$ rpki-client -vvf rpki.apnic.net/member_repository/A915A803/546ED73A533411E8B4FC6B19C4F9AE02/PdrbASYCUFD16FZsRh2atz5J5Uo.mft File: PdrbASYCUFD16FZsRh2atz5J5Uo.mft (raw, json) Hash identifier: aiP7N+OzKw2mRlmLQ+cQv6fGbFTDrAByHK8SvCzXG4U= Subject key identifier: 42:6B:78:4C:F1:BF:86:12:01:5F:A4:A7:48:64:EE:50:E3:38:C3:A6 Authority key identifier: 3D:DA:DB:01:26:02:50:50:F5:E8:56:6C:46:1D:9A:B7:3E:49:E5:4A Certificate issuer: /CN=A915A803/serialNumber=3DDADB0126025050F5E8566C461D9AB73E49E54A Certificate serial: 153D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdrbASYCUFD16FZsRh2atz5J5Uo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A803/546ED73A533411E8B4FC6B19C4F9AE02/PdrbASYCUFD16FZsRh2atz5J5Uo.mft Manifest number: 1533 Signing time: Sun 02 Nov 2025 16:47:49 +0000 Manifest this update: Sun 02 Nov 2025 16:47:48 +0000 Manifest next update: Sun 09 Nov 2025 16:47:48 +0000 Files and hashes: 1: PdrbASYCUFD16FZsRh2atz5J5Uo.crl (hash: kukaP7L0KAefrBNberKZC7p3VigksMkcL/E8fhRURl4=) 2: 4967F6B8533511E8A678701BC4F9AE02.roa (hash: 1riiNEo45WZ6XH/Os//x78+gBRpcFmxijL/HJsGk51k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A803/546ED73A533411E8B4FC6B19C4F9AE02/PdrbASYCUFD16FZsRh2atz5J5Uo.crl rsync://rpki.apnic.net/member_repository/A915A803/546ED73A533411E8B4FC6B19C4F9AE02/PdrbASYCUFD16FZsRh2atz5J5Uo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdrbASYCUFD16FZsRh2atz5J5Uo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 16:47:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5437 (0x153d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A803, serialNumber=3DDADB0126025050F5E8566C461D9AB73E49E54A Validity Not Before: Nov 2 16:47:48 2025 GMT Not After : Nov 9 16:47:48 2025 GMT Subject: CN=69078b34-f0f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b6:29:27:17:5c:9b:72:78:2b:62:bf:3d:a1: 61:9b:97:f1:3f:ff:15:46:3a:0a:3a:ac:18:96:ef: 51:ff:35:07:84:fd:8e:bf:98:36:c3:b4:ec:e4:ca: a1:5e:19:0c:f1:ea:cd:b8:2f:b0:2f:69:74:9a:a7: 55:7c:d7:2d:03:73:1c:dd:ee:96:43:f6:da:fc:d4: 3f:bb:85:3a:d9:6b:42:b6:64:1e:00:87:5f:e5:c8: a6:05:c3:0f:b8:3b:ca:dd:44:bf:1a:70:99:4c:e0: 9c:9b:87:f2:15:29:24:d5:19:bd:5a:ab:f3:07:ca: ef:6f:10:cd:56:1d:a1:ac:13:72:0e:7c:d5:d1:88: 81:ae:56:de:10:69:62:6b:6a:a4:e1:c2:24:8e:dd: 81:a7:f5:5d:a1:3f:a6:91:58:59:a5:9c:8d:a1:03: 87:c9:d7:10:20:d8:11:1a:86:65:2f:26:12:3c:c9: 7f:ae:24:1f:3f:6b:97:47:37:de:a8:2f:85:c3:70: 0d:2a:12:00:18:4e:e7:e3:56:3f:ed:0f:6c:1a:55: 26:ea:7c:29:a9:b2:54:08:90:2b:33:0b:e3:09:25: d7:a3:a4:90:e4:f8:2a:ed:af:0e:86:ad:d5:a4:05: e6:ce:cc:fe:04:56:89:79:17:f8:e7:2e:83:7b:fa: 01:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:6B:78:4C:F1:BF:86:12:01:5F:A4:A7:48:64:EE:50:E3:38:C3:A6 X509v3 Authority Key Identifier: keyid:3D:DA:DB:01:26:02:50:50:F5:E8:56:6C:46:1D:9A:B7:3E:49:E5:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A803/546ED73A533411E8B4FC6B19C4F9AE02/PdrbASYCUFD16FZsRh2atz5J5Uo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdrbASYCUFD16FZsRh2atz5J5Uo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A803/546ED73A533411E8B4FC6B19C4F9AE02/PdrbASYCUFD16FZsRh2atz5J5Uo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:39:13:f1:ce:40:90:7f:e3:94:91:6a:53:10:e8:2d:9c:e9: f0:e0:39:9f:ff:1f:3e:b4:ac:b2:6b:fa:54:fb:39:50:cb:6a: f1:00:de:36:0c:bc:c1:e8:96:81:a6:cc:54:72:97:8a:81:df: 02:9d:8d:3a:c5:61:f7:a8:f8:8b:c3:01:85:6e:7b:b2:2b:3a: 30:0a:a8:04:e0:d0:93:11:f8:78:5c:52:af:53:dc:5f:9c:93: c8:bd:4c:a5:98:d4:74:4d:83:4b:a3:d7:83:68:23:d1:f3:fd: 57:e6:15:2c:b1:2e:13:97:77:94:2a:5b:0d:62:36:b0:3b:ba: a1:bb:57:3f:7d:a5:59:ef:f8:d9:ae:66:3f:10:fd:06:1e:a0: f9:be:79:39:17:65:f9:1e:49:b7:1b:95:61:e3:a8:a2:71:66: c2:ea:00:51:02:1e:8f:0e:05:55:dc:44:59:bb:53:07:ee:b8: 3d:6d:35:f7:e0:b0:80:b7:db:b0:e4:ac:ed:34:8f:c9:c0:5d: 28:a2:a7:5d:36:e1:fd:95:74:b8:e1:8f:46:e6:d6:51:50:e6: 54:d3:a1:11:47:50:97:e3:e9:e9:8a:e0:f7:6f:52:4f:14:67: 34:47:ed:5c:8c:c0:db:53:1f:3b:06:b7:91:c5:19:75:5e:46: b6:37:b9:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUE4MDMxMTAvBgNVBAUTKDNEREFEQjAxMjYwMjUwNTBGNUU4NTY2QzQ2MUQ5QUI3 M0U0OUU1NEEwHhcNMjUxMTAyMTY0NzQ4WhcNMjUxMTA5MTY0NzQ4WjAYMRYwFAYD VQQDEw02OTA3OGIzNC1mMGYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyLYpJxdcm3J4K2K/PaFhm5fxP/8VRjoKOqwYlu9R/zUHhP2Ov5g2w7Ts5Mqh XhkM8erNuC+wL2l0mqdVfNctA3Mc3e6WQ/ba/NQ/u4U62WtCtmQeAIdf5cimBcMP uDvK3US/GnCZTOCcm4fyFSkk1Rm9WqvzB8rvbxDNVh2hrBNyDnzV0YiBrlbeEGli a2qk4cIkjt2Bp/VdoT+mkVhZpZyNoQOHydcQINgRGoZlLyYSPMl/riQfP2uXRzfe qC+Fw3ANKhIAGE7n41Y/7Q9sGlUm6nwpqbJUCJArMwvjCSXXo6SQ5Pgq7a8Ohq3V pAXmzsz+BFaJeRf45y6De/oB3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEJreEzx v4YSAV+kp0hk7lDjOMOmMB8GA1UdIwQYMBaAFD3a2wEmAlBQ9ehWbEYdmrc+SeVK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTgwMy81NDZFRDczQTUz MzQxMUU4QjRGQzZCMTlDNEY5QUUwMi9QZHJiQVNZQ1VGRDE2RlpzUmgyYXR6NUo1 VW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BkcmJBU1lDVUZEMTZGWnNSaDJhdHo1SjVVby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTgwMy81NDZFRDczQTUzMzQxMUU4QjRGQzZCMTlDNEY5QUUwMi9QZHJiQVNZQ1VG RDE2RlpzUmgyYXR6NUo1VW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACORPxzkCQf+OUkWpTEOgtnOnw4Dmf/x8+tKyya/pU+zlQy2rxAN42 DLzB6JaBpsxUcpeKgd8CnY06xWH3qPiLwwGFbnuyKzowCqgE4NCTEfh4XFKvU9xf nJPIvUylmNR0TYNLo9eDaCPR8/1X5hUssS4Tl3eUKlsNYjawO7qhu1c/faVZ7/jZ rmY/EP0GHqD5vnk5F2X5Hkm3G5Vh46iicWbC6gBRAh6PDgVV3ERZu1MH7rg9bTX3 4LCAt9uw5KztNI/JwF0ooqddNuH9lXS44Y9G5tZRUOZU06ERR1CX4+npiuD3b1JP FGc0R+1cjMDbUx87BreRxRl1Xka2N7kY -----END CERTIFICATE-----Generated at Mon Nov 3 18:08:14 2025 by rpki-client