$ rpki-client -vvf rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft File: PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft (raw, json) Hash identifier: MIMqZabZ6hMH51f+llGkML/GImCu3ZFqw9LGCZhrTWM= Subject key identifier: EC:D2:2C:9C:DD:1D:86:59:92:64:74:52:EF:B4:93:85:78:B9:1E:81 Authority key identifier: 3D:3E:E4:E0:55:C4:E0:F1:FD:5B:17:BC:DF:05:D9:F8:52:CF:05:BC Certificate issuer: /CN=A917AB94/serialNumber=3D3EE4E055C4E0F1FD5B17BCDF05D9F852CF05BC Certificate serial: 02F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft Manifest number: 02F3 Signing time: Sun 19 Oct 2025 03:21:23 +0000 Manifest this update: Sun 19 Oct 2025 03:21:23 +0000 Manifest next update: Sun 26 Oct 2025 03:21:23 +0000 Files and hashes: 1: PT7k4FXE4PH9Wxe83wXZ-FLPBbw.crl (hash: cQSAT1Mt5iit56HEEAw01xu+sF9IdGLnitLMs+TPolc=) 2: 865AA3E400FC11EDAA69A61DC4F9AE02.roa (hash: lRZm7R1XzhUUnYkMhnYwCmY95i90cE75koEdjvOdBVc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.crl rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:21:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 761 (0x2f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917AB94, serialNumber=3D3EE4E055C4E0F1FD5B17BCDF05D9F852CF05BC Validity Not Before: Oct 19 03:21:23 2025 GMT Not After : Oct 26 03:21:23 2025 GMT Subject: CN=68f45933-db05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:5d:af:8a:34:49:f2:67:72:cd:5c:98:17:6f: 1d:ca:eb:04:3a:42:2a:e8:6a:f5:83:b9:f2:46:12: 85:bc:4e:af:0a:b3:fe:e0:32:d9:a9:ff:0c:b3:99: 52:76:70:f7:7b:10:ea:fc:ce:dd:6e:e5:ec:a9:59: ac:64:3d:c6:f1:63:7d:2a:41:64:8b:09:11:24:6e: 7a:1c:4c:8d:88:1c:32:95:7e:c7:aa:0c:63:e2:ac: 31:ae:a5:1d:cc:dd:f8:f5:bc:88:62:be:96:df:72: cb:d6:2b:8e:00:a7:80:f9:50:55:a0:01:03:14:e7: eb:5b:9b:67:12:fb:6b:c2:9c:f0:ab:e6:4d:57:04: 11:54:a4:96:89:f9:11:56:6f:58:e9:37:53:e3:f1: ee:e0:81:24:e8:21:a6:44:17:60:f8:78:8a:32:9d: cb:91:1b:21:ed:d3:a1:29:39:9b:35:21:71:1b:93: dc:59:ab:1e:0b:85:f8:d4:ec:23:96:86:ac:9e:a4: 5f:73:c2:a1:9a:4e:39:39:c6:8b:52:1e:65:fa:a8: 82:e6:d5:da:13:29:73:a1:fc:ab:6e:e3:01:80:bc: 40:c7:1e:02:be:96:f8:bc:2b:c0:28:85:dd:7c:ec: 23:67:5a:14:35:d1:cb:ff:0d:53:87:2c:b0:da:45: 82:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:D2:2C:9C:DD:1D:86:59:92:64:74:52:EF:B4:93:85:78:B9:1E:81 X509v3 Authority Key Identifier: keyid:3D:3E:E4:E0:55:C4:E0:F1:FD:5B:17:BC:DF:05:D9:F8:52:CF:05:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:7a:f8:db:ac:f5:fa:7d:c7:c7:61:5c:41:c2:9c:8d:00:34: 