$ rpki-client -vvf rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.mft File: PHUP1suMdwFoHlNr3WtxXxkrivk.mft (raw, json) Hash identifier: clDmlRjt426O+411h7eAV09W+Bxv1m4qAKjkTeMgIGU= Subject key identifier: 68:3D:FA:A6:FD:C4:C4:3B:3E:F7:07:7D:83:FC:23:89:6C:5B:CB:60 Authority key identifier: 3C:75:0F:D6:CB:8C:77:01:68:1E:53:6B:DD:6B:71:5F:19:2B:8A:F9 Certificate issuer: /CN=A914233F/serialNumber=3C750FD6CB8C7701681E536BDD6B715F192B8AF9 Certificate serial: 01AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PHUP1suMdwFoHlNr3WtxXxkrivk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.mft Manifest number: 01A3 Signing time: Wed 05 Nov 2025 03:29:57 +0000 Manifest this update: Wed 05 Nov 2025 03:29:56 +0000 Manifest next update: Wed 12 Nov 2025 03:29:56 +0000 Files and hashes: 1: PHUP1suMdwFoHlNr3WtxXxkrivk.crl (hash: nrhFHNEVJCCtsjwWE42D3KhBmHE0hgavimtFLIwYm0U=) 2: D2AD84364AE411EE95B72651C4F9AE02.roa (hash: PXugVBDjMMSZngC/IAk1O9uisIYx3s5Ti9BVaDUEHRI=) 3: D1DA657E4AE411EE95B72651C4F9AE02.roa (hash: rYuzAQ2V3DCYFm8hLaFsEVJnKAGKcFikbLAjBKDZ9TQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.crl rsync://rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PHUP1suMdwFoHlNr3WtxXxkrivk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:29:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 429 (0x1ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914233F, serialNumber=3C750FD6CB8C7701681E536BDD6B715F192B8AF9 Validity Not Before: Nov 5 03:29:56 2025 GMT Not After : Nov 12 03:29:56 2025 GMT Subject: CN=690ac4b5-056f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d0:d0:f9:11:15:96:d8:0a:95:31:c8:73:87: a3:49:26:c3:e7:fd:58:ee:42:30:93:50:79:2a:63: 76:67:56:07:33:fe:3b:24:04:e4:67:ea:25:e2:da: b3:bb:96:a4:c5:e3:2a:c5:58:9c:46:75:78:1f:55: 22:26:8a:de:7d:fc:a2:35:4c:db:0a:0b:cd:6c:3a: 10:57:f0:63:b3:1f:bd:88:cc:06:c1:40:a5:f1:a8: 18:1d:b9:42:21:88:92:63:a3:0d:ca:c1:01:9c:95: c0:0f:b4:33:f4:29:78:f7:a9:2b:aa:b7:80:d4:6f: 9a:eb:4e:ab:e5:e5:f2:0d:f5:81:b0:2f:3f:e6:d3: b1:b7:d4:2f:38:8b:6d:1d:48:fe:6b:14:93:3e:d2: 67:52:a4:0b:a3:e1:18:4e:6d:b3:9b:c0:95:b2:e8: e9:5a:42:55:f3:65:ba:8f:10:b9:9e:42:03:e5:fd: 6c:47:8a:3f:cb:3b:7d:83:7c:18:dc:6b:e6:1d:f0: 68:b4:26:b7:fe:be:46:32:94:d5:a8:91:e6:ad:90: 09:42:32:ca:50:85:41:7a:ea:82:53:23:9d:f2:d2: e1:d8:fd:49:5d:7d:a2:c4:8a:19:63:bd:76:0a:7a: cf:c6:17:b4:23:08:36:9f:20:84:37:de:03:58:3b: 55:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:3D:FA:A6:FD:C4:C4:3B:3E:F7:07:7D:83:FC:23:89:6C:5B:CB:60 X509v3 Authority Key Identifier: keyid:3C:75:0F:D6:CB:8C:77:01:68:1E:53:6B:DD:6B:71:5F:19:2B:8A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PHUP1suMdwFoHlNr3WtxXxkrivk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:2a:e0:b3:1c:6d:2d:50:08:b6:53:22:1e:02:5b:f0:cc:a4: 3a:66:3a:cc:19:9d:7d:0d:4c:7e:e3:e0:78:13:a7:5f:eb:a9: db:a0:b9:d8:fb:4c:19:91:7c:d9:55:02:35:75:32:a3:d1:03: c9:a1:ad:f8:1e:fd:51:e1:23:54:ba:06:0f:a1:40:08:82:07: 2c:1a:a0:65:ea:b5:33:ee:42:71:78:a5:07:91:54:6b:7a:0c: 06:1d:57:ad:01:23:b3:5d:7e:a9:f4:b8:e2:94:43:ed:45:e6: 9d:a7:e5:0f:91:6d:ee:9e:b9:d1:2a:bb:e5:30:43:b4:ca:57: 69:7a:d4:1c:01:69:43:79:0f:de:08:0e:51:f0:cf:52:c9:03: 8c:e8:09:b1:c5:85:64:50:32:4e:f2:e6:dd:d5:d8:eb:23:50: 0d:bf:57:23:16:c8:6f:87:e8:64:ec:81:25:81:bf:72:fe:b7: 0b:6b:9f:8c:50:06:27:89:db:2f:53:49:0a:31:d4:ae:6f:92: a3:2c:71:4e:3e:6a:0e:6e:f2:f3:7b:15:fa:da:83:3f:0b:4a: e5:c5:7c:cf:df:7d:5f:a8:8d:91:ef:f0:e5:e0:8e:20:10:f8: 96:50:08:07:45:dd:cb:e9:3d:00:ee:cb:4d:b7:6a:49:92:10: 8c:6d:9b:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIzM0YxMTAvBgNVBAUTKDNDNzUwRkQ2Q0I4Qzc3MDE2ODFFNTM2QkRENkI3MTVG MTkyQjhBRjkwHhcNMjUxMTA1MDMyOTU2WhcNMjUxMTEyMDMyOTU2WjAYMRYwFAYD VQQDEw02OTBhYzRiNS0wNTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAudDQ+REVltgKlTHIc4ejSSbD5/1Y7kIwk1B5KmN2Z1YHM/47JATkZ+ol4tqz u5akxeMqxVicRnV4H1UiJoreffyiNUzbCgvNbDoQV/Bjsx+9iMwGwUCl8agYHblC IYiSY6MNysEBnJXAD7Qz9Cl496krqreA1G+a606r5eXyDfWBsC8/5tOxt9QvOItt HUj+axSTPtJnUqQLo+EYTm2zm8CVsujpWkJV82W6jxC5nkID5f1sR4o/yzt9g3wY 3GvmHfBotCa3/r5GMpTVqJHmrZAJQjLKUIVBeuqCUyOd8tLh2P1JXX2ixIoZY712 CnrPxhe0Iwg2nyCEN94DWDtVlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGg9+qb9 xMQ7PvcHfYP8I4lsW8tgMB8GA1UdIwQYMBaAFDx1D9bLjHcBaB5Ta91rcV8ZK4r5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjMzRi84NUMyMEJEQTQ2 M0MxMUVFOUI3ODkxMzlDNEY5QUUwMi9QSFVQMXN1TWR3Rm9IbE5yM1d0eFh4a3Jp dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BIVVAxc3VNZHdGb0hsTnIzV3R4WHhrcml2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjMzRi84NUMyMEJEQTQ2M0MxMUVFOUI3ODkxMzlDNEY5QUUwMi9QSFVQMXN1TWR3 Rm9IbE5yM1d0eFh4a3JpdmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8KuCzHG0tUAi2UyIeAlvwzKQ6ZjrMGZ19DUx+4+B4E6df66nboLnY +0wZkXzZVQI1dTKj0QPJoa34Hv1R4SNUugYPoUAIggcsGqBl6rUz7kJxeKUHkVRr egwGHVetASOzXX6p9LjilEPtReadp+UPkW3unrnRKrvlMEO0yldpetQcAWlDeQ/e CA5R8M9SyQOM6AmxxYVkUDJO8ubd1djrI1ANv1cjFshvh+hk7IElgb9y/rcLa5+M UAYnidsvU0kKMdSub5KjLHFOPmoObvLzexX62oM/C0rlxXzP331fqI2R7/Dl4I4g EPiWUAgHRd3L6T0A7stNt2pJkhCMbZur -----END CERTIFICATE-----Generated at Wed Nov 5 08:09:56 2025 by rpki-client