$ rpki-client -vvf rpki.apnic.net/member_repository/A91A423D/C378C0E8B09511F08C152778C4F9AE02/PLCVZot9dMLxtwBa-hWfT-UiUgo.mft File: PLCVZot9dMLxtwBa-hWfT-UiUgo.mft (raw, json) Hash identifier: xMb1hwvmaFru6wcjdSB2n7EBiSrA/8IYVyIBFP836Dw= Subject key identifier: 24:22:BE:E8:FA:14:3E:3A:80:18:9A:65:E0:55:4E:E2:DA:9C:65:7B Authority key identifier: 3C:B0:95:66:8B:7D:74:C2:F1:B7:00:5A:FA:15:9F:4F:E5:22:52:0A Certificate issuer: /CN=A91A423D/serialNumber=3CB095668B7D74C2F1B7005AFA159F4FE522520A Certificate serial: 08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PLCVZot9dMLxtwBa-hWfT-UiUgo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A423D/C378C0E8B09511F08C152778C4F9AE02/PLCVZot9dMLxtwBa-hWfT-UiUgo.mft Manifest number: 08 Signing time: Mon 03 Nov 2025 08:02:31 +0000 Manifest this update: Mon 03 Nov 2025 08:02:31 +0000 Manifest next update: Mon 10 Nov 2025 08:02:30 +0000 Files and hashes: 1: PLCVZot9dMLxtwBa-hWfT-UiUgo.crl (hash: 1hV93tf7m8yLmnGKBnyyAmY0ofxZUcvB4UzNvUnnq7A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A423D/C378C0E8B09511F08C152778C4F9AE02/PLCVZot9dMLxtwBa-hWfT-UiUgo.crl rsync://rpki.apnic.net/member_repository/A91A423D/C378C0E8B09511F08C152778C4F9AE02/PLCVZot9dMLxtwBa-hWfT-UiUgo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PLCVZot9dMLxtwBa-hWfT-UiUgo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 08:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A423D, serialNumber=3CB095668B7D74C2F1B7005AFA159F4FE522520A Validity Not Before: Nov 3 08:02:31 2025 GMT Not After : Nov 10 08:02:30 2025 GMT Subject: CN=69086197-50f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9f:c9:71:42:f2:44:b5:b6:ad:a2:58:6e:02: 5d:c6:6e:f7:00:5e:9f:2f:02:53:54:41:c2:1e:de: 8e:c1:80:d7:a8:e7:db:9a:c6:43:91:b9:fb:20:03: 62:2e:81:2f:19:35:30:cb:8c:15:e8:b4:ea:0f:f9: 1a:be:d6:bc:c4:07:b7:52:74:05:f6:46:3d:7a:8f: 98:1a:c3:f2:b7:c9:52:12:af:98:ca:a4:6a:50:62: bf:4d:25:08:1f:5c:c1:62:cd:05:9d:04:da:60:d9: 21:b0:34:6a:49:71:66:08:3d:55:4c:15:83:18:3e: aa:b1:a5:c1:07:ad:fa:54:2f:4c:68:2e:e7:01:6d: 24:ae:5b:b1:ab:77:24:a6:c9:9c:44:f0:ad:9f:af: ce:a9:8b:d6:3b:cd:5b:0a:15:9d:7e:74:2a:61:68: cc:d6:aa:56:77:92:0e:da:fd:1b:8c:e9:bc:de:a3: 69:dc:6b:d6:fd:33:35:3c:c6:21:67:69:d0:f9:3e: a8:e0:9f:c9:b1:b9:85:11:04:c1:ce:9f:43:d5:cd: 85:6b:4a:6e:82:0e:60:bf:0e:0f:94:f4:8c:47:3c: 53:8c:d5:a7:e8:6a:1f:99:86:25:c6:9c:44:29:aa: b0:31:03:8d:ae:9a:3e:34:01:7c:4a:86:67:f5:dc: 24:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:22:BE:E8:FA:14:3E:3A:80:18:9A:65:E0:55:4E:E2:DA:9C:65:7B X509v3 Authority Key Identifier: keyid:3C:B0:95:66:8B:7D:74:C2:F1:B7:00:5A:FA:15:9F:4F:E5:22:52:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A423D/C378C0E8B09511F08C152778C4F9AE02/PLCVZot9dMLxtwBa-hWfT-UiUgo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PLCVZot9dMLxtwBa-hWfT-UiUgo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A423D/C378C0E8B09511F08C152778C4F9AE02/PLCVZot9dMLxtwBa-hWfT-UiUgo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:f2:93:81:da:e6:7f:29:34:a6:94:7e:5d:c1:d8:18:25:6e: 62:b0:08:16:eb:6b:32:94:12:9a:a1:ff:c6:41:81:ed:94:a7: 15:06:67:ac:7b:c1:3d:62:e6:62:45:e5:ce:5f:20:7a:5d:06: 3c:84:c8:2a:77:bf:d8:db:bb:ae:ab:90:71:d3:44:c4:6c:7d: 10:a1:e2:a7:2e:3a:60:24:fb:a1:12:38:24:e0:32:17:b4:f6: a3:08:17:6e:a5:be:ce:2c:cb:2e:66:2f:fc:b8:6a:d5:7b:14: ed:1a:db:d0:a4:fc:2c:76:5d:6a:bc:40:f0:7d:34:d6:8d:8a: 70:5c:dc:a3:9b:88:83:3c:3f:43:a2:78:9d:e4:cf:8c:d7:15: 71:1e:40:90:e0:cc:83:84:be:92:a4:f7:7b:ef:c8:46:48:17: 2c:73:d3:92:7a:06:6e:0a:74:47:92:8e:16:aa:26:56:58:d9: c5:43:52:8b:23:43:84:c7:47:6a:be:1f:ca:68:85:a6:13:1c: a2:5e:ad:30:5c:b5:11:ea:be:76:cb:df:67:e5:d4:e5:9f:36: 5b:ae:82:4f:00:7d:13:00:00:f6:a2:73:3e:f4:fa:2f:91:2c: 08:92:d4:1b:39:6f:a6:f9:fc:86:3e:1f:f7:8b:84:85:c2:01: a1:4b:f8:66 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NDIzRDExMC8GA1UEBRMoM0NCMDk1NjY4QjdENzRDMkYxQjcwMDVBRkExNTlGNEZF NTIyNTIwQTAeFw0yNTExMDMwODAyMzFaFw0yNTExMTAwODAyMzBaMBgxFjAUBgNV BAMTDTY5MDg2MTk3LTUwZjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6n8lxQvJEtbatolhuAl3GbvcAXp8vAlNUQcIe3o7BgNeo59uaxkORufsgA2Iu gS8ZNTDLjBXotOoP+Rq+1rzEB7dSdAX2Rj16j5gaw/K3yVISr5jKpGpQYr9NJQgf XMFizQWdBNpg2SGwNGpJcWYIPVVMFYMYPqqxpcEHrfpUL0xoLucBbSSuW7GrdySm yZxE8K2fr86pi9Y7zVsKFZ1+dCphaMzWqlZ3kg7a/RuM6bzeo2nca9b9MzU8xiFn adD5Pqjgn8mxuYURBMHOn0PVzYVrSm6CDmC/Dg+U9IxHPFOM1afoah+ZhiXGnEQp qrAxA42umj40AXxKhmf13CQdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUJCK+6PoU PjqAGJpl4FVO4tqcZXswHwYDVR0jBBgwFoAUPLCVZot9dMLxtwBa+hWfT+UiUgow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0MjNEL0MzNzhDMEU4QjA5 NTExRjA4QzE1Mjc3OEM0RjlBRTAyL1BMQ1Zab3Q5ZE1MeHR3QmEtaFdmVC1VaVVn by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUExDVlpvdDlkTUx4dHdCYS1oV2ZULVVpVWdvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0 MjNEL0MzNzhDMEU4QjA5NTExRjA4QzE1Mjc3OEM0RjlBRTAyL1BMQ1Zab3Q5ZE1M eHR3QmEtaFdmVC1VaVVnby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC7yk4Ha5n8pNKaUfl3B2BglbmKwCBbrazKUEpqh/8ZBge2UpxUGZ6x7 wT1i5mJF5c5fIHpdBjyEyCp3v9jbu66rkHHTRMRsfRCh4qcuOmAk+6ESOCTgMhe0 9qMIF26lvs4syy5mL/y4atV7FO0a29Ck/Cx2XWq8QPB9NNaNinBc3KObiIM8P0Oi eJ3kz4zXFXEeQJDgzIOEvpKk93vvyEZIFyxz05J6Bm4KdEeSjhaqJlZY2cVDUosj Q4THR2q+H8pohaYTHKJerTBctRHqvnbL32fl1OWfNluugk8AfRMAAPaicz70+i+R LAiS1Bs5b6b5/IY+H/eLhIXCAaFL+GY= -----END CERTIFICATE-----Generated at Mon Nov 3 18:09:56 2025 by rpki-client