1f:fd:1a:d8:98:59:2b:c5:46:d0:6d:7f:ae:d0:cf:01:70:a6: c8:6e:56:a6:0a:9e:ac:64:8a:d5:98:ae:40:93:f8:10:23:fc: 85:bd:b7:64:86:63:ec:08:35:5f:a9:e9:96:86:12:b1:e2:b9: 7a:77:b8:e4:ca:ce:b5:fc:da:0a:98:95:27:2f:94:a4:06:ca: 82:8a:12:ca:e8:a3:c8:0d:a3:fa:d8:de:4e:17:4d:a8:57:4c: 0c:c0:fb:a0:88:9a:77:5f:00:4e:04:0a:0f:dd:1e:8c:00:8b: b8:90:15:9a:64:5d:63:0c:7a:a9:8b:04:a5:4d:bc:a1:5d:b2: ff:e7:a9:1a:6b:21:96:2b:af:66:5e:25:b5:56:66:78:8e:ad: 5e:b5:cc:e6:72:d3:4b:50:8b:b3:f4:4d:5e:03:d1:a5:60:3f: e2:31:64:66:13:7d:de:3a:e4:94:9a:72:ee:e9:39:0d:4a:e2: 54:92:25:5a:8c:db:7c:27:2f:f6:0b:1a:62:6b:ba:d5:cc:55: 6d:a8:19:ba:5c:c4:c2:ec:39:08:b9:d5:cf:fa:53:38:b0:d5: 56:04:2e:5e:99:aa:20:e2:41:ac:da:5d:5c:c2:51:86:7a:ed: 7d:79:09:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FCOTQxMTAvBgNVBAUTKDNEM0VFNEUwNTVDNEUwRjFGRDVCMTdCQ0RGMDVEOUY4 NTJDRjA1QkMwHhcNMjUxMDE5MDMyMTIzWhcNMjUxMDI2MDMyMTIzWjAYMRYwFAYD VQQDEw02OGY0NTkzMy1kYjA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzF2vijRJ8mdyzVyYF28dyusEOkIq6Gr1g7nyRhKFvE6vCrP+4DLZqf8Ms5lS dnD3exDq/M7dbuXsqVmsZD3G8WN9KkFkiwkRJG56HEyNiBwylX7Hqgxj4qwxrqUd zN349byIYr6W33LL1iuOAKeA+VBVoAEDFOfrW5tnEvtrwpzwq+ZNVwQRVKSWifkR Vm9Y6TdT4/Hu4IEk6CGmRBdg+HiKMp3LkRsh7dOhKTmbNSFxG5PcWaseC4X41Owj loasnqRfc8Khmk45OcaLUh5l+qiC5tXaEylzofyrbuMBgLxAxx4Cvpb4vCvAKIXd fOwjZ1oUNdHL/w1Thyyw2kWCmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOzSLJzd HYZZkmR0Uu+0k4V4uR6BMB8GA1UdIwQYMBaAFD0+5OBVxODx/VsXvN8F2fhSzwW8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUI5NC9EMkJGNkI3MkZC ODcxMUVDOTcyQkNFMTNDNEY5QUUwMi9QVDdrNEZYRTRQSDlXeGU4M3dYWi1GTFBC YncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BUN2s0RlhFNFBIOVd4ZTgzd1haLUZMUEJidy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUI5NC9EMkJGNkI3MkZCODcxMUVDOTcyQkNFMTNDNEY5QUUwMi9QVDdrNEZYRTRQ SDlXeGU4M3dYWi1GTFBCYncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIevjbrPX6fcfHYVxBwpyNADQf/RrYmFkrxUbQbX+u0M8BcKbIblam Cp6sZIrVmK5Ak/gQI/yFvbdkhmPsCDVfqemWhhKx4rl6d7jkys61/NoKmJUnL5Sk BsqCihLK6KPIDaP62N5OF02oV0wMwPugiJp3XwBOBAoP3R6MAIu4kBWaZF1jDHqp iwSlTbyhXbL/56kaayGWK69mXiW1VmZ4jq1etczmctNLUIuz9E1eA9GlYD/iMWRm E33eOuSUmnLu6TkNSuJUkiVajNt8Jy/2Cxpia7rVzFVtqBm6XMTC7DkIudXP+lM4 sNVWBC5emaog4kGs2l1cwlGGeu19eQmF -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:50 2025 by rpki-client