$ rpki-client -vvf rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft File: Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft (raw, json) Hash identifier: laI1fp4LKLPTXLO7SSVaV9q3ALmXA82FWMlN7RhTfVE= Subject key identifier: 66:73:EF:EC:A5:00:07:3B:B6:1E:B7:71:9E:03:A0:DB:C6:A4:AD:E8 Authority key identifier: 3E:5B:3C:AB:9F:14:1A:06:EB:83:2E:63:F5:86:CB:0E:66:76:04:02 Certificate issuer: /CN=A91D06FC/serialNumber=3E5B3CAB9F141A06EB832E63F586CB0E66760402 Certificate serial: 03DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pls8q58UGgbrgy5j9YbLDmZ2BAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft Manifest number: 03D9 Signing time: Sun 19 Oct 2025 02:32:27 +0000 Manifest this update: Sun 19 Oct 2025 02:32:26 +0000 Manifest next update: Sun 26 Oct 2025 02:32:26 +0000 Files and hashes: 1: Pls8q58UGgbrgy5j9YbLDmZ2BAI.crl (hash: nBfl1NXelpaOrNzqaY1uv6ZHN79QVdH+YoOU6KBQ/Y4=) 2: AF8386E29EEF11EC8450760EC4F9AE02.roa (hash: 33pUrgoOiAaMxnDUMOqU1bZyw6PC3oCJBm1dIi55b3s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.crl rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pls8q58UGgbrgy5j9YbLDmZ2BAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:32:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 989 (0x3dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D06FC, serialNumber=3E5B3CAB9F141A06EB832E63F586CB0E66760402 Validity Not Before: Oct 19 02:32:26 2025 GMT Not After : Oct 26 02:32:26 2025 GMT Subject: CN=68f44dba-5e50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:6f:7c:a8:16:4d:7a:43:c2:92:24:21:18:d9: f2:db:7f:db:13:20:64:32:42:1a:3c:0e:23:68:45: bd:61:3f:8d:3a:44:f5:d1:42:91:0b:0c:95:97:36: c0:b3:f6:e0:ed:2d:fc:01:71:29:a4:14:cf:97:3f: 65:69:e6:82:e4:3a:64:78:31:4c:f4:81:cb:34:90: f3:5b:75:12:35:10:09:0b:eb:4c:9a:81:47:a0:bb: 34:59:39:98:6d:48:4f:ea:ea:07:9f:9f:10:8f:77: 7c:a4:32:e4:da:bb:f4:bb:d1:75:2b:ec:16:d2:c6: 3d:ae:29:06:59:a5:a0:56:62:8e:5d:00:d4:15:3c: 42:4c:0d:9a:6d:fb:76:83:a4:80:0b:ef:46:9b:e5: c1:b7:46:63:ba:ac:12:01:d7:d8:f9:5d:6a:83:fc: fd:dc:33:0f:bc:ea:c2:53:2b:f2:29:33:f7:e1:ba: 18:fb:2a:0a:03:42:eb:08:32:db:9d:6b:6f:2c:cc: 11:c6:c0:c0:d2:d1:89:5d:1c:2b:d0:fa:d0:4e:99: e3:98:9f:37:2c:9a:5c:a7:fd:42:66:7c:f2:9f:8e: 68:9c:52:36:00:88:07:e6:e6:2d:fd:43:40:aa:0d: a1:20:24:16:37:06:0d:fd:4d:fe:17:5b:5c:e3:50: 79:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:73:EF:EC:A5:00:07:3B:B6:1E:B7:71:9E:03:A0:DB:C6:A4:AD:E8 X509v3 Authority Key Identifier: