$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.mft File: PusZaI0z1iGZTls9nkbsqqUJ9CM.mft (raw, json) Hash identifier: EoaQdgcbRiLT8cF49pkqK5O4SEDwu6vRfSiqYPeeSx0= Subject key identifier: 8A:53:68:51:E9:16:5C:2D:69:FE:37:71:5F:F8:47:D3:72:F2:C2:CD Authority key identifier: 3E:EB:19:68:8D:33:D6:21:99:4E:5B:3D:9E:46:EC:AA:A5:09:F4:23 Certificate issuer: /CN=A91DE4AC/serialNumber=3EEB19688D33D621994E5B3D9E46ECAAA509F423 Certificate serial: 0465 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PusZaI0z1iGZTls9nkbsqqUJ9CM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.mft Manifest number: 045F Signing time: Sun 19 Oct 2025 02:04:22 +0000 Manifest this update: Sun 19 Oct 2025 02:04:21 +0000 Manifest next update: Sun 26 Oct 2025 02:04:21 +0000 Files and hashes: 1: PusZaI0z1iGZTls9nkbsqqUJ9CM.crl (hash: lMJLKibGpBTlHBvpztm3B4rBtFq0amJB34aCmZylOA0=) 2: 0716B2646C7111EC8C5E6967C4F9AE02.roa (hash: FC5KH7zmbNiXwzzDmtV6gG59796J2EuM05tZKkGKGqk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.crl rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PusZaI0z1iGZTls9nkbsqqUJ9CM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:04:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1125 (0x465) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE4AC, serialNumber=3EEB19688D33D621994E5B3D9E46ECAAA509F423 Validity Not Before: Oct 19 02:04:21 2025 GMT Not After : Oct 26 02:04:21 2025 GMT Subject: CN=68f44726-882c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7c:36:27:64:d0:a2:ad:ed:d6:65:ff:fd:9b: f6:e5:3f:33:2c:d1:5c:e6:5b:37:73:43:a1:5f:8d: f0:94:e9:7a:99:4c:fb:64:03:ac:98:4f:2e:58:8d: aa:43:4b:60:96:ce:b8:a9:fc:f3:71:41:65:02:e5: 63:af:36:51:a8:24:32:81:85:1a:ce:0b:7a:66:1b: 52:6d:c0:de:da:09:75:46:fb:98:07:aa:72:99:d7: 32:cc:33:57:d6:98:a8:ea:21:67:62:16:df:7a:aa: b4:cd:5e:0d:32:63:83:a6:41:ef:77:af:ec:bc:dc: cf:27:da:25:b9:4f:3f:83:5a:2a:80:50:8d:9e:7a: 96:78:ea:bc:16:9d:36:5b:77:a4:bf:81:6f:fb:52: dc:8d:53:67:f1:da:2b:05:e4:b7:5c:a1:8f:2c:76: f1:53:f6:af:ed:97:38:90:47:8b:0d:ea:93:e7:2b: f3:85:a3:f9:6a:b8:75:be:a0:b7:5c:c3:12:aa:5e: d5:9a:3c:aa:82:4b:cc:b6:37:1c:50:ad:3e:cc:49: 58:77:3e:14:a1:6c:ef:ee:b9:6e:0a:45:18:ac:01: 7c:6e:6d:a6:b1:87:89:bd:04:84:94:75:0e:e5:6f: 73:8e:d6:c9:f4:1f:9b:86:e5:9d:ea:21:a9:5c:c4: 50:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:53:68:51:E9:16:5C:2D:69:FE:37:71:5F:F8:47:D3:72:F2:C2:CD X509v3 Authority Key Identifier: keyid:3E:EB:19:68:8D:33:D6:21:99:4E:5B:3D:9E:46:EC:AA:A5:09:F4:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PusZaI0z1iGZTls9nkbsqqUJ9CM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:9c:77:86:ac:c7:e5:e6:ac:92:7d:95:ae:82:51:c9:a4:c5: fc:98:cb:5b:fc:ee:88:b2:31:e2:6e:b3:42:7f:8d:49:1a:7d: 80:fb:92:d8:2d:6f:79:0d:bc:cf:86:8d:56:05:50:19:6e:87: f1:59:4c:67:e3:c7:fa:13:be:43:98:98:9f:fc:8c:80:a8:05: 72:28:29:27:aa:bb:8c:1c:e5:ed:79:92:20:32:17:e5:de:a5: 0b:59:d3:d5:90:d8:99:0d:ae:b2:a0:d8:b6:ac:1f:41:e3:7f: e4:46:90:bd:fe:ae:fa:aa:5a:a5:99:10:c8:5a:bc:3b:fb:fc: 7c:de:11:03:f9:14:ba:06:c8:2a:53:a8:c1:bc:02:eb:36:d7: 55:9d:0f:6e:b2:eb:20:22:6a:4e:c7:ec:21:f0:a5:24:3c:1f: 24:24:1a:74:3b:6d:30:e3:5d:78:5c:46:7a:41:64:be:0b:ac: 8a:02:80:12:38:6e:9f:2a:52:57:b6:b7:d5:80:49:e7:08:c8: 4c:d6:7b:3d:8a:bc:1a:1c:0f:ed:0f:cb:b3:58:de:fd:a7:fc: 1e:a0:61:18:70:dd:56:33:b2:5e:fc:54:5d:c3:58:0b:a6:4d: 0b:a1:28:69:1e:87:9f:4b:97:21:e9:b2:d7:05:57:33:95:d2: 63:61:25:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU0QUMxMTAvBgNVBAUTKDNFRUIxOTY4OEQzM0Q2MjE5OTRFNUIzRDlFNDZFQ0FB QTUwOUY0MjMwHhcNMjUxMDE5MDIwNDIxWhcNMjUxMDI2MDIwNDIxWjAYMRYwFAYD VQQDEw02OGY0NDcyNi04ODJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuXw2J2TQoq3t1mX//Zv25T8zLNFc5ls3c0OhX43wlOl6mUz7ZAOsmE8uWI2q Q0tgls64qfzzcUFlAuVjrzZRqCQygYUazgt6ZhtSbcDe2gl1RvuYB6pymdcyzDNX 1pio6iFnYhbfeqq0zV4NMmODpkHvd6/svNzPJ9oluU8/g1oqgFCNnnqWeOq8Fp02 W3ekv4Fv+1LcjVNn8dorBeS3XKGPLHbxU/av7Zc4kEeLDeqT5yvzhaP5arh1vqC3 XMMSql7VmjyqgkvMtjccUK0+zElYdz4UoWzv7rluCkUYrAF8bm2msYeJvQSElHUO 5W9zjtbJ9B+bhuWd6iGpXMRQRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIpTaFHp Flwtaf43cV/4R9Ny8sLNMB8GA1UdIwQYMBaAFD7rGWiNM9YhmU5bPZ5G7KqlCfQj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTRBQy8zNDQxRDJEMDZD NkUxMUVDQjIzM0ZCNjFDNEY5QUUwMi9QdXNaYUkwejFpR1pUbHM5bmtic3FxVUo5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1B1c1phSTB6MWlHWlRsczlua2JzcXFVSjlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTRBQy8zNDQxRDJEMDZDNkUxMUVDQjIzM0ZCNjFDNEY5QUUwMi9QdXNaYUkwejFp R1pUbHM5bmtic3FxVUo5Q00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnnHeGrMfl5qySfZWuglHJpMX8mMtb/O6IsjHibrNCf41JGn2A+5LY LW95DbzPho1WBVAZbofxWUxn48f6E75DmJif/IyAqAVyKCknqruMHOXteZIgMhfl 3qULWdPVkNiZDa6yoNi2rB9B43/kRpC9/q76qlqlmRDIWrw7+/x83hED+RS6Bsgq U6jBvALrNtdVnQ9ususgImpOx+wh8KUkPB8kJBp0O20w4114XEZ6QWS+C6yKAoAS OG6fKlJXtrfVgEnnCMhM1ns9irwaHA/tD8uzWN79p/weoGEYcN1WM7Je/FRdw1gL pk0LoShpHoefS5ch6bLXBVczldJjYSWz -----END CERTIFICATE-----Generated at Tue Oct 21 04:53:19 2025 by rpki-client