$ rpki-client -vvf rpki.apnic.net/member_repository/A9199B5E/F8723FE4E94711EDAD106909C4F9AE02/PbshszWLCF8IIbTcBqkanEXELLw.mft File: PbshszWLCF8IIbTcBqkanEXELLw.mft (raw, json) Hash identifier: /G0lQkHuPyBsi7Z2pJlAsuitqInDgZ1/xzGISkAPoEg= Subject key identifier: 61:ED:24:18:03:4E:D5:6B:B9:9A:87:C0:60:65:48:23:0C:85:F5:87 Authority key identifier: 3D:BB:21:B3:35:8B:08:5F:08:21:B4:DC:06:A9:1A:9C:45:C4:2C:BC Certificate issuer: /CN=A9199B5E/serialNumber=3DBB21B3358B085F0821B4DC06A91A9C45C42CBC Certificate serial: 01D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbshszWLCF8IIbTcBqkanEXELLw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199B5E/F8723FE4E94711EDAD106909C4F9AE02/PbshszWLCF8IIbTcBqkanEXELLw.mft Manifest number: 01CF Signing time: Sun 19 Oct 2025 05:17:12 +0000 Manifest this update: Sun 19 Oct 2025 05:17:12 +0000 Manifest next update: Sun 26 Oct 2025 05:17:12 +0000 Files and hashes: 1: PbshszWLCF8IIbTcBqkanEXELLw.crl (hash: Vzo1USPqIOMf5QMCJEmMuOtKKL79DHTPuuSnkKKMOp4=) 2: 0FFD0884E94C11EDB883CD14C4F9AE02.roa (hash: HZiGn+RSrQ/z8mUJhOj/YSMFN8ATDW3gRGnLr/Np+qA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199B5E/F8723FE4E94711EDAD106909C4F9AE02/PbshszWLCF8IIbTcBqkanEXELLw.crl rsync://rpki.apnic.net/member_repository/A9199B5E/F8723FE4E94711EDAD106909C4F9AE02/PbshszWLCF8IIbTcBqkanEXELLw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbshszWLCF8IIbTcBqkanEXELLw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 467 (0x1d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199B5E, serialNumber=3DBB21B3358B085F0821B4DC06A91A9C45C42CBC Validity Not Before: Oct 19 05:17:12 2025 GMT Not After : Oct 26 05:17:12 2025 GMT Subject: CN=68f47458-8e9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0e:34:d3:9d:97:81:7f:ec:9d:8c:04:1b:88: a8:47:bb:b7:3a:d6:bb:8e:84:88:02:d5:97:fc:65: e5:8c:de:d9:71:f1:98:ce:05:ba:4c:90:1b:75:6b: ee:ed:06:b4:27:ce:59:44:21:75:c8:93:83:d0:15: e5:81:e1:b2:27:e5:5b:23:89:64:ae:40:f6:96:de: ba:96:c5:fc:a8:e1:14:59:aa:1a:19:6d:6f:e8:10: 5f:e5:08:62:91:b3:74:70:61:2d:bd:c0:f2:ae:51: cf:be:06:12:76:87:85:9e:b0:82:4c:b4:50:65:ab: 55:e4:f1:ef:68:48:fb:d1:a9:a4:c9:ed:91:88:cd: b4:e1:c9:c6:0f:c1:47:a9:cb:57:3e:82:99:2f:cc: e1:2e:0c:aa:31:9d:ae:89:bf:b2:39:8d:ea:a7:5d: 43:db:70:47:fd:56:c4:f6:fd:37:fe:2b:82:00:e0: 5c:1f:a3:39:ff:3f:b3:e7:a9:1d:a6:35:e2:bf:fb: 83:f5:0f:d0:98:cd:68:6c:bf:30:a1:40:6a:5d:0c: 02:bb:4d:59:1e:fb:3e:10:56:b9:b1:32:30:1c:43: 25:ae:32:10:3b:aa:c8:5f:6d:fc:31:38:06:db:de: 76:e3:7b:b8:41:4b:20:05:bb:b8:c5:6f:7e:71:99: 85:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:ED:24:18:03:4E:D5:6B:B9:9A:87:C0:60:65:48:23:0C:85:F5:87 X509v3 Authority Key Identifier: