$ rpki-client -vvf rpki.apnic.net/member_repository/A911C53D/84B58F668CFB11EB9DC62C3BC4F9AE02/pcdj6Klfa5qyQRNgHagVOhWRJu4.mft File: pcdj6Klfa5qyQRNgHagVOhWRJu4.mft (raw, json) Hash identifier: xkMP2E7Rym1Ph48p1EfZuO/L+LPVQ6oZQUr1eW/LzVk= Subject key identifier: 43:FA:77:03:38:A2:45:D0:FD:C4:93:49:9F:3B:2F:F4:4C:AB:B4:08 Authority key identifier: A5:C7:63:E8:A9:5F:6B:9A:B2:41:13:60:1D:A8:15:3A:15:91:26:EE Certificate issuer: /CN=A911C53D/serialNumber=A5C763E8A95F6B9AB24113601DA8153A159126EE Certificate serial: 06BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcdj6Klfa5qyQRNgHagVOhWRJu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C53D/84B58F668CFB11EB9DC62C3BC4F9AE02/pcdj6Klfa5qyQRNgHagVOhWRJu4.mft Manifest number: 06A9 Signing time: Tue 04 Nov 2025 22:26:28 +0000 Manifest this update: Tue 04 Nov 2025 22:26:27 +0000 Manifest next update: Tue 11 Nov 2025 22:26:27 +0000 Files and hashes: 1: pcdj6Klfa5qyQRNgHagVOhWRJu4.crl (hash: 3OCHeUA5hJ7Ujy4yR5xE4djVT/xk7b5PojCLyX1DEVU=) 2: 45FE96F6A5F611EFA16E4B2FC4F9AE02.roa (hash: ILkhxI5MS0Y08MvVskMnHwF1yNepea938q8G0D4OrHI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C53D/84B58F668CFB11EB9DC62C3BC4F9AE02/pcdj6Klfa5qyQRNgHagVOhWRJu4.crl rsync://rpki.apnic.net/member_repository/A911C53D/84B58F668CFB11EB9DC62C3BC4F9AE02/pcdj6Klfa5qyQRNgHagVOhWRJu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcdj6Klfa5qyQRNgHagVOhWRJu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:26:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1723 (0x6bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C53D, serialNumber=A5C763E8A95F6B9AB24113601DA8153A159126EE Validity Not Before: Nov 4 22:26:27 2025 GMT Not After : Nov 11 22:26:27 2025 GMT Subject: CN=690a7d94-dead Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6d:2e:ee:7b:57:25:36:76:e5:5e:a4:6e:c4: 6c:40:af:bb:73:07:3f:30:2c:33:f0:5e:5c:0c:50: c0:d0:f5:b0:5f:d9:e7:b0:ad:4f:16:28:22:27:36: b3:96:7c:0c:d0:bc:1d:8a:5e:f4:13:25:2a:b8:d2: f8:ce:a0:ff:6e:cd:2c:9b:f0:ea:35:00:26:c3:a6: c6:d1:bb:e9:cc:86:65:77:3e:c6:b7:16:d2:4c:c0: 68:f3:c9:e7:c0:1d:8c:d8:71:f7:e1:ae:4b:f1:92: 78:5c:56:a9:44:98:3a:9b:53:7b:bd:88:1a:aa:90: f4:69:f7:f4:36:f3:b3:62:44:7f:48:14:0f:20:b1: e1:36:dc:46:cb:af:cc:ea:8a:1c:a8:7e:ae:e4:0d: fe:a1:e7:c9:72:ec:74:27:6a:d4:ba:02:04:ba:6c: 26:bc:c4:fe:d4:33:10:f1:c5:ff:03:28:33:c4:ae: d8:87:e7:11:a5:91:be:d4:1b:0b:75:53:01:50:f6: 47:0a:bf:56:dd:bf:29:ac:2e:e5:9b:1e:40:0f:d2: c3:4c:68:70:aa:36:ec:66:e2:cb:45:fa:31:e2:85: 78:5c:39:f4:f0:40:f2:ce:1e:8e:86:30:4b:51:5b: ce:c7:fe:fc:18:08:67:3d:51:e0:7a:48:4a:59:76: c2:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:FA:77:03:38:A2:45:D0:FD:C4:93:49:9F:3B:2F:F4:4C:AB:B4:08 X509v3 Authority Key Identifier: