$ rpki-client -vvf rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/plEE3Hao4Oaj2SFGeJaAtz3eX1g.mft File: plEE3Hao4Oaj2SFGeJaAtz3eX1g.mft (raw, json) Hash identifier: yvou15EN5sY2u9bI6B/DKVqdns74OFa6wl4PWNHRdB8= Subject key identifier: 04:BB:4F:91:C9:3B:CD:65:97:1D:7E:1D:CA:5E:56:86:FC:5E:94:5B Authority key identifier: A6:51:04:DC:76:A8:E0:E6:A3:D9:21:46:78:96:80:B7:3D:DE:5F:58 Certificate issuer: /CN=A9120974/serialNumber=A65104DC76A8E0E6A3D92146789680B73DDE5F58 Certificate serial: 10A6 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/plEE3Hao4Oaj2SFGeJaAtz3eX1g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/plEE3Hao4Oaj2SFGeJaAtz3eX1g.mft Manifest number: 109D Signing time: Sat 18 Oct 2025 17:54:46 +0000 Manifest this update: Sat 18 Oct 2025 17:54:45 +0000 Manifest next update: Sat 25 Oct 2025 17:54:45 +0000 Files and hashes: 1: plEE3Hao4Oaj2SFGeJaAtz3eX1g.crl (hash: 6xAcPmqktjcaomyixVrW6wrWjT0pCnTdK+PLAMt8oaM=) 2: A87BA1063A4B11E99182B31BC4F9AE02.roa (hash: qPjQ6qU9b4Y2Yxe9iOnxcnbbcXQxddrSOa1xx9RMf9M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/plEE3Hao4Oaj2SFGeJaAtz3eX1g.crl rsync://rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/plEE3Hao4Oaj2SFGeJaAtz3eX1g.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/plEE3Hao4Oaj2SFGeJaAtz3eX1g.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:54:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4262 (0x10a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120974, serialNumber=A65104DC76A8E0E6A3D92146789680B73DDE5F58 Validity Not Before: Oct 18 17:54:45 2025 GMT Not After : Oct 25 17:54:45 2025 GMT Subject: CN=68f3d465-758f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:f6:b2:7d:3a:7c:7a:ee:c6:4d:05:be:40:4c: 5b:2b:4f:24:12:d8:b9:8a:2a:0d:38:a3:90:37:47: 75:ed:99:e1:ee:63:c1:c3:8f:8d:68:ff:43:6f:28: 92:21:06:2f:b4:7c:e9:82:40:a2:23:84:86:33:0c: 58:fb:b6:7d:5e:92:ba:e5:19:22:7e:e8:75:61:53: 1c:da:b6:bf:02:be:b9:bc:b9:05:1e:24:d2:f6:ab: 67:1d:40:30:a3:37:ba:93:ad:96:f5:99:4f:90:f5: 54:d2:e4:99:72:19:a1:53:09:a2:33:68:fa:ee:3e: 4f:99:0e:fc:cc:64:8f:b9:10:9b:f6:5b:d5:d1:5b: ef:f4:9e:fe:26:b1:66:45:b5:80:0c:d5:50:a9:17: 84:4d:b6:38:e5:7f:67:e3:ac:17:17:5d:8d:d7:b2: 22:16:42:7f:7f:c5:ad:f8:a8:a8:14:18:be:2d:e5: 2b:07:12:cb:ef:cc:ce:24:f0:94:6d:e1:f7:73:c4: 26:38:09:81:2e:3a:c8:84:99:f6:b4:b0:a0:3d:25: c8:d1:ea:ed:80:19:c8:c1:6e:ef:46:4d:13:a9:29: 8e:6a:71:cf:bb:5a:cd:58:e2:bf:05:ca:44:c9:fa: e8:29:c1:86:aa:05:57:2c:b9:f6:44:2b:e5:e6:90: e2:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:BB:4F:91:C9:3B:CD:65:97:1D:7E:1D:CA:5E:56:86:FC:5E:94:5B X509v3 Authority Key Identifier: