$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5319/025D7B5C8C2D11EF8122EC11C4F9AE02/puZHuaRPqqc-u4IEBQzGTMpFmOo.mft File: puZHuaRPqqc-u4IEBQzGTMpFmOo.mft (raw, json) Hash identifier: 4ovBfSTeUJ6MIzYXNXhzYG734WXe3C36EgEOwhYt5kU= Subject key identifier: 65:EA:EC:A2:53:13:22:D3:B0:03:9B:6A:41:89:35:2D:38:3D:B6:48 Authority key identifier: A6:E6:47:B9:A4:4F:AA:A7:3E:BB:82:04:05:0C:C6:4C:CA:45:98:EA Certificate issuer: /CN=A91C5319/serialNumber=A6E647B9A44FAAA73EBB8204050CC64CCA4598EA Certificate serial: BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/puZHuaRPqqc-u4IEBQzGTMpFmOo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5319/025D7B5C8C2D11EF8122EC11C4F9AE02/puZHuaRPqqc-u4IEBQzGTMpFmOo.mft Manifest number: BC Signing time: Sun 19 Oct 2025 09:03:08 +0000 Manifest this update: Sun 19 Oct 2025 09:03:07 +0000 Manifest next update: Sun 26 Oct 2025 09:03:07 +0000 Files and hashes: 1: puZHuaRPqqc-u4IEBQzGTMpFmOo.crl (hash: 4Hgari17vBoWGtpV+fzOflMJuHE9N8pFPGeYBC9qnqI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5319/025D7B5C8C2D11EF8122EC11C4F9AE02/puZHuaRPqqc-u4IEBQzGTMpFmOo.crl rsync://rpki.apnic.net/member_repository/A91C5319/025D7B5C8C2D11EF8122EC11C4F9AE02/puZHuaRPqqc-u4IEBQzGTMpFmOo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/puZHuaRPqqc-u4IEBQzGTMpFmOo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:03:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 188 (0xbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5319, serialNumber=A6E647B9A44FAAA73EBB8204050CC64CCA4598EA Validity Not Before: Oct 19 09:03:07 2025 GMT Not After : Oct 26 09:03:07 2025 GMT Subject: CN=68f4a94c-08c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9f:f0:9e:ca:20:96:b8:13:68:98:1e:da:e2: 8b:77:17:52:1e:90:7f:7a:35:a1:0b:de:1c:63:bf: 12:c1:2e:5c:b9:d4:d7:4b:97:8b:d4:4d:34:59:2f: 23:96:6c:3a:1a:a8:53:e1:9f:ef:b2:ae:ae:f2:c1: f9:d7:04:0b:60:9f:24:a3:37:21:eb:b5:4a:e8:4c: 87:e2:42:79:18:ec:5b:b5:81:04:8c:3d:5f:18:17: 34:e8:e6:08:a4:f1:a0:ad:67:af:91:f1:0c:77:9f: 80:a6:50:1b:e0:0e:a6:92:81:af:50:5e:94:4a:f3: df:e1:d3:5b:5c:f4:9c:1d:13:9a:0d:8f:8a:74:ff: 88:f4:46:99:fc:00:bd:09:7b:6c:0e:4a:4a:3f:a4: f9:d9:59:a2:ee:32:8d:dc:e2:36:2e:14:ae:7e:45: fd:01:6e:9f:2d:9e:db:d3:a5:7a:23:4a:54:4e:7d: 46:2b:32:3a:c3:71:50:06:1d:16:65:76:94:45:a4: 66:9d:1c:b6:df:4c:46:3a:43:4b:a7:9e:05:fb:40: 64:e4:44:d3:ea:57:31:8b:c3:45:31:cd:e6:0a:f8: e4:34:cc:d7:a4:ac:cd:5f:08:e0:d6:52:d2:88:b3: ee:cc:a2:82:9e:93:19:74:fe:39:08:0d:d3:4d:ff: 38:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:EA:EC:A2:53:13:22:D3:B0:03:9B:6A:41:89:35:2D:38:3D:B6:48 X509v3 Authority Key Identifier: keyid:A6:E6:47:B9:A4:4F:AA:A7:3E:BB:82:04:05:0C:C6:4C:CA:45:98:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5319/025D7B5C8C2D11EF8122EC11C4F9AE02/puZHuaRPqqc-u4IEBQzGTMpFmOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/puZHuaRPqqc-u4IEBQzGTMpFmOo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5319/025D7B5C8C2D11EF8122EC11C4F9AE02/puZHuaRPqqc-u4IEBQzGTMpFmOo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:a8:c8:dc:cb:62:1b:9d:dd:73:db:d5:15:3d:7e:06:3e:b1: e8:a1:42:25:81:14:c7:32:78:53:16:47:44:aa:a3:64:15:be: c2:87:34:de:a0:68:21:e1:ef:4d:50:5e:fb:65:c7:72:4e:22: df:fc:fb:00:eb:9d:84:d5:0c:3a:97:ea:fc:eb:b4:9b:a2:d2: 50:8e:08:69:f7:e4:29:b4:e3:b3:0b:51:b3:30:5f:bf:ca:b4: 20:03:ab:3a:ed:0b:cd:ad:f9:b7:85:f4:5b:1e:2e:32:46:76: 74:13:b3:4c:5d:c3:94:6f:37:46:d6:23:fb:70:97:6c:8c:41: c9:4e:6f:90:de:6c:c9:dd:1e:47:d4:64:60:e6:96:13:24:f7: 41:c2:99:03:53:04:11:2a:02:2b:89:c2:bd:7b:ca:d3:c6:18: a5:cc:4d:a1:ae:fe:02:5b:ba:a8:71:14:bb:4a:bc:f2:ba:5b: 30:70:42:15:7c:f6:e9:a0:f6:3d:2e:18:89:ec:4a:62:65:db: 62:d7:f9:21:5d:79:c8:16:e7:0a:4b:0e:ad:90:13:b8:78:da: 8c:43:bd:6d:8b:57:97:bd:7e:a3:66:96:ba:5c:de:b7:d9:0c: e9:5b:49:2f:07:68:6e:4e:b3:8f:93:97:ba:95:64:02:f1:69: ad:17:39:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzUzMTkxMTAvBgNVBAUTKEE2RTY0N0I5QTQ0RkFBQTczRUJCODIwNDA1MENDNjRD Q0E0NTk4RUEwHhcNMjUxMDE5MDkwMzA3WhcNMjUxMDI2MDkwMzA3WjAYMRYwFAYD VQQDEw02OGY0YTk0Yy0wOGMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqp/wnsoglrgTaJge2uKLdxdSHpB/ejWhC94cY78SwS5cudTXS5eL1E00WS8j lmw6GqhT4Z/vsq6u8sH51wQLYJ8kozch67VK6EyH4kJ5GOxbtYEEjD1fGBc06OYI pPGgrWevkfEMd5+AplAb4A6mkoGvUF6USvPf4dNbXPScHROaDY+KdP+I9EaZ/AC9 CXtsDkpKP6T52Vmi7jKN3OI2LhSufkX9AW6fLZ7b06V6I0pUTn1GKzI6w3FQBh0W ZXaURaRmnRy230xGOkNLp54F+0Bk5ETT6lcxi8NFMc3mCvjkNMzXpKzNXwjg1lLS iLPuzKKCnpMZdP45CA3TTf84bwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGXq7KJT EyLTsAObakGJNS04PbZIMB8GA1UdIwQYMBaAFKbmR7mkT6qnPruCBAUMxkzKRZjq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTMxOS8wMjVEN0I1QzhD MkQxMUVGODEyMkVDMTFDNEY5QUUwMi9wdVpIdWFSUHFxYy11NElFQlF6R1RNcEZt T28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3B1Wkh1YVJQcXFjLXU0SUVCUXpHVE1wRm1Pby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTMxOS8wMjVEN0I1QzhDMkQxMUVGODEyMkVDMTFDNEY5QUUwMi9wdVpIdWFSUHFx Yy11NElFQlF6R1RNcEZtT28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHqMjcy2Ibnd1z29UVPX4GPrHooUIlgRTHMnhTFkdEqqNkFb7ChzTe oGgh4e9NUF77ZcdyTiLf/PsA652E1Qw6l+r867SbotJQjghp9+QptOOzC1GzMF+/ yrQgA6s67QvNrfm3hfRbHi4yRnZ0E7NMXcOUbzdG1iP7cJdsjEHJTm+Q3mzJ3R5H 1GRg5pYTJPdBwpkDUwQRKgIricK9e8rTxhilzE2hrv4CW7qocRS7SrzyulswcEIV fPbpoPY9LhiJ7EpiZdti1/khXXnIFucKSw6tkBO4eNqMQ71ti1eXvX6jZpa6XN63 2QzpW0kvB2huTrOPk5e6lWQC8WmtFznG -----END CERTIFICATE-----Generated at Mon Oct 20 06:49:31 2025 by rpki-client