$ rpki-client -vvf rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.mft File: plb2DT8RZBpXG9H_rSRg3UV2My0.mft (raw, json) Hash identifier: sXu0/4wT0Xg2iINScnt4L3eINQMHsSDr4YYyeSAkRg0= Subject key identifier: 08:0C:B0:20:F7:88:E8:EA:10:CC:36:66:23:3E:86:E0:C7:7B:0D:DD Authority key identifier: A6:56:F6:0D:3F:11:64:1A:57:1B:D1:FF:AD:24:60:DD:45:76:33:2D Certificate issuer: /CN=A919986F/serialNumber=A656F60D3F11641A571BD1FFAD2460DD4576332D Certificate serial: 2870 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/plb2DT8RZBpXG9H_rSRg3UV2My0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.mft Manifest number: 286B Signing time: Sun 02 Nov 2025 15:35:43 +0000 Manifest this update: Sun 02 Nov 2025 15:35:43 +0000 Manifest next update: Sun 09 Nov 2025 15:35:43 +0000 Files and hashes: 1: plb2DT8RZBpXG9H_rSRg3UV2My0.crl (hash: Hs5fPvbNDvxf4sdx/B1SWP7RjGECxYR2JXuTCQOzwqo=) 2: 27F621183B5D11EB97506B7AC4F9AE02.roa (hash: +GMl4Xu8VPkNDBOVR1baOfDzoyBidluum1AgF508r2s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.crl rsync://rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/plb2DT8RZBpXG9H_rSRg3UV2My0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 15:35:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10352 (0x2870) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919986F, serialNumber=A656F60D3F11641A571BD1FFAD2460DD4576332D Validity Not Before: Nov 2 15:35:43 2025 GMT Not After : Nov 9 15:35:43 2025 GMT Subject: CN=69077a4f-85bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:bd:6e:12:b5:f9:bb:50:0e:19:4a:d4:9f:81: 6c:47:70:1f:de:62:7c:d4:0b:5f:93:16:e5:c6:10: 22:26:75:ee:a8:96:f9:ea:13:da:e9:ac:66:95:0f: 98:4d:5a:7c:81:ee:b9:41:ce:54:65:cf:ce:07:1b: e0:0a:a1:84:90:4f:af:be:c5:70:b5:ab:63:27:f5: ea:76:2c:e5:4c:d3:89:7c:03:78:c3:31:27:5f:a4: 50:ac:87:d8:5c:f1:7e:70:be:f9:a3:0b:3b:3a:59: 80:ad:a6:e9:c0:82:7d:46:16:17:3e:a9:54:44:59: 36:27:19:a6:bd:a1:c9:84:5e:97:8d:00:5e:5f:76: d1:07:9d:35:a0:14:65:06:ae:f5:3c:61:cf:f9:c7: 30:1e:07:c0:f7:55:48:96:df:06:d0:1f:11:80:bd: 9d:a3:20:99:0a:1b:19:94:99:c6:7f:92:53:d0:5c: d3:ff:cd:a6:98:4a:62:2c:6b:ec:71:d0:81:01:30: 1f:f2:12:71:c1:32:ce:bb:8c:c7:a3:ce:62:18:36: 27:f9:d7:a0:24:0b:5c:ae:19:b4:9d:03:17:d5:40: 68:0f:0a:30:8e:81:84:ea:28:1e:c7:22:7a:47:49: 9a:68:a0:29:01:c4:16:dc:f3:c4:91:3b:96:d8:aa: ad:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:0C:B0:20:F7:88:E8:EA:10:CC:36:66:23:3E:86:E0:C7:7B:0D:DD X509v3 Authority Key Identifier: keyid:A6:56:F6:0D:3F:11:64:1A:57:1B:D1:FF:AD:24:60:DD:45:76:33:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/plb2DT8RZBpXG9H_rSRg3UV2My0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:46:0d:a5:b3:90:38:f6:5a:b1:1d:86:d9:a9:2f:bc:1a:0a: 11:25:7c:c2:94:4f:a5:de:0f:bc:7e:3e:ed:22:8c:28:33:fb: 4f:db:db:51:71:67:77:29:38:f4:ec:cb:d8:27:aa:53:25:46: ae:33:61:9e:a5:fd:db:45:28:0b:08:ff:78:71:c6:44:41:98: 4d:89:d2:d9:fc:50:f0:59:61:5f:b2:7e:2d:de:5b:71:f8:97: cb:0a:52:b2:01:92:60:19:53:b5:8f:19:a4:2b:48:a1:0c:df: 13:9d:46:b1:9c:0d:ee:46:4f:6d:fd:95:e9:cf:8b:6f:d9:81: b3:f2:5e:c8:d6:f7:e2:15:ab:f4:02:b2:14:2a:8b:19:d5:92: 90:ac:79:6f:db:41:2f:4d:5d:9d:7e:13:22:29:c8:da:a8:8c: de:94:13:e5:7a:e9:17:8f:23:1f:31:36:13:1a:dc:78:bd:21: 0f:3e:e8:d7:c0:91:53:d4:93:4b:b8:01:fc:fc:59:7d:73:59: f9:42:ec:0b:bf:67:b0:18:a5:3a:3d:9f:bc:5d:77:e2:62:a8: 7a:d6:88:4d:d0:94:84:65:3f:2c:ea:20:ea:09:fd:e5:c8:44: 92:94:cc:9d:16:22:de:09:55:00:d3:97:54:b2:1c:62:47:17: 2d:9b:56:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKHAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk4NkYxMTAvBgNVBAUTKEE2NTZGNjBEM0YxMTY0MUE1NzFCRDFGRkFEMjQ2MERE NDU3NjMzMkQwHhcNMjUxMTAyMTUzNTQzWhcNMjUxMTA5MTUzNTQzWjAYMRYwFAYD VQQDEw02OTA3N2E0Zi04NWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7b1uErX5u1AOGUrUn4FsR3Af3mJ81AtfkxblxhAiJnXuqJb56hPa6axmlQ+Y TVp8ge65Qc5UZc/OBxvgCqGEkE+vvsVwtatjJ/XqdizlTNOJfAN4wzEnX6RQrIfY XPF+cL75ows7OlmArabpwIJ9RhYXPqlURFk2JxmmvaHJhF6XjQBeX3bRB501oBRl Bq71PGHP+ccwHgfA91VIlt8G0B8RgL2doyCZChsZlJnGf5JT0FzT/82mmEpiLGvs cdCBATAf8hJxwTLOu4zHo85iGDYn+degJAtcrhm0nQMX1UBoDwowjoGE6igexyJ6 R0maaKApAcQW3PPEkTuW2KqtJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAgMsCD3 iOjqEMw2ZiM+huDHew3dMB8GA1UdIwQYMBaAFKZW9g0/EWQaVxvR/60kYN1FdjMt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTg2Ri9FQzg3MEI4NjhG MkExMUU0QkY5OEI0MzJDNEY5QUUwMi9wbGIyRFQ4UlpCcFhHOUhfclNSZzNVVjJN eTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BsYjJEVDhSWkJwWEc5SF9yU1JnM1VWMk15MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTg2Ri9FQzg3MEI4NjhGMkExMUU0QkY5OEI0MzJDNEY5QUUwMi9wbGIyRFQ4UlpC cFhHOUhfclNSZzNVVjJNeTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/Rg2ls5A49lqxHYbZqS+8GgoRJXzClE+l3g+8fj7tIowoM/tP29tR cWd3KTj07MvYJ6pTJUauM2Gepf3bRSgLCP94ccZEQZhNidLZ/FDwWWFfsn4t3ltx +JfLClKyAZJgGVO1jxmkK0ihDN8TnUaxnA3uRk9t/ZXpz4tv2YGz8l7I1vfiFav0 ArIUKosZ1ZKQrHlv20EvTV2dfhMiKcjaqIzelBPleukXjyMfMTYTGtx4vSEPPujX wJFT1JNLuAH8/Fl9c1n5QuwLv2ewGKU6PZ+8XXfiYqh61ohN0JSEZT8s6iDqCf3l yESSlMydFiLeCVUA05dUshxiRxctm1Z/ -----END CERTIFICATE-----Generated at Tue Nov 4 01:06:01 2025 by rpki-client