$ rpki-client -vvf rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft File: PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft (raw, json) Hash identifier: llAbitH0+PWEA7hCatnBVHqIiYrCOeJMR35d3P//XXo= Subject key identifier: 35:41:22:56:6B:86:44:15:DC:05:96:F3:1F:3C:3E:7D:59:57:1E:69 Authority key identifier: 3E:C4:F7:5E:64:B7:2A:88:78:6A:F4:B9:7C:98:48:6C:BD:6D:2F:56 Certificate issuer: /CN=A914E0B6/serialNumber=3EC4F75E64B72A88786AF4B97C98486CBD6D2F56 Certificate serial: 0144 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PsT3XmS3Koh4avS5fJhIbL1tL1Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft Manifest number: 0142 Signing time: Sun 19 Oct 2025 07:08:02 +0000 Manifest this update: Sun 19 Oct 2025 07:08:01 +0000 Manifest next update: Sun 26 Oct 2025 07:08:01 +0000 Files and hashes: 1: PsT3XmS3Koh4avS5fJhIbL1tL1Y.crl (hash: NdvqKvkPNKwm1j4Gv2MC3iSp0f1KbzLTfcpe/qfaEzU=) 2: 36FC37FABF3111EE886C313CC4F9AE02.roa (hash: yT3Pw8KgyLGtb1vkHoOYSitDAsAc7QcaGePhN0Bj1+M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.crl rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PsT3XmS3Koh4avS5fJhIbL1tL1Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:08:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 324 (0x144) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E0B6, serialNumber=3EC4F75E64B72A88786AF4B97C98486CBD6D2F56 Validity Not Before: Oct 19 07:08:01 2025 GMT Not After : Oct 26 07:08:01 2025 GMT Subject: CN=68f48e52-9e17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1e:b9:11:9b:46:2a:2d:ea:9b:99:84:a7:67: cb:b6:4a:14:ef:64:93:c0:fb:44:72:0e:50:1b:ad: fd:1d:ab:64:eb:b3:e6:a4:43:8b:a7:79:68:6c:38: 24:cf:11:c9:d0:7d:2c:ed:81:a5:4e:e0:00:de:c4: d6:6e:0f:e9:bc:db:cc:64:98:ce:45:f7:42:9e:02: 3a:09:e2:65:26:a1:d8:dc:58:ff:13:33:e5:80:1a: 8d:75:a8:5f:d1:71:be:db:14:67:44:76:a3:b0:5d: 7d:92:3f:dc:3e:91:a3:cd:0a:ba:c3:71:c5:3b:73: cb:4f:ab:ba:8e:7b:9e:e3:76:b7:21:34:38:1a:22: d2:33:ce:85:fe:93:01:ce:03:87:53:7e:7e:e5:b8: 1d:52:94:3a:33:ab:19:d8:9b:8c:81:72:74:75:e4: 99:4f:f1:5f:cf:aa:e2:b9:7d:be:c1:53:59:da:8b: 37:09:dc:8f:88:86:08:e3:83:df:8b:c8:2a:fb:df: 0f:9e:7a:b0:f9:90:88:ce:4f:94:5a:eb:87:a9:11: 9a:ca:37:c2:4e:86:70:a8:b4:a3:46:8b:53:57:2b: 82:40:73:00:32:ed:fa:4f:ba:6e:b0:4a:51:ff:34: 19:a5:f9:1a:db:96:3a:3b:b3:ba:22:49:06:72:0f: 8e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:41:22:56:6B:86:44:15:DC:05:96:F3:1F:3C:3E:7D:59:57:1E:69 X509v3 Authority Key Identifier: keyid:3E:C4:F7:5E:64:B7:2A:88:78:6A:F4:B9:7C:98:48:6C:BD:6D:2F:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PsT3XmS3Koh4avS5fJhIbL1tL1Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:b2:ec:16:c9:b5:d0:06:ea:ae:62:58:00:38:6d:48:52:53: d2:e9:c8:0f:a4:91:a1:3c:da:79:52:68:9e:d3:71:5d:5e:20: 23:22:60:30:93:90:fc:2b:a0:d7:11:a2:7b:bf:f4:68:0e:f9: 61:0a:58:b9:24:28:3b:78:82:61:4e:3d:1d:4f:97:7e:d3:a5: 2b:67:f2:30:1d:a2:51:87:07:5c:26:5f:65:fc:b1:a9:41:ff: 2a:c9:67:72:c9:78:bc:2d:5b:34:3a:55:0b:7f:06:0f:2b:f3: e2:33:13:29:82:1d:4b:88:43:fe:0f:99:1a:14:dc:91:3a:60: 30:d0:1c:28:09:84:72:09:2f:1b:84:0c:1c:58:7c:cb:d6:97: 2c:aa:32:86:7a:85:d9:bf:84:93:6f:eb:48:e3:a6:04:06:33: 3b:00:f0:50:cc:3a:9f:13:40:b0:1b:1e:49:b1:28:b8:19:ca: c1:8d:69:e8:05:94:31:f3:3d:64:bc:01:3f:5b:84:f2:ee:e5: c6:8c:b2:59:11:75:c6:61:a1:d5:cc:a3:0d:5f:22:f1:bc:da: 9d:40:61:a5:f3:cb:b0:6d:d5:b5:7c:24:5e:6a:94:e3:86:d1: bb:df:2f:49:f2:9a:c2:a8:7b:ed:52:93:b0:c0:c1:58:88:b5: d8:6e:c3:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUwQjYxMTAvBgNVBAUTKDNFQzRGNzVFNjRCNzJBODg3ODZBRjRCOTdDOTg0ODZD QkQ2RDJGNTYwHhcNMjUxMDE5MDcwODAxWhcNMjUxMDI2MDcwODAxWjAYMRYwFAYD VQQDEw02OGY0OGU1Mi05ZTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtR65EZtGKi3qm5mEp2fLtkoU72STwPtEcg5QG639Hatk67PmpEOLp3lobDgk zxHJ0H0s7YGlTuAA3sTWbg/pvNvMZJjORfdCngI6CeJlJqHY3Fj/EzPlgBqNdahf 0XG+2xRnRHajsF19kj/cPpGjzQq6w3HFO3PLT6u6jnue43a3ITQ4GiLSM86F/pMB zgOHU35+5bgdUpQ6M6sZ2JuMgXJ0deSZT/Ffz6riuX2+wVNZ2os3CdyPiIYI44Pf i8gq+98Pnnqw+ZCIzk+UWuuHqRGayjfCToZwqLSjRotTVyuCQHMAMu36T7pusEpR /zQZpfka25Y6O7O6IkkGcg+OowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDVBIlZr hkQV3AWW8x88Pn1ZVx5pMB8GA1UdIwQYMBaAFD7E915ktyqIeGr0uXyYSGy9bS9W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTBCNi81RkJFNDNCNEJG MzAxMUVFQkU0RjNDMUVDNEY5QUUwMi9Qc1QzWG1TM0tvaDRhdlM1ZkpoSWJMMXRM MVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1BzVDNYbVMzS29oNGF2UzVmSmhJYkwxdEwxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTBCNi81RkJFNDNCNEJGMzAxMUVFQkU0RjNDMUVDNEY5QUUwMi9Qc1QzWG1TM0tv aDRhdlM1ZkpoSWJMMXRMMVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5suwWybXQBuquYlgAOG1IUlPS6cgPpJGhPNp5Umie03FdXiAjImAw k5D8K6DXEaJ7v/RoDvlhCli5JCg7eIJhTj0dT5d+06UrZ/IwHaJRhwdcJl9l/LGp Qf8qyWdyyXi8LVs0OlULfwYPK/PiMxMpgh1LiEP+D5kaFNyROmAw0BwoCYRyCS8b hAwcWHzL1pcsqjKGeoXZv4STb+tI46YEBjM7APBQzDqfE0CwGx5JsSi4GcrBjWno BZQx8z1kvAE/W4Ty7uXGjLJZEXXGYaHVzKMNXyLxvNqdQGGl88uwbdW1fCReapTj htG73y9J8prCqHvtUpOwwMFYiLXYbsPu -----END CERTIFICATE-----Generated at Tue Oct 21 02:25:42 2025 by rpki-client