$ rpki-client -vvf rpki.apnic.net/member_repository/A9188D8F/B852FB3C432411EA9263254AC4F9AE02/pS-PmFnKxH1oVCcjTSYW655TljQ.mft File: pS-PmFnKxH1oVCcjTSYW655TljQ.mft (raw, json) Hash identifier: gkcQUZJ76zWINkVwT29JSy9Ei0bHBVnK1nsLYtG6uJM= Subject key identifier: E3:2E:30:82:20:60:0E:60:F7:EB:C4:D4:15:D3:4F:BA:78:A0:1B:14 Authority key identifier: A5:2F:8F:98:59:CA:C4:7D:68:54:27:23:4D:26:16:EB:9E:53:96:34 Certificate issuer: /CN=A9188D8F/serialNumber=A52F8F9859CAC47D685427234D2616EB9E539634 Certificate serial: 0B52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pS-PmFnKxH1oVCcjTSYW655TljQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188D8F/B852FB3C432411EA9263254AC4F9AE02/pS-PmFnKxH1oVCcjTSYW655TljQ.mft Manifest number: 0B4B Signing time: Sat 18 Oct 2025 20:05:58 +0000 Manifest this update: Sat 18 Oct 2025 20:05:57 +0000 Manifest next update: Sat 25 Oct 2025 20:05:57 +0000 Files and hashes: 1: pS-PmFnKxH1oVCcjTSYW655TljQ.crl (hash: P4E4DldLVjVOAfujyTKIuZHLB73S1tUDdYUnhjreyWM=) 2: A84F7CEE432711EA87CB0E53C4F9AE02.roa (hash: 9D2VyaAKjVgoxkaamh4Z/Ffje6FAagohXWssSAvixLM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188D8F/B852FB3C432411EA9263254AC4F9AE02/pS-PmFnKxH1oVCcjTSYW655TljQ.crl rsync://rpki.apnic.net/member_repository/A9188D8F/B852FB3C432411EA9263254AC4F9AE02/pS-PmFnKxH1oVCcjTSYW655TljQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pS-PmFnKxH1oVCcjTSYW655TljQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:05:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2898 (0xb52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188D8F, serialNumber=A52F8F9859CAC47D685427234D2616EB9E539634 Validity Not Before: Oct 18 20:05:57 2025 GMT Not After : Oct 25 20:05:57 2025 GMT Subject: CN=68f3f325-9396 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:84:ea:cb:1b:61:87:7e:87:54:3c:26:fd:ef: 84:80:99:82:02:c2:3a:8d:ed:c4:76:5c:33:ae:28: 81:0c:60:69:e7:ee:60:0b:de:68:08:4b:9f:56:89: 87:8e:c1:6b:60:b9:16:02:47:55:4a:72:20:c2:98: 2e:16:75:a4:64:4b:5a:97:db:a4:a7:29:d1:9c:95: f6:a3:91:14:bc:6d:08:52:1a:bd:63:6d:71:e7:65: 88:e2:bd:1a:8d:af:94:65:ba:cb:26:f5:15:9f:76: 64:ab:6d:8d:05:52:fd:6c:89:20:09:57:f2:33:0c: 52:3c:72:19:c2:a8:af:de:0c:10:bc:1d:4f:31:f5: ac:d0:8f:81:de:e5:25:a1:2e:5f:bd:59:db:6f:b4: 9c:ca:ea:d7:93:67:bd:15:e9:d5:15:4e:6b:25:e3: 98:0e:cc:16:ee:c1:87:62:9a:ab:dd:fd:c2:25:05: 0b:38:98:b4:2a:ca:69:5e:59:66:90:f6:eb:0b:03: 4e:32:fa:e0:95:0d:37:08:2e:ab:7b:ce:8b:53:a7: 74:cc:e7:cf:cc:3f:36:f1:2c:d1:9e:31:52:7b:f5: 95:fc:76:67:e5:a6:8e:5a:ae:b2:a4:87:27:39:7f: e6:a2:b0:89:d0:97:d1:4f:76:3e:ae:4a:13:67:5f: ad:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:2E:30:82:20:60:0E:60:F7:EB:C4:D4:15:D3:4F:BA:78:A0:1B:14 X509v3 Authority Key Identifier: keyid:A5:2F:8F:98:59:CA:C4:7D:68:54:27:23:4D:26:16:EB:9E:53:96:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188D8F/B852FB3C432411EA9263254AC4F9AE02/pS-PmFnKxH1oVCcjTSYW655TljQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pS-PmFnKxH1oVCcjTSYW655TljQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188D8F/B852FB3C432411EA9263254AC4F9AE02/pS-PmFnKxH1oVCcjTSYW655TljQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:c2:a0:99:20:f2:14:34:b6:a8:bc:21:7d:a5:3a:8d:79:f4: 4e:b3:a6:8b:09:96:9e:09:bf:fe:d8:3e:44:00:32:6b:d1:6c: d2:d7:e9:cb:7a:ed:62:c4:58:c2:97:28:ac:ee:3f:24:9c:25: 02:07:89:f1:d9:3f:1f:a5:3a:67:f5:33:54:c3:7e:e7:2d:17: 4e:3e:a4:3d:49:86:e0:1d:69:47:7b:be:53:68:e5:94:d8:12: 34:30:93:8a:ea:44:71:6c:db:66:75:13:24:33:26:a5:56:3a: 71:e2:b9:59:fa:ac:79:03:f5:d7:c2:0b:4b:ac:49:fa:d5:11: 9c:0e:ea:ef:3c:51:44:af:20:79:0d:a3:b8:cb:d4:8b:21:c8: dd:bf:fc:35:e1:04:e6:ce:12:3d:b4:96:c7:1f:6d:fd:64:23: e5:f7:82:e5:32:d0:c0:23:21:cf:9b:52:a6:95:17:e4:8e:cc: ea:03:f3:8a:1d:37:4d:28:cb:88:77:b6:4e:44:ae:9e:b9:e4: 42:4c:d3:89:ab:fe:c2:ef:64:9a:63:90:fa:7c:ed:38:ac:9a: 5d:ac:57:76:e3:77:d8:61:a3:3b:d9:45:1e:93:67:5c:6c:7d: e4:a2:30:92:33:b6:94:3e:ad:62:05:b6:de:f1:da:2e:21:8e: 84:88:7d:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhEOEYxMTAvBgNVBAUTKEE1MkY4Rjk4NTlDQUM0N0Q2ODU0MjcyMzREMjYxNkVC OUU1Mzk2MzQwHhcNMjUxMDE4MjAwNTU3WhcNMjUxMDI1MjAwNTU3WjAYMRYwFAYD VQQDEw02OGYzZjMyNS05Mzk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA34Tqyxthh36HVDwm/e+EgJmCAsI6je3EdlwzriiBDGBp5+5gC95oCEufVomH jsFrYLkWAkdVSnIgwpguFnWkZEtal9ukpynRnJX2o5EUvG0IUhq9Y21x52WI4r0a ja+UZbrLJvUVn3Zkq22NBVL9bIkgCVfyMwxSPHIZwqiv3gwQvB1PMfWs0I+B3uUl oS5fvVnbb7ScyurXk2e9FenVFU5rJeOYDswW7sGHYpqr3f3CJQULOJi0KsppXllm kPbrCwNOMvrglQ03CC6re86LU6d0zOfPzD828SzRnjFSe/WV/HZn5aaOWq6ypIcn OX/morCJ0JfRT3Y+rkoTZ1+tpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOMuMIIg YA5g9+vE1BXTT7p4oBsUMB8GA1UdIwQYMBaAFKUvj5hZysR9aFQnI00mFuueU5Y0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEQ4Ri9CODUyRkIzQzQz MjQxMUVBOTI2MzI1NEFDNEY5QUUwMi9wUy1QbUZuS3hIMW9WQ2NqVFNZVzY1NVRs alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BTLVBtRm5LeEgxb1ZDY2pUU1lXNjU1VGxqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OEQ4Ri9CODUyRkIzQzQzMjQxMUVBOTI2MzI1NEFDNEY5QUUwMi9wUy1QbUZuS3hI MW9WQ2NqVFNZVzY1NVRsalEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRwqCZIPIUNLaovCF9pTqNefROs6aLCZaeCb/+2D5EADJr0WzS1+nL eu1ixFjClyis7j8knCUCB4nx2T8fpTpn9TNUw37nLRdOPqQ9SYbgHWlHe75TaOWU 2BI0MJOK6kRxbNtmdRMkMyalVjpx4rlZ+qx5A/XXwgtLrEn61RGcDurvPFFEryB5 DaO4y9SLIcjdv/w14QTmzhI9tJbHH239ZCPl94LlMtDAIyHPm1KmlRfkjszqA/OK HTdNKMuId7ZORK6eueRCTNOJq/7C72SaY5D6fO04rJpdrFd243fYYaM72UUek2dc bH3kojCSM7aUPq1iBbbe8douIY6EiH3d -----END CERTIFICATE-----Generated at Mon Oct 20 16:25:02 2025 by rpki-client