$ rpki-client -vvf rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft File: pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft (raw, json) Hash identifier: EzAF8YZXwLcG61zKAwnE2QRbWGf5OSjY0+gS4+W2LmU= Subject key identifier: 61:7F:90:5E:A6:3E:D5:A9:68:FB:49:0C:0D:93:BF:95:59:33:9D:4F Authority key identifier: A5:C4:A0:AB:0E:5E:E1:3B:14:84:54:39:B1:AE:4F:B3:44:68:C7:B9 Certificate issuer: /CN=A917C4E7/serialNumber=A5C4A0AB0E5EE13B14845439B1AE4FB34468C7B9 Certificate serial: 0358 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft Manifest number: 033A Signing time: Sun 19 Oct 2025 03:11:28 +0000 Manifest this update: Sun 19 Oct 2025 03:11:28 +0000 Manifest next update: Sun 26 Oct 2025 03:11:28 +0000 Files and hashes: 1: pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.crl (hash: 0UheORv8YKdqz9ofLhN8fKSsHdMHJvGWPB8F2+qhMsE=) 2: 50068D0EAB2511F0BE8B7031C4F9AE02.roa (hash: fn0Xj2rDf9EwZ75bgFt4LeWqJwoly1MWkYYDiWMaw0U=) 3: 7AD7FD049DE911F0A23C8031C4F9AE02.roa (hash: CUjzOk4Yzo5HfsbOc1jf19caQKnMTxc8EO2EcR/1U8c=) 4: AB6989BCEADF11ECADC46036C4F9AE02.roa (hash: yhsDMBW1yOy0Jq2CHVI1ejI5EG1pZPsxlabs6cbZ8HE=) 5: 1CC4CE409F6011F09893B163C4F9AE02.roa (hash: KAwmEq6r8piAe42dzjAmdH5JRd2zGuWtviPaTLfrkuY=) 6: FDCAB8A4948011F09DD92B2BC4F9AE02.roa (hash: kCEBaHwfIqs+1MsTxHmP6olnCtMZseut6OSfDQus2HE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.crl rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:11:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 856 (0x358) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C4E7, serialNumber=A5C4A0AB0E5EE13B14845439B1AE4FB34468C7B9 Validity Not Before: Oct 19 03:11:28 2025 GMT Not After : Oct 26 03:11:28 2025 GMT Subject: CN=68f456e0-45dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:24:0d:76:79:b8:b7:91:45:45:12:6b:39:1a: 5b:a0:33:29:3e:23:53:f5:c2:6b:ab:ea:d5:cf:ef: 2f:87:d8:7a:15:e8:38:bc:ba:3a:88:7e:e3:30:1a: 3a:fb:99:cc:94:ce:3d:49:6c:cd:17:1b:be:3c:bd: d5:d0:4d:06:59:02:36:08:b5:cb:69:b9:81:2b:a6: 61:68:6f:3c:3e:89:89:39:67:1d:be:20:68:5c:9c: 4a:7a:f7:cc:2c:ab:18:08:e6:27:19:0a:3b:f4:1b: 9c:d1:3c:ff:18:5f:4d:31:f3:e6:8e:42:0d:21:73: f4:be:13:ad:bb:a2:b3:58:40:66:f5:01:ea:61:8a: f8:7a:d6:bd:54:91:f4:ed:fb:c0:01:0c:5d:39:f3: 77:4e:0f:3e:eb:44:ef:e5:b2:85:63:67:af:e2:91: f6:e0:65:28:ba:1f:86:bc:03:40:f4:1b:c9:7e:65: e7:a2:d1:4e:70:60:0e:fa:48:17:2b:b3:fb:92:6a: 5b:57:60:ce:9c:a5:3d:5a:eb:5a:b4:03:4b:45:3c: d8:11:c3:b1:50:c9:a2:4d:ba:6a:78:a5:71:d4:62: 8b:7e:de:1f:95:4c:f0:67:23:2a:ca:36:e9:9e:8c: 6b:90:7f:2a:ce:d0:0c:37:09:9b:59:2b:38:ff:51: b5:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:7F:90:5E:A6:3E:D5:A9:68:FB:49:0C:0D:93:BF:95:59:33:9D:4F X509v3 Authority Key Identifier: keyid:A5:C4:A0:AB:0E:5E:E1:3B:14:84:54:39:B1:AE:4F:B3:44:68:C7:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:55:da:e9:ae:a5:b6:11:c4:1e:bf:0f:4f:af:61:fb:c2:42: 94:bd:86:90:e4:67:68:dc:b6:ee:b1:ee:bb:3f:a9:c2:e8:73: 66:f1:ae:dc:e7:cd:bc:fc:4b:64:38:3f:2b:0e:d8:5b:66:29: ba:c2:2f:20:5f:14:1a:67:d8:7f:a4:40:3c:b6:c3:b0:38:a4: 35:e1:8f:95:66:d1:45:12:15:76:5c:2d:96:91:f0:bd:9a:9a: 00:06:da:31:25:ad:19:0a:18:a7:b9:57:fb:db:c7:58:5b:a3: ad:aa:39:09:57:2e:b4:0c:b7:45:f0:2e:17:f8:67:ee:0c:9f: 40:82:30:3e:9b:f1:03:29:ce:47:e4:c8:8b:ec:05:48:9c:06: 21:94:8a:3c:2e:76:dc:9a:c9:7a:9b:3f:0f:4b:85:a8:21:17: 0f:71:b8:39:7f:3d:26:18:50:07:56:f8:06:0f:4d:27:11:00: b7:82:24:c8:9a:4d:1c:6a:86:c1:08:38:03:61:48:cd:96:5d: d1:9e:16:b4:a6:64:e6:bd:77:a7:11:0b:d3:b4:75:e0:4f:f8: f3:83:f2:70:55:8f:65:55:ce:0b:20:15:ab:f5:93:be:5d:b0: 83:02:77:a3:b6:bc:dd:71:c1:36:94:96:a9:46:82:c6:9b:29: b4:f3:e4:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M0RTcxMTAvBgNVBAUTKEE1QzRBMEFCMEU1RUUxM0IxNDg0NTQzOUIxQUU0RkIz NDQ2OEM3QjkwHhcNMjUxMDE5MDMxMTI4WhcNMjUxMDI2MDMxMTI4WjAYMRYwFAYD VQQDEw02OGY0NTZlMC00NWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuyQNdnm4t5FFRRJrORpboDMpPiNT9cJrq+rVz+8vh9h6Feg4vLo6iH7jMBo6 +5nMlM49SWzNFxu+PL3V0E0GWQI2CLXLabmBK6ZhaG88PomJOWcdviBoXJxKevfM LKsYCOYnGQo79Buc0Tz/GF9NMfPmjkINIXP0vhOtu6KzWEBm9QHqYYr4eta9VJH0 7fvAAQxdOfN3Tg8+60Tv5bKFY2ev4pH24GUouh+GvANA9BvJfmXnotFOcGAO+kgX K7P7kmpbV2DOnKU9WutatANLRTzYEcOxUMmiTbpqeKVx1GKLft4flUzwZyMqyjbp noxrkH8qztAMNwmbWSs4/1G1+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGF/kF6m PtWpaPtJDA2Tv5VZM51PMB8GA1UdIwQYMBaAFKXEoKsOXuE7FIRUObGuT7NEaMe5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzRFNy85ODFDMDU1OEVB RDgxMUVDQkM3RUUwMTVDNEY5QUUwMi9wY1NncXc1ZTRUc1VoRlE1c2E1UHMwUm94 N2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BjU2dxdzVlNFRzVWhGUTVzYTVQczBSb3g3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzRFNy85ODFDMDU1OEVBRDgxMUVDQkM3RUUwMTVDNEY5QUUwMi9wY1NncXc1ZTRU c1VoRlE1c2E1UHMwUm94N2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMVdrprqW2EcQevw9Pr2H7wkKUvYaQ5Gdo3Lbuse67P6nC6HNm8a7c 5828/EtkOD8rDthbZim6wi8gXxQaZ9h/pEA8tsOwOKQ14Y+VZtFFEhV2XC2WkfC9 mpoABtoxJa0ZChinuVf728dYW6OtqjkJVy60DLdF8C4X+GfuDJ9AgjA+m/EDKc5H 5MiL7AVInAYhlIo8Lnbcmsl6mz8PS4WoIRcPcbg5fz0mGFAHVvgGD00nEQC3giTI mk0caobBCDgDYUjNll3Rnha0pmTmvXenEQvTtHXgT/jzg/JwVY9lVc4LIBWr9ZO+ XbCDAnejtrzdccE2lJapRoLGmym08+QE -----END CERTIFICATE-----Generated at Mon Oct 20 10:14:47 2025 by rpki-client