$ rpki-client -vvf rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.mft File: PQqIwMyj7oZ3zRffPuht5x38ESk.mft (raw, json) Hash identifier: zZ8rfwCV5wxGep3RkFOrLKllGmG6X/rRESg4QBJ9F2M= Subject key identifier: 9D:E4:8C:62:B1:D4:87:38:E4:FA:D5:62:B7:7E:C0:DD:6F:46:B1:6C Authority key identifier: 3D:0A:88:C0:CC:A3:EE:86:77:CD:17:DF:3E:E8:6D:E7:1D:FC:11:29 Certificate issuer: /CN=A91607DE/serialNumber=3D0A88C0CCA3EE8677CD17DF3EE86DE71DFC1129 Certificate serial: 0397 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQqIwMyj7oZ3zRffPuht5x38ESk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.mft Manifest number: 0392 Signing time: Sun 19 Oct 2025 02:48:05 +0000 Manifest this update: Sun 19 Oct 2025 02:48:03 +0000 Manifest next update: Sun 26 Oct 2025 02:48:03 +0000 Files and hashes: 1: PQqIwMyj7oZ3zRffPuht5x38ESk.crl (hash: xiSPcHKdMzI2XZ0WGOITkRsEeu1MPUNaU94sW94cgOA=) 2: FD398FA0BB5D11ECA62F8674C4F9AE02.roa (hash: OZN4xQkAGlo2J7xAsq7WK/TKxkfRBmTruJ0GM4QH81c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.crl rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQqIwMyj7oZ3zRffPuht5x38ESk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:48:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 919 (0x397) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91607DE, serialNumber=3D0A88C0CCA3EE8677CD17DF3EE86DE71DFC1129 Validity Not Before: Oct 19 02:48:03 2025 GMT Not After : Oct 26 02:48:03 2025 GMT Subject: CN=68f45164-631e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:87:1d:37:14:f3:d7:60:08:b6:84:81:9c:14: a3:9b:4d:c5:52:71:94:0f:67:e3:76:8c:28:b2:62: 9b:0b:81:7d:19:43:b6:27:ac:10:74:09:3e:4b:24: d7:03:f4:41:fb:4b:8b:a5:ca:c9:bb:37:22:e3:a9: 10:96:52:dd:49:f8:1f:26:de:c5:30:73:47:e3:a4: 00:3a:aa:4e:ce:5d:9b:a2:d6:b0:7f:39:ad:33:2c: 5f:17:f9:a1:d7:dc:6d:6b:99:5a:f3:e1:8c:19:f0: d8:d5:8d:5a:38:81:34:41:33:0a:6a:30:2c:85:97: 50:b9:10:27:80:ba:bb:1b:62:12:8a:1b:5b:1a:1a: 1b:25:da:8a:67:0a:7c:ed:8b:ca:b0:b6:12:dd:20: dd:99:79:92:30:d0:21:80:ec:ed:3a:69:4e:53:7f: 91:eb:b3:c9:f6:f5:0d:c6:dc:6b:73:2d:30:71:dd: 76:87:ba:8b:fc:ee:5a:59:b1:c2:e6:4d:21:01:08: d9:6c:a2:63:48:47:45:c4:f9:35:8d:02:fb:d2:58: 5e:3d:ef:e1:d0:b2:93:92:61:e8:f2:c8:c1:d8:76: b8:11:66:13:8a:70:26:9e:9c:df:7c:86:ea:6b:13: e5:ae:74:57:01:f8:56:d1:81:2f:ec:7e:b9:b1:e7: 09:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:E4:8C:62:B1:D4:87:38:E4:FA:D5:62:B7:7E:C0:DD:6F:46:B1:6C X509v3 Authority Key Identifier: keyid:3D:0A:88:C0:CC:A3:EE:86:77:CD:17:DF:3E:E8:6D:E7:1D:FC:11:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQqIwMyj7oZ3zRffPuht5x38ESk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:43:db:58:a8:1c:f7:13:b2:75:2b:2e:16:5f:67:2c:98:a6: 7d:f9:92:17:a6:b0:8a:1f:4d:d4:9e:52:16:cd:41:a1:ed:2f: d1:2d:76:02:8d:6f:bb:af:08:39:ce:aa:fa:ee:bf:58:de:9e: 10:42:18:3f:6e:cc:37:6a:72:16:8b:54:e8:6d:d5:64:0e:3f: f8:f2:07:cc:1e:e9:f6:82:27:0b:c1:e8:be:04:ea:75:22:f5: 58:f0:df:af:2d:8f:64:18:cd:47:2a:c7:0d:3d:d4:93:26:86: 48:9d:6b:df:a9:b9:60:55:aa:8b:4c:92:1c:bd:96:08:e8:08: 20:ab:03:cd:17:6b:58:21:e9:dd:65:95:f6:12:7a:6b:a3:7c: d6:f7:21:06:bf:ce:81:20:2d:fd:15:24:13:7a:b1:33:06:e8: 02:be:48:fb:b2:16:e5:9b:91:c0:c1:3f:39:7a:ca:e0:05:14: 28:2c:2d:49:6d:69:21:3c:c2:9a:c7:31:52:d1:6c:c5:88:4b: c8:3e:fd:0c:ec:80:6c:35:ef:b2:f7:2c:8b:02:9d:89:27:a0: 29:36:6c:2c:e9:af:35:9b:c2:65:8a:48:cd:c8:bd:86:b5:77: dd:0a:8b:18:c5:b7:96:66:ad:94:10:94:f7:54:31:af:74:f3: 3c:b4:5e:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA3REUxMTAvBgNVBAUTKDNEMEE4OEMwQ0NBM0VFODY3N0NEMTdERjNFRTg2REU3 MURGQzExMjkwHhcNMjUxMDE5MDI0ODAzWhcNMjUxMDI2MDI0ODAzWjAYMRYwFAYD VQQDEw02OGY0NTE2NC02MzFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqYcdNxTz12AItoSBnBSjm03FUnGUD2fjdowosmKbC4F9GUO2J6wQdAk+SyTX A/RB+0uLpcrJuzci46kQllLdSfgfJt7FMHNH46QAOqpOzl2botawfzmtMyxfF/mh 19xta5la8+GMGfDY1Y1aOIE0QTMKajAshZdQuRAngLq7G2ISihtbGhobJdqKZwp8 7YvKsLYS3SDdmXmSMNAhgOztOmlOU3+R67PJ9vUNxtxrcy0wcd12h7qL/O5aWbHC 5k0hAQjZbKJjSEdFxPk1jQL70lhePe/h0LKTkmHo8sjB2Ha4EWYTinAmnpzffIbq axPlrnRXAfhW0YEv7H65secJtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ3kjGKx 1Ic45PrVYrd+wN1vRrFsMB8GA1UdIwQYMBaAFD0KiMDMo+6Gd80X3z7obecd/BEp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDdERS9DNzY4MTRDNkJC NUExMUVDOTA4QUM5NkVDNEY5QUUwMi9QUXFJd015ajdvWjN6UmZmUHVodDV4MzhF U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BRcUl3TXlqN29aM3pSZmZQdWh0NXgzOEVTay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDdERS9DNzY4MTRDNkJCNUExMUVDOTA4QUM5NkVDNEY5QUUwMi9QUXFJd015ajdv WjN6UmZmUHVodDV4MzhFU2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDNQ9tYqBz3E7J1Ky4WX2csmKZ9+ZIXprCKH03UnlIWzUGh7S/RLXYC jW+7rwg5zqr67r9Y3p4QQhg/bsw3anIWi1TobdVkDj/48gfMHun2gicLwei+BOp1 IvVY8N+vLY9kGM1HKscNPdSTJoZInWvfqblgVaqLTJIcvZYI6AggqwPNF2tYIend ZZX2Enpro3zW9yEGv86BIC39FSQTerEzBugCvkj7shblm5HAwT85esrgBRQoLC1J bWkhPMKaxzFS0WzFiEvIPv0M7IBsNe+y9yyLAp2JJ6ApNmws6a81m8JlikjNyL2G tXfdCosYxbeWZq2UEJT3VDGvdPM8tF67 -----END CERTIFICATE-----Generated at Mon Oct 20 01:49:18 2025 by rpki-client