$ rpki-client -vvf rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.mft File: plb2DT8RZBpXG9H_rSRg3UV2My0.mft (raw, json) Hash identifier: ypq8qZu0C84GO4EAGgfYccgLQeBhzYiE0TjQs4mNltk= Subject key identifier: 14:07:0F:FE:AA:86:D1:AF:35:DF:F6:4C:8A:78:09:EB:65:65:A3:DA Authority key identifier: A6:56:F6:0D:3F:11:64:1A:57:1B:D1:FF:AD:24:60:DD:45:76:33:2D Certificate issuer: /CN=A919986F/serialNumber=A656F60D3F11641A571BD1FFAD2460DD4576332D Certificate serial: 2868 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/plb2DT8RZBpXG9H_rSRg3UV2My0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.mft Manifest number: 2863 Signing time: Sat 18 Oct 2025 15:48:36 +0000 Manifest this update: Sat 18 Oct 2025 15:48:35 +0000 Manifest next update: Sat 25 Oct 2025 15:48:35 +0000 Files and hashes: 1: plb2DT8RZBpXG9H_rSRg3UV2My0.crl (hash: aqrv79iFjGyn6WK4mIz5/4h8vM5Z+juSumw9xbPO4EQ=) 2: 27F621183B5D11EB97506B7AC4F9AE02.roa (hash: +GMl4Xu8VPkNDBOVR1baOfDzoyBidluum1AgF508r2s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.crl rsync://rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/plb2DT8RZBpXG9H_rSRg3UV2My0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 15:48:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10344 (0x2868) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919986F, serialNumber=A656F60D3F11641A571BD1FFAD2460DD4576332D Validity Not Before: Oct 18 15:48:35 2025 GMT Not After : Oct 25 15:48:35 2025 GMT Subject: CN=68f3b6d4-65f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:e4:71:23:29:cf:b0:d5:e0:e9:f5:31:6b:4a: 1b:86:bf:f6:74:f4:28:2a:e3:c1:61:ee:a8:82:30: 02:02:cf:14:75:00:08:bb:f3:93:e7:84:18:8e:3f: 01:0b:e1:d9:9c:28:9c:0e:50:cc:af:70:70:49:f2: 92:26:59:03:03:cb:09:8d:8f:93:90:81:fc:95:28: ce:f5:0b:be:25:62:b5:f6:d4:e9:fe:02:86:0b:e4: ba:37:ad:5c:40:0b:0f:cc:00:55:fd:33:88:3b:05: f1:af:a9:84:10:ec:a8:5e:95:c6:db:f2:c3:ec:dd: 78:ec:5d:c1:a6:b3:39:40:81:b2:82:30:0d:4f:80: 97:7d:3c:ab:fe:ef:6c:49:c8:17:9c:11:2c:45:2c: 11:94:be:b6:6d:37:6e:81:41:8c:a7:80:fd:62:02: 5d:d8:79:a8:9a:21:65:8c:50:cb:7a:b3:c2:5a:83: c4:bd:3b:59:c2:c0:80:21:5b:1b:45:84:61:47:6f: 96:d3:88:e2:df:b5:db:3d:61:70:19:5e:ca:74:0a: 61:fa:aa:2c:63:1d:3f:6c:7e:18:63:ff:73:5e:85: b1:5e:d7:0e:f0:82:05:be:f8:86:ad:4d:4c:a8:51: 3a:07:00:46:84:2a:7a:bb:24:9e:be:49:6c:e5:ad: 8e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:07:0F:FE:AA:86:D1:AF:35:DF:F6:4C:8A:78:09:EB:65:65:A3:DA X509v3 Authority Key Identifier: keyid:A6:56:F6:0D:3F:11:64:1A:57:1B:D1:FF:AD:24:60:DD:45:76:33:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/plb2DT8RZBpXG9H_rSRg3UV2My0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:42:22:d5:34:49:f2:4a:31:9b:64:f9:02:7a:32:5a:25:26: 1f:e9:b2:f3:fa:64:45:14:ac:8f:81:29:b3:ba:d3:4c:aa:d4: 1d:a1:d0:d4:43:cf:a8:5e:10:a4:08:a7:e8:6e:0b:91:d3:28: 13:8a:c6:78:50:14:26:11:31:fd:71:4a:be:36:59:72:3c:27: 41:69:c4:1c:08:45:7d:b8:33:a4:ee:ac:c5:e0:53:9b:3f:98: 60:95:31:fe:4b:70:f4:d9:75:4d:d2:5d:78:73:4a:f3:a6:6d: 81:e4:34:55:ce:1a:db:93:ae:ab:f3:d4:a0:3e:b7:05:17:64: 81:5d:2c:e4:53:73:94:6c:98:64:6d:81:12:09:60:94:74:cc: a1:e4:c4:53:20:63:bf:7e:62:f3:63:7d:41:74:2f:58:65:d3: 53:c8:32:78:6e:d0:cd:86:0a:75:b2:2d:00:47:8c:75:0e:66: fb:3c:92:47:f3:30:75:b5:3b:40:06:79:44:a8:0a:e8:3a:f1: 7b:19:a1:e9:3a:3a:49:0d:50:f0:bf:25:54:00:1f:2e:e9:f1: d4:aa:9b:31:2d:5b:63:2c:0f:fa:b8:e5:83:23:eb:dc:fe:df: bc:f7:05:41:f2:7e:38:d7:af:93:2e:e7:1e:5a:76:65:89:6b: ec:ec:0a:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKGgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk4NkYxMTAvBgNVBAUTKEE2NTZGNjBEM0YxMTY0MUE1NzFCRDFGRkFEMjQ2MERE NDU3NjMzMkQwHhcNMjUxMDE4MTU0ODM1WhcNMjUxMDI1MTU0ODM1WjAYMRYwFAYD VQQDEw02OGYzYjZkNC02NWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ORxIynPsNXg6fUxa0obhr/2dPQoKuPBYe6ogjACAs8UdQAIu/OT54QYjj8B C+HZnCicDlDMr3BwSfKSJlkDA8sJjY+TkIH8lSjO9Qu+JWK19tTp/gKGC+S6N61c QAsPzABV/TOIOwXxr6mEEOyoXpXG2/LD7N147F3BprM5QIGygjANT4CXfTyr/u9s ScgXnBEsRSwRlL62bTdugUGMp4D9YgJd2HmomiFljFDLerPCWoPEvTtZwsCAIVsb RYRhR2+W04ji37XbPWFwGV7KdAph+qosYx0/bH4YY/9zXoWxXtcO8IIFvviGrU1M qFE6BwBGhCp6uySevkls5a2OFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBQHD/6q htGvNd/2TIp4CetlZaPaMB8GA1UdIwQYMBaAFKZW9g0/EWQaVxvR/60kYN1FdjMt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTg2Ri9FQzg3MEI4NjhG MkExMUU0QkY5OEI0MzJDNEY5QUUwMi9wbGIyRFQ4UlpCcFhHOUhfclNSZzNVVjJN eTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BsYjJEVDhSWkJwWEc5SF9yU1JnM1VWMk15MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTg2Ri9FQzg3MEI4NjhGMkExMUU0QkY5OEI0MzJDNEY5QUUwMi9wbGIyRFQ4UlpC cFhHOUhfclNSZzNVVjJNeTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvQiLVNEnySjGbZPkCejJaJSYf6bLz+mRFFKyPgSmzutNMqtQdodDU Q8+oXhCkCKfobguR0ygTisZ4UBQmETH9cUq+NllyPCdBacQcCEV9uDOk7qzF4FOb P5hglTH+S3D02XVN0l14c0rzpm2B5DRVzhrbk66r89SgPrcFF2SBXSzkU3OUbJhk bYESCWCUdMyh5MRTIGO/fmLzY31BdC9YZdNTyDJ4btDNhgp1si0AR4x1Dmb7PJJH 8zB1tTtABnlEqAroOvF7GaHpOjpJDVDwvyVUAB8u6fHUqpsxLVtjLA/6uOWDI+vc /t+89wVB8n4416+TLuceWnZliWvs7Aqh -----END CERTIFICATE-----Generated at Mon Oct 20 08:37:27 2025 by rpki-client