keyid:3D:BB:21:B3:35:8B:08:5F:08:21:B4:DC:06:A9:1A:9C:45:C4:2C:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199B5E/F8723FE4E94711EDAD106909C4F9AE02/PbshszWLCF8IIbTcBqkanEXELLw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbshszWLCF8IIbTcBqkanEXELLw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199B5E/F8723FE4E94711EDAD106909C4F9AE02/PbshszWLCF8IIbTcBqkanEXELLw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:38:4c:f6:44:8f:9d:09:26:1d:2f:74:12:9d:c2:08:fd:75: 94:80:37:1d:70:92:75:60:b0:88:2d:f4:72:4e:c0:62:72:27: ce:f5:22:83:9e:76:7c:af:27:b4:56:5a:d9:e1:75:44:d2:de: 49:66:fe:bc:99:83:61:b4:91:74:ea:fb:0a:1c:87:24:ea:38: 41:f9:1d:ff:1e:96:39:c5:66:df:91:a0:ca:83:fa:db:9b:ce: 38:4b:f2:08:f2:42:d4:90:64:db:68:65:8b:02:0f:27:d9:3f: ad:76:f0:8c:be:de:ad:40:62:27:49:2f:58:6d:2a:39:0d:dc: 32:3d:de:31:6a:2e:8d:dc:d0:45:0f:3e:4d:7d:ca:25:65:e7: b7:f5:8b:c5:12:75:0f:81:17:23:41:33:83:cb:04:99:05:d8: 07:35:3c:21:32:d2:e4:95:1a:0a:ef:88:87:cb:fc:d1:c8:87: 18:55:15:1e:07:be:bc:8f:40:dc:0a:0e:d6:b4:c1:36:6a:b6: 0e:71:87:00:c8:d8:63:ba:1d:6c:3b:63:f3:8f:ed:f8:b0:d1: 11:43:8c:b9:ec:1b:42:2b:22:64:fd:86:67:60:d4:c9:61:d2: f7:12:6f:71:71:d9:7d:d8:4a:02:58:5e:92:b6:71:aa:2e:12: 7e:a4:30:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlCNUUxMTAvBgNVBAUTKDNEQkIyMUIzMzU4QjA4NUYwODIxQjREQzA2QTkxQTlD NDVDNDJDQkMwHhcNMjUxMDE5MDUxNzEyWhcNMjUxMDI2MDUxNzEyWjAYMRYwFAYD VQQDEw02OGY0NzQ1OC04ZTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuA40052XgX/snYwEG4ioR7u3Ota7joSIAtWX/GXljN7ZcfGYzgW6TJAbdWvu 7Qa0J85ZRCF1yJOD0BXlgeGyJ+VbI4lkrkD2lt66lsX8qOEUWaoaGW1v6BBf5Qhi kbN0cGEtvcDyrlHPvgYSdoeFnrCCTLRQZatV5PHvaEj70amkye2RiM204cnGD8FH qctXPoKZL8zhLgyqMZ2uib+yOY3qp11D23BH/VbE9v03/iuCAOBcH6M5/z+z56kd pjXiv/uD9Q/QmM1obL8woUBqXQwCu01ZHvs+EFa5sTIwHEMlrjIQO6rIX238MTgG 295243u4QUsgBbu4xW9+cZmF2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGHtJBgD TtVruZqHwGBlSCMMhfWHMB8GA1UdIwQYMBaAFD27IbM1iwhfCCG03AapGpxFxCy8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUI1RS9GODcyM0ZFNEU5 NDcxMUVEQUQxMDY5MDlDNEY5QUUwMi9QYnNoc3pXTENGOElJYlRjQnFrYW5FWEVM THcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Bic2hzeldMQ0Y4SUliVGNCcWthbkVYRUxMdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUI1RS9GODcyM0ZFNEU5NDcxMUVEQUQxMDY5MDlDNEY5QUUwMi9QYnNoc3pXTENG OElJYlRjQnFrYW5FWEVMTHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZOEz2RI+dCSYdL3QSncII/XWUgDcdcJJ1YLCILfRyTsBicifO9SKD nnZ8rye0VlrZ4XVE0t5JZv68mYNhtJF06vsKHIck6jhB+R3/HpY5xWbfkaDKg/rb m844S/II8kLUkGTbaGWLAg8n2T+tdvCMvt6tQGInSS9YbSo5DdwyPd4xai6N3NBF Dz5NfcolZee39YvFEnUPgRcjQTODywSZBdgHNTwhMtLklRoK74iHy/zRyIcYVRUe B768j0DcCg7WtME2arYOcYcAyNhjuh1sO2Pzj+34sNERQ4y57BtCKyJk/YZnYNTJ YdL3Em9xcdl92EoCWF6StnGqLhJ+pDAP -----END CERTIFICATE-----Generated at Mon Oct 20 14:37:12 2025 by rpki-client