$ rpki-client -vvf rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.mft File: PuJvukvjWd6uUAeS6_940ArLdgw.mft (raw, json) Hash identifier: zNMzvAShdcIvpp3pP1Kuw/x3YcVRrpBGCDu+xIIc3zM= Subject key identifier: 3A:FD:71:A7:A3:D8:1A:29:C5:72:A1:E6:77:91:10:D7:45:31:F1:C3 Authority key identifier: 3E:E2:6F:BA:4B:E3:59:DE:AE:50:07:92:EB:FF:78:D0:0A:CB:76:0C Certificate issuer: /CN=A91596C4/serialNumber=3EE26FBA4BE359DEAE500792EBFF78D00ACB760C Certificate serial: 0432 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PuJvukvjWd6uUAeS6_940ArLdgw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.mft Manifest number: 0423 Signing time: Sun 19 Oct 2025 02:15:32 +0000 Manifest this update: Sun 19 Oct 2025 02:15:32 +0000 Manifest next update: Sun 26 Oct 2025 02:15:32 +0000 Files and hashes: 1: PuJvukvjWd6uUAeS6_940ArLdgw.crl (hash: MaZnHKN9Mlkih60+PqtnIi0dF0RtOnLIM5eCIH0J3nM=) 2: 0A4D6250833411ECBB74C786C4F9AE02.roa (hash: 6+2Lk4Xai3HUwAmjg8bW8UOOypYan1IgfWd2mzH9/MA=) 3: 0AE155E6833411ECBB74C786C4F9AE02.roa (hash: P2hgHU8XOvbHIrBabwcVzNSzMatmcwCF4tAzz5uDO10=) 4: 09B62A48833411ECBB74C786C4F9AE02.roa (hash: 4y99R2661TzfOkabp7/pgfm0pWxC4+jDx6PFu0Fa6p8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.crl rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PuJvukvjWd6uUAeS6_940ArLdgw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:15:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1074 (0x432) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91596C4, serialNumber=3EE26FBA4BE359DEAE500792EBFF78D00ACB760C Validity Not Before: Oct 19 02:15:32 2025 GMT Not After : Oct 26 02:15:32 2025 GMT Subject: CN=68f449c4-73d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:6b:db:99:2b:06:6b:0a:a2:bc:60:fe:7f:44: 3c:e1:b6:b3:d7:21:93:f5:da:51:ad:07:56:a6:cb: 25:64:e7:d2:a1:00:10:47:cd:44:d5:c2:02:c9:32: f1:2e:ce:d0:e3:96:b8:4a:88:84:74:7f:bd:9e:3e: a4:2e:55:12:bb:6c:19:fe:ee:2d:89:48:90:e2:7a: ae:c3:d2:7b:03:b8:f5:95:b6:7f:36:ac:f8:37:27: 34:27:33:f5:a4:1b:6a:8a:73:78:c6:35:11:13:39: c4:8c:5b:83:08:30:a5:99:28:6c:2a:1e:45:96:a0: 6c:ae:af:2a:46:6d:d9:97:42:73:58:0c:62:ea:fe: fd:33:3b:09:a8:d3:db:4f:97:72:f8:d9:e9:4b:e4: f3:dc:6d:a7:16:c2:35:c0:16:2c:60:a6:ae:7a:af: ef:fa:0d:99:64:d8:00:9e:db:50:e5:0b:65:58:fd: db:f0:95:3b:a7:8d:51:88:cb:46:d5:62:e3:0f:35: 96:44:e0:55:a1:1c:2c:d6:f9:13:39:cd:d3:1f:fc: 4a:d0:03:f6:17:8d:7a:bc:9a:e0:b7:93:a2:4c:56: 7f:54:a4:f7:d4:54:17:4f:67:90:32:bf:dc:a5:7f: 48:24:af:dc:32:e0:e5:e0:be:f3:41:6b:c1:5f:46: 25:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:FD:71:A7:A3:D8:1A:29:C5:72:A1:E6:77:91:10:D7:45:31:F1:C3 