$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.mft File: CaPsxJ-Dp5iuE58dy8U27m9nzn4.mft (raw, json) Hash identifier: 1T6PdY/8eOu43qJ0zC/Fp+v7UvVmbk58aimPQC7jWv8= Subject key identifier: A2:3B:47:39:5F:8E:F6:25:4D:52:D4:91:A4:1E:C3:47:9B:90:98:03 Authority key identifier: 09:A3:EC:C4:9F:83:A7:98:AE:13:9F:1D:CB:C5:36:EE:6F:67:CE:7E Certificate issuer: /CN=A91CE533/serialNumber=09A3ECC49F83A798AE139F1DCBC536EE6F67CE7E Certificate serial: 196F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CaPsxJ-Dp5iuE58dy8U27m9nzn4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.mft Manifest number: 1963 Signing time: Wed 06 Aug 2025 16:30:19 +0000 Manifest this update: Wed 06 Aug 2025 16:30:18 +0000 Manifest next update: Wed 13 Aug 2025 16:30:18 +0000 Files and hashes: 1: CaPsxJ-Dp5iuE58dy8U27m9nzn4.crl (hash: nuuZbpSK0cP8pkslOjM+zFMtZLu7ygDjNSNcgC1xmpo=) 2: 290732FC79A211E79F34D81FC4F9AE02.roa (hash: SR7eVnerj/ud7fW+5gtERIt5ClN7aXRbGYLPuzi6Nlc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.crl rsync://rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CaPsxJ-Dp5iuE58dy8U27m9nzn4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 16:24:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6511 (0x196f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE533, serialNumber=09A3ECC49F83A798AE139F1DCBC536EE6F67CE7E Validity Not Before: Aug 6 16:30:18 2025 GMT Not After : Aug 13 16:30:18 2025 GMT Subject: CN=6893831a-e229 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:89:d8:4b:db:7e:25:81:5a:da:32:78:a4:55: ec:b4:cf:40:71:8e:11:78:98:fa:90:3b:ad:33:11: 59:3d:4b:84:70:d4:14:eb:4b:38:b3:85:92:d7:48: 45:2c:76:91:89:0d:2b:91:32:ec:88:e8:cd:8e:7b: 69:1f:4b:92:94:50:68:cc:73:dd:48:d4:15:5a:f6: 70:2d:23:76:3a:08:e0:46:d7:8d:8f:2b:3b:61:8d: 9f:77:7a:82:81:cc:04:af:30:9c:eb:a0:34:71:c8: cb:be:f2:56:a1:35:24:d7:6d:66:54:e6:91:94:46: 10:a7:88:f8:d7:37:2b:72:a5:52:b7:a4:c4:06:ee: 24:91:31:f2:81:01:11:4a:6d:fa:9a:a1:2d:9a:63: f0:76:77:fc:4f:a1:84:cf:0f:b7:9f:f4:9b:c0:05: 05:7a:ce:55:d5:2a:b7:6e:e9:5c:12:7a:ff:ba:9b: 1f:a5:27:5a:43:7d:9c:16:15:ff:e9:9e:68:0a:db: 2b:3a:96:39:fd:76:3f:fa:a3:c8:da:b6:5c:93:ca: ef:a9:a3:36:02:08:18:ea:4d:2a:c5:a8:79:e8:76: 88:c6:ac:d3:f1:e5:66:9a:fc:ee:14:82:ce:32:ca: ce:83:9e:a4:26:b0:95:c7:77:39:0c:21:a3:b8:9c: c6:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:3B:47:39:5F:8E:F6:25:4D:52:D4:91:A4:1E:C3:47:9B:90:98:03 X509v3 Authority Key Identifier: keyid:09:A3:EC:C4:9F:83:A7:98:AE:13:9F:1D:CB:C5:36:EE:6F:67:CE:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CaPsxJ-Dp5iuE58dy8U27m9nzn4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:a3:c9:d1:03:4d:7a:d6:9c:80:3f:77:32:d4:4b:f7:a1:67: ab:5d:50:f3:e4:88:cc:54:69:93:72:ab:3e:ac:ef:cb:39:55: df:52:e1:e9:b0:4b:e8:f9:f3:20:66:90:37:5c:fd:98:4e:a7: 6a:57:6f:c1:8d:60:03:f0:6f:99:f2:f9:8a:f3:64:c1:fa:09: a1:97:96:c8:9c:bd:09:80:ae:9d:b4:49:a0:9e:e0:ea:2c:52: f3:b7:fe:4b:bb:55:ab:1e:e5:66:39:cc:77:f4:60:05:e1:e4: cf:3e:12:d6:f0:d2:11:73:34:ff:86:bd:2c:d3:36:76:7c:89: 49:08:ef:55:e6:2b:c1:69:19:3f:f4:ae:64:4c:84:0f:bf:d6: 7e:9d:61:19:2b:13:24:8a:e3:b5:00:46:76:b8:1d:0d:8c:0d: 74:c4:7d:bc:31:7d:a9:9b:b6:2b:aa:db:0a:0d:4f:07:30:f0: 7d:16:ff:e8:26:d0:6a:92:5d:c9:b0:5c:a4:8c:f1:7e:c9:8d: 50:04:f2:4e:f3:9a:07:ee:8e:f4:e9:67:74:bc:fb:88:00:40: e1:0f:f6:97:8b:9b:69:ad:d0:c7:87:7a:0c:b1:37:26:99:a3: b9:be:be:04:8e:15:fb:e2:b3:c9:1c:e5:f8:2d:73:c1:10:ad: fd:f7:3a:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U1MzMxMTAvBgNVBAUTKDA5QTNFQ0M0OUY4M0E3OThBRTEzOUYxRENCQzUzNkVF NkY2N0NFN0UwHhcNMjUwODA2MTYzMDE4WhcNMjUwODEzMTYzMDE4WjAYMRYwFAYD VQQDEw02ODkzODMxYS1lMjI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzYnYS9t+JYFa2jJ4pFXstM9AcY4ReJj6kDutMxFZPUuEcNQU60s4s4WS10hF LHaRiQ0rkTLsiOjNjntpH0uSlFBozHPdSNQVWvZwLSN2OgjgRteNjys7YY2fd3qC gcwErzCc66A0ccjLvvJWoTUk121mVOaRlEYQp4j41zcrcqVSt6TEBu4kkTHygQER Sm36mqEtmmPwdnf8T6GEzw+3n/SbwAUFes5V1Sq3bulcEnr/upsfpSdaQ32cFhX/ 6Z5oCtsrOpY5/XY/+qPI2rZck8rvqaM2AggY6k0qxah56HaIxqzT8eVmmvzuFILO MsrOg56kJrCVx3c5DCGjuJzGQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKI7Rzlf jvYlTVLUkaQew0ebkJgDMB8GA1UdIwQYMBaAFAmj7MSfg6eYrhOfHcvFNu5vZ85+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTUzMy9FOEZENEZBNDc5 OUYxMUU3Qjg3OTEwMURDNEY5QUUwMi9DYVBzeEotRHA1aXVFNThkeThVMjdtOW56 bjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NhUHN4Si1EcDVpdUU1OGR5OFUyN205bnpuNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTUzMy9FOEZENEZBNDc5OUYxMUU3Qjg3OTEwMURDNEY5QUUwMi9DYVBzeEotRHA1 aXVFNThkeThVMjdtOW56bjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqo8nRA0161pyAP3cy1Ev3oWerXVDz5IjMVGmTcqs+rO/LOVXfUuHp sEvo+fMgZpA3XP2YTqdqV2/BjWAD8G+Z8vmK82TB+gmhl5bInL0JgK6dtEmgnuDq LFLzt/5Lu1WrHuVmOcx39GAF4eTPPhLW8NIRczT/hr0s0zZ2fIlJCO9V5ivBaRk/ 9K5kTIQPv9Z+nWEZKxMkiuO1AEZ2uB0NjA10xH28MX2pm7YrqtsKDU8HMPB9Fv/o JtBqkl3JsFykjPF+yY1QBPJO85oH7o706Wd0vPuIAEDhD/aXi5tprdDHh3oMsTcm maO5vr4EjhX74rPJHOX4LXPBEK399zog -----END CERTIFICATE-----Generated at Wed Aug 6 18:31:36 2025 by rpki-client