$ rpki-client -vvf rpki.apnic.net/member_repository/A9199B5E/F8723FE4E94711EDAD106909C4F9AE02/PbshszWLCF8IIbTcBqkanEXELLw.mft File: PbshszWLCF8IIbTcBqkanEXELLw.mft (raw, json) Hash identifier: dcqHs8sZjfJMCDthK15XFx8HAFhPVlkuXNCZOovbNKo= Subject key identifier: C3:A8:B4:6E:40:2D:E1:35:7F:F6:7D:B7:4F:30:B8:EA:51:38:33:97 Authority key identifier: 3D:BB:21:B3:35:8B:08:5F:08:21:B4:DC:06:A9:1A:9C:45:C4:2C:BC Certificate issuer: /CN=A9199B5E/serialNumber=3DBB21B3358B085F0821B4DC06A91A9C45C42CBC Certificate serial: 01DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbshszWLCF8IIbTcBqkanEXELLw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199B5E/F8723FE4E94711EDAD106909C4F9AE02/PbshszWLCF8IIbTcBqkanEXELLw.mft Manifest number: 01D6 Signing time: Mon 03 Nov 2025 02:44:47 +0000 Manifest this update: Mon 03 Nov 2025 02:44:46 +0000 Manifest next update: Mon 10 Nov 2025 02:44:46 +0000 Files and hashes: 1: PbshszWLCF8IIbTcBqkanEXELLw.crl (hash: uh2iwhpJBTgaukaURE5G6kZHRd0nMEL2Qkw62mwaMCY=) 2: 0FFD0884E94C11EDB883CD14C4F9AE02.roa (hash: HZiGn+RSrQ/z8mUJhOj/YSMFN8ATDW3gRGnLr/Np+qA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199B5E/F8723FE4E94711EDAD106909C4F9AE02/PbshszWLCF8IIbTcBqkanEXELLw.crl rsync://rpki.apnic.net/member_repository/A9199B5E/F8723FE4E94711EDAD106909C4F9AE02/PbshszWLCF8IIbTcBqkanEXELLw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbshszWLCF8IIbTcBqkanEXELLw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:44:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 474 (0x1da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199B5E, serialNumber=3DBB21B3358B085F0821B4DC06A91A9C45C42CBC Validity Not Before: Nov 3 02:44:46 2025 GMT Not After : Nov 10 02:44:46 2025 GMT Subject: CN=6908171e-3103 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8f:12:2f:68:36:96:02:0d:25:97:a2:14:b2: 6f:cd:27:60:f2:2d:e3:2d:81:ca:ff:cb:06:63:4b: cf:77:ee:91:b9:11:03:0b:e6:00:59:e1:9b:34:a6: 57:6b:fb:5e:0f:34:9a:6c:a2:97:fd:79:2a:16:58: 9b:54:d6:e5:74:72:b0:7f:aa:ab:5b:2d:9c:9e:f1: 62:2b:7f:81:c5:8c:51:38:b5:75:0f:9b:6c:d7:39: 1a:1f:69:58:72:e5:1a:d1:96:9a:43:2f:f3:74:26: 70:6b:87:0c:31:6a:fc:3a:74:25:d5:78:f4:4c:92: 94:4a:54:17:10:fa:e8:95:78:5c:15:a5:28:eb:ad: 5e:07:52:d5:75:c2:bc:4d:d2:55:65:2b:e0:91:7b: 52:01:99:2a:1f:8d:f2:c9:f9:3e:26:32:0c:c2:5a: 17:40:92:57:76:0f:13:c2:48:f4:b0:66:c3:38:eb: f6:bd:ef:96:ed:d5:bf:61:73:a8:f0:80:fc:c7:7f: ce:2c:fe:90:20:91:8f:18:00:93:4d:93:65:22:d0: 19:54:68:97:c1:cf:89:12:3a:a0:21:8b:35:cc:11: fe:87:02:84:2f:f4:b8:aa:bd:4d:81:51:2f:2f:1c: a0:bb:33:73:ad:df:65:c7:57:cc:b5:e6:b6:f0:f0: 26:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:A8:B4:6E:40:2D:E1:35:7F:F6:7D:B7:4F:30:B8:EA:51:38:33:97 X509v3 Authority Key Identifier: keyid:3D:BB:21:B3:35:8B:08:5F:08:21:B4:DC:06:A9:1A:9C:45:C4:2C:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199B5E/F8723FE4E94711EDAD106909C4F9AE02/PbshszWLCF8IIbTcBqkanEXELLw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbshszWLCF8IIbTcBqkanEXELLw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199B5E/F8723FE4E94711EDAD106909C4F9AE02/PbshszWLCF8IIbTcBqkanEXELLw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:1d:c4:45:43:d6:92:88:99:6e:d9:2d:7f:e5:cd:05:c3:84: 6c:98:db:f7:22:90:79:60:74:ac:48:4d:1e:a1:86:48:96:7a: c5:c3:94:6c:08:cc:a7:55:02:76:1a:19:c2:b8:c8:8a:36:9b: e3:24:96:c6:98:57:13:9e:03:a9:17:3f:29:85:80:25:77:8e: 3a:eb:db:43:90:76:ca:d8:a2:c7:d5:f7:43:49:f1:60:5a:3d: 6a:c8:4b:24:93:99:47:e1:d8:d4:c5:9b:5b:d5:5a:b3:46:2f: 51:33:ed:36:a6:9c:4d:2e:a5:8a:40:4c:9a:6e:5a:f7:d9:6b: e8:36:96:06:86:87:a2:9b:5b:78:88:fd:c2:27:f0:24:a0:4e: 98:2a:b8:50:09:b5:e7:a9:4b:20:58:60:49:80:63:1d:93:8c: 40:4f:c3:e4:ee:11:6d:6a:ef:2c:bc:a1:af:06:b1:ad:35:90: 32:9f:e4:fb:dc:6b:74:97:96:c2:5a:4a:08:15:3d:45:3d:f9: 81:48:26:5c:b8:ac:e9:d5:19:e0:e2:85:3d:a1:b2:2d:f4:ba: 04:74:43:38:e3:5e:55:ee:25:65:f4:91:ac:dd:45:3b:5f:e4: ee:2b:0d:8c:6b:bd:5d:43:4b:0f:cf:bf:e3:33:64:d6:ba:56: ce:eb:2a:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlCNUUxMTAvBgNVBAUTKDNEQkIyMUIzMzU4QjA4NUYwODIxQjREQzA2QTkxQTlD NDVDNDJDQkMwHhcNMjUxMTAzMDI0NDQ2WhcNMjUxMTEwMDI0NDQ2WjAYMRYwFAYD VQQDEw02OTA4MTcxZS0zMTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxI8SL2g2lgINJZeiFLJvzSdg8i3jLYHK/8sGY0vPd+6RuREDC+YAWeGbNKZX a/teDzSabKKX/XkqFlibVNbldHKwf6qrWy2cnvFiK3+BxYxROLV1D5ts1zkaH2lY cuUa0ZaaQy/zdCZwa4cMMWr8OnQl1Xj0TJKUSlQXEProlXhcFaUo661eB1LVdcK8 TdJVZSvgkXtSAZkqH43yyfk+JjIMwloXQJJXdg8Twkj0sGbDOOv2ve+W7dW/YXOo 8ID8x3/OLP6QIJGPGACTTZNlItAZVGiXwc+JEjqgIYs1zBH+hwKEL/S4qr1NgVEv LxyguzNzrd9lx1fMtea28PAmaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMOotG5A LeE1f/Z9t08wuOpRODOXMB8GA1UdIwQYMBaAFD27IbM1iwhfCCG03AapGpxFxCy8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUI1RS9GODcyM0ZFNEU5 NDcxMUVEQUQxMDY5MDlDNEY5QUUwMi9QYnNoc3pXTENGOElJYlRjQnFrYW5FWEVM THcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Bic2hzeldMQ0Y4SUliVGNCcWthbkVYRUxMdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUI1RS9GODcyM0ZFNEU5NDcxMUVEQUQxMDY5MDlDNEY5QUUwMi9QYnNoc3pXTENG OElJYlRjQnFrYW5FWEVMTHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBHcRFQ9aSiJlu2S1/5c0Fw4RsmNv3IpB5YHSsSE0eoYZIlnrFw5Rs CMynVQJ2GhnCuMiKNpvjJJbGmFcTngOpFz8phYAld44669tDkHbK2KLH1fdDSfFg Wj1qyEskk5lH4djUxZtb1VqzRi9RM+02ppxNLqWKQEyablr32WvoNpYGhoeim1t4 iP3CJ/AkoE6YKrhQCbXnqUsgWGBJgGMdk4xAT8Pk7hFtau8svKGvBrGtNZAyn+T7 3Gt0l5bCWkoIFT1FPfmBSCZcuKzp1Rng4oU9obIt9LoEdEM4415V7iVl9JGs3UU7 X+TuKw2Ma71dQ0sPz7/jM2TWulbO6yqt -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:21 2025 by rpki-client