$ rpki-client -vvf rpki.apnic.net/member_repository/A91389E7/A27FE6DC4C0911F09F38B628C4F9AE02/PwmXnYiKPadxYLPIBzfMNgDGuN4.mft File: PwmXnYiKPadxYLPIBzfMNgDGuN4.mft (raw, json) Hash identifier: A9AY+cA9W/6OEz3NshxjjlBUxKD3R4im6JpQmYx9COs= Subject key identifier: F9:DA:47:32:7E:56:57:C2:35:16:A9:9C:4B:A7:43:15:F3:4D:DC:44 Authority key identifier: 3F:09:97:9D:88:8A:3D:A7:71:60:B3:C8:07:37:CC:36:00:C6:B8:DE Certificate issuer: /CN=A91389E7/serialNumber=3F09979D888A3DA77160B3C80737CC3600C6B8DE Certificate serial: 48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PwmXnYiKPadxYLPIBzfMNgDGuN4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91389E7/A27FE6DC4C0911F09F38B628C4F9AE02/PwmXnYiKPadxYLPIBzfMNgDGuN4.mft Manifest number: 48 Signing time: Mon 03 Nov 2025 07:21:28 +0000 Manifest this update: Mon 03 Nov 2025 07:21:28 +0000 Manifest next update: Mon 10 Nov 2025 07:21:28 +0000 Files and hashes: 1: PwmXnYiKPadxYLPIBzfMNgDGuN4.crl (hash: VABASVoljbtQgSHhzdwq+quJaMEd8gJXpWy759JjLjg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91389E7/A27FE6DC4C0911F09F38B628C4F9AE02/PwmXnYiKPadxYLPIBzfMNgDGuN4.crl rsync://rpki.apnic.net/member_repository/A91389E7/A27FE6DC4C0911F09F38B628C4F9AE02/PwmXnYiKPadxYLPIBzfMNgDGuN4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PwmXnYiKPadxYLPIBzfMNgDGuN4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:21:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91389E7, serialNumber=3F09979D888A3DA77160B3C80737CC3600C6B8DE Validity Not Before: Nov 3 07:21:28 2025 GMT Not After : Nov 10 07:21:28 2025 GMT Subject: CN=690857f8-c6af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:57:67:9a:7e:f0:ed:13:7e:9c:12:b9:3a:42: d2:2c:31:f4:08:f1:17:81:f8:6d:0d:2a:08:66:9b: d1:57:94:e7:18:5a:e5:28:01:cd:9f:1d:d7:9a:e2: 67:ce:8f:06:b3:32:88:97:8c:53:7c:a3:79:73:4c: 1b:6e:91:49:00:d4:2d:ca:f1:02:93:cf:80:a8:42: 46:91:3d:3f:b4:00:f2:90:3d:56:a9:6d:97:8f:5f: ba:da:06:4d:a1:ba:3f:75:cb:54:ca:95:74:e2:85: 07:5a:62:1f:a5:8a:ec:8f:1c:a5:71:74:f9:1c:77: 4b:73:3c:4d:3f:c5:38:36:9a:e7:f0:02:d1:13:4b: 90:20:06:7e:3b:9e:7e:22:1f:0a:84:89:a3:a9:ce: b1:69:d7:fc:ec:a2:c7:39:6b:2c:d9:b9:8f:70:d8: c1:21:2a:b0:98:1a:d6:29:5f:d6:2a:e0:88:95:64: 54:2b:3f:26:b0:66:12:72:5e:04:29:be:df:21:b6: 15:50:82:7c:88:11:38:58:4c:b7:5f:47:b7:a9:28: d7:b4:d4:71:b5:e9:66:49:b1:8e:2b:6e:16:95:e5: e9:e3:e1:68:63:7b:6c:27:ab:c2:b1:ef:ef:b9:90: 46:9a:53:fc:6a:b5:80:66:02:bc:6f:64:7a:2a:23: a6:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:DA:47:32:7E:56:57:C2:35:16:A9:9C:4B:A7:43:15:F3:4D:DC:44 X509v3 Authority Key Identifier: keyid:3F:09:97:9D:88:8A:3D:A7:71:60:B3:C8:07:37:CC:36:00:C6:B8:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91389E7/A27FE6DC4C0911F09F38B628C4F9AE02/PwmXnYiKPadxYLPIBzfMNgDGuN4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PwmXnYiKPadxYLPIBzfMNgDGuN4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91389E7/A27FE6DC4C0911F09F38B628C4F9AE02/PwmXnYiKPadxYLPIBzfMNgDGuN4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:51:fa:ca:49:2f:30:43:c5:2c:e4:be:0b:63:e3:c0:73:7c: 68:11:e1:9b:ab:db:1c:67:2f:c3:20:b4:0a:af:1c:ae:62:b2: 34:79:e6:42:38:e0:bc:18:06:83:43:b3:28:28:e3:20:5a:f3: 3e:a5:6f:8f:e9:06:ff:e3:5c:d6:3d:ad:fd:a4:ea:4b:cf:ed: 03:ce:ad:e4:3d:ea:48:79:e4:71:cc:ab:bb:98:8e:a3:58:ef: 1c:39:de:5e:5f:55:1a:ad:40:1c:57:be:4c:52:06:37:04:e3: ac:9d:38:62:20:fa:58:3e:76:66:28:ff:30:1e:58:ea:d1:f2: b2:a7:a8:02:fd:3f:d7:e4:b4:84:9e:a3:31:cf:73:1e:10:bb: c5:1e:df:6d:3e:a7:ae:75:09:63:1e:66:32:99:94:16:0e:d5: 07:d4:06:54:e7:26:db:85:ef:37:fb:67:f1:a7:b2:83:a7:3b: 47:7f:ab:3a:ef:ce:e7:78:78:90:a8:c7:73:80:6c:ca:14:a9: 82:6a:ea:5b:a9:6b:40:c8:06:c5:77:3f:b4:14:c5:de:9d:bc: 53:da:c6:4e:8c:e8:b1:00:22:45:a4:04:bd:9c:fa:55:c1:f6: 96:30:74:6e:9e:f7:3c:aa:9c:b7:05:26:64:2b:18:fb:8d:1e: 36:ae:18:4b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz ODlFNzExMC8GA1UEBRMoM0YwOTk3OUQ4ODhBM0RBNzcxNjBCM0M4MDczN0NDMzYw MEM2QjhERTAeFw0yNTExMDMwNzIxMjhaFw0yNTExMTAwNzIxMjhaMBgxFjAUBgNV BAMTDTY5MDg1N2Y4LWM2YWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9V2eafvDtE36cErk6QtIsMfQI8ReB+G0NKghmm9FXlOcYWuUoAc2fHdea4mfO jwazMoiXjFN8o3lzTBtukUkA1C3K8QKTz4CoQkaRPT+0APKQPVapbZePX7raBk2h uj91y1TKlXTihQdaYh+liuyPHKVxdPkcd0tzPE0/xTg2mufwAtETS5AgBn47nn4i HwqEiaOpzrFp1/zsosc5ayzZuY9w2MEhKrCYGtYpX9Yq4IiVZFQrPyawZhJyXgQp vt8hthVQgnyIEThYTLdfR7epKNe01HG16WZJsY4rbhaV5enj4Whje2wnq8Kx7++5 kEaaU/xqtYBmArxvZHoqI6arAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+dpHMn5W V8I1FqmcS6dDFfNN3EQwHwYDVR0jBBgwFoAUPwmXnYiKPadxYLPIBzfMNgDGuN4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4OUU3L0EyN0ZFNkRDNEMw OTExRjA5RjM4QjYyOEM0RjlBRTAyL1B3bVhuWWlLUGFkeFlMUElCemZNTmdER3VO NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUHdtWG5ZaUtQYWR4WUxQSUJ6Zk1OZ0RHdU40LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4 OUU3L0EyN0ZFNkRDNEMwOTExRjA5RjM4QjYyOEM0RjlBRTAyL1B3bVhuWWlLUGFk eFlMUElCemZNTmdER3VONC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMZR+spJLzBDxSzkvgtj48BzfGgR4Zur2xxnL8MgtAqvHK5isjR55kI4 4LwYBoNDsygo4yBa8z6lb4/pBv/jXNY9rf2k6kvP7QPOreQ96kh55HHMq7uYjqNY 7xw53l5fVRqtQBxXvkxSBjcE46ydOGIg+lg+dmYo/zAeWOrR8rKnqAL9P9fktISe ozHPcx4Qu8Ue320+p651CWMeZjKZlBYO1QfUBlTnJtuF7zf7Z/GnsoOnO0d/qzrv zud4eJCox3OAbMoUqYJq6lupa0DIBsV3P7QUxd6dvFPaxk6M6LEAIkWkBL2c+lXB 9pYwdG6e9zyqnLcFJmQrGPuNHjauGEs= -----END CERTIFICATE-----Generated at Mon Nov 3 18:17:24 2025 by rpki-client