keyid:A6:51:04:DC:76:A8:E0:E6:A3:D9:21:46:78:96:80:B7:3D:DE:5F:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/plEE3Hao4Oaj2SFGeJaAtz3eX1g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/plEE3Hao4Oaj2SFGeJaAtz3eX1g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/plEE3Hao4Oaj2SFGeJaAtz3eX1g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:c7:a1:c7:ac:96:6b:15:68:72:04:ed:98:89:6b:c0:6b:42: 02:a3:db:5f:c8:a5:7d:40:55:e1:17:3f:bd:07:76:c0:b5:70: f3:1e:7a:b1:e5:32:82:09:19:d5:7b:7f:05:f0:ed:e5:b4:20: f4:3e:18:0b:86:90:81:b9:f2:b0:be:66:d3:66:27:26:d0:b6: 32:ec:fd:ed:37:eb:21:39:be:fd:d9:8c:2c:85:f7:a8:95:95: 39:cb:13:48:35:f1:e9:73:7d:2b:d2:c9:21:23:3c:09:10:d8: 9c:03:0f:8d:25:6c:46:ad:6c:fe:ca:c3:a4:8f:3d:10:f7:98: c2:4d:bf:c4:f3:23:72:70:12:90:15:8e:1b:03:8b:8f:89:8a: 58:9d:3a:a8:2b:a9:71:3c:20:e0:d4:d6:2c:24:19:de:88:e1: 25:51:22:6e:6f:c4:d6:50:77:24:7f:b9:cd:65:9a:36:4a:d6: 94:e6:96:6c:2c:08:11:70:67:b2:92:7f:25:ba:a7:14:c3:7d: 9f:f5:50:ff:85:7a:85:f1:7e:3b:9c:ba:e6:c6:5a:d9:17:6b: f2:43:08:f9:af:eb:73:df:47:87:c7:f4:6b:e9:56:32:77:30: 0d:dc:cf:5a:e3:e2:7d:ee:0e:b7:5d:e3:aa:bb:cc:a0:37:48: 4b:94:f0:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA5NzQxMTAvBgNVBAUTKEE2NTEwNERDNzZBOEUwRTZBM0Q5MjE0Njc4OTY4MEI3 M0RERTVGNTgwHhcNMjUxMDE4MTc1NDQ1WhcNMjUxMDI1MTc1NDQ1WjAYMRYwFAYD VQQDEw02OGYzZDQ2NS03NThmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9/ayfTp8eu7GTQW+QExbK08kEti5iioNOKOQN0d17Znh7mPBw4+NaP9DbyiS IQYvtHzpgkCiI4SGMwxY+7Z9XpK65Rkifuh1YVMc2ra/Ar65vLkFHiTS9qtnHUAw oze6k62W9ZlPkPVU0uSZchmhUwmiM2j67j5PmQ78zGSPuRCb9lvV0Vvv9J7+JrFm RbWADNVQqReETbY45X9n46wXF12N17IiFkJ/f8Wt+KioFBi+LeUrBxLL78zOJPCU beH3c8QmOAmBLjrIhJn2tLCgPSXI0ertgBnIwW7vRk0TqSmOanHPu1rNWOK/BcpE yfroKcGGqgVXLLn2RCvl5pDigwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAS7T5HJ O81llx1+HcpeVob8XpRbMB8GA1UdIwQYMBaAFKZRBNx2qODmo9khRniWgLc93l9Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDk3NC8wMzMyNDBDMDNB NEExMUU5OTQwRjJEMTZDNEY5QUUwMi9wbEVFM0hhbzRPYWoyU0ZHZUphQXR6M2VY MWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3BsRUUzSGFvNE9hajJTRkdlSmFBdHozZVgxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDk3NC8wMzMyNDBDMDNBNEExMUU5OTQwRjJEMTZDNEY5QUUwMi9wbEVFM0hhbzRP YWoyU0ZHZUphQXR6M2VYMWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZx6HHrJZrFWhyBO2YiWvAa0ICo9tfyKV9QFXhFz+9B3bAtXDzHnqx 5TKCCRnVe38F8O3ltCD0PhgLhpCBufKwvmbTZicm0LYy7P3tN+shOb792Ywshfeo lZU5yxNINfHpc30r0skhIzwJENicAw+NJWxGrWz+ysOkjz0Q95jCTb/E8yNycBKQ FY4bA4uPiYpYnTqoK6lxPCDg1NYsJBneiOElUSJub8TWUHckf7nNZZo2StaU5pZs LAgRcGeykn8luqcUw32f9VD/hXqF8X47nLrmxlrZF2vyQwj5r+tz30eHx/Rr6VYy dzAN3M9a4+J97g63XeOqu8ygN0hLlPDl -----END CERTIFICATE-----Generated at Mon Oct 20 14:45:29 2025 by rpki-client