$ rpki-client -vvf rpki.apnic.net/member_repository/A911DCFB/AAEA0DC0F9BF11EB80245E6AC4F9AE02/pRdB3BnLk5BAJnagOh_a6-Dn8rw.mft File: pRdB3BnLk5BAJnagOh_a6-Dn8rw.mft (raw, json) Hash identifier: PxwsLRZ2f7zBVdw2jqu+cX3/UoSmDsthME71uDfxr60= Subject key identifier: 79:9D:7B:92:E0:65:C3:7A:48:17:40:15:77:94:5E:DA:2D:A2:54:86 Authority key identifier: A5:17:41:DC:19:CB:93:90:40:26:76:A0:3A:1F:DA:EB:E0:E7:F2:BC Certificate issuer: /CN=A911DCFB/serialNumber=A51741DC19CB9390402676A03A1FDAEBE0E7F2BC Certificate serial: 0582 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pRdB3BnLk5BAJnagOh_a6-Dn8rw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DCFB/AAEA0DC0F9BF11EB80245E6AC4F9AE02/pRdB3BnLk5BAJnagOh_a6-Dn8rw.mft Manifest number: 057C Signing time: Sun 19 Oct 2025 00:57:58 +0000 Manifest this update: Sun 19 Oct 2025 00:57:57 +0000 Manifest next update: Sun 26 Oct 2025 00:57:57 +0000 Files and hashes: 1: pRdB3BnLk5BAJnagOh_a6-Dn8rw.crl (hash: C9BllvRGwqh018qDAaW2K9MHiO+DN31gi1sf7nJ+Lss=) 2: 4CBECA5CF9C311EBBA064C70C4F9AE02.roa (hash: CnaozKo0w+oDNLtVLnsapD7Ti4dTXp4OsMG95HJSOiM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DCFB/AAEA0DC0F9BF11EB80245E6AC4F9AE02/pRdB3BnLk5BAJnagOh_a6-Dn8rw.crl rsync://rpki.apnic.net/member_repository/A911DCFB/AAEA0DC0F9BF11EB80245E6AC4F9AE02/pRdB3BnLk5BAJnagOh_a6-Dn8rw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pRdB3BnLk5BAJnagOh_a6-Dn8rw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:57:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1410 (0x582) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DCFB, serialNumber=A51741DC19CB9390402676A03A1FDAEBE0E7F2BC Validity Not Before: Oct 19 00:57:57 2025 GMT Not After : Oct 26 00:57:57 2025 GMT Subject: CN=68f43795-398c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:f3:d3:cd:06:72:85:ba:89:de:01:7b:51:fd: dd:75:bc:17:fb:fa:fe:95:67:c0:59:44:24:fe:72: be:c8:73:a7:07:67:6c:bd:57:d8:a0:23:62:ab:78: 84:88:ed:5c:c1:7b:a1:07:43:52:41:58:77:43:d2: 22:b6:d0:8f:2a:95:1e:f2:99:08:96:da:55:e3:00: 47:fb:66:94:31:51:4f:c8:64:99:6f:43:20:ee:97: f3:a9:52:5f:ad:8b:c2:fb:97:56:4a:16:30:cb:62: 6f:d1:60:b4:1b:a6:e2:3c:ee:cb:3b:c2:52:6f:c8: 03:d8:19:82:3c:33:9e:89:d7:57:dd:7e:a4:1a:87: 69:7d:c2:07:45:b4:6e:bb:8f:76:10:f0:09:4b:f0: 1c:85:58:35:a8:73:63:51:d7:4b:b0:03:95:c9:7a: c2:e6:39:56:03:a7:dd:08:be:c6:ad:29:39:63:f9: 80:ae:4b:21:5e:fd:fc:e6:df:24:df:5d:ce:28:07: 89:70:63:09:eb:97:fd:55:4a:6e:a3:6c:46:2e:9e: a2:84:7d:19:b7:d0:22:6e:ba:1a:72:ba:11:4c:06: 4d:c1:67:51:18:19:80:3a:10:aa:5b:25:3c:ba:f6: 6d:fc:eb:e4:aa:d4:78:0c:eb:24:df:bb:f8:d2:8d: bb:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:9D:7B:92:E0:65:C3:7A:48:17:40:15:77:94:5E:DA:2D:A2:54:86 X509v3 Authority Key Identifier: keyid:A5:17:41:DC:19:CB:93:90:40:26:76:A0:3A:1F:DA:EB:E0:E7:F2:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DCFB/AAEA0DC0F9BF11EB80245E6AC4F9AE02/pRdB3BnLk5BAJnagOh_a6-Dn8rw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pRdB3BnLk5BAJnagOh_a6-Dn8rw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DCFB/AAEA0DC0F9BF11EB80245E6AC4F9AE02/pRdB3BnLk5BAJnagOh_a6-Dn8rw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:fe:0f:1b:60:9e:eb:e3:82:ac:15:c9:06:7b:23:d9:fc:4f: a7:8d:b2:41:ec:fd:00:56:02:2a:41:a0:2c:27:9c:8e:98:c5: 9c:20:0f:5a:68:55:5b:b5:20:4a:99:27:2d:25:fc:26:c6:8e: 4c:d7:2c:28:50:b9:50:e4:e5:58:f4:84:59:c3:05:4a:34:5a: 7e:fa:07:5e:7d:5b:1b:18:f2:f6:a6:c4:cd:97:48:a8:52:53: 38:85:18:8c:15:be:27:44:c1:6f:51:3a:e6:ca:50:a4:6d:7c: 97:eb:8f:63:82:b0:99:10:4b:33:c2:9d:c2:68:89:7f:62:9c: b9:dd:5a:48:4a:8c:6d:ba:68:73:d9:cf:81:1e:1a:d9:ae:84: 92:15:52:fc:0b:fc:4a:81:ec:e6:c3:29:d5:33:3c:89:96:77: e4:d4:96:2f:a4:ca:58:1c:40:02:57:2c:f8:1d:9f:c3:da:16: 3c:10:f1:93:4b:00:ae:5b:f8:28:3a:cd:95:bd:ba:b5:68:c3: 2a:56:8f:88:46:e6:01:e2:65:47:b6:a2:d7:c0:e2:47:55:d7: a6:a9:b6:dd:12:c1:b3:8d:59:75:62:81:f9:ea:8f:60:31:36: c5:10:b4:4f:fb:af:82:35:ba:d4:80:7d:94:5e:66:d9:63:70: 50:72:79:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURDRkIxMTAvBgNVBAUTKEE1MTc0MURDMTlDQjkzOTA0MDI2NzZBMDNBMUZEQUVC RTBFN0YyQkMwHhcNMjUxMDE5MDA1NzU3WhcNMjUxMDI2MDA1NzU3WjAYMRYwFAYD VQQDEw02OGY0Mzc5NS0zOThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3fPTzQZyhbqJ3gF7Uf3ddbwX+/r+lWfAWUQk/nK+yHOnB2dsvVfYoCNiq3iE iO1cwXuhB0NSQVh3Q9IittCPKpUe8pkIltpV4wBH+2aUMVFPyGSZb0Mg7pfzqVJf rYvC+5dWShYwy2Jv0WC0G6biPO7LO8JSb8gD2BmCPDOeiddX3X6kGodpfcIHRbRu u492EPAJS/AchVg1qHNjUddLsAOVyXrC5jlWA6fdCL7GrSk5Y/mArkshXv385t8k 313OKAeJcGMJ65f9VUpuo2xGLp6ihH0Zt9AibroacroRTAZNwWdRGBmAOhCqWyU8 uvZt/OvkqtR4DOsk37v40o27zQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHmde5Lg ZcN6SBdAFXeUXtotolSGMB8GA1UdIwQYMBaAFKUXQdwZy5OQQCZ2oDof2uvg5/K8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRENGQi9BQUVBMERDMEY5 QkYxMUVCODAyNDVFNkFDNEY5QUUwMi9wUmRCM0JuTGs1QkFKbmFnT2hfYTYtRG44 cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BSZEIzQm5MazVCQUpuYWdPaF9hNi1Ebjhydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RENGQi9BQUVBMERDMEY5QkYxMUVCODAyNDVFNkFDNEY5QUUwMi9wUmRCM0JuTGs1 QkFKbmFnT2hfYTYtRG44cncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAE/g8bYJ7r44KsFckGeyPZ/E+njbJB7P0AVgIqQaAsJ5yOmMWcIA9a aFVbtSBKmSctJfwmxo5M1ywoULlQ5OVY9IRZwwVKNFp++gdefVsbGPL2psTNl0io UlM4hRiMFb4nRMFvUTrmylCkbXyX649jgrCZEEszwp3CaIl/Ypy53VpISoxtumhz 2c+BHhrZroSSFVL8C/xKgezmwynVMzyJlnfk1JYvpMpYHEACVyz4HZ/D2hY8EPGT SwCuW/goOs2Vvbq1aMMqVo+IRuYB4mVHtqLXwOJHVdemqbbdEsGzjVl1YoH56o9g MTbFELRP+6+CNbrUgH2UXmbZY3BQcnnj -----END CERTIFICATE-----Generated at Mon Oct 20 08:04:52 2025 by rpki-client