$ rpki-client -vvf rpki.apnic.net/member_repository/A919AFBE/C3882762BA1E11F0B987393BC4F9AE02/PVoEjy0O64mMxmE79kE3I3iWTLA.mft File: PVoEjy0O64mMxmE79kE3I3iWTLA.mft (raw, json) Hash identifier: nSTTaklluK8fUzI7DvfpZz4rnLUQ3HvffuROAfAzUcw= Subject key identifier: FA:93:E3:FE:FE:A4:84:E1:DD:E8:EB:13:64:1D:93:FA:ED:15:7C:5E Authority key identifier: 3D:5A:04:8F:2D:0E:EB:89:8C:C6:61:3B:F6:41:37:23:78:96:4C:B0 Certificate issuer: /CN=A919AFBE/serialNumber=3D5A048F2D0EEB898CC6613BF641372378964CB0 Certificate serial: 02 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVoEjy0O64mMxmE79kE3I3iWTLA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919AFBE/C3882762BA1E11F0B987393BC4F9AE02/PVoEjy0O64mMxmE79kE3I3iWTLA.mft Manifest number: 02 Signing time: Wed 05 Nov 2025 08:16:11 +0000 Manifest this update: Wed 05 Nov 2025 08:16:10 +0000 Manifest next update: Wed 12 Nov 2025 08:16:10 +0000 Files and hashes: 1: PVoEjy0O64mMxmE79kE3I3iWTLA.crl (hash: a9N5S0vOvZ9ZH4hYar7WGls6HawLK4V7ARETP9g9MMQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919AFBE/C3882762BA1E11F0B987393BC4F9AE02/PVoEjy0O64mMxmE79kE3I3iWTLA.crl rsync://rpki.apnic.net/member_repository/A919AFBE/C3882762BA1E11F0B987393BC4F9AE02/PVoEjy0O64mMxmE79kE3I3iWTLA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVoEjy0O64mMxmE79kE3I3iWTLA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 08:16:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919AFBE, serialNumber=3D5A048F2D0EEB898CC6613BF641372378964CB0 Validity Not Before: Nov 5 08:16:10 2025 GMT Not After : Nov 12 08:16:10 2025 GMT Subject: CN=690b07ca-c429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:43:63:8a:f8:6a:95:a0:3f:38:fc:c8:79:c0: e3:d7:60:3c:3a:29:58:53:32:2c:04:2b:af:9a:fc: 2e:90:14:7e:97:64:e5:d5:9e:28:d2:fb:f3:4d:6c: 39:88:02:76:0a:87:12:aa:a2:d3:bc:67:52:f4:ed: 56:e6:c7:66:f5:4a:74:55:0c:b8:c2:58:2d:7b:88: a9:46:6f:eb:fb:7b:7b:bd:9d:9c:7c:b7:0a:31:79: a2:98:07:db:0e:12:73:ad:8b:55:44:f9:c8:44:fa: f4:1b:bd:77:a4:db:98:6f:1a:4f:27:31:9b:87:1b: 03:1c:e8:56:78:29:2a:14:1b:bb:e4:0a:2d:ef:57: a9:87:80:45:05:3c:bd:29:37:7c:38:15:8f:c4:31: 5b:ed:d6:7e:1f:4b:94:b8:2d:f7:0f:92:76:7a:a6: 64:7b:60:9f:73:47:cd:d1:e8:3d:03:9a:44:8f:53: 96:d9:69:ac:6d:e8:7f:76:6c:f9:bb:34:85:94:98: e3:00:09:9d:ce:eb:de:90:99:ab:10:85:52:f2:f2: 8a:0d:63:59:d1:e5:c6:55:97:72:5f:7d:ee:18:16: a3:e5:57:2d:25:c7:19:03:36:17:47:29:52:53:8f: eb:49:07:08:9e:51:87:ec:57:f7:76:dd:15:5c:52: 5e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:93:E3:FE:FE:A4:84:E1:DD:E8:EB:13:64:1D:93:FA:ED:15:7C:5E X509v3 Authority Key Identifier: