$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4A13/BB6C9B54B98011EDA37B1B65C4F9AE02/pfsx1NUSX3yarlADNaSA_HeQjxU.mft File: pfsx1NUSX3yarlADNaSA_HeQjxU.mft (raw, json) Hash identifier: TcFnkkRMq4/dWfEv5D+7HGnTVNqsMYhr3jO1v2l1sgE= Subject key identifier: 4C:A7:A8:1C:64:49:39:A4:AD:FB:3C:5D:E8:D7:67:22:50:04:18:23 Authority key identifier: A5:FB:31:D4:D5:12:5F:7C:9A:AE:50:03:35:A4:80:FC:77:90:8F:15 Certificate issuer: /CN=A91A4A13/serialNumber=A5FB31D4D5125F7C9AAE500335A480FC77908F15 Certificate serial: 01F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfsx1NUSX3yarlADNaSA_HeQjxU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4A13/BB6C9B54B98011EDA37B1B65C4F9AE02/pfsx1NUSX3yarlADNaSA_HeQjxU.mft Manifest number: 01EE Signing time: Sun 19 Oct 2025 04:56:26 +0000 Manifest this update: Sun 19 Oct 2025 04:56:26 +0000 Manifest next update: Sun 26 Oct 2025 04:56:26 +0000 Files and hashes: 1: pfsx1NUSX3yarlADNaSA_HeQjxU.crl (hash: Z6ThH06fiRMXEXk/tlSKDmz7uK4yXmI6x25AFDLOlmo=) 2: A8D327E4BBC711ED8DF23C40C4F9AE02.roa (hash: jtm4IGu6ehkk/GhdKICbbynbKgcYNoX0OJfsqwSmMDI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4A13/BB6C9B54B98011EDA37B1B65C4F9AE02/pfsx1NUSX3yarlADNaSA_HeQjxU.crl rsync://rpki.apnic.net/member_repository/A91A4A13/BB6C9B54B98011EDA37B1B65C4F9AE02/pfsx1NUSX3yarlADNaSA_HeQjxU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfsx1NUSX3yarlADNaSA_HeQjxU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:56:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 498 (0x1f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4A13, serialNumber=A5FB31D4D5125F7C9AAE500335A480FC77908F15 Validity Not Before: Oct 19 04:56:26 2025 GMT Not After : Oct 26 04:56:26 2025 GMT Subject: CN=68f46f7a-dab4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:53:e3:a3:a2:4a:69:c0:eb:60:8a:b8:a7:e9: a5:6d:50:46:b5:13:e3:b5:1f:f8:61:b0:e2:b9:af: 42:48:80:87:07:6f:37:61:df:3c:76:66:c1:4d:a0: 43:92:05:f2:17:d0:45:86:0a:76:fd:47:b2:b7:14: 1e:df:71:99:43:02:0d:20:15:03:16:08:66:96:96: a3:48:dc:b4:83:62:d1:e4:9f:f1:a1:62:c8:36:f1: 14:5d:19:0b:d5:bb:a3:64:39:6b:78:42:48:ee:24: 22:5b:4b:c6:d6:12:43:54:fb:b6:d1:7c:a4:df:da: c8:4d:f6:ff:29:6b:c6:a4:2b:d4:0b:32:7d:10:e1: ca:c5:0c:67:f4:39:01:7f:f8:e7:ae:a8:9b:37:cb: 3e:85:a3:b8:92:64:82:17:81:43:57:e6:9a:1a:43: ce:40:88:e2:50:85:e3:7c:a9:a3:00:96:1f:16:72: 30:83:3a:f3:3f:f2:f3:4b:96:df:4d:60:c8:fb:09: 9e:2f:f2:58:f7:d6:c7:cc:e6:cc:3e:f1:9a:69:27: 54:cd:ef:0a:a8:c2:32:73:97:18:0f:26:bc:d8:fa: 85:18:82:11:2e:fe:d5:29:43:ad:1d:cb:e7:92:36: fc:58:a3:ff:c8:9d:f5:9d:3b:bd:53:0a:e6:b3:5f: 29:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:A7:A8:1C:64:49:39:A4:AD:FB:3C:5D:E8:D7:67:22:50:04:18:23 X509v3 Authority Key Identifier: keyid:A5:FB:31:D4:D5:12:5F:7C:9A:AE:50:03:35:A4:80:FC:77:90:8F:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4A13/BB6C9B54B98011EDA37B1B65C4F9AE02/pfsx1NUSX3yarlADNaSA_HeQjxU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfsx1NUSX3yarlADNaSA_HeQjxU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4A13/BB6C9B54B98011EDA37B1B65C4F9AE02/pfsx1NUSX3yarlADNaSA_HeQjxU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:25:e1:5f:3d:89:cf:3e:67:50:d5:79:3f:38:9f:48:b3:d4: 02:9d:6d:9b:6c:2d:5a:88:19:e3:5d:34:81:52:52:fe:91:42: c4:2a:18:de:d7:0e:ab:9a:83:27:06:9f:ba:8d:1e:5d:56:5b: d5:23:29:10:ff:fd:a2:86:d3:25:05:01:43:03:3f:2a:17:55: 91:ef:f2:f8:b6:05:78:84:08:40:63:92:49:78:6d:6c:df:2f: 75:b1:8b:7e:b6:5b:24:ea:e1:a1:38:20:a0:29:d7:00:d5:4c: c6:48:f0:cf:dc:52:27:20:d4:b1:7c:55:93:d7:5c:5c:2a:c3: 01:57:81:82:7f:7d:6a:16:40:3d:cf:61:2c:97:6d:ba:3c:ec: 3a:11:05:bf:5a:56:9a:f5:f2:80:34:15:13:6a:ec:53:8e:0c: 10:67:d5:99:b7:9b:14:06:dc:35:40:31:8d:fe:c2:84:48:3f: ca:15:d5:7c:70:40:2a:0a:03:eb:8d:b8:5c:47:47:5e:86:c5: df:a1:46:54:a3:a7:61:47:7c:97:71:d4:d5:fe:a9:cb:8b:64: 99:d5:2c:ae:68:27:a2:a4:bc:00:e9:c5:50:c3:46:65:d4:b7: 4e:b0:49:b0:1c:5c:3e:e8:d7:7b:30:d6:39:03:08:b9:fc:d9: f0:2e:34:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRBMTMxMTAvBgNVBAUTKEE1RkIzMUQ0RDUxMjVGN0M5QUFFNTAwMzM1QTQ4MEZD Nzc5MDhGMTUwHhcNMjUxMDE5MDQ1NjI2WhcNMjUxMDI2MDQ1NjI2WjAYMRYwFAYD VQQDEw02OGY0NmY3YS1kYWI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3VPjo6JKacDrYIq4p+mlbVBGtRPjtR/4YbDiua9CSICHB283Yd88dmbBTaBD kgXyF9BFhgp2/UeytxQe33GZQwINIBUDFghmlpajSNy0g2LR5J/xoWLINvEUXRkL 1bujZDlreEJI7iQiW0vG1hJDVPu20Xyk39rITfb/KWvGpCvUCzJ9EOHKxQxn9DkB f/jnrqibN8s+haO4kmSCF4FDV+aaGkPOQIjiUIXjfKmjAJYfFnIwgzrzP/LzS5bf TWDI+wmeL/JY99bHzObMPvGaaSdUze8KqMIyc5cYDya82PqFGIIRLv7VKUOtHcvn kjb8WKP/yJ31nTu9Uwrms18pxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEynqBxk STmkrfs8XejXZyJQBBgjMB8GA1UdIwQYMBaAFKX7MdTVEl98mq5QAzWkgPx3kI8V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEExMy9CQjZDOUI1NEI5 ODAxMUVEQTM3QjFCNjVDNEY5QUUwMi9wZnN4MU5VU1gzeWFybEFETmFTQV9IZVFq eFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Bmc3gxTlVTWDN5YXJsQUROYVNBX0hlUWp4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEExMy9CQjZDOUI1NEI5ODAxMUVEQTM3QjFCNjVDNEY5QUUwMi9wZnN4MU5VU1gz eWFybEFETmFTQV9IZVFqeFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9JeFfPYnPPmdQ1Xk/OJ9Is9QCnW2bbC1aiBnjXTSBUlL+kULEKhje 1w6rmoMnBp+6jR5dVlvVIykQ//2ihtMlBQFDAz8qF1WR7/L4tgV4hAhAY5JJeG1s 3y91sYt+tlsk6uGhOCCgKdcA1UzGSPDP3FInINSxfFWT11xcKsMBV4GCf31qFkA9 z2Esl226POw6EQW/Wlaa9fKANBUTauxTjgwQZ9WZt5sUBtw1QDGN/sKESD/KFdV8 cEAqCgPrjbhcR0dehsXfoUZUo6dhR3yXcdTV/qnLi2SZ1SyuaCeipLwA6cVQw0Zl 1LdOsEmwHFw+6Nd7MNY5Awi5/NnwLjTj -----END CERTIFICATE-----Generated at Mon Oct 20 19:26:31 2025 by rpki-client