$ rpki-client -vvf rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.mft File: PbzLvnvpFslu6uzZi_XVPhw5DqE.mft (raw, json) Hash identifier: ndjczPaTJi/m14bkp3UefuF4eECoHmsX5iZlNUYdcB0= Subject key identifier: BE:E2:5E:38:40:69:23:D5:B5:CB:1A:E7:04:DC:6A:52:B4:D6:63:84 Authority key identifier: 3D:BC:CB:BE:7B:E9:16:C9:6E:EA:EC:D9:8B:F5:D5:3E:1C:39:0E:A1 Certificate issuer: /CN=A912614B/serialNumber=3DBCCBBE7BE916C96EEAECD98BF5D53E1C390EA1 Certificate serial: 0BC3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbzLvnvpFslu6uzZi_XVPhw5DqE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.mft Manifest number: 0BBB Signing time: Tue 04 Nov 2025 19:01:26 +0000 Manifest this update: Tue 04 Nov 2025 19:01:25 +0000 Manifest next update: Tue 11 Nov 2025 19:01:25 +0000 Files and hashes: 1: PbzLvnvpFslu6uzZi_XVPhw5DqE.crl (hash: 0R0S9my2DUIFYNg4e4r3UdobRS1hClCW6UPYc9H4RCU=) 2: AF57B9EC2F7811EABC011040C4F9AE02.roa (hash: 7clxci5sYL0ZKeUn3xOVCzgzac7VXWrYaajUILDcB+8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.crl rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbzLvnvpFslu6uzZi_XVPhw5DqE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3011 (0xbc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912614B, serialNumber=3DBCCBBE7BE916C96EEAECD98BF5D53E1C390EA1 Validity Not Before: Nov 4 19:01:25 2025 GMT Not After : Nov 11 19:01:25 2025 GMT Subject: CN=690a4d85-bbd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:64:1b:7e:0a:7c:15:13:07:4e:36:68:64:46: 50:13:ed:16:8d:6f:ad:f0:f1:f8:da:c7:6e:f4:30: 93:31:99:24:10:e6:e3:ce:dc:f1:15:fa:3b:23:6a: ee:84:4e:8a:7e:ed:7d:ad:a6:2f:d2:16:f3:af:cf: 70:bc:65:17:37:83:13:a6:e4:7e:03:48:06:fa:c7: 77:32:29:92:dd:32:47:c4:65:d2:b1:78:16:e4:14: 93:ee:29:d8:be:b8:3e:8d:d1:c4:5d:40:be:b7:e5: 96:70:6d:58:5a:24:8e:04:b0:b8:bf:c6:ab:50:21: 8c:50:0e:1b:a8:c9:07:11:1e:b9:76:15:e9:ac:6f: 02:ff:f3:b7:5e:f5:9f:48:d4:97:e7:ca:78:f2:54: 23:0f:6b:92:90:c8:c1:24:0b:f5:d4:ac:96:87:18: 19:90:31:fd:d1:41:62:3f:a4:3d:88:2c:90:08:db: db:bb:30:bc:77:9c:c3:9f:a8:07:6e:37:7a:2f:4b: 68:f4:7d:cf:29:ea:da:d5:40:e0:33:a7:40:0e:8b: 19:4e:6d:f4:75:48:6a:ac:b3:eb:8b:3c:c3:b2:fc: 12:f8:4d:42:fb:a3:69:bd:d0:ae:e9:08:34:20:f5: b0:a8:21:ee:ef:72:95:09:c8:a5:b3:9b:c7:d0:89: 6b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:E2:5E:38:40:69:23:D5:B5:CB:1A:E7:04:DC:6A:52:B4:D6:63:84 X509v3 Authority Key Identifier: keyid:3D:BC:CB:BE:7B:E9:16:C9:6E:EA:EC:D9:8B:F5:D5:3E:1C:39:0E:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbzLvnvpFslu6uzZi_XVPhw5DqE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:70:e5:ae:7c:0c:12:4d:52:61:8c:b4:c1:eb:43:fc:93:84: f8:ae:0f:5c:1f:d9:d7:db:7c:58:1d:0b:7d:6a:55:00:3a:77: b2:ef:02:3d:2d:fe:f7:12:49:2f:33:83:86:39:4a:1b:ac:c5: 72:00:51:7b:15:3c:f2:4e:5e:17:42:24:d3:78:e3:95:00:22: 3b:9b:4f:ca:60:b8:ea:65:1c:76:68:f7:fd:85:70:2f:87:53: bb:d5:49:2b:b8:b5:83:98:45:c4:ab:78:46:9b:95:2a:83:7f: 48:46:b6:e2:09:d4:7f:f6:7b:80:55:91:2b:5c:4b:ab:4e:ba: 9a:0e:41:78:5a:fd:90:dc:52:7c:fd:40:4b:ea:e7:ab:7e:b9: 4c:12:71:be:72:79:e3:7e:79:10:f7:67:19:70:3b:41:ec:d9: f0:ca:e3:e1:4e:ec:d3:26:80:69:a7:dd:2c:25:6d:50:54:75: ea:f6:6e:86:97:b5:c3:20:51:85:97:f0:2f:98:37:0c:fe:d9: e9:30:1c:06:a7:5b:ab:26:3f:23:ef:e8:2e:82:07:93:e7:88: a9:84:87:fa:6f:a0:e6:49:d6:4d:a8:38:db:a6:16:3e:f7:9c: dd:63:87:bf:46:b0:3c:bd:21:59:a0:49:b6:91:4f:07:e2:12: ec:bb:46:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC8MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYxNEIxMTAvBgNVBAUTKDNEQkNDQkJFN0JFOTE2Qzk2RUVBRUNEOThCRjVENTNF MUMzOTBFQTEwHhcNMjUxMTA0MTkwMTI1WhcNMjUxMTExMTkwMTI1WjAYMRYwFAYD VQQDEw02OTBhNGQ4NS1iYmQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv2Qbfgp8FRMHTjZoZEZQE+0WjW+t8PH42sdu9DCTMZkkEObjztzxFfo7I2ru hE6Kfu19raYv0hbzr89wvGUXN4MTpuR+A0gG+sd3MimS3TJHxGXSsXgW5BST7inY vrg+jdHEXUC+t+WWcG1YWiSOBLC4v8arUCGMUA4bqMkHER65dhXprG8C//O3XvWf SNSX58p48lQjD2uSkMjBJAv11KyWhxgZkDH90UFiP6Q9iCyQCNvbuzC8d5zDn6gH bjd6L0to9H3PKera1UDgM6dADosZTm30dUhqrLPrizzDsvwS+E1C+6NpvdCu6Qg0 IPWwqCHu73KVCcils5vH0IlrvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL7iXjhA aSPVtcsa5wTcalK01mOEMB8GA1UdIwQYMBaAFD28y7576RbJburs2Yv11T4cOQ6h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjE0Qi9GMkE0OTI0RTJG NzYxMUVBOTFGRENCM0NDNEY5QUUwMi9QYnpMdm52cEZzbHU2dXpaaV9YVlBodzVE cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Biekx2bnZwRnNsdTZ1elppX1hWUGh3NURxRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjE0Qi9GMkE0OTI0RTJGNzYxMUVBOTFGRENCM0NDNEY5QUUwMi9QYnpMdm52cEZz bHU2dXpaaV9YVlBodzVEcUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAncOWufAwSTVJhjLTB60P8k4T4rg9cH9nX23xYHQt9alUAOney7wI9 Lf73EkkvM4OGOUobrMVyAFF7FTzyTl4XQiTTeOOVACI7m0/KYLjqZRx2aPf9hXAv h1O71UkruLWDmEXEq3hGm5Uqg39IRrbiCdR/9nuAVZErXEurTrqaDkF4Wv2Q3FJ8 /UBL6uerfrlMEnG+cnnjfnkQ92cZcDtB7NnwyuPhTuzTJoBpp90sJW1QVHXq9m6G l7XDIFGFl/AvmDcM/tnpMBwGp1urJj8j7+guggeT54iphIf6b6DmSdZNqDjbphY+ 95zdY4e/RrA8vSFZoEm2kU8H4hLsu0bq -----END CERTIFICATE-----Generated at Wed Nov 5 05:25:42 2025 by rpki-client