$ rpki-client -vvf rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.mft File: pUy3dCqrz05Y5dTB87nRLa2RtAY.mft (raw, json) Hash identifier: Mu5HxA26uedgw3ZifFDbLh1HTlbdbZs9qi5LV0dWKlg= Subject key identifier: 9B:1E:FF:A8:22:38:9D:7E:F6:90:09:0A:51:CC:E7:9E:C2:CB:DF:33 Authority key identifier: A5:4C:B7:74:2A:AB:CF:4E:58:E5:D4:C1:F3:B9:D1:2D:AD:91:B4:06 Certificate issuer: /CN=A9190D72/serialNumber=A54CB7742AABCF4E58E5D4C1F3B9D12DAD91B406 Certificate serial: 0139 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pUy3dCqrz05Y5dTB87nRLa2RtAY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.mft Manifest number: 0136 Signing time: Sun 19 Oct 2025 07:19:20 +0000 Manifest this update: Sun 19 Oct 2025 07:19:19 +0000 Manifest next update: Sun 26 Oct 2025 07:19:19 +0000 Files and hashes: 1: pUy3dCqrz05Y5dTB87nRLa2RtAY.crl (hash: gGkjlu8JVhXn/ocyRNtG8z8Hc8CfHho3UfwYZJdn2q0=) 2: 35D2294C4AB511EF87AB161BC4F9AE02.roa (hash: ojSPB0ISIGRw3cOfBtrECwI7sYrCbgl9SiZcYTomn1Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.crl rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pUy3dCqrz05Y5dTB87nRLa2RtAY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:19:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 313 (0x139) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190D72, serialNumber=A54CB7742AABCF4E58E5D4C1F3B9D12DAD91B406 Validity Not Before: Oct 19 07:19:19 2025 GMT Not After : Oct 26 07:19:19 2025 GMT Subject: CN=68f490f8-ed41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7d:f2:80:ce:b2:5a:72:c0:7e:ff:79:7c:b5: 0a:2a:4e:24:3d:67:21:b1:a9:6a:69:2f:aa:f1:69: 76:45:47:2b:dc:a8:79:49:e5:fa:96:7f:62:02:67: dd:d4:12:12:73:4a:1b:bf:09:31:e1:f7:aa:1a:ee: 49:ce:e5:41:c4:13:04:fb:b5:ac:25:7f:35:18:aa: 36:3d:f1:4a:d7:cd:45:24:68:25:20:d7:5c:a3:a1: 1e:3c:a6:86:de:fc:8f:88:f8:78:46:b2:de:3a:69: 79:c1:c3:f1:56:f0:47:e0:77:e9:0a:33:41:73:fb: 74:32:c5:d4:a0:8d:60:3c:32:3f:4c:b4:21:83:85: ca:c0:cf:e9:ea:b4:ed:70:d8:ec:61:ab:c7:5b:18: 64:e8:3e:47:16:fc:44:b3:a1:26:28:ba:e2:d0:98: 2e:c8:81:62:f7:79:15:b9:9f:3c:0b:81:e1:df:f5: a3:e6:7d:f0:cb:ee:ea:63:af:46:bb:e8:25:a7:25: 0b:b5:b5:17:d2:d8:c7:8b:d8:50:0d:67:7c:95:a6: 26:af:05:a9:df:7a:7c:28:b1:25:83:20:53:82:3b: 97:c5:18:51:fd:eb:f2:c0:f5:25:2b:51:ec:4b:49: e2:12:a2:59:c0:f0:fd:4e:c4:5e:fc:03:8e:61:ed: b8:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:1E:FF:A8:22:38:9D:7E:F6:90:09:0A:51:CC:E7:9E:C2:CB:DF:33 X509v3 Authority Key Identifier: keyid:A5:4C:B7:74:2A:AB:CF:4E:58:E5:D4:C1:F3:B9:D1:2D:AD:91:B4:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pUy3dCqrz05Y5dTB87nRLa2RtAY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:ce:0c:6f:58:b6:ac:e0:ae:fa:72:46:69:39:d0:f9:7c:65: 87:4b:1c:4b:a3:b7:ea:be:b4:8a:ba:3f:e0:a0:69:6f:7a:de: 00:92:cc:9a:c9:f5:a3:c8:ca:9c:73:36:d3:a0:b4:43:9f:b3: 0b:24:b3:5c:69:e5:4e:ea:34:a4:b8:1f:9f:40:f2:2e:b5:45: 1a:d2:06:89:4e:47:74:71:1f:03:fa:5b:b9:4e:ce:67:cf:e5: 4d:d9:25:e9:4e:6b:3a:7b:3f:7c:61:ce:77:84:87:4f:19:70: 92:af:19:71:ee:29:cc:ac:d5:8c:75:b5:78:a3:bb:7f:54:97: 23:f8:b8:78:25:09:ae:d5:0d:6a:bc:a5:43:99:43:74:01:fb: c1:b6:ee:74:84:cb:21:37:fe:73:60:5a:9a:8d:3f:9d:a4:1c: e6:d1:35:4a:af:e1:d5:c7:03:cc:11:98:a2:22:54:6d:c4:38: 84:27:06:0b:df:fd:5e:f3:76:a2:1f:44:9f:e6:d5:bd:b2:11: d2:f0:f3:07:19:15:e6:e8:25:c5:bf:48:d3:53:ea:f6:9b:cc: e2:cf:b2:8a:70:a7:7f:d1:7e:14:1c:b1:94:d9:24:a2:d2:b4: a9:5a:1d:6b:83:16:d8:48:af:b0:0e:25:66:01:8b:13:93:a7: d6:33:95:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBENzIxMTAvBgNVBAUTKEE1NENCNzc0MkFBQkNGNEU1OEU1RDRDMUYzQjlEMTJE QUQ5MUI0MDYwHhcNMjUxMDE5MDcxOTE5WhcNMjUxMDI2MDcxOTE5WjAYMRYwFAYD VQQDEw02OGY0OTBmOC1lZDQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsH3ygM6yWnLAfv95fLUKKk4kPWchsalqaS+q8Wl2RUcr3Kh5SeX6ln9iAmfd 1BISc0obvwkx4feqGu5JzuVBxBME+7WsJX81GKo2PfFK181FJGglINdco6EePKaG 3vyPiPh4RrLeOml5wcPxVvBH4HfpCjNBc/t0MsXUoI1gPDI/TLQhg4XKwM/p6rTt cNjsYavHWxhk6D5HFvxEs6EmKLri0JguyIFi93kVuZ88C4Hh3/Wj5n3wy+7qY69G u+glpyULtbUX0tjHi9hQDWd8laYmrwWp33p8KLElgyBTgjuXxRhR/evywPUlK1Hs S0niEqJZwPD9TsRe/AOOYe24LwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJse/6gi OJ1+9pAJClHM557Cy98zMB8GA1UdIwQYMBaAFKVMt3Qqq89OWOXUwfO50S2tkbQG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEQ3Mi82QUM5ODlGMEQ0 ODIxMUVFODdENUQ3MjRDNEY5QUUwMi9wVXkzZENxcnowNVk1ZFRCODduUkxhMlJ0 QVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3BVeTNkQ3FyejA1WTVkVEI4N25STGEyUnRBWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MEQ3Mi82QUM5ODlGMEQ0ODIxMUVFODdENUQ3MjRDNEY5QUUwMi9wVXkzZENxcnow NVk1ZFRCODduUkxhMlJ0QVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBczgxvWLas4K76ckZpOdD5fGWHSxxLo7fqvrSKuj/goGlvet4Aksya yfWjyMqcczbToLRDn7MLJLNcaeVO6jSkuB+fQPIutUUa0gaJTkd0cR8D+lu5Ts5n z+VN2SXpTms6ez98Yc53hIdPGXCSrxlx7inMrNWMdbV4o7t/VJcj+Lh4JQmu1Q1q vKVDmUN0AfvBtu50hMshN/5zYFqajT+dpBzm0TVKr+HVxwPMEZiiIlRtxDiEJwYL 3/1e83aiH0Sf5tW9shHS8PMHGRXm6CXFv0jTU+r2m8ziz7KKcKd/0X4UHLGU2SSi 0rSpWh1rgxbYSK+wDiVmAYsTk6fWM5Wj -----END CERTIFICATE-----Generated at Mon Oct 20 16:44:04 2025 by rpki-client