$ rpki-client -vvf rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.mft File: PbzLvnvpFslu6uzZi_XVPhw5DqE.mft (raw, json) Hash identifier: tYYFr91WQCtE/dztu3dZQ2GwKewRlBnA6oB3GRyHmyI= Subject key identifier: 52:58:06:93:B3:28:58:99:5F:BB:68:5A:F6:53:E0:54:65:D1:9C:C3 Authority key identifier: 3D:BC:CB:BE:7B:E9:16:C9:6E:EA:EC:D9:8B:F5:D5:3E:1C:39:0E:A1 Certificate issuer: /CN=A912614B/serialNumber=3DBCCBBE7BE916C96EEAECD98BF5D53E1C390EA1 Certificate serial: 0BBB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbzLvnvpFslu6uzZi_XVPhw5DqE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.mft Manifest number: 0BB3 Signing time: Mon 20 Oct 2025 19:36:37 +0000 Manifest this update: Mon 20 Oct 2025 19:36:36 +0000 Manifest next update: Mon 27 Oct 2025 19:36:36 +0000 Files and hashes: 1: PbzLvnvpFslu6uzZi_XVPhw5DqE.crl (hash: aKQ5s9BG2JpxUDbFjjzfXozolnPnBKybzQNzFM/PV0E=) 2: AF57B9EC2F7811EABC011040C4F9AE02.roa (hash: 7clxci5sYL0ZKeUn3xOVCzgzac7VXWrYaajUILDcB+8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.crl rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbzLvnvpFslu6uzZi_XVPhw5DqE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 19:36:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3003 (0xbbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912614B, serialNumber=3DBCCBBE7BE916C96EEAECD98BF5D53E1C390EA1 Validity Not Before: Oct 20 19:36:36 2025 GMT Not After : Oct 27 19:36:36 2025 GMT Subject: CN=68f68f44-97e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:34:06:26:41:c4:73:96:38:a4:8e:a9:2f:c4: 5c:bb:7f:87:f5:05:5e:f2:24:77:62:9f:16:65:9c: de:13:31:75:84:02:66:14:29:d8:b2:30:5a:ee:ac: 66:73:4b:63:f3:c9:a4:4d:d2:cb:55:e8:1d:85:aa: 1b:ba:a7:5b:b7:90:fd:30:98:fc:b6:b3:84:c2:a4: 9f:3d:27:55:90:b5:90:7d:dc:34:63:25:06:af:01: 25:02:22:99:66:5f:34:20:c5:01:77:0f:b0:39:70: 5e:8d:03:c1:26:56:2b:c3:12:65:d6:9d:ce:6e:85: 17:0f:fd:f7:0f:72:5b:b5:5a:48:e5:be:4c:35:a1: 4d:80:86:68:29:97:0d:00:41:97:9f:d2:bf:27:d1: 5d:48:e1:1a:5a:20:68:01:25:4b:d7:af:b7:3e:45: c1:c8:2a:42:a3:76:a9:7b:47:56:d2:fb:a4:16:0d: 4d:03:79:f9:76:0b:5e:42:1f:b8:42:5c:20:ef:bb: 5b:be:94:21:98:be:ab:5d:db:f2:a7:67:b3:92:02: e2:af:28:fe:fe:0d:b7:0b:5b:78:f9:dd:62:c7:f8: 1b:27:cc:89:7d:2c:13:13:fc:0c:e8:bb:f6:cc:c2: 58:6a:64:ac:5e:58:1b:7a:2c:61:8a:fe:4f:85:ac: af:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:58:06:93:B3:28:58:99:5F:BB:68:5A:F6:53:E0:54:65:D1:9C:C3 X509v3 Authority Key Identifier: keyid:3D:BC:CB:BE:7B:E9:16:C9:6E:EA:EC:D9:8B:F5:D5:3E:1C:39:0E:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbzLvnvpFslu6uzZi_XVPhw5DqE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:a8:bd:2b:d3:53:77:6d:ba:a7:40:bc:a4:76:c2:f7:cc:f1: 02:8c:73:b1:dd:1b:7f:9e:ee:fe:d5:41:59:aa:a5:91:82:ff: 01:1f:2c:02:25:0e:3f:76:49:77:85:cd:d6:1a:3f:fc:30:52: 0f:6f:f9:b1:b5:67:23:92:d5:c8:55:b6:0e:e8:55:10:7c:90: 8d:8c:58:75:4a:42:55:e7:88:be:76:1c:56:ed:2e:3b:4f:e0: 64:89:00:42:c3:52:2b:28:e2:92:6a:df:b9:2e:55:4f:25:35: d3:9c:bc:0a:85:c8:f4:0c:bc:2a:c1:df:fc:3b:48:48:a5:7b: c1:b8:88:02:b6:a0:50:aa:9d:ec:03:cd:76:b4:57:36:c7:57: f4:d2:78:32:ba:f3:64:82:c8:ed:78:dc:c4:4e:5e:20:e9:9c: d5:44:70:fb:bc:fd:a1:e8:b5:a8:ca:ff:a6:80:49:90:1e:3f: f2:62:03:17:64:8f:72:23:16:24:bb:13:d4:75:e0:f2:08:0a: e3:b8:52:4f:67:5c:ec:91:33:69:45:1c:01:c1:6a:67:69:da: a7:b3:82:ff:70:1f:a9:8f:d6:9a:77:67:ba:6f:cc:c8:79:82: d1:ac:84:06:c5:db:7c:65:b4:49:2b:f3:81:5c:31:3f:1e:31: b7:de:da:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC7swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYxNEIxMTAvBgNVBAUTKDNEQkNDQkJFN0JFOTE2Qzk2RUVBRUNEOThCRjVENTNF MUMzOTBFQTEwHhcNMjUxMDIwMTkzNjM2WhcNMjUxMDI3MTkzNjM2WjAYMRYwFAYD VQQDEw02OGY2OGY0NC05N2UzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAujQGJkHEc5Y4pI6pL8Rcu3+H9QVe8iR3Yp8WZZzeEzF1hAJmFCnYsjBa7qxm c0tj88mkTdLLVegdhaobuqdbt5D9MJj8trOEwqSfPSdVkLWQfdw0YyUGrwElAiKZ Zl80IMUBdw+wOXBejQPBJlYrwxJl1p3OboUXD/33D3JbtVpI5b5MNaFNgIZoKZcN AEGXn9K/J9FdSOEaWiBoASVL16+3PkXByCpCo3ape0dW0vukFg1NA3n5dgteQh+4 Qlwg77tbvpQhmL6rXdvyp2ezkgLiryj+/g23C1t4+d1ix/gbJ8yJfSwTE/wM6Lv2 zMJYamSsXlgbeixhiv5PhayvLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFJYBpOz KFiZX7toWvZT4FRl0ZzDMB8GA1UdIwQYMBaAFD28y7576RbJburs2Yv11T4cOQ6h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjE0Qi9GMkE0OTI0RTJG NzYxMUVBOTFGRENCM0NDNEY5QUUwMi9QYnpMdm52cEZzbHU2dXpaaV9YVlBodzVE cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Biekx2bnZwRnNsdTZ1elppX1hWUGh3NURxRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjE0Qi9GMkE0OTI0RTJGNzYxMUVBOTFGRENCM0NDNEY5QUUwMi9QYnpMdm52cEZz bHU2dXpaaV9YVlBodzVEcUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtqL0r01N3bbqnQLykdsL3zPECjHOx3Rt/nu7+1UFZqqWRgv8BHywC JQ4/dkl3hc3WGj/8MFIPb/mxtWcjktXIVbYO6FUQfJCNjFh1SkJV54i+dhxW7S47 T+BkiQBCw1IrKOKSat+5LlVPJTXTnLwKhcj0DLwqwd/8O0hIpXvBuIgCtqBQqp3s A812tFc2x1f00ngyuvNkgsjteNzETl4g6ZzVRHD7vP2h6LWoyv+mgEmQHj/yYgMX ZI9yIxYkuxPUdeDyCArjuFJPZ1zskTNpRRwBwWpnadqns4L/cB+pj9aad2e6b8zI eYLRrIQGxdt8ZbRJK/OBXDE/HjG33tol -----END CERTIFICATE-----Generated at Tue Oct 21 02:37:33 2025 by rpki-client