$ rpki-client -vvf rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.mft File: PRU2P7Cm9KjRqKXJn6O05ZMfi3w.mft (raw, json) Hash identifier: ekSzaEqHBlvAtRJD181pQN0dUQZAUEwBY+SpgKK1mvM= Subject key identifier: 38:05:F9:68:27:C7:5E:1B:DF:8C:D3:75:6D:1C:82:37:87:22:52:0E Authority key identifier: 3D:15:36:3F:B0:A6:F4:A8:D1:A8:A5:C9:9F:A3:B4:E5:93:1F:8B:7C Certificate issuer: /CN=A917535F/serialNumber=3D15363FB0A6F4A8D1A8A5C99FA3B4E5931F8B7C Certificate serial: 5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.mft Manifest number: 59 Signing time: Sun 19 Oct 2025 10:34:17 +0000 Manifest this update: Sun 19 Oct 2025 10:34:17 +0000 Manifest next update: Sun 26 Oct 2025 10:34:17 +0000 Files and hashes: 1: PRU2P7Cm9KjRqKXJn6O05ZMfi3w.crl (hash: 60vkCsirsW2usjRAOWefaFYGqcTOtovPj2gJy+Jai0s=) 2: A7E91DCE275A11F09892587AC4F9AE02.roa (hash: YdheOlkOrvYc+0WcsN5XG/W9vQjumV6X4tfqEURTyn4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.crl rsync://rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:34:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 91 (0x5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917535F, serialNumber=3D15363FB0A6F4A8D1A8A5C99FA3B4E5931F8B7C Validity Not Before: Oct 19 10:34:17 2025 GMT Not After : Oct 26 10:34:17 2025 GMT Subject: CN=68f4bea9-52f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ee:dc:dd:29:f2:60:4a:4b:de:21:7b:f1:42: bd:64:34:2e:c7:8e:5c:ae:65:d3:42:7f:08:97:58: 16:82:2a:6e:c4:94:35:ef:53:e3:f3:d1:4d:3d:c4: ef:16:f3:69:eb:1f:f9:55:3b:d2:1e:7c:03:4d:c9: d5:e5:08:07:f5:a5:8b:7d:fc:29:ab:34:fc:b9:c8: bb:fb:89:70:d9:5b:3d:8a:9f:b3:07:a1:84:24:81: 10:b1:02:e0:ce:af:2e:6f:22:30:d7:b9:41:9c:78: 5a:37:ed:7e:63:71:7a:94:68:b7:4f:2b:90:b1:77: 6d:ca:60:ae:db:6b:8d:69:d2:09:ad:61:3c:24:db: d9:9d:ca:ea:02:55:33:28:1a:d2:66:e2:8a:52:0f: 66:f4:77:60:2b:21:19:5a:0b:51:ff:9e:7d:7c:e1: 12:92:b5:96:61:ba:3e:cf:38:c5:02:f5:46:6a:96: 7d:e8:48:8e:48:d0:a2:d1:80:02:5e:ea:3a:3e:92: fa:b2:9b:a9:2e:c3:46:6d:ca:a3:e8:45:d7:39:65: 51:02:82:b2:24:7f:33:92:e7:7e:4b:7f:33:30:ea: 32:62:b0:d3:dd:f9:6f:82:5e:b4:c1:64:07:e7:da: a7:51:4b:e7:d8:1e:c1:48:49:28:a9:e2:bc:dd:25: a3:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:05:F9:68:27:C7:5E:1B:DF:8C:D3:75:6D:1C:82:37:87:22:52:0E X509v3 Authority Key Identifier: keyid:3D:15:36:3F:B0:A6:F4:A8:D1:A8:A5:C9:9F:A3:B4:E5:93:1F:8B:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:55:ae:d0:ee:e3:84:b6:d2:0e:f6:5f:86:50:69:57:ef:0a: 