$ rpki-client -vvf rpki.apnic.net/member_repository/A9169E54/E2829C2A4FFB11F0AAEB3877C4F9AE02/pZqv2bOxSIduExDPGyR6mnybbJg.mft File: pZqv2bOxSIduExDPGyR6mnybbJg.mft (raw, json) Hash identifier: u5aCU591GIklTMEaDEbVeq9WirhiOp58+kzjyM5HGDA= Subject key identifier: 86:56:F0:13:75:D7:9B:77:70:B9:96:93:14:29:A8:6A:50:7A:2B:B5 Authority key identifier: A5:9A:AF:D9:B3:B1:48:87:6E:13:10:CF:1B:24:7A:9A:7C:9B:6C:98 Certificate issuer: /CN=A9169E54/serialNumber=A59AAFD9B3B148876E1310CF1B247A9A7C9B6C98 Certificate serial: 3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZqv2bOxSIduExDPGyR6mnybbJg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169E54/E2829C2A4FFB11F0AAEB3877C4F9AE02/pZqv2bOxSIduExDPGyR6mnybbJg.mft Manifest number: 3E Signing time: Sun 19 Oct 2025 10:55:23 +0000 Manifest this update: Sun 19 Oct 2025 10:55:22 +0000 Manifest next update: Sun 26 Oct 2025 10:55:22 +0000 Files and hashes: 1: pZqv2bOxSIduExDPGyR6mnybbJg.crl (hash: Q/aPR0ZVovcx6ufXx0ljVv52u3r+FQjs/wdyTWPKC/c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169E54/E2829C2A4FFB11F0AAEB3877C4F9AE02/pZqv2bOxSIduExDPGyR6mnybbJg.crl rsync://rpki.apnic.net/member_repository/A9169E54/E2829C2A4FFB11F0AAEB3877C4F9AE02/pZqv2bOxSIduExDPGyR6mnybbJg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZqv2bOxSIduExDPGyR6mnybbJg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:55:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62 (0x3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169E54, serialNumber=A59AAFD9B3B148876E1310CF1B247A9A7C9B6C98 Validity Not Before: Oct 19 10:55:22 2025 GMT Not After : Oct 26 10:55:22 2025 GMT Subject: CN=68f4c39b-dc2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b7:2c:14:00:2e:e8:9f:e2:22:d5:58:62:c6: 32:10:74:f1:3d:4e:3f:85:96:e2:ff:a6:f5:a7:41: fc:65:3e:73:fa:45:f5:7b:a7:71:99:8e:46:ac:c9: b1:04:9c:68:9f:f1:b9:5d:85:36:62:ad:92:19:5f: c5:c8:3c:3b:91:d7:96:6a:c3:f7:73:86:70:18:65: 08:86:11:0d:9b:ea:8f:ff:72:db:eb:f7:9c:3f:28: 2b:9f:d3:2d:68:34:c1:6a:70:52:d5:8e:fd:9e:d7: 9f:34:b1:7f:28:33:53:36:19:c3:a3:75:c3:1b:8c: 22:77:f1:35:5b:fe:66:13:15:eb:51:16:31:d6:6c: 8d:54:51:40:7e:70:3b:a8:e1:35:81:36:10:56:1c: 4a:8a:03:6e:4e:05:27:a6:96:44:44:e7:e2:07:97: 3a:02:15:d0:ea:30:95:d4:57:6c:16:ce:8e:16:ad: e2:4b:90:cc:f3:94:e0:c2:d3:a3:d1:be:3d:46:49: 62:5d:4d:a4:4a:de:14:21:bb:53:f5:2f:3d:95:4b: 7e:43:b6:ce:fb:d6:7d:5e:ef:a7:a0:07:38:23:50: f9:1a:38:ff:f0:2d:bf:41:4b:34:60:5e:36:11:d6: 3e:58:12:f0:f8:bb:0f:e3:6d:ed:fd:b0:fa:d9:00: e6:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:56:F0:13:75:D7:9B:77:70:B9:96:93:14:29:A8:6A:50:7A:2B:B5 X509v3 Authority Key Identifier: keyid:A5:9A:AF:D9:B3:B1:48:87:6E:13:10:CF:1B:24:7A:9A:7C:9B:6C:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169E54/E2829C2A4FFB11F0AAEB3877C4F9AE02/pZqv2bOxSIduExDPGyR6mnybbJg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZqv2bOxSIduExDPGyR6mnybbJg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169E54/E2829C2A4FFB11F0AAEB3877C4F9AE02/pZqv2bOxSIduExDPGyR6mnybbJg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:69:58:ad:d3:6b:4c:a4:4e:9d:19:ad:09:60:2f:59:b9:c0: 70:85:80:bf:74:94:39:40:27:4a:88:9f:7f:85:61:72:e5:bd: 09:fe:6b:03:86:fb:85:06:37:de:93:1c:95:4c:6a:d6:62:b9: 7d:58:4e:82:40:c1:90:61:9d:ec:df:1e:bd:e6:3b:37:0e:eb: c5:51:57:aa:b4:c5:17:3e:9b:3b:07:2c:29:69:91:5e:a9:5b: 9f:67:01:11:1a:95:47:59:51:0a:18:8a:34:2b:fd:e6:df:0a: 37:ab:9a:47:48:c8:e9:c9:e9:d2:cf:b1:92:02:61:e8:a5:77: 8c:87:04:7e:6b:dd:89:f5:91:33:a6:4d:70:bc:22:d1:ea:f1: 0b:28:25:95:52:ae:79:6f:9d:f5:74:24:e2:7e:1c:26:98:ca: fc:1b:2f:99:31:cb:64:34:6f:4b:dd:6c:b7:cc:71:1e:8f:23: 8c:8a:f5:ab:90:c9:3b:f1:df:1f:af:79:8f:ed:72:70:d8:29: 62:09:08:6e:b5:e2:9c:d2:bb:50:be:73:e8:ef:38:36:ec:49: e7:16:e4:3b:fc:49:53:b9:2d:7d:ac:4a:23:0b:66:c7:38:67: 3e:5f:f8:fb:c5:2f:12:17:8e:7a:75:2d:86:c5:e4:a3:04:3f: 40:34:68:e6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 OUU1NDExMC8GA1UEBRMoQTU5QUFGRDlCM0IxNDg4NzZFMTMxMENGMUIyNDdBOUE3 QzlCNkM5ODAeFw0yNTEwMTkxMDU1MjJaFw0yNTEwMjYxMDU1MjJaMBgxFjAUBgNV BAMTDTY4ZjRjMzliLWRjMmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+tywUAC7on+Ii1VhixjIQdPE9Tj+FluL/pvWnQfxlPnP6RfV7p3GZjkasybEE nGif8bldhTZirZIZX8XIPDuR15Zqw/dzhnAYZQiGEQ2b6o//ctvr95w/KCuf0y1o NMFqcFLVjv2e1580sX8oM1M2GcOjdcMbjCJ38TVb/mYTFetRFjHWbI1UUUB+cDuo 4TWBNhBWHEqKA25OBSemlkRE5+IHlzoCFdDqMJXUV2wWzo4WreJLkMzzlODC06PR vj1GSWJdTaRK3hQhu1P1Lz2VS35Dts771n1e76egBzgjUPkaOP/wLb9BSzRgXjYR 1j5YEvD4uw/jbe39sPrZAObnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhlbwE3XX m3dwuZaTFCmoalB6K7UwHwYDVR0jBBgwFoAUpZqv2bOxSIduExDPGyR6mnybbJgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY5RTU0L0UyODI5QzJBNEZG QjExRjBBQUVCMzg3N0M0RjlBRTAyL3BacXYyYk94U0lkdUV4RFBHeVI2bW55YmJK Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcFpxdjJiT3hTSWR1RXhEUEd5UjZtbnliYkpnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY5 RTU0L0UyODI5QzJBNEZGQjExRjBBQUVCMzg3N0M0RjlBRTAyL3BacXYyYk94U0lk dUV4RFBHeVI2bW55YmJKZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJppWK3Ta0ykTp0ZrQlgL1m5wHCFgL90lDlAJ0qIn3+FYXLlvQn+awOG +4UGN96THJVMatZiuX1YToJAwZBhnezfHr3mOzcO68VRV6q0xRc+mzsHLClpkV6p W59nAREalUdZUQoYijQr/ebfCjermkdIyOnJ6dLPsZICYeild4yHBH5r3Yn1kTOm TXC8ItHq8QsoJZVSrnlvnfV0JOJ+HCaYyvwbL5kxy2Q0b0vdbLfMcR6PI4yK9auQ yTvx3x+veY/tcnDYKWIJCG614pzSu1C+c+jvODbsSecW5Dv8SVO5LX2sSiMLZsc4 Zz5f+PvFLxIXjnp1LYbF5KMEP0A0aOY= -----END CERTIFICATE-----Generated at Mon Oct 20 16:16:59 2025 by rpki-client