$ rpki-client -vvf rpki.apnic.net/member_repository/A911C53D/84B58F668CFB11EB9DC62C3BC4F9AE02/pcdj6Klfa5qyQRNgHagVOhWRJu4.mft File: pcdj6Klfa5qyQRNgHagVOhWRJu4.mft (raw, json) Hash identifier: 1pA+92TMZcpUNd1GgaW3QJyMTwG8lr5nwp4QLvxtLpw= Subject key identifier: 49:DC:F3:1E:34:1F:D1:B0:8C:FB:38:E6:2E:57:9B:18:97:87:89:17 Authority key identifier: A5:C7:63:E8:A9:5F:6B:9A:B2:41:13:60:1D:A8:15:3A:15:91:26:EE Certificate issuer: /CN=A911C53D/serialNumber=A5C763E8A95F6B9AB24113601DA8153A159126EE Certificate serial: 06B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcdj6Klfa5qyQRNgHagVOhWRJu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C53D/84B58F668CFB11EB9DC62C3BC4F9AE02/pcdj6Klfa5qyQRNgHagVOhWRJu4.mft Manifest number: 06A1 Signing time: Sat 18 Oct 2025 23:52:51 +0000 Manifest this update: Sat 18 Oct 2025 23:52:51 +0000 Manifest next update: Sat 25 Oct 2025 23:52:51 +0000 Files and hashes: 1: pcdj6Klfa5qyQRNgHagVOhWRJu4.crl (hash: zfBgKxftkjrQ2d+TZa2kl2lGUBBlQbt+235aChi8tng=) 2: 45FE96F6A5F611EFA16E4B2FC4F9AE02.roa (hash: ILkhxI5MS0Y08MvVskMnHwF1yNepea938q8G0D4OrHI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C53D/84B58F668CFB11EB9DC62C3BC4F9AE02/pcdj6Klfa5qyQRNgHagVOhWRJu4.crl rsync://rpki.apnic.net/member_repository/A911C53D/84B58F668CFB11EB9DC62C3BC4F9AE02/pcdj6Klfa5qyQRNgHagVOhWRJu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcdj6Klfa5qyQRNgHagVOhWRJu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:52:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1715 (0x6b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C53D, serialNumber=A5C763E8A95F6B9AB24113601DA8153A159126EE Validity Not Before: Oct 18 23:52:51 2025 GMT Not After : Oct 25 23:52:51 2025 GMT Subject: CN=68f42853-4e54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:3c:3b:3e:46:11:7d:bb:ca:ef:6c:e6:a5:35: 96:ff:b0:9f:6b:01:41:a3:5b:9f:e1:ca:89:63:49: fc:57:eb:65:23:a1:78:69:48:79:39:14:27:19:d7: 5b:99:0e:da:d2:99:8b:39:e1:58:ef:66:35:2d:98: 74:db:77:59:d3:77:6b:bf:24:ca:d3:6c:2b:a0:de: 0a:1d:5a:54:56:3b:f8:54:a3:43:a9:68:27:8f:56: 9f:bb:be:7f:b8:3c:1f:85:51:94:66:58:13:db:98: 75:a6:7f:5d:27:55:80:9e:75:5b:b9:72:a2:ff:f7: b8:27:f7:3e:3d:9e:db:d6:1b:97:98:71:31:68:23: 76:0d:d0:69:49:3d:26:77:87:1d:fb:c0:d9:cf:81: 06:59:94:7a:2a:7d:71:30:2d:b7:20:eb:5e:d4:af: b6:ca:ad:ee:16:6f:bb:c7:e6:2c:c0:35:bc:86:54: b6:c3:e1:c0:27:f3:71:83:60:93:80:bb:a0:a8:67: e3:65:23:ac:d3:35:4b:2b:89:0d:9e:5b:6f:3b:6c: dc:d8:c5:48:27:92:94:f2:06:eb:39:d7:60:ee:06: d1:c6:ba:72:2f:d1:39:50:e2:4f:13:71:42:2d:e7: e3:0c:0a:fa:69:c7:0e:11:15:24:fc:7b:c7:32:0e: e8:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:DC:F3:1E:34:1F:D1:B0:8C:FB:38:E6:2E:57:9B:18:97:87:89:17 X509v3 Authority Key Identifier: