$ rpki-client -vvf rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.mft File: PM1fKKh57729PlX0wrzyjWzdWu4.mft (raw, json) Hash identifier: Z2/+R4ruztVY9XiQpotsmVwKis0Hs/zyu6H2jgK7pws= Subject key identifier: 18:6D:93:86:53:E7:45:99:BA:CB:2A:4B:B0:41:B0:09:E9:8F:C8:20 Authority key identifier: 3C:CD:5F:28:A8:79:EF:BD:BD:3E:55:F4:C2:BC:F2:8D:6C:DD:5A:EE Certificate issuer: /CN=A914B14E/serialNumber=3CCD5F28A879EFBDBD3E55F4C2BCF28D6CDD5AEE Certificate serial: 0809 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM1fKKh57729PlX0wrzyjWzdWu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.mft Manifest number: 0801 Signing time: Tue 04 Nov 2025 21:03:34 +0000 Manifest this update: Tue 04 Nov 2025 21:03:34 +0000 Manifest next update: Tue 11 Nov 2025 21:03:34 +0000 Files and hashes: 1: PM1fKKh57729PlX0wrzyjWzdWu4.crl (hash: ChpdPtd07rAyxBAaN7/DMPCBWql0itPqWcL8RY3pD1I=) 2: 47F1DE34FF8611EA9DCF8D5DC4F9AE02.roa (hash: AHAcb+gAjCz8wkoAWVtMX/VsvUWaSfqcpHAMq6tIbbk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.crl rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM1fKKh57729PlX0wrzyjWzdWu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:03:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2057 (0x809) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B14E, serialNumber=3CCD5F28A879EFBDBD3E55F4C2BCF28D6CDD5AEE Validity Not Before: Nov 4 21:03:34 2025 GMT Not After : Nov 11 21:03:34 2025 GMT Subject: CN=690a6a26-37d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:97:66:c7:78:8a:61:41:6d:b3:21:ea:f5:1c: 8d:a4:76:d1:20:0c:58:b2:ca:6a:5e:93:4c:ad:24: 98:73:a0:c7:e8:81:d8:f8:03:8a:df:ff:77:f9:63: a8:f8:8a:29:2d:a7:70:da:e2:1b:42:65:03:82:dc: ec:16:1e:90:1f:f3:12:3e:23:77:36:7d:fc:ce:e3: 36:8c:56:7c:da:1a:61:ff:75:28:fd:5b:8a:af:d5: b0:16:ec:af:d0:1c:36:d3:6b:93:4e:6f:2b:48:ab: 8b:ee:8e:5e:3d:7d:01:b2:7f:01:9c:9c:05:53:fd: a2:4e:31:f1:ef:31:66:32:40:bc:1d:cc:3b:15:4f: 56:01:21:d2:f5:81:b1:3a:d0:65:f4:ff:f8:4b:46: c7:72:28:9d:49:54:d3:08:1a:fe:56:cc:13:05:ce: a2:e5:a6:f3:17:3d:97:fb:ac:75:aa:09:75:a7:95: 0d:e6:8e:84:94:14:b9:18:96:94:9d:3b:06:36:85: c3:cd:d4:d2:c8:be:89:be:6f:cb:61:3f:46:2e:6a: 4e:2c:86:b4:1b:93:02:f2:41:ed:2f:25:7f:af:cb: 11:f1:e3:e2:81:be:84:0f:f3:75:d3:fc:a6:37:36: d7:4e:e3:47:3f:c8:f9:fd:a5:04:0c:d9:16:04:a2: a3:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:6D:93:86:53:E7:45:99:BA:CB:2A:4B:B0:41:B0:09:E9:8F:C8:20 X509v3 Authority Key Identifier: keyid:3C:CD:5F:28:A8:79:EF:BD:BD:3E:55:F4:C2:BC:F2:8D:6C:DD:5A:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM1fKKh57729PlX0wrzyjWzdWu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:f9:83:8e:07:56:ba:e8:67:fb:03:ab:7d:ca:11:5b:dd:97: 8b:9e:1a:d4:1d:e8:9c:52:d3:66:8c:e6:fd:33:b1:2a:d3:ae: 7c:de:98:af:94:be:f4:c6:cd:d5:0a:8d:5c:54:1d:53:5e:6d: 68:ba:43:11:91:da:e4:f7:d8:0a:b5:bb:de:da:13:d0:51:a4: 80:d5:4d:8a:1d:5f:75:cc:65:b3:ee:f8:54:5a:e6:db:e9:4b: 21:48:ae:d6:e1:8f:f9:c2:bc:f9:e0:95:bb:82:55:f7:2d:57: 49:cb:e0:28:23:33:07:e5:b2:ab:22:a4:ef:8b:e6:bc:11:8c: 34:bd:8b:d9:56:16:74:fd:89:20:a5:6a:4e:d8:a7:32:ca:9f: 23:bc:33:4f:6d:13:ff:8c:9e:f2:bb:bb:a3:4d:07:3e:0b:c2: 92:6b:ac:65:d9:4c:b6:e9:aa:7e:c0:2d:cb:2c:03:f5:ad:ec: 3f:a6:cd:db:06:ed:c4:5c:9f:e8:24:28:47:03:13:22:0f:84: 34:36:4e:4e:de:da:b6:b1:71:a4:98:78:5b:a0:9d:00:65:ca: d9:fd:60:8b:c6:65:33:04:1b:7a:81:94:46:3d:04:b4:8d:b5: 40:53:1b:66:fb:58:a2:02:30:61:96:ed:83:1d:ce:43:d1:04: f6:6f:af:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEIxNEUxMTAvBgNVBAUTKDNDQ0Q1RjI4QTg3OUVGQkRCRDNFNTVGNEMyQkNGMjhE NkNERDVBRUUwHhcNMjUxMTA0MjEwMzM0WhcNMjUxMTExMjEwMzM0WjAYMRYwFAYD VQQDEw02OTBhNmEyNi0zN2Q3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA65dmx3iKYUFtsyHq9RyNpHbRIAxYsspqXpNMrSSYc6DH6IHY+AOK3/93+WOo +IopLadw2uIbQmUDgtzsFh6QH/MSPiN3Nn38zuM2jFZ82hph/3Uo/VuKr9WwFuyv 0Bw202uTTm8rSKuL7o5ePX0Bsn8BnJwFU/2iTjHx7zFmMkC8Hcw7FU9WASHS9YGx OtBl9P/4S0bHciidSVTTCBr+VswTBc6i5abzFz2X+6x1qgl1p5UN5o6ElBS5GJaU nTsGNoXDzdTSyL6Jvm/LYT9GLmpOLIa0G5MC8kHtLyV/r8sR8ePigb6ED/N10/ym NzbXTuNHP8j5/aUEDNkWBKKjjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBhtk4ZT 50WZussqS7BBsAnpj8ggMB8GA1UdIwQYMBaAFDzNXyioee+9vT5V9MK88o1s3Vru MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjE0RS84N0Y2ODQ4Q0ZG ODQxMUVBQjJBMUM3NUJDNEY5QUUwMi9QTTFmS0toNTc3MjlQbFgwd3J6eWpXemRX dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BNMWZLS2g1NzcyOVBsWDB3cnp5ald6ZFd1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjE0RS84N0Y2ODQ4Q0ZGODQxMUVBQjJBMUM3NUJDNEY5QUUwMi9QTTFmS0toNTc3 MjlQbFgwd3J6eWpXemRXdTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCa+YOOB1a66Gf7A6t9yhFb3ZeLnhrUHeicUtNmjOb9M7Eq06583piv lL70xs3VCo1cVB1TXm1oukMRkdrk99gKtbve2hPQUaSA1U2KHV91zGWz7vhUWubb 6UshSK7W4Y/5wrz54JW7glX3LVdJy+AoIzMH5bKrIqTvi+a8EYw0vYvZVhZ0/Ykg pWpO2Kcyyp8jvDNPbRP/jJ7yu7ujTQc+C8KSa6xl2Uy26ap+wC3LLAP1rew/ps3b Bu3EXJ/oJChHAxMiD4Q0Nk5O3tq2sXGkmHhboJ0AZcrZ/WCLxmUzBBt6gZRGPQS0 jbVAUxtm+1iiAjBhlu2DHc5D0QT2b6/j -----END CERTIFICATE-----Generated at Wed Nov 5 11:37:37 2025 by rpki-client