$ rpki-client -vvf rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.mft File: PSzMkYN0TcaWqFVry5BDhI6V33A.mft (raw, json) Hash identifier: /MEfCuYeTVgea/G42bU65K8oBFHS3sWxfdgPiYbBvsE= Subject key identifier: 3F:7A:34:FF:FC:61:EF:92:1D:4C:76:7B:BC:E5:99:CE:EE:C2:C7:22 Authority key identifier: 3D:2C:CC:91:83:74:4D:C6:96:A8:55:6B:CB:90:43:84:8E:95:DF:70 Certificate issuer: /CN=A912D826/serialNumber=3D2CCC9183744DC696A8556BCB9043848E95DF70 Certificate serial: 03C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSzMkYN0TcaWqFVry5BDhI6V33A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.mft Manifest number: 03BB Signing time: Sun 19 Oct 2025 02:40:53 +0000 Manifest this update: Sun 19 Oct 2025 02:40:53 +0000 Manifest next update: Sun 26 Oct 2025 02:40:53 +0000 Files and hashes: 1: PSzMkYN0TcaWqFVry5BDhI6V33A.crl (hash: 21W5Tnfp/aQU7pFnvcnfNshNVLOBQEoMRMUDYK/LbXs=) 2: 69A20286514B11F0B8A8C66DC4F9AE02.roa (hash: FMJfMOhKmr3+LIFoso7iYyeae1vQb80K64qzROcKGwI=) 3: 804B03560A7211EE8FA2CD58C4F9AE02.roa (hash: +4X61DthcWz4IP6DOyrL7Yd1Zc+RFVYAukm8M+MD8hs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.crl rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSzMkYN0TcaWqFVry5BDhI6V33A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:40:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 969 (0x3c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D826, serialNumber=3D2CCC9183744DC696A8556BCB9043848E95DF70 Validity Not Before: Oct 19 02:40:53 2025 GMT Not After : Oct 26 02:40:53 2025 GMT Subject: CN=68f44fb5-b9f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:6b:3d:ad:02:ff:63:a2:c0:6b:aa:75:8f:c8: ba:f1:0f:0a:99:5d:43:2c:a2:08:e0:4e:d6:18:bd: 91:72:31:f7:92:e9:3c:6f:e3:aa:c5:93:2b:f2:2f: 2c:2a:90:78:33:df:2a:49:82:7c:12:82:e2:53:d7: 09:a7:1e:c7:2f:4d:16:67:12:9b:b8:a2:f6:85:7f: bf:7c:45:e9:6f:ef:e8:b2:02:f8:48:0b:d5:f9:8d: 75:42:4d:04:06:37:cf:3a:56:de:c7:92:79:e2:74: 7f:0d:99:15:3e:aa:94:8c:ea:d8:b2:91:3d:0f:34: e3:1c:33:fe:33:5a:1e:3c:d9:4d:87:ec:6e:d6:dd: 80:3b:49:ff:a5:bd:9d:d9:92:37:6c:c3:35:9f:f0: 7d:67:1e:33:0e:1c:01:bf:f5:76:56:00:22:83:73: d8:ab:0b:d8:72:5f:59:6a:1b:1d:a2:5e:55:99:0c: 83:f5:af:7e:46:77:78:48:46:e1:9e:05:61:23:90: 4a:2d:dc:f4:1f:5f:38:8c:a3:04:ae:9e:38:fd:d3: 0b:91:73:0b:6e:b7:be:35:23:71:f1:99:40:b7:75: 17:21:3f:56:42:a8:8a:40:55:76:e4:cc:0f:5e:f5: b2:71:87:a7:c3:e2:8d:0a:ee:8c:bc:0c:90:58:95: 84:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:7A:34:FF:FC:61:EF:92:1D:4C:76:7B:BC:E5:99:CE:EE:C2:C7:22 X509v3 Authority Key Identifier: keyid:3D:2C:CC:91:83:74:4D:C6:96:A8:55:6B:CB:90:43:84:8E:95:DF:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSzMkYN0TcaWqFVry5BDhI6V33A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:6b:c5:7b:1e:ed:34:d2:d3:ef:1e:53:28:4c:aa:ae:2a:fa: 89:23:6c:f4:64:89:a1:38:90:78:e8:c5:e1:c9:07:28:c0:3b: 36:20:8d:f0:36:49:b9:35:26:4d:92:c0:08:27:1d:ad:ff:33: 6a:58:0e:08:29:cf:df:f2:84:39:2e:9e:25:d9:61:6c:e4:10: 1a:43:23:c8:ac:82:83:c3:b8:84:62:54:66:e2:d5:d1:15:0e: 85:b9:a8:1e:c6:91:90:8f:bf:e7:9b:89:87:92:72:6b:17:7e: 6a:91:16:8d:44:ca:0e:c2:04:c6:37:17:3c:89:68:03:77:3f: 07:6e:3c:5c:c0:e3:1a:3a:c0:4c:ff:d9:9f:5d:4b:b4:01:19: a7:ef:cc:67:e8:97:4a:45:09:9d:f5:4e:e9:cf:b0:fe:18:13: 58:66:e2:27:fa:cb:d7:f4:83:65:9c:7d:fb:7a:ab:d8:cb:a1: 76:bc:10:2b:97:bb:77:a0:3e:ef:50:d9:49:d2:2d:2e:9b:e6: e8:27:00:f5:0c:3e:12:7f:b6:43:53:b1:4b:f0:11:a3:0a:f3: 51:72:96:9f:f0:7c:0b:28:64:5e:18:3b:49:29:f0:9c:48:6a: d9:12:b3:83:0f:ea:b5:8d:00:8d:07:e8:c0:52:f3:a0:e5:72: ac:56:59:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQ4MjYxMTAvBgNVBAUTKDNEMkNDQzkxODM3NDREQzY5NkE4NTU2QkNCOTA0Mzg0 OEU5NURGNzAwHhcNMjUxMDE5MDI0MDUzWhcNMjUxMDI2MDI0MDUzWjAYMRYwFAYD VQQDEw02OGY0NGZiNS1iOWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApWs9rQL/Y6LAa6p1j8i68Q8KmV1DLKII4E7WGL2RcjH3kuk8b+OqxZMr8i8s KpB4M98qSYJ8EoLiU9cJpx7HL00WZxKbuKL2hX+/fEXpb+/osgL4SAvV+Y11Qk0E BjfPOlbex5J54nR/DZkVPqqUjOrYspE9DzTjHDP+M1oePNlNh+xu1t2AO0n/pb2d 2ZI3bMM1n/B9Zx4zDhwBv/V2VgAig3PYqwvYcl9Zahsdol5VmQyD9a9+Rnd4SEbh ngVhI5BKLdz0H184jKMErp44/dMLkXMLbre+NSNx8ZlAt3UXIT9WQqiKQFV25MwP XvWycYenw+KNCu6MvAyQWJWEVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD96NP/8 Ye+SHUx2e7zlmc7uwsciMB8GA1UdIwQYMBaAFD0szJGDdE3GlqhVa8uQQ4SOld9w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDgyNi9DRjRFMUQ3NEFF NEExMUVDODQ2RjNGNjhDNEY5QUUwMi9QU3pNa1lOMFRjYVdxRlZyeTVCRGhJNlYz M0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BTek1rWU4wVGNhV3FGVnJ5NUJEaEk2VjMzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDgyNi9DRjRFMUQ3NEFFNEExMUVDODQ2RjNGNjhDNEY5QUUwMi9QU3pNa1lOMFRj YVdxRlZyeTVCRGhJNlYzM0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCca8V7Hu000tPvHlMoTKquKvqJI2z0ZImhOJB46MXhyQcowDs2II3w Nkm5NSZNksAIJx2t/zNqWA4IKc/f8oQ5Lp4l2WFs5BAaQyPIrIKDw7iEYlRm4tXR FQ6FuagexpGQj7/nm4mHknJrF35qkRaNRMoOwgTGNxc8iWgDdz8HbjxcwOMaOsBM /9mfXUu0ARmn78xn6JdKRQmd9U7pz7D+GBNYZuIn+svX9INlnH37eqvYy6F2vBAr l7t3oD7vUNlJ0i0um+boJwD1DD4Sf7ZDU7FL8BGjCvNRcpaf8HwLKGReGDtJKfCc SGrZErODD+q1jQCNB+jAUvOg5XKsVll7 -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:03 2025 by rpki-client