$ rpki-client -vvf rpki.apnic.net/member_repository/A9166F0E/1A758B0E261F11EAAE2E8F28C4F9AE02/PUXFozv53U06Htp-0mQGWOH4Mf8.mft File: PUXFozv53U06Htp-0mQGWOH4Mf8.mft (raw, json) Hash identifier: qIp7dlvlrW9CMful1xNpOU7qPTKZhyIPWTSUH6I2lck= Subject key identifier: D4:E4:09:B9:93:13:69:C1:BD:CE:16:4A:30:9C:95:52:53:1F:A2:69 Authority key identifier: 3D:45:C5:A3:3B:F9:DD:4D:3A:1E:DA:7E:D2:64:06:58:E1:F8:31:FF Certificate issuer: /CN=A9166F0E/serialNumber=3D45C5A33BF9DD4D3A1EDA7ED2640658E1F831FF Certificate serial: 0BF2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUXFozv53U06Htp-0mQGWOH4Mf8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166F0E/1A758B0E261F11EAAE2E8F28C4F9AE02/PUXFozv53U06Htp-0mQGWOH4Mf8.mft Manifest number: 0BEB Signing time: Tue 04 Nov 2025 18:57:51 +0000 Manifest this update: Tue 04 Nov 2025 18:57:50 +0000 Manifest next update: Tue 11 Nov 2025 18:57:50 +0000 Files and hashes: 1: PUXFozv53U06Htp-0mQGWOH4Mf8.crl (hash: 1grh0Br6MUshuKd0qtIRfeXtzg1t9BFLYOHJ8cCaqeA=) 2: A11D7694261F11EAA88CE128C4F9AE02.roa (hash: UABSLYRv5F+q/4e5iQCmZDPY3VJdi+9iaRXz535SqfM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166F0E/1A758B0E261F11EAAE2E8F28C4F9AE02/PUXFozv53U06Htp-0mQGWOH4Mf8.crl rsync://rpki.apnic.net/member_repository/A9166F0E/1A758B0E261F11EAAE2E8F28C4F9AE02/PUXFozv53U06Htp-0mQGWOH4Mf8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUXFozv53U06Htp-0mQGWOH4Mf8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:57:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3058 (0xbf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166F0E, serialNumber=3D45C5A33BF9DD4D3A1EDA7ED2640658E1F831FF Validity Not Before: Nov 4 18:57:50 2025 GMT Not After : Nov 11 18:57:50 2025 GMT Subject: CN=690a4cae-b95a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:60:63:c2:18:59:47:17:7b:5e:25:ba:76:06: a7:4c:be:03:f2:03:6b:8a:56:ac:41:d0:88:fd:4f: 46:ed:52:74:13:44:b6:3e:51:9b:2d:61:02:8f:e2: b4:87:a7:66:02:bc:75:cc:fa:49:82:bb:f3:3c:2c: 92:aa:ad:12:b7:81:89:b5:45:0e:11:a5:51:ae:6c: ae:59:97:1c:5a:ef:e0:7b:c6:88:09:7a:78:b5:89: 2f:13:a0:43:a1:bf:5e:84:48:27:ac:00:bc:c7:87: d6:73:94:a5:5f:34:09:e3:2e:05:99:63:e1:85:ac: 83:80:bd:c0:a6:02:62:69:20:96:a7:5f:cd:d5:39: 31:cd:d8:b2:44:d8:77:af:b2:77:2b:c8:e8:15:b2: c7:b3:3b:d4:82:e0:bb:dc:df:ff:09:cb:c1:db:f2: de:9f:6f:e2:f8:23:3c:d9:f1:ac:d6:97:7c:cb:a7: 2b:8a:2c:85:62:f8:49:7e:85:22:ea:70:54:d9:16: ff:ae:08:58:a4:f6:44:50:b1:7f:fa:a1:d5:20:61: fd:d4:5d:e6:b9:8b:a4:89:ff:ca:1b:f8:4a:a9:d1: d5:29:cd:42:fa:85:e1:90:b4:b1:7f:30:a0:7f:ff: 26:da:c6:15:2c:69:bc:7f:5e:10:a2:c3:dc:27:95: cc:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:E4:09:B9:93:13:69:C1:BD:CE:16:4A:30:9C:95:52:53:1F:A2:69 X509v3 Authority Key Identifier: keyid:3D:45:C5:A3:3B:F9:DD:4D:3A:1E:DA:7E:D2:64:06:58:E1:F8:31:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166F0E/1A758B0E261F11EAAE2E8F28C4F9AE02/PUXFozv53U06Htp-0mQGWOH4Mf8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUXFozv53U06Htp-0mQGWOH4Mf8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166F0E/1A758B0E261F11EAAE2E8F28C4F9AE02/PUXFozv53U06Htp-0mQGWOH4Mf8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:d9:ab:c7:8b:c4:db:a1:29:8f:f3:1b:0a:c1:79:b8:2c:75: 0f:9d:21:91:8d:8b:22:72:ba:0c:a8:ba:fa:1d:e8:3a:28:33: 80:be:33:80:48:ac:d1:d3:fa:f1:79:33:ca:15:9f:11:44:e4: f9:9f:ed:07:e2:4c:da:a5:68:97:71:11:29:c6:bb:9e:79:57: f2:c5:7d:a7:cf:20:ef:32:8e:1e:f6:c3:79:3b:8e:ae:c0:d6: bd:1c:65:b1:cb:87:6c:d1:29:cf:3b:a0:c9:24:3c:06:f2:81: 49:31:e5:76:52:36:6c:52:df:c9:ce:27:6a:56:d8:6e:a8:4d: 4d:ca:ba:10:cd:ef:d7:90:3b:08:e3:ac:65:bc:15:75:bf:04: df:fb:a2:54:48:89:f6:32:99:37:f8:35:0c:cc:ac:d9:e9:92: 7b:26:a8:ff:16:24:dd:1b:2a:09:76:a1:b9:f3:f5:0a:69:f5: dc:92:ce:57:e8:c0:51:4f:3b:62:4a:f9:64:f5:7a:4d:88:69: 46:83:5e:4e:43:22:89:0c:5c:73:45:08:0c:a1:85:aa:32:d1: f7:9b:27:6b:3a:54:95:bd:20:0d:ac:bd:a9:54:45:88:9d:b6: 2a:60:24:d7:3a:29:7e:a6:75:b3:83:d2:23:f1:d7:5f:a2:4e: b9:e5:12:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjZGMEUxMTAvBgNVBAUTKDNENDVDNUEzM0JGOURENEQzQTFFREE3RUQyNjQwNjU4 RTFGODMxRkYwHhcNMjUxMTA0MTg1NzUwWhcNMjUxMTExMTg1NzUwWjAYMRYwFAYD VQQDEw02OTBhNGNhZS1iOTVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwmBjwhhZRxd7XiW6dganTL4D8gNrilasQdCI/U9G7VJ0E0S2PlGbLWECj+K0 h6dmArx1zPpJgrvzPCySqq0St4GJtUUOEaVRrmyuWZccWu/ge8aICXp4tYkvE6BD ob9ehEgnrAC8x4fWc5SlXzQJ4y4FmWPhhayDgL3ApgJiaSCWp1/N1TkxzdiyRNh3 r7J3K8joFbLHszvUguC73N//CcvB2/Len2/i+CM82fGs1pd8y6criiyFYvhJfoUi 6nBU2Rb/rghYpPZEULF/+qHVIGH91F3muYukif/KG/hKqdHVKc1C+oXhkLSxfzCg f/8m2sYVLGm8f14QosPcJ5XMrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNTkCbmT E2nBvc4WSjCclVJTH6JpMB8GA1UdIwQYMBaAFD1FxaM7+d1NOh7aftJkBljh+DH/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NkYwRS8xQTc1OEIwRTI2 MUYxMUVBQUUyRThGMjhDNEY5QUUwMi9QVVhGb3p2NTNVMDZIdHAtMG1RR1dPSDRN ZjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BVWEZvenY1M1UwNkh0cC0wbVFHV09INE1mOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NkYwRS8xQTc1OEIwRTI2MUYxMUVBQUUyRThGMjhDNEY5QUUwMi9QVVhGb3p2NTNV MDZIdHAtMG1RR1dPSDRNZjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBX2avHi8TboSmP8xsKwXm4LHUPnSGRjYsicroMqLr6Heg6KDOAvjOA SKzR0/rxeTPKFZ8RROT5n+0H4kzapWiXcREpxrueeVfyxX2nzyDvMo4e9sN5O46u wNa9HGWxy4ds0SnPO6DJJDwG8oFJMeV2UjZsUt/JzidqVthuqE1NyroQze/XkDsI 46xlvBV1vwTf+6JUSIn2Mpk3+DUMzKzZ6ZJ7Jqj/FiTdGyoJdqG58/UKafXcks5X 6MBRTztiSvlk9XpNiGlGg15OQyKJDFxzRQgMoYWqMtH3mydrOlSVvSANrL2pVEWI nbYqYCTXOil+pnWzg9Ij8ddfok655RJh -----END CERTIFICATE-----Generated at Wed Nov 5 05:27:09 2025 by rpki-client