$ rpki-client -vvf rpki.apnic.net/member_repository/A915D9C1/30805CAAAD7211EFADF2345EC4F9AE02/pBUE5m4xRDSGJRkGluDoj_sfUnA.mft File: pBUE5m4xRDSGJRkGluDoj_sfUnA.mft (raw, json) Hash identifier: S2vzyTF4wmydS6M9c/MBBJW7nSoWxeTYJJxEXAQ6Vmk= Subject key identifier: 17:4C:42:FA:D3:0A:CF:9A:B0:DD:2A:9F:05:86:34:02:24:58:56:E4 Authority key identifier: A4:15:04:E6:6E:31:44:34:86:25:19:06:96:E0:E8:8F:FB:1F:52:70 Certificate issuer: /CN=A915D9C1/serialNumber=A41504E66E3144348625190696E0E88FFB1F5270 Certificate serial: B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBUE5m4xRDSGJRkGluDoj_sfUnA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D9C1/30805CAAAD7211EFADF2345EC4F9AE02/pBUE5m4xRDSGJRkGluDoj_sfUnA.mft Manifest number: B1 Signing time: Mon 03 Nov 2025 06:08:14 +0000 Manifest this update: Mon 03 Nov 2025 06:08:13 +0000 Manifest next update: Mon 10 Nov 2025 06:08:13 +0000 Files and hashes: 1: pBUE5m4xRDSGJRkGluDoj_sfUnA.crl (hash: a+hxKr17lWt+mJgS3rJLoGuuuHG7l6ikOZitdphroFs=) 2: C17B1042AD7211EFBD28595FC4F9AE02.roa (hash: 6k1OeDAZbCrNksIQf+J6HTs1CPc04jpy2MtgiZuWAoM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D9C1/30805CAAAD7211EFADF2345EC4F9AE02/pBUE5m4xRDSGJRkGluDoj_sfUnA.crl rsync://rpki.apnic.net/member_repository/A915D9C1/30805CAAAD7211EFADF2345EC4F9AE02/pBUE5m4xRDSGJRkGluDoj_sfUnA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBUE5m4xRDSGJRkGluDoj_sfUnA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:08:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 179 (0xb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D9C1, serialNumber=A41504E66E3144348625190696E0E88FFB1F5270 Validity Not Before: Nov 3 06:08:13 2025 GMT Not After : Nov 10 06:08:13 2025 GMT Subject: CN=690846ce-c6ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4b:f1:4f:36:67:96:5d:13:cb:6f:62:b4:29: 6a:fc:ba:eb:2a:4c:07:7a:af:ba:da:dd:5f:40:b1: 5c:f7:e9:c3:40:9e:e3:9d:ee:07:9a:55:64:27:c0: 53:60:e4:7f:b4:81:5e:c2:1c:18:79:8d:6e:c2:ed: 5e:7c:85:9c:c3:cc:05:cc:f9:ca:7b:e2:c2:37:d3: db:49:92:d0:05:cb:c6:3b:5e:8b:d6:0c:d5:2d:c0: da:39:2c:0c:1e:02:20:ff:8b:76:41:a1:90:38:3d: 25:ed:da:2f:39:f0:62:53:b5:b2:1a:2c:c7:a8:a0: e8:09:7e:3d:66:70:3f:58:82:89:d8:3c:b8:29:41: 0f:da:c1:85:95:0e:ea:2d:20:65:9d:a6:13:a6:68: ca:6b:19:d0:f1:04:52:1e:bd:11:90:9f:40:b6:d4: 0c:1f:a6:da:93:3a:0a:7e:4e:14:ac:a4:da:c3:1d: 8f:4f:36:fa:55:12:35:22:29:3a:bc:0b:d0:1e:a1: 90:ee:29:c1:44:fc:bd:7e:1a:99:4a:8b:50:2b:ac: 5c:62:35:b0:5b:57:f4:8d:bc:9f:c5:a6:c1:9c:1c: 5a:c8:53:37:34:11:50:01:4f:ff:5a:6f:7c:40:1b: 85:20:09:8d:11:a8:73:06:e8:21:ac:59:4d:01:42: 81:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:4C:42:FA:D3:0A:CF:9A:B0:DD:2A:9F:05:86:34:02:24:58:56:E4 X509v3 Authority Key Identifier: keyid:A4:15:04:E6:6E:31:44:34:86:25:19:06:96:E0:E8:8F:FB:1F:52:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D9C1/30805CAAAD7211EFADF2345EC4F9AE02/pBUE5m4xRDSGJRkGluDoj_sfUnA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBUE5m4xRDSGJRkGluDoj_sfUnA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D9C1/30805CAAAD7211EFADF2345EC4F9AE02/pBUE5m4xRDSGJRkGluDoj_sfUnA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:86:21:b5:27:23:b4:59:71:9e:34:32:b5:8c:75:cc:18:d0: 2b:ef:11:13:41:a7:68:c5:4b:29:e9:5b:6a:65:69:5f:22:10: 22:42:79:0c:45:c1:2d:2c:39:21:03:4f:db:67:67:50:74:7c: b8:b7:fa:b8:d6:4c:c1:d9:6c:46:57:09:ab:9c:dc:7c:84:c2: 9b:f7:5e:12:18:ef:c0:57:ef:ae:9b:8b:f5:70:5a:33:5d:c3: d8:08:4e:b2:f9:81:5e:72:03:73:27:3f:f3:2f:39:14:25:75: c8:4e:b2:9e:20:50:bc:b6:81:4d:89:91:3c:9a:f9:00:f4:26: 01:f6:36:80:74:ac:42:bb:3b:49:56:9e:c3:e3:cb:ec:95:f2: 98:57:c8:cb:c8:30:7e:8e:7c:49:d1:de:23:e4:c1:25:d2:4d: be:c5:65:e6:2a:d0:61:71:63:5b:25:af:57:c9:0c:8a:0e:cd: a9:a2:a1:c1:a4:55:f3:bc:c9:dc:51:05:21:80:c1:f0:63:6a: 67:35:ed:7d:22:2d:57:b5:9e:c4:54:66:3a:18:27:5b:01:a4: 49:6e:ef:08:09:2c:8e:ac:e3:6c:17:30:53:12:0b:f5:97:27: 44:c3:c3:a3:c2:54:32:e1:85:e9:ae:65:a5:8f:8e:e8:62:bf: 4f:4b:26:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ5QzExMTAvBgNVBAUTKEE0MTUwNEU2NkUzMTQ0MzQ4NjI1MTkwNjk2RTBFODhG RkIxRjUyNzAwHhcNMjUxMTAzMDYwODEzWhcNMjUxMTEwMDYwODEzWjAYMRYwFAYD VQQDEw02OTA4NDZjZS1jNmZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx0vxTzZnll0Ty29itClq/LrrKkwHeq+62t1fQLFc9+nDQJ7jne4HmlVkJ8BT YOR/tIFewhwYeY1uwu1efIWcw8wFzPnKe+LCN9PbSZLQBcvGO16L1gzVLcDaOSwM HgIg/4t2QaGQOD0l7dovOfBiU7WyGizHqKDoCX49ZnA/WIKJ2Dy4KUEP2sGFlQ7q LSBlnaYTpmjKaxnQ8QRSHr0RkJ9AttQMH6bakzoKfk4UrKTawx2PTzb6VRI1Iik6 vAvQHqGQ7inBRPy9fhqZSotQK6xcYjWwW1f0jbyfxabBnBxayFM3NBFQAU//Wm98 QBuFIAmNEahzBughrFlNAUKBawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBdMQvrT Cs+asN0qnwWGNAIkWFbkMB8GA1UdIwQYMBaAFKQVBOZuMUQ0hiUZBpbg6I/7H1Jw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDlDMS8zMDgwNUNBQUFE NzIxMUVGQURGMjM0NUVDNEY5QUUwMi9wQlVFNW00eFJEU0dKUmtHbHVEb2pfc2ZV bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BCVUU1bTR4UkRTR0pSa0dsdURval9zZlVuQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDlDMS8zMDgwNUNBQUFENzIxMUVGQURGMjM0NUVDNEY5QUUwMi9wQlVFNW00eFJE U0dKUmtHbHVEb2pfc2ZVbkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCehiG1JyO0WXGeNDK1jHXMGNAr7xETQadoxUsp6VtqZWlfIhAiQnkM RcEtLDkhA0/bZ2dQdHy4t/q41kzB2WxGVwmrnNx8hMKb914SGO/AV++um4v1cFoz XcPYCE6y+YFecgNzJz/zLzkUJXXITrKeIFC8toFNiZE8mvkA9CYB9jaAdKxCuztJ Vp7D48vslfKYV8jLyDB+jnxJ0d4j5MEl0k2+xWXmKtBhcWNbJa9XyQyKDs2poqHB pFXzvMncUQUhgMHwY2pnNe19Ii1XtZ7EVGY6GCdbAaRJbu8ICSyOrONsFzBTEgv1 lydEw8OjwlQy4YXprmWlj47oYr9PSyZV -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:04 2025 by rpki-client