keyid:3E:5B:3C:AB:9F:14:1A:06:EB:83:2E:63:F5:86:CB:0E:66:76:04:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pls8q58UGgbrgy5j9YbLDmZ2BAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:aa:90:c9:cc:14:14:b3:7a:e8:20:80:68:cb:63:f6:88:14: 4e:d1:c4:d0:ba:f8:26:90:0b:0c:f7:b6:d8:21:a0:b6:7e:27: f1:61:f4:c8:d0:81:50:7c:bb:af:e1:75:56:87:86:4d:40:b4: 1c:a1:ba:6e:3f:58:92:17:08:25:0d:ce:f5:3d:2b:d5:e1:c5: 33:61:60:a9:00:28:c2:d3:39:a5:98:5e:76:33:75:f3:34:d0: d8:97:8a:70:d3:fd:9e:21:12:85:70:ac:13:33:e5:76:76:3b: 06:90:e3:a8:8a:97:ab:e9:ac:c9:a7:70:c9:e0:82:9d:fa:56: 8b:74:d0:23:fb:7b:3c:41:71:c1:a6:13:db:dc:cd:82:eb:2c: 3f:8f:68:f9:6c:2a:17:6f:d7:36:5d:f4:bf:60:fa:ca:8d:e1: 44:7a:cb:d4:51:e4:33:13:90:fa:f0:d5:4e:5e:a5:2a:32:3b: 2f:e1:b1:2c:82:be:00:69:c1:2e:2d:d9:56:59:0a:1c:2c:13: f4:8b:2f:e9:26:46:b3:f7:31:65:00:c6:8a:e8:3b:f9:d9:e9: a5:f2:44:43:5b:e2:5d:a4:a8:56:81:f4:2a:15:42:bb:23:5c: c7:32:2a:e6:2c:11:2d:26:91:17:aa:0d:55:62:7a:8c:98:e4: 58:0f:e8:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA90wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDA2RkMxMTAvBgNVBAUTKDNFNUIzQ0FCOUYxNDFBMDZFQjgzMkU2M0Y1ODZDQjBF NjY3NjA0MDIwHhcNMjUxMDE5MDIzMjI2WhcNMjUxMDI2MDIzMjI2WjAYMRYwFAYD VQQDEw02OGY0NGRiYS01ZTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1G98qBZNekPCkiQhGNny23/bEyBkMkIaPA4jaEW9YT+NOkT10UKRCwyVlzbA s/bg7S38AXEppBTPlz9laeaC5DpkeDFM9IHLNJDzW3USNRAJC+tMmoFHoLs0WTmY bUhP6uoHn58Qj3d8pDLk2rv0u9F1K+wW0sY9rikGWaWgVmKOXQDUFTxCTA2abft2 g6SAC+9Gm+XBt0ZjuqwSAdfY+V1qg/z93DMPvOrCUyvyKTP34boY+yoKA0LrCDLb nWtvLMwRxsDA0tGJXRwr0PrQTpnjmJ83LJpcp/1CZnzyn45onFI2AIgH5uYt/UNA qg2hICQWNwYN/U3+F1tc41B5TwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGZz7+yl AAc7th63cZ4DoNvGpK3oMB8GA1UdIwQYMBaAFD5bPKufFBoG64MuY/WGyw5mdgQC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDZGQy9BRUYyMzBFMjlF RUIxMUVDODA0OUEyN0ZDNEY5QUUwMi9QbHM4cTU4VUdnYnJneTVqOVliTERtWjJC QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BsczhxNThVR2dicmd5NWo5WWJMRG1aMkJBSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDZGQy9BRUYyMzBFMjlFRUIxMUVDODA0OUEyN0ZDNEY5QUUwMi9QbHM4cTU4VUdn YnJneTVqOVliTERtWjJCQUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOqpDJzBQUs3roIIBoy2P2iBRO0cTQuvgmkAsM97bYIaC2fifxYfTI 0IFQfLuv4XVWh4ZNQLQcobpuP1iSFwglDc71PSvV4cUzYWCpACjC0zmlmF52M3Xz NNDYl4pw0/2eIRKFcKwTM+V2djsGkOOoiper6azJp3DJ4IKd+laLdNAj+3s8QXHB phPb3M2C6yw/j2j5bCoXb9c2XfS/YPrKjeFEesvUUeQzE5D68NVOXqUqMjsv4bEs gr4AacEuLdlWWQocLBP0iy/pJkaz9zFlAMaK6Dv52eml8kRDW+JdpKhWgfQqFUK7 I1zHMirmLBEtJpEXqg1VYnqMmORYD+jT -----END CERTIFICATE-----Generated at Mon Oct 20 12:39:54 2025 by rpki-client