$ rpki-client -vvf rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.mft File: PxScskgQcfFD-NFWCCear8cdEVw.mft (raw, json) Hash identifier: EYl5XCz0KrehF2n60LwzwTKaBipvnnedX0bfATFS4l0= Subject key identifier: 81:F9:89:1B:31:6D:90:15:76:39:4A:45:9B:F3:78:47:A8:57:45:C9 Authority key identifier: 3F:14:9C:B2:48:10:71:F1:43:F8:D1:56:08:27:9A:AF:C7:1D:11:5C Certificate issuer: /CN=A911C18F/serialNumber=3F149CB2481071F143F8D15608279AAFC71D115C Certificate serial: 1F3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxScskgQcfFD-NFWCCear8cdEVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.mft Manifest number: 1F32 Signing time: Sun 02 Nov 2025 16:01:45 +0000 Manifest this update: Sun 02 Nov 2025 16:01:44 +0000 Manifest next update: Sun 09 Nov 2025 16:01:44 +0000 Files and hashes: 1: PxScskgQcfFD-NFWCCear8cdEVw.crl (hash: F539/fSlk7WbihcWUrbuE40d58lZ20icOBMJXR/4wLQ=) 2: A9FAE7FA5E1911E6B8CE9C5BC4F9AE02.roa (hash: xZ7a43he46yBIpdPfo3VUuRojtSoHm3dh9Gg3MtbJcM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.crl rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxScskgQcfFD-NFWCCear8cdEVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 16:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7997 (0x1f3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C18F, serialNumber=3F149CB2481071F143F8D15608279AAFC71D115C Validity Not Before: Nov 2 16:01:44 2025 GMT Not After : Nov 9 16:01:44 2025 GMT Subject: CN=69078068-48c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ae:e0:52:bb:1d:66:d1:6a:f6:4d:80:ba:e1: 6e:cf:e6:82:f4:a2:93:95:71:4e:b9:bb:3a:5a:c5: 2d:23:6e:e0:e8:39:86:0e:e5:59:3d:ba:2d:66:8c: 55:0c:51:8f:8a:75:db:e7:c1:51:28:ba:d0:47:b0: 4c:12:a9:42:de:1c:d1:e6:41:f4:f0:8d:51:b2:2a: c6:56:85:4f:df:dd:d8:69:40:49:88:c0:cd:43:de: c3:26:8b:2f:19:29:36:e0:75:00:68:69:b9:e8:30: 64:24:e1:70:36:c8:5b:15:ea:10:c4:85:f7:05:76: e0:b7:8d:6c:a6:b5:26:26:79:ba:f5:7b:ab:87:2a: a3:2e:5b:55:e0:36:1f:25:fd:82:bd:62:d8:f1:60: db:7d:6f:6f:3e:96:bc:61:86:1a:a1:dd:94:c5:93: 83:81:6a:ff:b2:01:8b:f4:bb:01:68:57:3f:06:60: de:73:2d:43:91:d2:2e:93:d9:94:47:6d:41:bc:42: fe:6a:d8:2c:7c:d2:47:1d:58:f8:b1:04:d0:d2:cd: 57:96:8e:76:5f:d3:43:71:99:eb:11:cb:bb:d0:05: b1:ec:b3:3e:dc:65:8f:51:37:1f:58:84:eb:87:69: 4d:ca:6b:3d:c9:ec:51:3d:d9:0a:6a:2e:64:67:e9: cf:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:F9:89:1B:31:6D:90:15:76:39:4A:45:9B:F3:78:47:A8:57:45:C9 X509v3 Authority Key Identifier: keyid:3F:14:9C:B2:48:10:71:F1:43:F8:D1:56:08:27:9A:AF:C7:1D:11:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxScskgQcfFD-NFWCCear8cdEVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:2e:44:3e:02:b7:56:6d:14:6d:93:85:f0:ee:70:fe:37:b0: a5:78:ef:78:45:dc:9f:47:2c:71:f2:b0:41:ad:0c:2a:c5:55: 28:19:17:5b:0d:50:18:7c:64:f5:93:bd:c2:e5:4b:f6:0f:1f: 51:ae:c1:c6:18:be:a6:0f:12:fd:7f:25:7c:aa:c9:b6:63:9a: e1:09:fb:81:d8:15:3b:85:00:c2:44:e2:54:79:9c:12:1f:23: a5:8b:e9:ff:55:15:a3:cc:2b:80:0d:19:ac:50:a9:01:ed:77: e1:2d:24:0e:ee:24:5a:f9:32:fa:42:25:5b:19:53:c3:52:0e: 70:15:70:01:d1:89:ce:81:bf:2f:ee:43:e6:92:48:e3:84:af: 2e:16:a8:95:44:fc:7c:01:37:d6:00:18:fe:3f:30:4a:25:a6: e7:84:31:48:f5:6c:02:a3:a7:53:33:31:53:cc:31:1a:a4:79: ca:fd:54:99:90:9d:8b:91:1b:34:73:df:a1:c6:c4:d8:d7:7a: 4d:e1:f0:7c:0d:9c:1c:ae:a7:8d:c5:ca:44:4b:49:14:07:0a: 15:9a:a9:11:05:33:bc:5b:ff:bd:92:80:75:38:60:68:32:07: 2a:1f:c4:f3:94:b3:8c:1e:81:90:27:a4:78:4c:f9:44:68:32: 0c:0b:78:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHz0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMxOEYxMTAvBgNVBAUTKDNGMTQ5Q0IyNDgxMDcxRjE0M0Y4RDE1NjA4Mjc5QUFG QzcxRDExNUMwHhcNMjUxMTAyMTYwMTQ0WhcNMjUxMTA5MTYwMTQ0WjAYMRYwFAYD VQQDEw02OTA3ODA2OC00OGMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1a7gUrsdZtFq9k2AuuFuz+aC9KKTlXFOubs6WsUtI27g6DmGDuVZPbotZoxV DFGPinXb58FRKLrQR7BMEqlC3hzR5kH08I1RsirGVoVP393YaUBJiMDNQ97DJosv GSk24HUAaGm56DBkJOFwNshbFeoQxIX3BXbgt41sprUmJnm69XurhyqjLltV4DYf Jf2CvWLY8WDbfW9vPpa8YYYaod2UxZODgWr/sgGL9LsBaFc/BmDecy1DkdIuk9mU R21BvEL+atgsfNJHHVj4sQTQ0s1Xlo52X9NDcZnrEcu70AWx7LM+3GWPUTcfWITr h2lNyms9yexRPdkKai5kZ+nPSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIH5iRsx bZAVdjlKRZvzeEeoV0XJMB8GA1UdIwQYMBaAFD8UnLJIEHHxQ/jRVggnmq/HHRFc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzE4Ri84RTdBOUJBQzVF MTgxMUU2QUM2NkM1NTlDNEY5QUUwMi9QeFNjc2tnUWNmRkQtTkZXQ0NlYXI4Y2RF VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1B4U2Nza2dRY2ZGRC1ORldDQ2VhcjhjZEVWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzE4Ri84RTdBOUJBQzVFMTgxMUU2QUM2NkM1NTlDNEY5QUUwMi9QeFNjc2tnUWNm RkQtTkZXQ0NlYXI4Y2RFVncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuLkQ+ArdWbRRtk4Xw7nD+N7CleO94RdyfRyxx8rBBrQwqxVUoGRdb DVAYfGT1k73C5Uv2Dx9RrsHGGL6mDxL9fyV8qsm2Y5rhCfuB2BU7hQDCROJUeZwS HyOli+n/VRWjzCuADRmsUKkB7XfhLSQO7iRa+TL6QiVbGVPDUg5wFXAB0YnOgb8v 7kPmkkjjhK8uFqiVRPx8ATfWABj+PzBKJabnhDFI9WwCo6dTMzFTzDEapHnK/VSZ kJ2LkRs0c9+hxsTY13pN4fB8DZwcrqeNxcpES0kUBwoVmqkRBTO8W/+9koB1OGBo MgcqH8TzlLOMHoGQJ6R4TPlEaDIMC3ib -----END CERTIFICATE-----Generated at Mon Nov 3 18:06:48 2025 by rpki-client