keyid:3D:5A:04:8F:2D:0E:EB:89:8C:C6:61:3B:F6:41:37:23:78:96:4C:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919AFBE/C3882762BA1E11F0B987393BC4F9AE02/PVoEjy0O64mMxmE79kE3I3iWTLA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVoEjy0O64mMxmE79kE3I3iWTLA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AFBE/C3882762BA1E11F0B987393BC4F9AE02/PVoEjy0O64mMxmE79kE3I3iWTLA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:db:b5:ba:89:5b:c0:50:cf:33:79:c1:7d:cf:73:9d:2a:fe: c6:de:52:1c:ed:20:cc:71:ff:8d:b9:82:59:12:c0:99:8f:9b: 01:b3:40:69:e0:a5:8e:b4:8d:bf:e3:2f:5b:4e:a9:06:08:31: c3:c0:d5:9b:f0:23:81:f7:9b:95:4a:81:09:84:b3:4f:91:a7: 57:42:18:e5:73:f4:68:67:77:f1:68:3a:f5:58:17:f9:08:70: 58:72:88:51:bb:73:9b:3d:11:46:c0:9c:97:21:5b:0c:e5:11: c3:a2:75:3e:65:e5:96:76:23:3a:f3:61:84:05:e0:ee:9f:bb: 5a:ae:0f:e2:0f:11:c2:ee:b7:c0:e7:ba:19:f3:13:12:74:ad: c9:83:5c:1a:88:24:e2:21:4a:22:b5:17:2a:0b:78:87:ce:10: 81:07:9c:06:0e:c3:f5:61:6c:c3:03:88:f7:e3:ab:5b:e0:fe: ca:4d:99:f2:32:f8:b5:08:eb:e0:0a:da:3c:4f:32:c7:45:5d: af:5f:72:28:d6:b7:51:d1:95:63:62:64:0a:4c:14:5c:e5:85: 0a:37:e0:f1:de:08:08:92:5c:ff:c5:90:ca:15:80:33:72:a8: 43:ad:2b:2d:d2:a7:28:2e:fd:9f:44:ce:3b:5e:06:23:9e:bc: f0:23:60:bf -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 QUZCRTExMC8GA1UEBRMoM0Q1QTA0OEYyRDBFRUI4OThDQzY2MTNCRjY0MTM3MjM3 ODk2NENCMDAeFw0yNTExMDUwODE2MTBaFw0yNTExMTIwODE2MTBaMBgxFjAUBgNV BAMTDTY5MGIwN2NhLWM0MjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+Q2OK+GqVoD84/Mh5wOPXYDw6KVhTMiwEK6+a/C6QFH6XZOXVnijS+/NNbDmI AnYKhxKqotO8Z1L07Vbmx2b1SnRVDLjCWC17iKlGb+v7e3u9nZx8twoxeaKYB9sO EnOti1VE+chE+vQbvXek25hvGk8nMZuHGwMc6FZ4KSoUG7vkCi3vV6mHgEUFPL0p N3w4FY/EMVvt1n4fS5S4LfcPknZ6pmR7YJ9zR83R6D0DmkSPU5bZaaxt6H92bPm7 NIWUmOMACZ3O696QmasQhVLy8ooNY1nR5cZVl3Jffe4YFqPlVy0lxxkDNhdHKVJT j+tJBwieUYfsV/d23RVcUl5LAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+pPj/v6k hOHd6OsTZB2T+u0VfF4wHwYDVR0jBBgwFoAUPVoEjy0O64mMxmE79kE3I3iWTLAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlBRkJFL0MzODgyNzYyQkEx RTExRjBCOTg3MzkzQkM0RjlBRTAyL1BWb0VqeTBPNjRtTXhtRTc5a0UzSTNpV1RM QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUFZvRWp5ME82NG1NeG1FNzlrRTNJM2lXVExBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlB RkJFL0MzODgyNzYyQkExRTExRjBCOTg3MzkzQkM0RjlBRTAyL1BWb0VqeTBPNjRt TXhtRTc5a0UzSTNpV1RMQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADDbtbqJW8BQzzN5wX3Pc50q/sbeUhztIMxx/425glkSwJmPmwGzQGng pY60jb/jL1tOqQYIMcPA1ZvwI4H3m5VKgQmEs0+Rp1dCGOVz9Ghnd/FoOvVYF/kI cFhyiFG7c5s9EUbAnJchWwzlEcOidT5l5ZZ2IzrzYYQF4O6fu1quD+IPEcLut8Dn uhnzExJ0rcmDXBqIJOIhSiK1FyoLeIfOEIEHnAYOw/VhbMMDiPfjq1vg/spNmfIy +LUI6+AK2jxPMsdFXa9fcijWt1HRlWNiZApMFFzlhQo34PHeCAiSXP/FkMoVgDNy qEOtKy3Spygu/Z9EzjteBiOevPAjYL8= -----END CERTIFICATE-----Generated at Wed Nov 5 19:40:28 2025 by rpki-client