$ rpki-client -vvf rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.mft File: PNcVUq-qATj5pk4BYO7wYJYGUyM.mft (raw, json) Hash identifier: /5O8gPJugyF1ul222A3/ej9R07L4GpUv6e3H522T3oI= Subject key identifier: FF:80:5C:24:2C:7C:0C:25:04:25:BF:C1:28:C2:67:D1:F2:2A:CD:44 Authority key identifier: 3C:D7:15:52:AF:AA:01:38:F9:A6:4E:01:60:EE:F0:60:96:06:53:23 Certificate issuer: /CN=A9196CE1/serialNumber=3CD71552AFAA0138F9A64E0160EEF06096065323 Certificate serial: 016D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PNcVUq-qATj5pk4BYO7wYJYGUyM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.mft Manifest number: 016A Signing time: Sun 19 Oct 2025 06:34:18 +0000 Manifest this update: Sun 19 Oct 2025 06:34:17 +0000 Manifest next update: Sun 26 Oct 2025 06:34:17 +0000 Files and hashes: 1: PNcVUq-qATj5pk4BYO7wYJYGUyM.crl (hash: ndsi1ZqEo8d64ZtUGsswB5i/DjhCOmcurhWz+WyOaeA=) 2: 4F7CFB9A82B711EE997EB92AC4F9AE02.roa (hash: VY07hPoAnZ6HhFnmDGOrse/S2/32FKp0YWgAY+x8IqE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.crl rsync://rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PNcVUq-qATj5pk4BYO7wYJYGUyM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:34:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 365 (0x16d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196CE1, serialNumber=3CD71552AFAA0138F9A64E0160EEF06096065323 Validity Not Before: Oct 19 06:34:17 2025 GMT Not After : Oct 26 06:34:17 2025 GMT Subject: CN=68f48669-edf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4b:de:47:5a:06:92:ce:a5:62:06:6f:d9:58: 8b:a6:48:21:ba:b5:b0:55:d7:16:9c:2b:a0:89:ba: d7:fa:f8:62:6f:5e:64:03:99:8b:fd:ac:b4:ec:57: bf:2c:9f:5c:9c:4a:85:7c:11:63:d2:68:a5:fa:07: 71:81:fe:da:9f:07:bf:b6:6b:8e:6c:16:46:f9:ed: eb:98:9d:73:b7:0f:6b:0d:3c:bd:c3:85:d4:d2:6e: aa:6c:07:3a:58:cc:30:61:ff:26:cf:05:6e:74:11: 70:d6:c7:6d:4e:87:f6:01:41:1d:84:8e:62:ff:82: 73:db:12:5e:f8:50:5c:73:09:55:0c:65:ec:aa:9a: 42:23:e2:58:a0:8f:ec:b7:34:85:20:96:e1:8d:00: 1e:36:55:39:ed:dd:15:a4:cd:4b:76:41:b9:c5:cf: 6c:83:f4:dc:ed:f2:b5:87:25:0a:05:78:a4:4e:32: 84:26:9c:8f:84:60:23:93:80:bf:bd:73:7e:38:9c: 53:47:77:62:a6:b1:f9:df:b4:da:c4:30:64:15:2c: 99:b7:11:07:b4:cb:ec:34:0a:7d:e6:cd:ad:ef:e1: b8:d9:c3:cc:f5:95:01:4c:9a:57:30:0c:b4:61:6a: 8b:59:a6:3b:4a:0a:e6:15:a0:c8:69:80:62:1a:0d: 4b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:80:5C:24:2C:7C:0C:25:04:25:BF:C1:28:C2:67:D1:F2:2A:CD:44 X509v3 Authority Key Identifier: keyid:3C:D7:15:52:AF:AA:01:38:F9:A6:4E:01:60:EE:F0:60:96:06:53:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PNcVUq-qATj5pk4BYO7wYJYGUyM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:42:1a:d4:8f:ff:8e:c0:65:bd:2d:4e:ac:21:89:9e:b3:a5: 14:5e:80:00:e6:6d:b5:e8:a7:c7:7c:96:98:bb:ea:1d:7a:76: 3e:f3:a6:4c:21:ef:e5:d0:b6:bf:a4:43:00:98:ce:16:d1:13: 39:e3:5d:ff:dc:61:52:71:12:3f:92:21:b4:24:94:44:30:89: b6:7b:66:83:3d:67:bb:71:22:08:f1:df:2f:c2:19:60:61:f6: 25:5a:3a:59:81:35:a2:97:31:80:c1:b9:a3:07:9b:bf:f3:78: 89:a3:be:a2:cc:d5:7d:97:5d:ea:48:1b:2d:e4:46:30:45:11: 51:0f:2d:05:0d:66:27:76:3b:29:83:46:52:80:fd:81:9a:8b: d4:6d:f6:e8:a8:84:29:c8:75:73:bc:f8:a5:cc:e6:fb:18:d5: f7:f0:8e:96:8f:8d:ad:10:3f:f3:02:b2:ee:6c:ce:0b:c7:7a: 7e:10:50:de:25:46:64:99:8b:13:78:0e:81:5c:db:c5:cf:7f: 50:8a:8c:df:b5:1b:56:e7:95:82:32:49:f2:7e:cc:ff:d2:37: a2:67:d7:7a:0e:02:ce:b9:e4:0b:33:54:25:54:f2:b7:97:43: a3:7f:bc:ec:4e:57:e3:84:ab:73:5b:03:d7:02:7f:f9:b4:5a: ef:55:48:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZDRTExMTAvBgNVBAUTKDNDRDcxNTUyQUZBQTAxMzhGOUE2NEUwMTYwRUVGMDYw OTYwNjUzMjMwHhcNMjUxMDE5MDYzNDE3WhcNMjUxMDI2MDYzNDE3WjAYMRYwFAYD VQQDEw02OGY0ODY2OS1lZGY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtkveR1oGks6lYgZv2ViLpkghurWwVdcWnCugibrX+vhib15kA5mL/ay07Fe/ LJ9cnEqFfBFj0mil+gdxgf7anwe/tmuObBZG+e3rmJ1ztw9rDTy9w4XU0m6qbAc6 WMwwYf8mzwVudBFw1sdtTof2AUEdhI5i/4Jz2xJe+FBccwlVDGXsqppCI+JYoI/s tzSFIJbhjQAeNlU57d0VpM1LdkG5xc9sg/Tc7fK1hyUKBXikTjKEJpyPhGAjk4C/ vXN+OJxTR3diprH537TaxDBkFSyZtxEHtMvsNAp95s2t7+G42cPM9ZUBTJpXMAy0 YWqLWaY7SgrmFaDIaYBiGg1LMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP+AXCQs fAwlBCW/wSjCZ9HyKs1EMB8GA1UdIwQYMBaAFDzXFVKvqgE4+aZOAWDu8GCWBlMj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkNFMS9FODgxRThFQzgy QjYxMUVFOUJGQzA2MURDNEY5QUUwMi9QTmNWVXEtcUFUajVwazRCWU83d1lKWUdV eU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BOY1ZVcS1xQVRqNXBrNEJZTzd3WUpZR1V5TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkNFMS9FODgxRThFQzgyQjYxMUVFOUJGQzA2MURDNEY5QUUwMi9QTmNWVXEtcUFU ajVwazRCWU83d1lKWUdVeU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtQhrUj/+OwGW9LU6sIYmes6UUXoAA5m216KfHfJaYu+odenY+86ZM Ie/l0La/pEMAmM4W0RM5413/3GFScRI/kiG0JJREMIm2e2aDPWe7cSII8d8vwhlg YfYlWjpZgTWilzGAwbmjB5u/83iJo76izNV9l13qSBst5EYwRRFRDy0FDWYndjsp g0ZSgP2BmovUbfboqIQpyHVzvPilzOb7GNX38I6Wj42tED/zArLubM4Lx3p+EFDe JUZkmYsTeA6BXNvFz39QiozftRtW55WCMknyfsz/0jeiZ9d6DgLOueQLM1QlVPK3 l0Ojf7zsTlfjhKtzWwPXAn/5tFrvVUiV -----END CERTIFICATE-----Generated at Mon Oct 20 05:46:50 2025 by rpki-client