$ rpki-client -vvf rpki.apnic.net/member_repository/A911FCFC/0EF3B3887D3E11EB9EDF687CC4F9AE02/PSZeQBIxQ3qRDsIf5O1O47EmnI0.mft File: PSZeQBIxQ3qRDsIf5O1O47EmnI0.mft (raw, json) Hash identifier: T+nvH7f+cCV1IamOiFUFhWB5v4LCurE1njHFqWvd4oM= Subject key identifier: 75:24:DC:3E:05:4D:FA:F4:DD:DC:D9:9B:55:3C:D2:95:69:7A:8B:81 Authority key identifier: 3D:26:5E:40:12:31:43:7A:91:0E:C2:1F:E4:ED:4E:E3:B1:26:9C:8D Certificate issuer: /CN=A911FCFC/serialNumber=3D265E401231437A910EC21FE4ED4EE3B1269C8D Certificate serial: 06C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSZeQBIxQ3qRDsIf5O1O47EmnI0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FCFC/0EF3B3887D3E11EB9EDF687CC4F9AE02/PSZeQBIxQ3qRDsIf5O1O47EmnI0.mft Manifest number: 06BB Signing time: Wed 22 Oct 2025 23:03:42 +0000 Manifest this update: Wed 22 Oct 2025 23:03:41 +0000 Manifest next update: Wed 29 Oct 2025 23:03:41 +0000 Files and hashes: 1: PSZeQBIxQ3qRDsIf5O1O47EmnI0.crl (hash: /Tg92RnmSOlo+YTt7mdUy/EGnRejgHF/2osbYotUwLw=) 2: 584CC9ACEA0911EF91395D2BC4F9AE02.roa (hash: 0CvjA6RG6CwLDhsi+lvIuB2qC+UIcfKPm+dtie8AJzA=) 3: 3A542BE0BC7511EBBB084D27C4F9AE02.roa (hash: h6cfh4R2DSVctuRgtsUmGsASm4gMo0dIEjDPej0xQNc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FCFC/0EF3B3887D3E11EB9EDF687CC4F9AE02/PSZeQBIxQ3qRDsIf5O1O47EmnI0.crl rsync://rpki.apnic.net/member_repository/A911FCFC/0EF3B3887D3E11EB9EDF687CC4F9AE02/PSZeQBIxQ3qRDsIf5O1O47EmnI0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSZeQBIxQ3qRDsIf5O1O47EmnI0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 23:03:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1734 (0x6c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FCFC, serialNumber=3D265E401231437A910EC21FE4ED4EE3B1269C8D Validity Not Before: Oct 22 23:03:41 2025 GMT Not After : Oct 29 23:03:41 2025 GMT Subject: CN=68f962cd-4baa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:5a:27:d0:4e:71:90:eb:81:79:ff:2c:a8:24: 40:6e:90:ff:73:9b:fe:49:02:c5:d9:a2:23:f4:e7: 13:4b:f0:62:a2:c4:2e:bb:cd:8c:f8:cc:2f:dc:4d: 15:1f:19:e3:6c:d4:26:20:87:0e:7e:4e:73:eb:ec: 6a:53:83:2d:f8:c8:fb:df:76:4d:72:05:d0:d8:8a: 21:ba:57:7b:14:b0:7a:d5:d1:87:cd:f7:61:82:21: 4b:55:4e:2a:d3:fb:65:d9:27:84:a4:82:25:07:e2: 6d:a8:dd:81:86:ee:3f:74:75:69:8e:8e:63:0b:12: 77:30:5d:f1:aa:b0:89:81:30:c2:93:6b:12:fc:ba: b9:d5:b0:8d:e7:96:8a:fb:c7:00:92:3e:d1:6a:c0: e8:99:5f:bf:97:1a:82:a6:c0:28:8d:30:56:eb:9b: 10:64:4d:66:c5:5e:fc:a2:a0:0e:aa:04:fa:f1:3a: b5:19:77:1b:c7:8b:a2:30:98:35:1c:3a:32:aa:56: 11:29:eb:c3:10:6a:89:b9:c3:47:31:64:c7:73:81: d5:8f:90:bf:b2:02:26:b7:51:09:4f:72:2b:ee:38: 0b:7c:a3:4b:e4:64:77:17:c3:70:ac:52:b8:8f:1a: 82:54:49:27:ef:43:f8:81:e5:33:15:18:7f:f0:69: 72:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:24:DC:3E:05:4D:FA:F4:DD:DC:D9:9B:55:3C:D2:95:69:7A:8B:81 X509v3 Authority Key Identifier: keyid:3D:26:5E:40:12:31:43:7A:91:0E:C2:1F:E4:ED:4E:E3:B1:26:9C:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FCFC/0EF3B3887D3E11EB9EDF687CC4F9AE02/PSZeQBIxQ3qRDsIf5O1O47EmnI0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSZeQBIxQ3qRDsIf5O1O47EmnI0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FCFC/0EF3B3887D3E11EB9EDF687CC4F9AE02/PSZeQBIxQ3qRDsIf5O1O47EmnI0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:55:42:78:c1:51:c6:71:32:33:97:85:33:0c:d4:6b:9b:71: d0:6d:1e:ec:32:fb:62:e1:10:fb:15:e8:69:48:8e:49:b2:c2: 0a:3d:10:c9:27:71:d3:07:4d:e8:0a:17:61:bc:83:48:7b:a9: 08:36:3a:a5:e4:3f:6e:f9:be:d5:b4:e2:04:03:bb:e9:57:90: ab:75:eb:79:48:bb:7d:80:d0:0a:46:73:2c:d3:5c:00:1b:f9: 0e:5e:a0:48:20:7f:9f:a7:40:46:8e:61:d3:42:5c:d6:aa:1e: 83:a4:74:84:47:30:fc:67:ae:4f:24:97:ca:22:5f:c2:70:91: 64:a9:e7:66:da:ba:f6:1d:3a:1d:8d:c3:38:90:24:43:1d:1d: 50:7b:90:a1:71:15:0d:6f:3d:2e:9f:ad:55:90:15:9a:f6:54: 28:94:74:52:1e:a1:fc:a2:a7:ba:a3:86:2d:5a:4f:c1:38:b4: 06:23:7e:ea:4e:a2:7c:3d:43:a0:45:f3:da:0e:85:84:f6:98: e4:4e:c3:5c:29:9d:df:b0:a4:52:43:21:0d:05:0f:ea:19:80: 9a:92:89:a0:7a:15:60:a0:d8:76:a4:c6:20:02:69:f0:5c:56: 0b:3c:37:8a:79:3f:15:7b:69:60:8a:ac:d9:87:6d:89:dd:d5: 7f:f6:ee:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBsYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZDRkMxMTAvBgNVBAUTKDNEMjY1RTQwMTIzMTQzN0E5MTBFQzIxRkU0RUQ0RUUz QjEyNjlDOEQwHhcNMjUxMDIyMjMwMzQxWhcNMjUxMDI5MjMwMzQxWjAYMRYwFAYD VQQDEw02OGY5NjJjZC00YmFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Von0E5xkOuBef8sqCRAbpD/c5v+SQLF2aIj9OcTS/BiosQuu82M+Mwv3E0V HxnjbNQmIIcOfk5z6+xqU4Mt+Mj733ZNcgXQ2Iohuld7FLB61dGHzfdhgiFLVU4q 0/tl2SeEpIIlB+JtqN2Bhu4/dHVpjo5jCxJ3MF3xqrCJgTDCk2sS/Lq51bCN55aK +8cAkj7RasDomV+/lxqCpsAojTBW65sQZE1mxV78oqAOqgT68Tq1GXcbx4uiMJg1 HDoyqlYRKevDEGqJucNHMWTHc4HVj5C/sgImt1EJT3Ir7jgLfKNL5GR3F8NwrFK4 jxqCVEkn70P4geUzFRh/8GlylQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHUk3D4F Tfr03dzZm1U80pVpeouBMB8GA1UdIwQYMBaAFD0mXkASMUN6kQ7CH+TtTuOxJpyN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkNGQy8wRUYzQjM4ODdE M0UxMUVCOUVERjY4N0NDNEY5QUUwMi9QU1plUUJJeFEzcVJEc0lmNU8xTzQ3RW1u STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BTWmVRQkl4UTNxUkRzSWY1TzFPNDdFbW5JMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkNGQy8wRUYzQjM4ODdEM0UxMUVCOUVERjY4N0NDNEY5QUUwMi9QU1plUUJJeFEz cVJEc0lmNU8xTzQ3RW1uSTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkVUJ4wVHGcTIzl4UzDNRrm3HQbR7sMvti4RD7FehpSI5JssIKPRDJ J3HTB03oChdhvINIe6kINjql5D9u+b7VtOIEA7vpV5Crdet5SLt9gNAKRnMs01wA G/kOXqBIIH+fp0BGjmHTQlzWqh6DpHSERzD8Z65PJJfKIl/CcJFkqedm2rr2HTod jcM4kCRDHR1Qe5ChcRUNbz0un61VkBWa9lQolHRSHqH8oqe6o4YtWk/BOLQGI37q TqJ8PUOgRfPaDoWE9pjkTsNcKZ3fsKRSQyENBQ/qGYCakomgehVgoNh2pMYgAmnw XFYLPDeKeT8Ve2lgiqzZh22J3dV/9u63 -----END CERTIFICATE-----Generated at Fri Oct 24 06:16:38 2025 by rpki-client