keyid:A5:C7:63:E8:A9:5F:6B:9A:B2:41:13:60:1D:A8:15:3A:15:91:26:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C53D/84B58F668CFB11EB9DC62C3BC4F9AE02/pcdj6Klfa5qyQRNgHagVOhWRJu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcdj6Klfa5qyQRNgHagVOhWRJu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C53D/84B58F668CFB11EB9DC62C3BC4F9AE02/pcdj6Klfa5qyQRNgHagVOhWRJu4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:ac:29:13:6b:88:5a:da:2b:f1:a6:b4:83:fc:f2:b2:c0:cf: e4:c0:de:27:be:11:99:b2:5a:c8:fc:d6:b2:f7:58:31:0a:58: 3d:c3:b9:57:91:a8:bc:8d:d4:2d:76:64:96:46:97:78:bd:19: c8:9f:a2:05:17:82:e2:f1:bc:14:64:87:e8:83:78:7d:d6:15: 6b:45:37:d2:df:9b:89:42:12:b3:96:61:a5:56:97:34:bf:63: 2f:21:ad:9a:fb:49:80:f2:88:6c:4e:80:c9:bb:5f:4e:93:aa: 05:ed:14:42:79:81:f1:61:31:d3:35:3d:27:b9:ce:18:ff:17: d2:06:b5:e0:70:6a:aa:ca:24:2e:6d:f1:49:9c:87:36:5d:f6: e7:ba:27:b6:b8:52:5a:9b:6a:83:3f:ce:f7:97:e8:98:fc:9e: 01:ae:c3:c2:24:a2:33:c6:35:44:9f:58:88:5e:2e:f3:af:62: 8c:86:f4:fd:08:e2:1c:87:33:af:40:08:03:9d:02:79:72:57: ac:fe:87:1d:d7:95:9c:eb:c3:f0:89:ad:3c:7c:0a:28:42:82: 0f:3c:b6:0b:fb:41:aa:d1:f8:02:24:6b:38:5a:3f:f5:78:3f: 34:99:a3:47:15:7b:0a:9a:9b:66:9a:71:93:f7:fb:eb:39:84: 61:70:49:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM1M0QxMTAvBgNVBAUTKEE1Qzc2M0U4QTk1RjZCOUFCMjQxMTM2MDFEQTgxNTNB MTU5MTI2RUUwHhcNMjUxMDE4MjM1MjUxWhcNMjUxMDI1MjM1MjUxWjAYMRYwFAYD VQQDEw02OGY0Mjg1My00ZTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8zw7PkYRfbvK72zmpTWW/7CfawFBo1uf4cqJY0n8V+tlI6F4aUh5ORQnGddb mQ7a0pmLOeFY72Y1LZh023dZ03drvyTK02wroN4KHVpUVjv4VKNDqWgnj1afu75/ uDwfhVGUZlgT25h1pn9dJ1WAnnVbuXKi//e4J/c+PZ7b1huXmHExaCN2DdBpST0m d4cd+8DZz4EGWZR6Kn1xMC23IOte1K+2yq3uFm+7x+YswDW8hlS2w+HAJ/Nxg2CT gLugqGfjZSOs0zVLK4kNnltvO2zc2MVIJ5KU8gbrOddg7gbRxrpyL9E5UOJPE3FC LefjDAr6accOERUk/HvHMg7o5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEnc8x40 H9GwjPs45i5XmxiXh4kXMB8GA1UdIwQYMBaAFKXHY+ipX2uaskETYB2oFToVkSbu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzUzRC84NEI1OEY2NjhD RkIxMUVCOURDNjJDM0JDNEY5QUUwMi9wY2RqNktsZmE1cXlRUk5nSGFnVk9oV1JK dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BjZGo2S2xmYTVxeVFSTmdIYWdWT2hXUkp1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzUzRC84NEI1OEY2NjhDRkIxMUVCOURDNjJDM0JDNEY5QUUwMi9wY2RqNktsZmE1 cXlRUk5nSGFnVk9oV1JKdTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMrCkTa4ha2ivxprSD/PKywM/kwN4nvhGZslrI/Nay91gxClg9w7lX kai8jdQtdmSWRpd4vRnIn6IFF4Li8bwUZIfog3h91hVrRTfS35uJQhKzlmGlVpc0 v2MvIa2a+0mA8ohsToDJu19Ok6oF7RRCeYHxYTHTNT0nuc4Y/xfSBrXgcGqqyiQu bfFJnIc2Xfbnuie2uFJam2qDP873l+iY/J4BrsPCJKIzxjVEn1iIXi7zr2KMhvT9 COIchzOvQAgDnQJ5cles/ocd15Wc68Pwia08fAooQoIPPLYL+0Gq0fgCJGs4Wj/1 eD80maNHFXsKmptmmnGT9/vrOYRhcEkA -----END CERTIFICATE-----Generated at Mon Oct 20 01:45:05 2025 by rpki-client