$ rpki-client -vvf rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.mft File: PmqgA4_dRmnJDxiDgji35BAt3Bk.mft (raw, json) Hash identifier: B3QAV1tdLHo4SSmq9YUpvU0JViZ0VfIxwf57th3kv+M= Subject key identifier: 11:FD:46:3D:74:4D:95:EF:83:E8:0F:E0:83:E3:FA:AA:D8:4C:E7:11 Authority key identifier: 3E:6A:A0:03:8F:DD:46:69:C9:0F:18:83:82:38:B7:E4:10:2D:DC:19 Certificate issuer: /CN=A9161322/serialNumber=3E6AA0038FDD4669C90F18838238B7E4102DDC19 Certificate serial: 0153 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PmqgA4_dRmnJDxiDgji35BAt3Bk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.mft Manifest number: 0153 Signing time: Mon 03 Nov 2025 04:09:24 +0000 Manifest this update: Mon 03 Nov 2025 04:09:23 +0000 Manifest next update: Mon 10 Nov 2025 04:09:23 +0000 Files and hashes: 1: PmqgA4_dRmnJDxiDgji35BAt3Bk.crl (hash: 9xcRQnZb96pb6iDtK4Aj13cBVURxuQZXae9cUvY77vo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.crl rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PmqgA4_dRmnJDxiDgji35BAt3Bk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:09:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 339 (0x153) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161322, serialNumber=3E6AA0038FDD4669C90F18838238B7E4102DDC19 Validity Not Before: Nov 3 04:09:23 2025 GMT Not After : Nov 10 04:09:23 2025 GMT Subject: CN=69082af4-1159 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:73:b1:cc:e0:30:05:2a:27:29:d9:db:2e:1a: 59:ce:c3:c6:24:02:b1:60:7a:91:3b:67:f8:f8:25: ca:16:fb:1a:00:96:8b:6c:8b:f8:b5:a6:ea:c9:bc: c3:88:66:7b:b5:50:c9:f1:3e:b6:19:5a:76:19:12: 32:33:13:d9:d9:a7:a5:f4:50:57:c8:37:43:74:0a: 1a:36:de:51:fb:f6:9e:ed:8e:f7:1b:10:3d:db:93: cb:70:ff:39:fa:6b:d2:2b:b9:aa:74:ac:41:af:61: 26:18:06:79:55:f3:bb:25:f7:12:66:04:51:e0:4b: 93:bb:d1:45:75:5a:31:10:11:b7:38:05:d5:6d:e7: 41:b1:74:5a:7b:05:67:44:4c:21:e8:5c:39:f8:ee: 54:99:c2:19:94:1d:45:01:b9:ba:5a:83:db:f5:48: f5:64:85:17:77:f9:e7:75:18:21:1d:d7:1e:0c:00: 4a:0f:76:47:b8:5a:3b:1a:a3:d3:b0:2d:5f:4e:d9: 80:61:3f:04:b8:b8:7d:75:ea:9f:3d:53:fc:25:02: 67:2b:b3:c9:0d:46:c6:a1:98:43:38:23:2a:26:ea: 5e:74:61:62:ab:f5:8f:96:14:cb:81:e2:c0:df:60: 0e:00:86:51:67:24:5c:6e:a8:44:db:b2:90:22:65: 33:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:FD:46:3D:74:4D:95:EF:83:E8:0F:E0:83:E3:FA:AA:D8:4C:E7:11 X509v3 Authority Key Identifier: keyid:3E:6A:A0:03:8F:DD:46:69:C9:0F:18:83:82:38:B7:E4:10:2D:DC:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PmqgA4_dRmnJDxiDgji35BAt3Bk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:c5:2d:10:c6:cd:f4:4b:a7:3d:df:1a:be:5d:9a:40:99:19: 12:e3:9f:dc:c7:c7:79:8b:e4:33:93:03:81:40:1b:4e:90:70: 25:82:5f:bb:ba:1c:40:04:9b:f2:7d:46:f3:26:c0:59:59:d6: 71:36:1f:3e:af:f5:cf:ae:0d:12:ee:64:5c:03:dc:e9:05:09: 70:52:01:ec:0b:35:fc:8c:e7:a6:bb:e6:e8:95:e8:47:cb:cc: 7d:2f:2e:b7:bb:92:e1:b8:63:a4:33:0e:6c:8d:20:42:ad:bb: 30:a5:0d:fe:66:1e:49:96:05:40:3f:dd:97:c2:76:a1:ac:81: 91:fe:bb:80:01:bb:a7:8d:19:45:23:b2:10:25:5c:24:ac:ff: bc:0f:b9:bb:96:f9:ba:d1:8f:22:b5:7f:4c:5b:f0:a1:e4:d4: b3:9b:a3:05:e9:a4:c1:80:c3:4e:0c:fe:c2:bf:13:7e:72:e1: 30:6b:f1:89:18:7a:57:dd:88:ab:17:a5:12:55:99:d6:0d:30: 55:6d:e5:fe:30:19:98:f8:9c:55:57:e5:b9:9e:12:4c:c2:3e: c4:93:d2:36:6a:d2:15:49:33:99:a9:30:cb:c6:49:3f:67:44: 9f:6f:a4:31:3d:5e:c5:07:e5:fc:83:b1:c4:12:da:f5:ff:fb: 6f:ef:e2:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjEzMjIxMTAvBgNVBAUTKDNFNkFBMDAzOEZERDQ2NjlDOTBGMTg4MzgyMzhCN0U0 MTAyRERDMTkwHhcNMjUxMTAzMDQwOTIzWhcNMjUxMTEwMDQwOTIzWjAYMRYwFAYD VQQDEw02OTA4MmFmNC0xMTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAznOxzOAwBSonKdnbLhpZzsPGJAKxYHqRO2f4+CXKFvsaAJaLbIv4tabqybzD iGZ7tVDJ8T62GVp2GRIyMxPZ2ael9FBXyDdDdAoaNt5R+/ae7Y73GxA925PLcP85 +mvSK7mqdKxBr2EmGAZ5VfO7JfcSZgRR4EuTu9FFdVoxEBG3OAXVbedBsXRaewVn REwh6Fw5+O5UmcIZlB1FAbm6WoPb9Uj1ZIUXd/nndRghHdceDABKD3ZHuFo7GqPT sC1fTtmAYT8EuLh9deqfPVP8JQJnK7PJDUbGoZhDOCMqJupedGFiq/WPlhTLgeLA 32AOAIZRZyRcbqhE27KQImUz9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBH9Rj10 TZXvg+gP4IPj+qrYTOcRMB8GA1UdIwQYMBaAFD5qoAOP3UZpyQ8Yg4I4t+QQLdwZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTMyMi80RjQwRDY3MEIw NTExMUVFOENEREIxNjFDNEY5QUUwMi9QbXFnQTRfZFJtbkpEeGlEZ2ppMzVCQXQz QmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BtcWdBNF9kUm1uSkR4aURnamkzNUJBdDNCay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTMyMi80RjQwRDY3MEIwNTExMUVFOENEREIxNjFDNEY5QUUwMi9QbXFnQTRfZFJt bkpEeGlEZ2ppMzVCQXQzQmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBexS0Qxs30S6c93xq+XZpAmRkS45/cx8d5i+QzkwOBQBtOkHAlgl+7 uhxABJvyfUbzJsBZWdZxNh8+r/XPrg0S7mRcA9zpBQlwUgHsCzX8jOemu+bolehH y8x9Ly63u5LhuGOkMw5sjSBCrbswpQ3+Zh5JlgVAP92XwnahrIGR/ruAAbunjRlF I7IQJVwkrP+8D7m7lvm60Y8itX9MW/Ch5NSzm6MF6aTBgMNODP7CvxN+cuEwa/GJ GHpX3YirF6USVZnWDTBVbeX+MBmY+JxVV+W5nhJMwj7Ek9I2atIVSTOZqTDLxkk/ Z0Sfb6QxPV7FB+X8g7HEEtr1//tv7+KJ -----END CERTIFICATE-----Generated at Mon Nov 3 18:17:21 2025 by rpki-client