9f:7e:2c:11:0d:02:6e:e5:b1:55:6a:37:81:8b:3a:c1:1c:57: 79:9c:fc:62:32:61:1e:b1:f0:50:5b:28:b2:c4:21:03:05:c2: 2e:56:59:ab:c6:5f:49:cc:5e:d5:b7:a9:4a:d3:a9:a3:f4:f0: ee:8b:be:5b:44:4c:99:ea:d1:37:2a:d3:68:5e:1f:23:d3:ad: 62:2e:ff:8f:36:d9:46:7a:ff:a7:0d:5b:b8:91:cf:f7:ee:33: 32:d2:a1:08:0e:cb:5a:7f:83:af:e1:9a:83:ef:57:05:f9:99: b2:8f:84:90:74:3e:2e:95:0b:d5:c3:75:35:fe:02:a8:a4:21: 9e:b3:41:85:eb:01:fe:3b:01:03:2d:92:1c:ff:e5:a3:db:2c: c4:88:b3:9c:b8:11:dd:f6:10:86:98:4a:54:27:0e:f6:cc:20: 7f:f0:e0:ce:24:74:b6:7b:b4:06:2d:91:43:fa:fe:ee:b9:1e: ba:f1:03:71:af:03:d1:3c:8b:75:c4:3c:dd:a7:fa:46:15:86: 07:91:ff:68:b3:ee:c6:e8:59:37:62:8e:6e:a6:58:07:96:56: c3:66:70:7d:d2:f7:7d:97:11:f8:56:b2:13:ca:35:1d:31:d4: ba:98:1d:ef -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NTM1RjExMC8GA1UEBRMoM0QxNTM2M0ZCMEE2RjRBOEQxQThBNUM5OUZBM0I0RTU5 MzFGOEI3QzAeFw0yNTEwMTkxMDM0MTdaFw0yNTEwMjYxMDM0MTdaMBgxFjAUBgNV BAMTDTY4ZjRiZWE5LTUyZjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDE7tzdKfJgSkveIXvxQr1kNC7HjlyuZdNCfwiXWBaCKm7ElDXvU+Pz0U09xO8W 82nrH/lVO9IefANNydXlCAf1pYt9/CmrNPy5yLv7iXDZWz2Kn7MHoYQkgRCxAuDO ry5vIjDXuUGceFo37X5jcXqUaLdPK5Cxd23KYK7ba41p0gmtYTwk29mdyuoCVTMo GtJm4opSD2b0d2ArIRlaC1H/nn184RKStZZhuj7POMUC9UZqln3oSI5I0KLRgAJe 6jo+kvqym6kuw0ZtyqPoRdc5ZVECgrIkfzOS535LfzMw6jJisNPd+W+CXrTBZAfn 2qdRS+fYHsFISSip4rzdJaMZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUOAX5aCfH XhvfjNN1bRyCN4ciUg4wHwYDVR0jBBgwFoAUPRU2P7Cm9KjRqKXJn6O05ZMfi3ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1MzVGLzJFMjhDODVFMjc1 QTExRjA4RUZGNkI3NkM0RjlBRTAyL1BSVTJQN0NtOUtqUnFLWEpuNk8wNVpNZmkz dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUFJVMlA3Q205S2pScUtYSm42TzA1Wk1maTN3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1 MzVGLzJFMjhDODVFMjc1QTExRjA4RUZGNkI3NkM0RjlBRTAyL1BSVTJQN0NtOUtq UnFLWEpuNk8wNVpNZmkzdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADFVrtDu44S20g72X4ZQaVfvCp9+LBENAm7lsVVqN4GLOsEcV3mc/GIy YR6x8FBbKLLEIQMFwi5WWavGX0nMXtW3qUrTqaP08O6LvltETJnq0Tcq02heHyPT rWIu/4822UZ6/6cNW7iRz/fuMzLSoQgOy1p/g6/hmoPvVwX5mbKPhJB0Pi6VC9XD dTX+AqikIZ6zQYXrAf47AQMtkhz/5aPbLMSIs5y4Ed32EIaYSlQnDvbMIH/w4M4k dLZ7tAYtkUP6/u65HrrxA3GvA9E8i3XEPN2n+kYVhgeR/2iz7sboWTdijm6mWAeW VsNmcH3S932XEfhWshPKNR0x1LqYHe8= -----END CERTIFICATE-----Generated at Mon Oct 20 13:59:22 2025 by rpki-client