$ rpki-client -vvf rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.mft File: pTZ74UJBVZweuH0NXqPuxZPtz-w.mft (raw, json) Hash identifier: ncXR6SIoNBELS5tmMlKHh5qwSBzZOAlSwF+5msoe0+Y= Subject key identifier: 7A:FB:23:E7:78:2D:0C:9C:D2:C2:AF:AE:38:39:2E:7E:59:46:8B:86 Authority key identifier: A5:36:7B:E1:42:41:55:9C:1E:B8:7D:0D:5E:A3:EE:C5:93:ED:CF:EC Certificate issuer: /CN=A912BAA5/serialNumber=A5367BE14241559C1EB87D0D5EA3EEC593EDCFEC Certificate serial: 34E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTZ74UJBVZweuH0NXqPuxZPtz-w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.mft Manifest number: 34DF Signing time: Sun 02 Nov 2025 14:41:40 +0000 Manifest this update: Sun 02 Nov 2025 14:41:39 +0000 Manifest next update: Sun 09 Nov 2025 14:41:39 +0000 Files and hashes: 1: pTZ74UJBVZweuH0NXqPuxZPtz-w.crl (hash: izD2nTPdSdZNorWf1D/lypeTnmNf7seIG1UW0n3iimw=) 2: 214B85D87C0311EBB2F8C86CC4F9AE02.roa (hash: lyo3KeYKS41I3zCvbwFM3YRuu5a+CzwSrlJ2GPJMVKo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.crl rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTZ74UJBVZweuH0NXqPuxZPtz-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 14:41:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13542 (0x34e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BAA5, serialNumber=A5367BE14241559C1EB87D0D5EA3EEC593EDCFEC Validity Not Before: Nov 2 14:41:39 2025 GMT Not After : Nov 9 14:41:39 2025 GMT Subject: CN=69076da4-5995 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:14:55:02:db:cd:4a:e9:1f:c1:9e:b4:21:0d: 85:c5:76:b2:60:bc:14:30:eb:2e:eb:dd:1d:33:e1: e0:8c:3a:b1:19:95:8b:24:03:23:a2:d8:0f:c2:7e: fe:ad:62:28:e3:72:e2:95:ea:1b:38:0f:0b:2d:a3: 25:02:1e:42:f7:8f:7e:e1:da:bb:2c:18:d3:03:6c: 33:50:26:3a:81:46:53:56:f1:ec:d7:67:4c:69:05: 2a:0c:6d:12:6c:2d:fa:a0:e2:84:45:69:46:6c:0f: 5b:3d:60:68:b0:70:91:08:23:45:95:37:f8:ed:af: a2:5f:86:65:be:dd:d0:54:3f:5e:c1:5c:1d:da:ef: 7f:20:84:bd:a4:89:21:a0:d7:33:b0:7e:0e:3e:b8: 9c:d7:30:d6:ed:27:a8:fd:fa:c3:43:bc:6b:39:ef: 7f:fb:60:d6:e4:cd:10:c2:97:99:c9:67:ce:87:1f: 03:4c:77:a7:f2:36:7b:50:6f:0f:40:ea:77:16:74: 60:ef:0a:1a:00:2c:e5:18:2b:49:d1:88:1d:16:41: da:e1:b5:90:c3:f2:17:6c:99:31:83:85:cf:27:10: 43:0b:98:f3:28:7c:4f:b5:5c:0f:82:b7:7f:73:bc: c8:a6:b2:78:f1:8c:71:34:be:c0:56:3e:f2:12:96: 0a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:FB:23:E7:78:2D:0C:9C:D2:C2:AF:AE:38:39:2E:7E:59:46:8B:86 X509v3 Authority Key Identifier: keyid:A5:36:7B:E1:42:41:55:9C:1E:B8:7D:0D:5E:A3:EE:C5:93:ED:CF:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTZ74UJBVZweuH0NXqPuxZPtz-w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:37:4e:00:d6:e7:b4:77:00:2b:5c:40:93:89:a3:a9:ee:3d: 59:c4:67:40:9d:ae:de:65:55:b1:c8:77:49:01:0b:0a:9e:ee: 80:0f:57:2c:98:68:d7:4c:95:82:c7:6a:6e:fa:aa:fd:d8:28: 22:eb:31:a3:d4:21:d7:19:4f:0e:06:d7:bc:8c:03:b5:47:5b: c3:42:8c:a8:c4:bd:87:f4:b9:a8:b8:6d:80:ab:d7:7d:98:dc: 6a:da:1f:a4:9e:5e:e7:a8:3c:0c:6f:85:59:ed:f1:8f:25:71: 6b:92:65:e9:04:c4:da:d3:79:18:c6:d7:32:e1:c2:2d:5e:2e: 8d:10:72:16:e5:d1:42:80:ca:b7:15:87:0f:63:d0:c1:e9:32: 60:1a:41:22:e5:44:8f:d1:30:c5:27:c3:cc:52:77:dd:88:0f: 1a:76:39:c7:eb:a6:90:a1:fd:ec:6f:da:87:41:af:78:59:c7: 25:95:e0:38:0e:89:f7:ff:1f:eb:3a:0a:90:bf:9a:c2:32:b6: 4c:74:93:eb:a5:c0:0d:f7:d1:15:14:52:18:c9:c8:74:f4:94: 90:5d:a2:64:74:ea:a9:4e:d8:66:fb:be:7d:5b:58:d7:ab:3c: 99:b1:7b:17:5c:84:2b:75:13:7a:1e:5b:ce:42:94:25:79:a8: 2d:df:e3:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJBQTUxMTAvBgNVBAUTKEE1MzY3QkUxNDI0MTU1OUMxRUI4N0QwRDVFQTNFRUM1 OTNFRENGRUMwHhcNMjUxMTAyMTQ0MTM5WhcNMjUxMTA5MTQ0MTM5WjAYMRYwFAYD VQQDEw02OTA3NmRhNC01OTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyhRVAtvNSukfwZ60IQ2FxXayYLwUMOsu690dM+HgjDqxGZWLJAMjotgPwn7+ rWIo43LileobOA8LLaMlAh5C949+4dq7LBjTA2wzUCY6gUZTVvHs12dMaQUqDG0S bC36oOKERWlGbA9bPWBosHCRCCNFlTf47a+iX4Zlvt3QVD9ewVwd2u9/IIS9pIkh oNczsH4OPric1zDW7Seo/frDQ7xrOe9/+2DW5M0QwpeZyWfOhx8DTHen8jZ7UG8P QOp3FnRg7woaACzlGCtJ0YgdFkHa4bWQw/IXbJkxg4XPJxBDC5jzKHxPtVwPgrd/ c7zIprJ48YxxNL7AVj7yEpYK9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHr7I+d4 LQyc0sKvrjg5Ln5ZRouGMB8GA1UdIwQYMBaAFKU2e+FCQVWcHrh9DV6j7sWT7c/s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkFBNS9FNjdGNjM2NDFE OEYxMUUyQjU0RTQzRUYwOEIwMkNEMi9wVFo3NFVKQlZad2V1SDBOWHFQdXhaUHR6 LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BUWjc0VUpCVlp3ZXVIME5YcVB1eFpQdHotdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkFBNS9FNjdGNjM2NDFEOEYxMUUyQjU0RTQzRUYwOEIwMkNEMi9wVFo3NFVKQlZa d2V1SDBOWHFQdXhaUHR6LXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYN04A1ue0dwArXECTiaOp7j1ZxGdAna7eZVWxyHdJAQsKnu6AD1cs mGjXTJWCx2pu+qr92Cgi6zGj1CHXGU8OBte8jAO1R1vDQoyoxL2H9LmouG2Aq9d9 mNxq2h+knl7nqDwMb4VZ7fGPJXFrkmXpBMTa03kYxtcy4cItXi6NEHIW5dFCgMq3 FYcPY9DB6TJgGkEi5USP0TDFJ8PMUnfdiA8adjnH66aQof3sb9qHQa94WcclleA4 Don3/x/rOgqQv5rCMrZMdJPrpcAN99EVFFIYych09JSQXaJkdOqpTthm+759W1jX qzyZsXsXXIQrdRN6HlvOQpQleagt3+Mz -----END CERTIFICATE-----Generated at Mon Nov 3 18:11:20 2025 by rpki-client