$ rpki-client -vvf rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.mft File: PMd5DiA3Zl70liuB2tL9B-1G-LI.mft (raw, json) Hash identifier: rsJRoLjCLENA6XwNJSpdnDrV2C/c2EEOrst/SNhoxJE= Subject key identifier: 35:12:7D:11:E4:9A:F6:D8:7E:1B:15:91:9D:DD:F6:3E:35:56:6E:A8 Authority key identifier: 3C:C7:79:0E:20:37:66:5E:F4:96:2B:81:DA:D2:FD:07:ED:46:F8:B2 Certificate issuer: /CN=A9163EB9/serialNumber=3CC7790E2037665EF4962B81DAD2FD07ED46F8B2 Certificate serial: EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PMd5DiA3Zl70liuB2tL9B-1G-LI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.mft Manifest number: EB Signing time: Mon 03 Nov 2025 05:19:38 +0000 Manifest this update: Mon 03 Nov 2025 05:19:37 +0000 Manifest next update: Mon 10 Nov 2025 05:19:37 +0000 Files and hashes: 1: PMd5DiA3Zl70liuB2tL9B-1G-LI.crl (hash: naE6JicRAkB6iFCYjevOi8Lpz83Rv3MX88lFZeo3D1E=) 2: A6449CBA54A011EFB35AED26C4F9AE02.roa (hash: Hdt3DT88wjtxw1TUKGFWHT6pNsnIEUfha62M8xw528A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.crl rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PMd5DiA3Zl70liuB2tL9B-1G-LI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:19:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 238 (0xee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163EB9, serialNumber=3CC7790E2037665EF4962B81DAD2FD07ED46F8B2 Validity Not Before: Nov 3 05:19:37 2025 GMT Not After : Nov 10 05:19:37 2025 GMT Subject: CN=69083b6a-f65a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:54:eb:aa:95:80:ec:00:46:f0:2e:d5:d0:6d: ec:d1:23:16:4e:79:22:0e:e2:1f:db:07:70:96:df: 01:08:56:30:df:dd:cf:90:c3:70:d7:88:6d:d1:94: 2d:77:80:dd:82:04:d1:ed:3f:1f:89:7e:78:2b:9b: 33:c2:d9:b9:d5:dd:86:a5:58:ac:e8:ea:cc:0d:81: 2d:be:fb:ae:ec:f7:9f:37:34:74:31:8a:e1:e2:86: 89:83:67:91:f0:0e:b9:0b:ce:a0:71:3a:0d:f9:0e: a2:ec:10:3b:8d:16:c6:63:e4:0f:9b:c3:ca:c4:28: 61:b9:d5:f6:8c:ee:85:f7:e7:21:e4:61:67:b4:df: d0:43:8e:cf:a0:45:44:9b:f6:d5:d4:8e:10:47:ed: 23:9f:90:39:00:8e:74:0f:71:cf:0c:04:a4:e4:b6: 9a:4d:29:b7:77:d5:1c:75:8b:21:27:61:2b:8b:4f: 07:b8:8e:10:69:81:04:ef:52:f9:db:9c:b8:d7:56: 80:53:3d:52:e2:72:63:3a:7e:eb:c6:3e:49:0d:6e: a3:63:ce:b6:f8:72:30:be:09:50:cd:bf:b2:2c:20: cf:a6:f9:eb:d0:f0:de:ab:70:73:b1:5f:09:58:17: a5:e6:17:44:94:f6:82:bb:82:e4:3d:42:1d:93:30: 59:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:12:7D:11:E4:9A:F6:D8:7E:1B:15:91:9D:DD:F6:3E:35:56:6E:A8 X509v3 Authority Key Identifier: keyid:3C:C7:79:0E:20:37:66:5E:F4:96:2B:81:DA:D2:FD:07:ED:46:F8:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PMd5DiA3Zl70liuB2tL9B-1G-LI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:d3:43:4e:62:3d:3b:e1:d7:15:cf:dd:54:b3:dd:8e:89:4d: 76:b5:f7:dc:fb:72:ae:92:d3:37:d3:8d:22:46:99:a5:4e:de: bf:20:ae:59:af:1d:ba:40:3b:a3:33:84:cf:01:02:e5:ac:3d: 84:78:86:51:9d:ec:b3:af:04:1e:fa:e5:85:df:ef:de:66:b7: 74:90:1e:93:aa:6e:01:6c:90:e4:d3:55:e7:19:b0:c4:84:f8: 41:b4:d1:46:fb:9e:4c:14:29:46:00:f3:18:23:7c:81:4d:46: e0:46:67:f5:b7:80:0b:ca:9b:a7:3d:69:32:e9:0b:71:74:6b: f4:47:96:e7:bb:67:de:5d:04:5b:3a:ee:ca:c9:bb:96:f7:91: b9:a6:1a:bb:b5:98:33:af:5c:8a:c4:72:ea:c4:3a:a2:57:59: 34:de:b5:76:9c:42:5a:72:7e:4b:68:9b:79:3c:3b:be:95:37: 3a:7a:8a:65:41:43:1e:f2:dc:a0:3f:7a:24:2f:78:59:f8:ce: e9:b0:6e:d5:b3:c5:f7:68:0d:aa:44:5d:54:b6:50:99:4d:1c: b6:14:79:3f:2b:97:17:7f:d9:80:75:30:c3:5f:9b:ee:35:44: ff:59:37:71:74:d1:dc:ee:9b:13:64:09:a9:55:a7:92:eb:93: 7f:13:49:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjNFQjkxMTAvBgNVBAUTKDNDQzc3OTBFMjAzNzY2NUVGNDk2MkI4MURBRDJGRDA3 RUQ0NkY4QjIwHhcNMjUxMTAzMDUxOTM3WhcNMjUxMTEwMDUxOTM3WjAYMRYwFAYD VQQDEw02OTA4M2I2YS1mNjVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+FTrqpWA7ABG8C7V0G3s0SMWTnkiDuIf2wdwlt8BCFYw393PkMNw14ht0ZQt d4DdggTR7T8fiX54K5szwtm51d2GpVis6OrMDYEtvvuu7PefNzR0MYrh4oaJg2eR 8A65C86gcToN+Q6i7BA7jRbGY+QPm8PKxChhudX2jO6F9+ch5GFntN/QQ47PoEVE m/bV1I4QR+0jn5A5AI50D3HPDASk5LaaTSm3d9UcdYshJ2Eri08HuI4QaYEE71L5 25y411aAUz1S4nJjOn7rxj5JDW6jY862+HIwvglQzb+yLCDPpvnr0PDeq3BzsV8J WBel5hdElPaCu4LkPUIdkzBZxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDUSfRHk mvbYfhsVkZ3d9j41Vm6oMB8GA1UdIwQYMBaAFDzHeQ4gN2Ze9JYrgdrS/QftRviy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2M0VCOS8wNTFDOUU2NDU0 QTAxMUVGODZBRTU5MjJDNEY5QUUwMi9QTWQ1RGlBM1psNzBsaXVCMnRMOUItMUct TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BNZDVEaUEzWmw3MGxpdUIydEw5Qi0xRy1MSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 M0VCOS8wNTFDOUU2NDU0QTAxMUVGODZBRTU5MjJDNEY5QUUwMi9QTWQ1RGlBM1ps NzBsaXVCMnRMOUItMUctTEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAt00NOYj074dcVz91Us92OiU12tffc+3KuktM3040iRpmlTt6/IK5Z rx26QDujM4TPAQLlrD2EeIZRneyzrwQe+uWF3+/eZrd0kB6Tqm4BbJDk01XnGbDE hPhBtNFG+55MFClGAPMYI3yBTUbgRmf1t4ALypunPWky6QtxdGv0R5bnu2feXQRb Ou7KybuW95G5phq7tZgzr1yKxHLqxDqiV1k03rV2nEJacn5LaJt5PDu+lTc6eopl QUMe8tygP3okL3hZ+M7psG7Vs8X3aA2qRF1UtlCZTRy2FHk/K5cXf9mAdTDDX5vu NUT/WTdxdNHc7psTZAmpVaeS65N/E0n8 -----END CERTIFICATE-----Generated at Tue Nov 4 07:23:45 2025 by rpki-client