$ rpki-client -vvf rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.mft File: PcKYLLOQv9qGmu23U1P-S7lwobw.mft (raw, json) Hash identifier: foEyzdY1ZcOR2eE7HwCyPFMp8n5fP+gtMgGwCEHQA6s= Subject key identifier: 27:07:07:83:D8:6C:C6:68:12:CA:C7:B6:A3:03:D1:06:D4:21:89:A1 Authority key identifier: 3D:C2:98:2C:B3:90:BF:DA:86:9A:ED:B7:53:53:FE:4B:B9:70:A1:BC Certificate issuer: /CN=A9156D54/serialNumber=3DC2982CB390BFDA869AEDB75353FE4BB970A1BC Certificate serial: 02BE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PcKYLLOQv9qGmu23U1P-S7lwobw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.mft Manifest number: 02BE Signing time: Sun 19 Oct 2025 03:33:14 +0000 Manifest this update: Sun 19 Oct 2025 03:33:13 +0000 Manifest next update: Sun 26 Oct 2025 03:33:13 +0000 Files and hashes: 1: PcKYLLOQv9qGmu23U1P-S7lwobw.crl (hash: /gs3qbxziS7bkfgtUBBMww5Hn6vpQYYc1a+hppPcZWA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.crl rsync://rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PcKYLLOQv9qGmu23U1P-S7lwobw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:33:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 702 (0x2be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156D54, serialNumber=3DC2982CB390BFDA869AEDB75353FE4BB970A1BC Validity Not Before: Oct 19 03:33:13 2025 GMT Not After : Oct 26 03:33:13 2025 GMT Subject: CN=68f45bf9-3e5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c8:9d:89:71:2b:e4:ba:5a:6d:5f:48:53:f0: dc:31:a0:81:dd:b3:25:7a:75:3d:38:56:76:ea:cf: ea:6a:b9:7c:64:15:fc:f6:30:73:bc:88:60:42:42: 82:6a:fe:29:11:23:16:f8:33:96:6e:e8:aa:6d:ef: 44:2d:26:e5:70:1c:a0:94:b3:91:90:3c:d1:9e:68: a4:99:d0:54:0d:f2:91:f2:8e:4f:33:3e:da:ee:03: ff:48:ae:b7:a7:1d:74:bc:28:b8:05:89:4a:fd:e1: 2e:ca:78:27:d6:33:f7:d6:f6:2a:a0:b5:b9:01:65: 40:1c:91:31:c3:d4:1a:95:a6:3f:42:77:6a:d6:d2: 19:d5:77:91:60:e2:21:9d:76:70:03:5a:e5:19:cd: 6f:c9:87:7b:92:c6:91:42:91:8a:07:f4:b4:c6:cb: 5c:aa:c2:1f:e6:31:e1:c7:f0:03:8e:88:cf:72:e6: 55:11:58:73:66:b8:be:c9:44:6d:b7:85:f9:16:87: 56:79:1a:82:ae:96:26:37:da:5b:90:ea:ea:a2:ea: 3d:f3:71:25:23:46:d7:b6:06:eb:41:42:27:a5:a7: 7d:78:cd:cc:b0:75:a2:d5:2c:8b:be:1f:1d:ac:67: 2f:00:7f:e2:a9:85:56:3c:bc:47:e7:7c:db:c4:d0: c9:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:07:07:83:D8:6C:C6:68:12:CA:C7:B6:A3:03:D1:06:D4:21:89:A1 X509v3 Authority Key Identifier: keyid:3D:C2:98:2C:B3:90:BF:DA:86:9A:ED:B7:53:53:FE:4B:B9:70:A1:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PcKYLLOQv9qGmu23U1P-S7lwobw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:32:10:f6:16:53:fe:d7:ed:56:76:24:a0:8c:76:31:7c:01: d3:67:95:b3:45:91:19:ef:7f:bc:20:a9:da:90:d6:5d:52:64: 23:eb:fd:ef:f3:34:b9:f5:4c:8e:f4:e3:50:14:35:79:c3:8f: c7:5a:57:e2:ee:eb:5f:ba:49:d6:ea:d8:ce:0e:ce:38:cc:14: 75:40:22:65:ec:43:52:bf:29:95:e3:a1:99:b8:36:41:79:ec: 8c:7f:21:9e:87:a6:9a:08:c6:aa:02:82:a9:d7:8b:ee:73:06: b5:db:48:d4:d7:a2:7f:ce:b6:12:8c:51:4b:4c:0c:56:1e:02: da:81:36:9e:70:1a:94:ab:47:91:99:78:98:e3:b9:82:7e:20: f9:55:63:94:77:48:4c:bb:ef:e4:23:d0:06:74:54:61:50:55: 56:e6:8c:d6:c7:5d:bb:d0:35:d7:0e:37:6d:18:7e:0c:9f:88: 66:a5:d3:8c:8a:ef:4d:fe:a2:bf:3d:3f:91:63:77:09:33:da: 63:1c:40:cf:05:b2:c0:a3:e3:1f:f1:d5:e8:81:42:15:88:6c: dc:c4:a4:50:31:c9:2c:32:25:c4:69:81:3c:16:93:40:ef:04: 99:ad:cd:7d:5e:b8:df:c4:43:a2:9b:35:d4:08:80:66:79:b2: 5d:8f:f4:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAr4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTZENTQxMTAvBgNVBAUTKDNEQzI5ODJDQjM5MEJGREE4NjlBRURCNzUzNTNGRTRC Qjk3MEExQkMwHhcNMjUxMDE5MDMzMzEzWhcNMjUxMDI2MDMzMzEzWjAYMRYwFAYD VQQDEw02OGY0NWJmOS0zZTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsMidiXEr5LpabV9IU/DcMaCB3bMlenU9OFZ26s/qarl8ZBX89jBzvIhgQkKC av4pESMW+DOWbuiqbe9ELSblcByglLORkDzRnmikmdBUDfKR8o5PMz7a7gP/SK63 px10vCi4BYlK/eEuyngn1jP31vYqoLW5AWVAHJExw9QalaY/Qndq1tIZ1XeRYOIh nXZwA1rlGc1vyYd7ksaRQpGKB/S0xstcqsIf5jHhx/ADjojPcuZVEVhzZri+yURt t4X5FodWeRqCrpYmN9pbkOrqouo983ElI0bXtgbrQUInpad9eM3MsHWi1SyLvh8d rGcvAH/iqYVWPLxH53zbxNDJEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCcHB4PY bMZoEsrHtqMD0QbUIYmhMB8GA1UdIwQYMBaAFD3CmCyzkL/ahprtt1NT/ku5cKG8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkQ1NC83QjkyRUY5QTBD OTQxMUVEQjcxQkMwMkZDNEY5QUUwMi9QY0tZTExPUXY5cUdtdTIzVTFQLVM3bHdv YncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1BjS1lMTE9RdjlxR211MjNVMVAtUzdsd29idy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NkQ1NC83QjkyRUY5QTBDOTQxMUVEQjcxQkMwMkZDNEY5QUUwMi9QY0tZTExPUXY5 cUdtdTIzVTFQLVM3bHdvYncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7MhD2FlP+1+1WdiSgjHYxfAHTZ5WzRZEZ73+8IKnakNZdUmQj6/3v 8zS59UyO9ONQFDV5w4/HWlfi7utfuknW6tjODs44zBR1QCJl7ENSvymV46GZuDZB eeyMfyGeh6aaCMaqAoKp14vucwa120jU16J/zrYSjFFLTAxWHgLagTaecBqUq0eR mXiY47mCfiD5VWOUd0hMu+/kI9AGdFRhUFVW5ozWx1270DXXDjdtGH4Mn4hmpdOM iu9N/qK/PT+RY3cJM9pjHEDPBbLAo+Mf8dXogUIViGzcxKRQMcksMiXEaYE8FpNA 7wSZrc19XrjfxEOimzXUCIBmebJdj/SE -----END CERTIFICATE-----Generated at Mon Oct 20 21:01:21 2025 by rpki-client