X509v3 Authority Key Identifier: keyid:3E:E2:6F:BA:4B:E3:59:DE:AE:50:07:92:EB:FF:78:D0:0A:CB:76:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PuJvukvjWd6uUAeS6_940ArLdgw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:1e:77:87:a3:f6:ed:27:02:2d:2c:71:8b:f2:8e:06:f9:02: c3:56:c2:cd:61:08:5c:e4:e7:ed:5e:20:ad:f9:5c:1a:7c:27: 5a:d4:35:b5:3c:43:a7:fa:93:cd:dd:3a:52:db:e9:91:15:e6: aa:b7:bf:e8:32:b6:9b:17:f0:e0:da:f8:9c:9e:64:9d:d8:d9: 7a:a4:50:e2:b8:d5:fb:37:57:1d:fc:07:f3:66:ad:6d:d0:81: dd:e3:cb:e6:3e:02:ac:20:87:2f:e5:8c:5f:18:8b:79:7e:cb: 5f:b0:d4:6c:3e:22:c9:e1:7d:06:36:3a:6e:bd:68:b0:7b:ec: c4:34:b1:db:e3:38:4b:0f:c6:41:a5:61:41:6a:fa:66:2c:48: d5:88:8c:dd:49:d9:a6:5c:d7:5b:33:f0:7d:4a:86:05:77:66: 71:84:32:53:3c:f1:03:20:92:72:0b:64:11:9c:07:aa:94:70: 41:4f:e1:2e:90:0a:ae:3e:75:d9:bd:eb:28:df:a6:2c:6c:1b: e2:c5:50:8d:83:53:14:4c:fa:f5:f9:14:33:ca:f3:af:b8:47: 20:0a:6b:48:13:84:a7:fb:f2:58:d4:6b:71:90:dc:83:35:9c: 7b:30:b9:c9:56:f6:75:cc:8d:8e:ae:f2:35:89:ed:f8:da:65: 6a:c4:5b:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTk2QzQxMTAvBgNVBAUTKDNFRTI2RkJBNEJFMzU5REVBRTUwMDc5MkVCRkY3OEQw MEFDQjc2MEMwHhcNMjUxMDE5MDIxNTMyWhcNMjUxMDI2MDIxNTMyWjAYMRYwFAYD VQQDEw02OGY0NDljNC03M2Q2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz2vbmSsGawqivGD+f0Q84baz1yGT9dpRrQdWpsslZOfSoQAQR81E1cICyTLx Ls7Q45a4SoiEdH+9nj6kLlUSu2wZ/u4tiUiQ4nquw9J7A7j1lbZ/Nqz4Nyc0JzP1 pBtqinN4xjUREznEjFuDCDClmShsKh5FlqBsrq8qRm3Zl0JzWAxi6v79MzsJqNPb T5dy+NnpS+Tz3G2nFsI1wBYsYKaueq/v+g2ZZNgAnttQ5QtlWP3b8JU7p41RiMtG 1WLjDzWWROBVoRws1vkTOc3TH/xK0AP2F416vJrgt5OiTFZ/VKT31FQXT2eQMr/c pX9IJK/cMuDl4L7zQWvBX0Yl9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDr9caej 2BopxXKh5neRENdFMfHDMB8GA1UdIwQYMBaAFD7ib7pL41nerlAHkuv/eNAKy3YM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTZDNC9GM0RERUVERTgz MzAxMUVDOEZGMzkzODNDNEY5QUUwMi9QdUp2dWt2aldkNnVVQWVTNl85NDBBckxk Z3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1B1SnZ1a3ZqV2Q2dVVBZVM2Xzk0MEFyTGRndy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTZDNC9GM0RERUVERTgzMzAxMUVDOEZGMzkzODNDNEY5QUUwMi9QdUp2dWt2aldk NnVVQWVTNl85NDBBckxkZ3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKHneHo/btJwItLHGL8o4G+QLDVsLNYQhc5OftXiCt+VwafCda1DW1 PEOn+pPN3TpS2+mRFeaqt7/oMrabF/Dg2vicnmSd2Nl6pFDiuNX7N1cd/AfzZq1t 0IHd48vmPgKsIIcv5YxfGIt5fstfsNRsPiLJ4X0GNjpuvWiwe+zENLHb4zhLD8ZB pWFBavpmLEjViIzdSdmmXNdbM/B9SoYFd2ZxhDJTPPEDIJJyC2QRnAeqlHBBT+Eu kAquPnXZveso36YsbBvixVCNg1MUTPr1+RQzyvOvuEcgCmtIE4Sn+/JY1GtxkNyD NZx7MLnJVvZ1zI2OrvI1ie342mVqxFtE -----END CERTIFICATE-----Generated at Mon Oct 20 21:26:31 2025 by rpki-client