$ rpki-client -vvf rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.mft File: PNcVUq-qATj5pk4BYO7wYJYGUyM.mft (raw, json) Hash identifier: TAat9YXHyvrNlnSaJTIiZ8VpwLvrF4xv1KJHvoiy0ns= Subject key identifier: ED:42:88:DB:09:A7:D9:AD:5E:F8:0C:A9:84:E0:23:95:BD:AB:BB:4E Authority key identifier: 3C:D7:15:52:AF:AA:01:38:F9:A6:4E:01:60:EE:F0:60:96:06:53:23 Certificate issuer: /CN=A9196CE1/serialNumber=3CD71552AFAA0138F9A64E0160EEF06096065323 Certificate serial: 0174 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PNcVUq-qATj5pk4BYO7wYJYGUyM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.mft Manifest number: 0171 Signing time: Mon 03 Nov 2025 03:49:52 +0000 Manifest this update: Mon 03 Nov 2025 03:49:52 +0000 Manifest next update: Mon 10 Nov 2025 03:49:52 +0000 Files and hashes: 1: PNcVUq-qATj5pk4BYO7wYJYGUyM.crl (hash: KnHXAvyt5wCxVMrj3r+k1/WKTxp6Q84pJ9fQKQW6now=) 2: 4F7CFB9A82B711EE997EB92AC4F9AE02.roa (hash: VY07hPoAnZ6HhFnmDGOrse/S2/32FKp0YWgAY+x8IqE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.crl rsync://rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PNcVUq-qATj5pk4BYO7wYJYGUyM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:49:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 372 (0x174) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196CE1, serialNumber=3CD71552AFAA0138F9A64E0160EEF06096065323 Validity Not Before: Nov 3 03:49:52 2025 GMT Not After : Nov 10 03:49:52 2025 GMT Subject: CN=69082660-f969 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:3e:85:57:29:60:2d:f0:67:fc:83:7e:80:a2: a9:f5:70:6b:2c:da:b4:a8:60:da:39:a8:57:2c:11: 50:7e:0a:97:e7:5e:de:a6:96:33:f2:e9:9d:07:2e: 28:60:9a:86:49:56:b7:b0:18:40:0e:53:93:44:d0: 1c:98:06:86:9e:e2:f7:b5:7e:32:32:13:48:85:8d: dc:3b:df:a6:79:ef:b5:70:4d:5d:b9:fd:b8:93:e9: c8:64:13:eb:c0:2e:0a:dd:42:95:6e:78:b0:bd:0b: 63:a9:d5:7a:65:1e:8c:5a:ec:1a:cf:20:53:d6:8c: 41:30:20:8d:5f:07:72:65:62:4f:ec:44:4d:ed:15: 04:99:8a:a4:31:f7:3b:b9:8e:f8:e0:87:2d:b5:eb: ad:f8:8a:ac:a5:91:1a:d1:1c:f1:65:9c:ee:c6:1d: e0:cb:bc:82:ee:fb:5d:c7:0a:24:0f:aa:85:a6:94: c1:0a:55:b6:f8:2e:0f:92:9e:2a:71:4a:02:5a:ff: da:9f:80:6a:f2:77:28:b3:30:17:3e:10:63:ac:42: 89:56:53:49:09:a8:08:d0:d7:70:5f:f8:0a:d0:94: 82:a8:7b:e1:63:54:19:1c:5b:db:34:f5:d2:62:e2: 25:9a:55:88:ad:28:14:8a:88:e3:49:f4:a2:60:9c: 1c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:42:88:DB:09:A7:D9:AD:5E:F8:0C:A9:84:E0:23:95:BD:AB:BB:4E X509v3 Authority Key Identifier: keyid:3C:D7:15:52:AF:AA:01:38:F9:A6:4E:01:60:EE:F0:60:96:06:53:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PNcVUq-qATj5pk4BYO7wYJYGUyM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:ee:30:3f:5f:b6:a5:c1:22:53:60:56:dd:ac:c0:3d:1a:75: ef:7a:73:72:33:bb:dd:ed:1c:2c:f7:eb:21:96:37:1c:f6:d0: e8:69:cc:e9:48:97:52:48:bd:e8:04:bd:d7:0b:aa:78:a8:71: 84:06:85:43:3c:92:0f:40:fb:8f:d4:38:5c:49:8e:f8:65:b9: fa:12:fe:be:bc:7b:c3:c6:00:fc:33:f1:cf:94:47:10:0e:da: 9a:b2:71:cc:50:e5:f3:65:84:ad:c9:d3:20:a3:40:18:dd:7b: a9:0c:8a:ac:91:20:d4:4b:32:0b:57:28:42:ec:4f:8e:a6:44: eb:92:e3:ce:d8:c7:13:c8:6d:7b:8d:f2:0a:0d:e3:a1:8a:ef: 27:be:aa:2a:4b:b4:65:de:58:d9:a5:0e:29:30:c7:58:71:06: 4c:1d:7f:e2:f9:b6:f4:08:90:0a:6b:0e:46:1a:d1:6d:0f:82: ea:d0:11:23:78:d5:4d:1c:16:f9:d7:73:55:f5:18:82:6d:b4: eb:6c:58:d2:f4:c5:df:ab:f6:6f:7e:0b:ab:e6:06:fa:43:d5: 99:90:80:2c:b6:0f:e6:e4:90:88:3d:0e:c3:db:0f:91:18:66: 6b:29:19:80:cb:05:8d:99:c0:dd:c7:ed:d9:23:27:39:1d:72: b2:43:cb:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZDRTExMTAvBgNVBAUTKDNDRDcxNTUyQUZBQTAxMzhGOUE2NEUwMTYwRUVGMDYw OTYwNjUzMjMwHhcNMjUxMTAzMDM0OTUyWhcNMjUxMTEwMDM0OTUyWjAYMRYwFAYD VQQDEw02OTA4MjY2MC1mOTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6D6FVylgLfBn/IN+gKKp9XBrLNq0qGDaOahXLBFQfgqX517eppYz8umdBy4o YJqGSVa3sBhADlOTRNAcmAaGnuL3tX4yMhNIhY3cO9+mee+1cE1duf24k+nIZBPr wC4K3UKVbniwvQtjqdV6ZR6MWuwazyBT1oxBMCCNXwdyZWJP7ERN7RUEmYqkMfc7 uY744Ictteut+IqspZEa0RzxZZzuxh3gy7yC7vtdxwokD6qFppTBClW2+C4Pkp4q cUoCWv/an4Bq8ncoszAXPhBjrEKJVlNJCagI0NdwX/gK0JSCqHvhY1QZHFvbNPXS YuIlmlWIrSgUiojjSfSiYJwcXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO1CiNsJ p9mtXvgMqYTgI5W9q7tOMB8GA1UdIwQYMBaAFDzXFVKvqgE4+aZOAWDu8GCWBlMj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkNFMS9FODgxRThFQzgy QjYxMUVFOUJGQzA2MURDNEY5QUUwMi9QTmNWVXEtcUFUajVwazRCWU83d1lKWUdV eU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BOY1ZVcS1xQVRqNXBrNEJZTzd3WUpZR1V5TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkNFMS9FODgxRThFQzgyQjYxMUVFOUJGQzA2MURDNEY5QUUwMi9QTmNWVXEtcUFU ajVwazRCWU83d1lKWUdVeU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBz7jA/X7alwSJTYFbdrMA9GnXvenNyM7vd7Rws9+shljcc9tDoaczp SJdSSL3oBL3XC6p4qHGEBoVDPJIPQPuP1DhcSY74Zbn6Ev6+vHvDxgD8M/HPlEcQ DtqasnHMUOXzZYStydMgo0AY3XupDIqskSDUSzILVyhC7E+OpkTrkuPO2McTyG17 jfIKDeOhiu8nvqoqS7Rl3ljZpQ4pMMdYcQZMHX/i+bb0CJAKaw5GGtFtD4Lq0BEj eNVNHBb513NV9RiCbbTrbFjS9MXfq/Zvfgur5gb6Q9WZkIAstg/m5JCIPQ7D2w+R GGZrKRmAywWNmcDdx+3ZIyc5HXKyQ8ti -----END CERTIFICATE-----Generated at Mon Nov 3 18:19:59 2025 by rpki-client