$ rpki-client -vvf rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.mft File: PM1fKKh57729PlX0wrzyjWzdWu4.mft (raw, json) Hash identifier: gHUeX1+61QI+gNnicrpSdvD19+xn0FEIsSwqGMOl8x4= Subject key identifier: 7E:EC:D6:88:99:31:57:37:F8:19:07:55:03:33:A6:53:83:15:F9:AF Authority key identifier: 3C:CD:5F:28:A8:79:EF:BD:BD:3E:55:F4:C2:BC:F2:8D:6C:DD:5A:EE Certificate issuer: /CN=A914B14E/serialNumber=3CCD5F28A879EFBDBD3E55F4C2BCF28D6CDD5AEE Certificate serial: 0801 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM1fKKh57729PlX0wrzyjWzdWu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.mft Manifest number: 07F9 Signing time: Sat 18 Oct 2025 22:14:10 +0000 Manifest this update: Sat 18 Oct 2025 22:14:10 +0000 Manifest next update: Sat 25 Oct 2025 22:14:10 +0000 Files and hashes: 1: PM1fKKh57729PlX0wrzyjWzdWu4.crl (hash: fzbzk8OJQ3zSwLeB8VuFYeoCSh1JsUjAsY4WVJXPlhY=) 2: 47F1DE34FF8611EA9DCF8D5DC4F9AE02.roa (hash: AHAcb+gAjCz8wkoAWVtMX/VsvUWaSfqcpHAMq6tIbbk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.crl rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM1fKKh57729PlX0wrzyjWzdWu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:14:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2049 (0x801) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B14E, serialNumber=3CCD5F28A879EFBDBD3E55F4C2BCF28D6CDD5AEE Validity Not Before: Oct 18 22:14:10 2025 GMT Not After : Oct 25 22:14:10 2025 GMT Subject: CN=68f41132-ed30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ef:08:ba:09:27:62:b9:c1:71:82:b6:21:64: 89:c1:e9:ff:fe:3d:54:66:db:a5:77:2e:b8:a2:fa: e1:d4:cf:39:a7:98:5f:2f:f4:1c:6c:e0:0e:7e:61: f2:59:f0:44:57:38:22:cb:e6:00:05:04:dc:4a:83: 78:a8:64:17:76:02:c2:75:64:83:f2:97:e8:8d:63: f1:01:6f:5b:c8:d3:70:b2:b9:a5:e5:8a:dd:b4:6a: 33:a2:1f:b2:ae:85:2b:bb:44:4a:bf:00:10:51:20: 38:f4:2d:ba:f7:33:45:b2:46:dd:be:d8:30:b0:dc: be:7d:87:50:8f:e4:3f:1d:d2:de:0c:35:01:4e:cd: 88:3a:c8:37:ce:1a:d1:e9:de:d0:d6:30:9a:b0:8a: 64:b9:c6:26:70:47:5f:62:48:50:7d:f0:f2:3c:a4: 9c:af:0b:0b:d9:69:86:bd:44:12:f1:08:5e:e5:a2: c2:7b:72:24:4e:57:f9:96:87:9a:15:2c:9b:12:5e: ff:19:03:1c:35:7a:a2:5d:74:d0:3e:d1:d2:f4:db: 90:d7:ec:dc:47:63:c5:c6:1f:b6:1b:df:78:1b:7b: 00:65:8b:16:d0:7c:ce:88:a5:23:43:78:89:27:bb: e0:19:58:19:8b:bd:f2:8f:fa:a0:2b:ee:59:bc:2c: 59:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:EC:D6:88:99:31:57:37:F8:19:07:55:03:33:A6:53:83:15:F9:AF X509v3 Authority Key Identifier: keyid:3C:CD:5F:28:A8:79:EF:BD:BD:3E:55:F4:C2:BC:F2:8D:6C:DD:5A:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM1fKKh57729PlX0wrzyjWzdWu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:22:49:5d:03:0f:bf:79:9d:cc:d4:c6:43:6b:5c:1e:39:ce: d8:39:34:39:31:47:db:09:bd:8d:57:e2:22:aa:a3:4a:c6:7c: 3b:0b:b2:81:b5:3e:d2:f7:fc:6d:d7:0d:ac:ca:79:e9:45:e0: be:97:05:c3:b9:0e:6f:d5:ef:2a:20:4e:dc:6e:ed:bb:7c:ea: e2:ee:f7:5d:46:e9:bb:ee:f5:1e:e9:c0:b7:27:df:f6:20:fa: 58:20:fb:88:f6:d7:ef:42:89:6d:52:3f:2a:5b:1e:a5:cc:49: e1:4f:23:03:5b:f8:fe:b3:77:b0:f8:24:16:98:ee:8f:f1:1b: 97:f0:9a:77:bb:a2:55:a0:63:d3:37:88:a6:14:47:8b:d8:63: b8:2c:9d:09:16:9d:63:a1:54:fb:37:4d:f6:7d:d4:c4:e9:f4: ec:e5:07:56:25:d2:2c:ce:f0:c9:fd:d6:cd:9c:53:98:1f:e8: 5a:36:3d:d1:c2:3a:39:2b:ee:c5:ee:27:ef:58:65:b2:bc:5b: 37:69:dd:73:54:c5:d3:b8:1a:d3:93:aa:34:e0:31:9c:7d:9b: 3a:4c:1b:71:9d:bc:34:72:f4:4d:94:fa:07:4f:70:01:94:cc: ec:a2:a3:b4:e9:f2:a2:5e:91:8d:3a:42:a8:20:9c:23:ea:16: 56:17:fd:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEIxNEUxMTAvBgNVBAUTKDNDQ0Q1RjI4QTg3OUVGQkRCRDNFNTVGNEMyQkNGMjhE NkNERDVBRUUwHhcNMjUxMDE4MjIxNDEwWhcNMjUxMDI1MjIxNDEwWjAYMRYwFAYD VQQDEw02OGY0MTEzMi1lZDMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0e8IugknYrnBcYK2IWSJwen//j1UZtuldy64ovrh1M85p5hfL/QcbOAOfmHy WfBEVzgiy+YABQTcSoN4qGQXdgLCdWSD8pfojWPxAW9byNNwsrml5YrdtGozoh+y roUru0RKvwAQUSA49C269zNFskbdvtgwsNy+fYdQj+Q/HdLeDDUBTs2IOsg3zhrR 6d7Q1jCasIpkucYmcEdfYkhQffDyPKScrwsL2WmGvUQS8Qhe5aLCe3IkTlf5loea FSybEl7/GQMcNXqiXXTQPtHS9NuQ1+zcR2PFxh+2G994G3sAZYsW0HzOiKUjQ3iJ J7vgGVgZi73yj/qgK+5ZvCxZDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH7s1oiZ MVc3+BkHVQMzplODFfmvMB8GA1UdIwQYMBaAFDzNXyioee+9vT5V9MK88o1s3Vru MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjE0RS84N0Y2ODQ4Q0ZG ODQxMUVBQjJBMUM3NUJDNEY5QUUwMi9QTTFmS0toNTc3MjlQbFgwd3J6eWpXemRX dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BNMWZLS2g1NzcyOVBsWDB3cnp5ald6ZFd1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjE0RS84N0Y2ODQ4Q0ZGODQxMUVBQjJBMUM3NUJDNEY5QUUwMi9QTTFmS0toNTc3 MjlQbFgwd3J6eWpXemRXdTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDHIkldAw+/eZ3M1MZDa1weOc7YOTQ5MUfbCb2NV+IiqqNKxnw7C7KB tT7S9/xt1w2synnpReC+lwXDuQ5v1e8qIE7cbu27fOri7vddRum77vUe6cC3J9/2 IPpYIPuI9tfvQoltUj8qWx6lzEnhTyMDW/j+s3ew+CQWmO6P8RuX8Jp3u6JVoGPT N4imFEeL2GO4LJ0JFp1joVT7N032fdTE6fTs5QdWJdIszvDJ/dbNnFOYH+haNj3R wjo5K+7F7ifvWGWyvFs3ad1zVMXTuBrTk6o04DGcfZs6TBtxnbw0cvRNlPoHT3AB lMzsoqO06fKiXpGNOkKoIJwj6hZWF/3Y -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:47 2025 by rpki-client