$ rpki-client -vvf rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft File: PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft (raw, json) Hash identifier: 4iSMJ8X6cRjNSPZOEXcAsWvzn+z07R3+d4AV8ouKgTQ= Subject key identifier: 13:4B:A3:1F:6F:1F:62:EC:AA:D0:1C:6A:8F:AF:69:18:4F:9C:EE:F3 Authority key identifier: 3C:AA:EA:F1:B0:D4:BF:63:17:AE:4F:1E:54:63:79:BF:F3:46:CF:D3 Certificate issuer: /CN=A918D663/serialNumber=3CAAEAF1B0D4BF6317AE4F1E546379BFF346CFD3 Certificate serial: 6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PKrq8bDUv2MXrk8eVGN5v_NGz9M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft Manifest number: 69 Signing time: Mon 03 Nov 2025 06:59:07 +0000 Manifest this update: Mon 03 Nov 2025 06:59:07 +0000 Manifest next update: Mon 10 Nov 2025 06:59:07 +0000 Files and hashes: 1: PKrq8bDUv2MXrk8eVGN5v_NGz9M.crl (hash: 7g/P6phGyGOl0qZYm0jiAuX75cBs8T1qOABunGpkAb8=) 2: 8BACF000172811F0B074151EC4F9AE02.roa (hash: ZKoMpxvl06JDEHPwPvY04s64aILLwwH0kpQN+XzmWw8=) 3: 8C215ED6172811F0B074151EC4F9AE02.roa (hash: QaVxitn1fI1JNxNdOxFRN5URfiNEZoLOemGjg0zo0Tg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.crl rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PKrq8bDUv2MXrk8eVGN5v_NGz9M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:59:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 107 (0x6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D663, serialNumber=3CAAEAF1B0D4BF6317AE4F1E546379BFF346CFD3 Validity Not Before: Nov 3 06:59:07 2025 GMT Not After : Nov 10 06:59:07 2025 GMT Subject: CN=690852bb-eb4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b8:2e:76:44:5d:ef:37:b1:fa:0d:51:46:86: b1:b0:1c:e3:97:e4:34:0c:13:d0:27:c6:3f:49:86: 96:b2:20:bc:ba:3e:3f:c1:63:ad:b4:39:5d:fb:c0: 3e:1d:50:6f:c6:4d:a8:40:c5:74:93:bf:6b:b0:d3: b3:72:65:25:6c:6c:44:10:71:77:c7:a7:bd:1e:a0: 0b:2d:b9:63:02:b3:78:81:a3:d8:8f:b2:73:f4:29: e9:75:68:58:45:6c:e8:fd:f5:45:48:8b:bc:fa:f2: 3d:0a:6f:ac:d7:30:6b:5b:55:a0:60:05:3d:0c:52: e0:05:95:39:62:ca:78:ae:9f:1a:74:7c:d8:0e:0b: f6:68:59:89:4f:37:a1:11:9f:9a:71:6e:c1:28:fb: d5:e2:b1:fe:33:45:a7:60:56:24:8d:6d:4f:ec:17: 83:e7:cd:8a:df:b6:49:e6:13:01:a6:7c:c5:13:da: 88:20:bf:e5:81:47:1d:2d:91:56:d3:6f:8f:99:55: c1:3e:50:7e:4f:a4:5d:70:d2:97:b8:b0:ad:89:cb: 7c:e6:de:db:1f:ad:ca:98:d7:b8:51:85:a5:8c:11: e7:c7:d3:b3:e9:51:1d:f1:9c:8a:fc:76:ae:75:6e: 1a:fd:b1:f9:9d:4f:df:53:03:d3:b8:fb:7e:97:44: aa:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:4B:A3:1F:6F:1F:62:EC:AA:D0:1C:6A:8F:AF:69:18:4F:9C:EE:F3 X509v3 Authority Key Identifier: keyid:3C:AA:EA:F1:B0:D4:BF:63:17:AE:4F:1E:54:63:79:BF:F3:46:CF:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PKrq8bDUv2MXrk8eVGN5v_NGz9M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:d4:d8:3a:90:f6:d2:e1:53:39:bd:34:97:49:20:7f:9e:50: 6b:f8:31:d4:8d:b7:9f:4b:b7:d3:55:d0:9c:f8:ac:9f:eb:fd: f5:23:ec:2d:d0:59:75:6b:98:e2:b5:12:06:12:b9:0a:70:28: b1:ea:62:ea:8e:2f:74:e4:ff:f0:2c:91:88:c6:91:fa:04:65: d6:e3:2e:ce:6a:aa:3a:ce:30:4c:72:44:79:c3:ba:69:07:22: ad:60:9a:01:e3:4b:18:c5:cf:44:79:2a:5c:69:87:6a:02:c2: 2f:0d:33:64:3a:15:a0:c5:47:34:11:d0:e2:59:22:29:c3:e2: 46:42:85:4b:25:bc:f8:9e:2a:45:d8:68:ed:32:b5:fd:47:e5: 22:00:2e:93:ac:a1:99:73:4b:a7:ef:17:0c:59:3d:99:c5:4f: 1e:83:82:2b:da:51:21:94:c9:e6:01:a0:ab:e0:f4:e9:fb:9e: 66:2b:b7:72:5f:dc:f9:68:ee:a8:e4:6b:26:54:24:db:40:50: 7f:4a:42:94:f6:a5:53:a4:04:fd:25:2b:fb:a8:ce:69:ec:a8: db:38:1b:a8:23:53:26:e2:00:38:d7:4a:b7:bf:c1:45:4d:cd: 9c:77:82:e9:13:18:b9:c4:65:1c:ec:ff:5a:c8:5c:ff:14:91: 0e:4b:0f:3f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBazANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RDY2MzExMC8GA1UEBRMoM0NBQUVBRjFCMEQ0QkY2MzE3QUU0RjFFNTQ2Mzc5QkZG MzQ2Q0ZEMzAeFw0yNTExMDMwNjU5MDdaFw0yNTExMTAwNjU5MDdaMBgxFjAUBgNV BAMTDTY5MDg1MmJiLWViNGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCeuC52RF3vN7H6DVFGhrGwHOOX5DQME9Anxj9JhpayILy6Pj/BY620OV37wD4d UG/GTahAxXSTv2uw07NyZSVsbEQQcXfHp70eoAstuWMCs3iBo9iPsnP0Kel1aFhF bOj99UVIi7z68j0Kb6zXMGtbVaBgBT0MUuAFlTliyniunxp0fNgOC/ZoWYlPN6ER n5pxbsEo+9Xisf4zRadgViSNbU/sF4PnzYrftknmEwGmfMUT2oggv+WBRx0tkVbT b4+ZVcE+UH5PpF1w0pe4sK2Jy3zm3tsfrcqY17hRhaWMEefH07PpUR3xnIr8dq51 bhr9sfmdT99TA9O4+36XRKpHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUE0ujH28f Yuyq0Bxqj69pGE+c7vMwHwYDVR0jBBgwFoAUPKrq8bDUv2MXrk8eVGN5v/NGz9Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThENjYzLzdBQzk2NzlFMTcy MDExRjBCNzQyMjM0RUM0RjlBRTAyL1BLcnE4YkRVdjJNWHJrOGVWR041dl9OR3o5 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUEtycThiRFV2Mk1Ycms4ZVZHTjV2X05HejlNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThE NjYzLzdBQzk2NzlFMTcyMDExRjBCNzQyMjM0RUM0RjlBRTAyL1BLcnE4YkRVdjJN WHJrOGVWR041dl9OR3o5TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAILU2DqQ9tLhUzm9NJdJIH+eUGv4MdSNt59Lt9NV0Jz4rJ/r/fUj7C3Q WXVrmOK1EgYSuQpwKLHqYuqOL3Tk//AskYjGkfoEZdbjLs5qqjrOMExyRHnDumkH Iq1gmgHjSxjFz0R5Klxph2oCwi8NM2Q6FaDFRzQR0OJZIinD4kZChUslvPieKkXY aO0ytf1H5SIALpOsoZlzS6fvFwxZPZnFTx6DgivaUSGUyeYBoKvg9On7nmYrt3Jf 3Plo7qjkayZUJNtAUH9KQpT2pVOkBP0lK/uozmnsqNs4G6gjUybiADjXSre/wUVN zZx3gukTGLnEZRzs/1rIXP8UkQ5LDz8= -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:57 2025 by rpki-client