b7:6b:55:0f:91:31:b5:66: 2d:c1:99:4f:6a:54:02:22:eb:0a:22:38:d2:33:14: 04:bf:77:c8:ed:db:e1:e2:0d:70:00:9f:68:8f:98: d8:f0:3d:25:ff:3b:2d:00:d4:31:1c:9f:0e:14:49: f0:b2:d4:c8:c5:9e:ac:6b:bb:be:a2:50:83:d6:20: 25:2e:90:6f:5e:70:77:bd:ef:a7:ba:c6:14:73:90: f7:9e:f2:4c:b9:9d:ea:a1:d6:c5:96:df:e9:eb:c6: 3a:c9:ff:e6:99:7c:7c:dd:c7:20:35:33:43:2f:5f: 6a:c8:14:5e:d4:a1:1f:04:90:7d:8a:e0:c6:a8:f2: f2:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:BC:C0:B3:F5:E6:C5:B2:9B:97:E2:92:95:07:63:DB:F3:0A:04:29 X509v3 Authority Key Identifier: keyid:A5:70:F3:70:D5:4E:D0:24:54:C5:7F:83:EE:C3:E4:F4:4A:7A:8B:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:65:89:2f:c7:9a:8c:5e:4a:c3:c9:99:03:fc:94:2a:1e:59: 35:03:ae:02:5e:52:79:a1:d1:c0:11:03:17:66:0a:da:ac:f1: e8:65:8a:b8:e7:4b:d0:17:2c:a4:a3:99:5d:7b:31:fb:e0:3d: a7:6e:da:da:4a:f4:a3:e0:3c:93:e8:41:66:92:dc:24:ad:43: c4:f9:53:06:94:ce:07:3d:bc:6b:d0:21:2a:8b:85:99:bf:ec: a9:79:68:61:bc:5d:62:7f:a2:10:90:3d:a3:f4:53:8a:c3:af: 9c:4a:97:9a:ff:63:8b:5b:c6:04:9c:ef:0b:fb:81:99:aa:4e: a2:24:00:b6:f0:15:26:f5:f3:2f:e4:a3:35:88:de:24:db:e3: f3:04:67:84:d0:26:5b:be:ea:5e:81:64:f3:e7:e5:5f:26:7b: 5c:1f:12:da:0d:ef:40:19:5a:3d:ba:39:5d:b5:89:da:22:17: e1:e9:91:fd:24:bf:6d:bd:3d:cc:0e:df:fd:46:66:ab:59:da: 8b:46:cc:48:7f:f2:6a:77:28:8b:ca:03:08:ce:93:e1:f0:3f: a0:46:bb:4e:93:67:1b:49:44:21:4c:fe:10:4b:84:7a:46:a4: 1c:69:2f:81:0a:e8:a7:79:8c:f6:a7:a5:c0:bd:01:45:44:62: e1:d4:c7:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAz4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlERjUxMTAvBgNVBAUTKEE1NzBGMzcwRDU0RUQwMjQ1NEM1N0Y4M0VFQzNFNEY0 NEE3QThCNzYwHhcNMjUwODExMDExODQ2WhcNMjUwODE4MDExODQ2WjAYMRYwFAYD VQQDEw02ODk5NDRmNi02ZWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApi6AxcHr2WXFF+WV1XTv5JK1SfnIMHosuUsZUwoVsaIPZP7T4/fD0YukgxWe JIOYLJVaR2bDgXVlUc0GIVtl7lRXsNcJVBE1aHeCpUqIGVCdVYMXanvwP12jDsBJ dAowYKqfKfzP3uyoEmg3T1xfGt/+Opj2SQoBBSfpNdz/t2tVD5ExtWYtwZlPalQC IusKIjjSMxQEv3fI7dvh4g1wAJ9oj5jY8D0l/zstANQxHJ8OFEnwstTIxZ6sa7u+ olCD1iAlLpBvXnB3ve+nusYUc5D3nvJMuZ3qodbFlt/p68Y6yf/mmXx83ccgNTND L19qyBRe1KEfBJB9iuDGqPLyuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI68wLP1 5sWym5fikpUHY9vzCgQpMB8GA1UdIwQYMBaAFKVw83DVTtAkVMV/g+7D5PRKeot2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OURGNS9DMjQwQjc5NEQx NDExMUVDQTU1Mzg0M0FDNEY5QUUwMi9wWER6Y05WTzBDUlV4WC1EN3NQazlFcDZp M1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BYRHpjTlZPMENSVXhYLUQ3c1BrOUVwNmkzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OURGNS9DMjQwQjc5NEQxNDExMUVDQTU1Mzg0M0FDNEY5QUUwMi9wWER6Y05WTzBD UlV4WC1EN3NQazlFcDZpM1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmZYkvx5qMXkrDyZkD/JQqHlk1A64CXlJ5odHAEQMXZgrarPHoZYq4 50vQFyyko5ldezH74D2nbtraSvSj4DyT6EFmktwkrUPE+VMGlM4HPbxr0CEqi4WZ v+ypeWhhvF1if6IQkD2j9FOKw6+cSpea/2OLW8YEnO8L+4GZqk6iJAC28BUm9fMv 5KM1iN4k2+PzBGeE0CZbvupegWTz5+VfJntcHxLaDe9AGVo9ujldtYnaIhfh6ZH9 JL9tvT3MDt/9RmarWdqLRsxIf/JqdyiLygMIzpPh8D+gRrtOk2cbSUQhTP4QS4R6 RqQcaS+BCuineYz2p6XAvQFFRGLh1MfP -----END CERTIFICATE-----Generated at Mon Aug 11 07:26:11 2025 by rpki-client