$ rpki-client -vvf rpki.apnic.net/member_repository/A9134C75/0F82F584BA1F11F09D9E253CC4F9AE02/PI-14Mz34QXfzLtMj4NZ71phXx8.mft File: PI-14Mz34QXfzLtMj4NZ71phXx8.mft (raw, json) Hash identifier: e4N4XtLncCelP/88FwkwuBzmPKF6YqfKcfXeHYPf9oM= Subject key identifier: 6A:B1:D4:BA:D8:F5:B9:CE:11:D0:6E:12:11:9D:D6:6D:56:D6:75:94 Authority key identifier: 3C:8F:B5:E0:CC:F7:E1:05:DF:CC:BB:4C:8F:83:59:EF:5A:61:5F:1F Certificate issuer: /CN=A9134C75/serialNumber=3C8FB5E0CCF7E105DFCCBB4C8F8359EF5A615F1F Certificate serial: 04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PI-14Mz34QXfzLtMj4NZ71phXx8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134C75/0F82F584BA1F11F09D9E253CC4F9AE02/PI-14Mz34QXfzLtMj4NZ71phXx8.mft Manifest number: 03 Signing time: Wed 05 Nov 2025 08:28:03 +0000 Manifest this update: Wed 05 Nov 2025 08:28:02 +0000 Manifest next update: Wed 12 Nov 2025 08:28:02 +0000 Files and hashes: 1: PI-14Mz34QXfzLtMj4NZ71phXx8.crl (hash: /7w2WjHEXAfvIbgZgQO8oF5+bLEZ81z9ckw4vU5UibY=) 2: 5672783CBA2111F08A546E86C4F9AE02.roa (hash: TRNKJPfaeGRddgmm1XCBvC+iXBAcm8b5Fn3KrDnKAtQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134C75/0F82F584BA1F11F09D9E253CC4F9AE02/PI-14Mz34QXfzLtMj4NZ71phXx8.crl rsync://rpki.apnic.net/member_repository/A9134C75/0F82F584BA1F11F09D9E253CC4F9AE02/PI-14Mz34QXfzLtMj4NZ71phXx8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PI-14Mz34QXfzLtMj4NZ71phXx8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 08:28:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134C75, serialNumber=3C8FB5E0CCF7E105DFCCBB4C8F8359EF5A615F1F Validity Not Before: Nov 5 08:28:02 2025 GMT Not After : Nov 12 08:28:02 2025 GMT Subject: CN=690b0a93-c7b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:eb:0b:be:bb:44:07:15:e3:51:9d:b8:bf:7f: b9:62:5e:e5:e7:0a:1e:07:bd:48:31:5f:3e:ef:c3: b5:3a:e7:da:b9:60:55:39:b6:1e:7d:f2:06:37:df: 0e:27:f1:37:26:0f:c7:42:ac:f6:39:ce:54:1d:a6: 16:05:ac:89:ff:30:ad:ef:3f:b7:ce:40:47:fc:35: f3:d0:6f:dc:56:56:5d:89:73:18:9d:6d:5b:dc:fa: 88:83:e9:2f:fe:a9:ca:85:b7:90:3d:fd:c3:d6:60: d1:cb:c5:dd:34:02:0e:e8:31:22:dd:1c:10:1b:60: f2:7f:e0:3c:6c:7d:fb:92:90:f5:7a:da:a3:01:91: 06:58:93:9b:01:1e:b8:98:7a:bb:07:f5:0d:2f:ae: 69:34:e3:39:ce:0c:a9:6a:5d:2d:5d:a9:05:1d:47: ee:59:96:24:89:00:7e:7a:8c:68:6c:a0:b3:5f:56: 6d:30:9f:75:fe:78:8e:5f:38:45:21:a5:1f:0f:12: fd:18:7b:90:31:a6:44:7e:f3:5d:0f:6b:67:e0:f8: b5:b5:09:4d:af:63:3b:76:22:47:67:01:d7:e4:ea: 54:65:cd:a9:20:aa:a2:23:14:c9:e7:d0:87:64:c8: 1b:26:7f:71:87:9e:90:fc:7f:40:ca:7b:b3:92:44: d8:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:B1:D4:BA:D8:F5:B9:CE:11:D0:6E:12:11:9D:D6:6D:56:D6:75:94 X509v3 Authority Key Identifier: keyid:3C:8F:B5:E0:CC:F7:E1:05:DF:CC:BB:4C:8F:83:59:EF:5A:61:5F:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134C75/0F82F584BA1F11F09D9E253CC4F9AE02/PI-14Mz34QXfzLtMj4NZ71phXx8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PI-14Mz34QXfzLtMj4NZ71phXx8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134C75/0F82F584BA1F11F09D9E253CC4F9AE02/PI-14Mz34QXfzLtMj4NZ71phXx8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:0a:4e:3e:27:00:b7:e4:86:b7:e2:ce:b8:ae:82:42:6a:b9: 50:ef:d2:dc:18:f3:fc:64:87:cf:bb:3d:b6:e3:2c:5c:7f:81: ab:39:c1:1c:c7:74:b4:20:11:37:d3:85:54:2e:24:8e:d0:b4: c6:b1:87:86:4e:6d:a4:c6:c4:a3:76:4e:fc:54:e5:1b:a7:e1: 89:b4:1d:59:7e:f7:fc:2d:0e:e8:06:42:54:46:3f:9c:3e:e8: 30:80:27:62:fb:fe:57:b7:b2:74:ea:20:84:ec:60:92:2c:2a: 0a:1b:20:27:f3:45:de:4a:e6:36:77:fa:e6:ec:9a:75:49:0b: 5c:10:47:c4:8a:09:ae:34:00:53:c6:7f:42:ee:8b:62:75:59: 0e:bc:6e:43:94:a8:d4:43:d8:39:9f:51:f1:ac:f1:f9:f3:57: 12:b1:91:ca:a4:a2:45:75:68:81:9f:e8:86:8d:25:a0:7e:ee: 8a:94:06:06:a7:ed:cf:62:a3:90:c1:83:00:d0:51:30:27:67: a0:41:df:54:d8:bf:2a:41:4c:c5:b9:17:ad:db:39:11:42:07: 55:e0:df:54:80:18:10:ed:e5:75:15:e7:c4:31:1e:bf:7f:0c: 21:0a:2d:6e:89:5a:2c:63:e1:77:21:78:a7:a8:17:91:0b:00: 1d:db:44:c9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NEM3NTExMC8GA1UEBRMoM0M4RkI1RTBDQ0Y3RTEwNURGQ0NCQjRDOEY4MzU5RUY1 QTYxNUYxRjAeFw0yNTExMDUwODI4MDJaFw0yNTExMTIwODI4MDJaMBgxFjAUBgNV BAMTDTY5MGIwYTkzLWM3YjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC96wu+u0QHFeNRnbi/f7liXuXnCh4HvUgxXz7vw7U659q5YFU5th598gY33w4n 8TcmD8dCrPY5zlQdphYFrIn/MK3vP7fOQEf8NfPQb9xWVl2JcxidbVvc+oiD6S/+ qcqFt5A9/cPWYNHLxd00Ag7oMSLdHBAbYPJ/4DxsffuSkPV62qMBkQZYk5sBHriY ersH9Q0vrmk04znODKlqXS1dqQUdR+5ZliSJAH56jGhsoLNfVm0wn3X+eI5fOEUh pR8PEv0Ye5AxpkR+810Pa2fg+LW1CU2vYzt2IkdnAdfk6lRlzakgqqIjFMnn0Idk yBsmf3GHnpD8f0DKe7OSRNgXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUarHUutj1 uc4R0G4SEZ3WbVbWdZQwHwYDVR0jBBgwFoAUPI+14Mz34QXfzLtMj4NZ71phXx8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0Qzc1LzBGODJGNTg0QkEx RjExRjA5RDlFMjUzQ0M0RjlBRTAyL1BJLTE0TXozNFFYZnpMdE1qNE5aNzFwaFh4 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUEktMTRNejM0UVhmekx0TWo0Tlo3MXBoWHg4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0 Qzc1LzBGODJGNTg0QkExRjExRjA5RDlFMjUzQ0M0RjlBRTAyL1BJLTE0TXozNFFY ZnpMdE1qNE5aNzFwaFh4OC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK8KTj4nALfkhrfizriugkJquVDv0twY8/xkh8+7PbbjLFx/gas5wRzH dLQgETfThVQuJI7QtMaxh4ZObaTGxKN2TvxU5Run4Ym0HVl+9/wtDugGQlRGP5w+ 6DCAJ2L7/le3snTqIITsYJIsKgobICfzRd5K5jZ3+ubsmnVJC1wQR8SKCa40AFPG f0Lui2J1WQ68bkOUqNRD2DmfUfGs8fnzVxKxkcqkokV1aIGf6IaNJaB+7oqUBgan 7c9io5DBgwDQUTAnZ6BB31TYvypBTMW5F63bORFCB1Xg31SAGBDt5XUV58QxHr9/ DCEKLW6JWixj4XcheKeoF5ELAB3bRMk= -----END CERTIFICATE-----Generated at Wed Nov 5 19:37:39 2025 by rpki-client