keyid:A5:C7:63:E8:A9:5F:6B:9A:B2:41:13:60:1D:A8:15:3A:15:91:26:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C53D/84B58F668CFB11EB9DC62C3BC4F9AE02/pcdj6Klfa5qyQRNgHagVOhWRJu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcdj6Klfa5qyQRNgHagVOhWRJu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C53D/84B58F668CFB11EB9DC62C3BC4F9AE02/pcdj6Klfa5qyQRNgHagVOhWRJu4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:d1:48:f0:26:c4:99:25:0e:c3:03:dc:34:f5:21:71:ed:28: 30:6d:3b:a5:c4:8d:00:00:e0:7e:3d:a1:c6:c7:ca:71:e9:0e: bf:db:c9:b2:ec:12:ac:86:94:02:da:42:01:39:10:da:46:0b: 72:30:e3:75:14:e7:6d:c0:c0:01:50:19:d9:27:5c:dd:85:89: f1:cf:12:bb:b2:84:ed:38:da:fb:ca:57:fe:6a:49:a3:21:3d: 3d:a6:5a:e6:3a:93:2e:8a:d8:46:79:5a:19:d7:9d:80:06:1a: 53:bd:bb:02:41:74:db:21:73:ba:3d:d9:6e:68:6c:3d:43:7b: 23:dd:0f:db:c2:31:8b:7c:55:92:53:08:e7:3c:89:d0:fb:88: d8:e4:26:d3:93:58:94:fe:fc:23:a7:25:50:8c:53:17:4a:89: d5:f7:d7:9b:87:a5:23:b4:7d:c9:2d:cc:ef:0f:74:4e:0f:88: 30:2e:51:a1:35:3d:af:ca:b5:24:e2:8b:67:cd:1c:9d:29:e3: 4b:ff:7b:e6:35:c8:3a:c7:05:a4:9d:5d:32:93:7e:23:9c:0b: 2c:8d:c1:57:57:f7:af:94:7d:81:65:62:3d:9c:6d:15:c6:35: 2a:43:3c:77:72:d4:9e:46:75:7f:eb:4b:96:58:d6:c8:ab:17: f1:de:c3:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM1M0QxMTAvBgNVBAUTKEE1Qzc2M0U4QTk1RjZCOUFCMjQxMTM2MDFEQTgxNTNB MTU5MTI2RUUwHhcNMjUxMTA0MjIyNjI3WhcNMjUxMTExMjIyNjI3WjAYMRYwFAYD VQQDEw02OTBhN2Q5NC1kZWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsm0u7ntXJTZ25V6kbsRsQK+7cwc/MCwz8F5cDFDA0PWwX9nnsK1PFigiJzaz lnwM0Lwdil70EyUquNL4zqD/bs0sm/DqNQAmw6bG0bvpzIZldz7GtxbSTMBo88nn wB2M2HH34a5L8ZJ4XFapRJg6m1N7vYgaqpD0aff0NvOzYkR/SBQPILHhNtxGy6/M 6oocqH6u5A3+oefJcux0J2rUugIEumwmvMT+1DMQ8cX/AygzxK7Yh+cRpZG+1BsL dVMBUPZHCr9W3b8prC7lmx5AD9LDTGhwqjbsZuLLRfox4oV4XDn08EDyzh6OhjBL UVvOx/78GAhnPVHgekhKWXbCxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEP6dwM4 okXQ/cSTSZ87L/RMq7QIMB8GA1UdIwQYMBaAFKXHY+ipX2uaskETYB2oFToVkSbu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzUzRC84NEI1OEY2NjhD RkIxMUVCOURDNjJDM0JDNEY5QUUwMi9wY2RqNktsZmE1cXlRUk5nSGFnVk9oV1JK dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BjZGo2S2xmYTVxeVFSTmdIYWdWT2hXUkp1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzUzRC84NEI1OEY2NjhDRkIxMUVCOURDNjJDM0JDNEY5QUUwMi9wY2RqNktsZmE1 cXlRUk5nSGFnVk9oV1JKdTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBf0UjwJsSZJQ7DA9w09SFx7SgwbTulxI0AAOB+PaHGx8px6Q6/28my 7BKshpQC2kIBORDaRgtyMON1FOdtwMABUBnZJ1zdhYnxzxK7soTtONr7ylf+akmj IT09plrmOpMuithGeVoZ152ABhpTvbsCQXTbIXO6PdluaGw9Q3sj3Q/bwjGLfFWS UwjnPInQ+4jY5CbTk1iU/vwjpyVQjFMXSonV99ebh6UjtH3JLczvD3ROD4gwLlGh NT2vyrUk4otnzRydKeNL/3vmNcg6xwWknV0yk34jnAssjcFXV/evlH2BZWI9nG0V xjUqQzx3ctSeRnV/60uWWNbIqxfx3sNO -----END CERTIFICATE-----Generated at Wed Nov 5 19:32:42 2025 by rpki-client