$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/pslhETDFFnRVE26Fq_I2qqqTe60.mft File: pslhETDFFnRVE26Fq_I2qqqTe60.mft (raw, json) Hash identifier: rQJxKVkxHVPyB6nQjzuV8BgFVY6GwOusie9TVIlUTOY= Subject key identifier: 0D:06:BF:23:71:A0:08:D5:D2:39:2C:7D:34:1C:53:BB:82:25:7E:05 Authority key identifier: A6:C9:61:11:30:C5:16:74:55:13:6E:85:AB:F2:36:AA:AA:93:7B:AD Certificate issuer: /CN=A91C3DC8/serialNumber=A6C9611130C5167455136E85ABF236AAAA937BAD Certificate serial: 0C89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pslhETDFFnRVE26Fq_I2qqqTe60.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/pslhETDFFnRVE26Fq_I2qqqTe60.mft Manifest number: 0C6C Signing time: Sun 02 Nov 2025 18:35:04 +0000 Manifest this update: Sun 02 Nov 2025 18:35:03 +0000 Manifest next update: Sun 09 Nov 2025 18:35:03 +0000 Files and hashes: 1: pslhETDFFnRVE26Fq_I2qqqTe60.crl (hash: 7TdYOXO+jCFU+gHpV5/XmSKxy60xsv2gAz9IaIdSbOA=) 2: D29DE1E6C98611ED8D5AE04CC4F9AE02.roa (hash: 31xev4NPWwXKKZxGPGay9JA7GBIzfTlM7xCV7ZGyWGY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/pslhETDFFnRVE26Fq_I2qqqTe60.crl rsync://rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/pslhETDFFnRVE26Fq_I2qqqTe60.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pslhETDFFnRVE26Fq_I2qqqTe60.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:35:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3209 (0xc89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3DC8, serialNumber=A6C9611130C5167455136E85ABF236AAAA937BAD Validity Not Before: Nov 2 18:35:03 2025 GMT Not After : Nov 9 18:35:03 2025 GMT Subject: CN=6907a458-7bfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:dd:5c:cc:9c:21:dc:82:f7:a5:56:72:ed:d2: b8:b8:3d:5f:35:a4:97:1c:48:b9:b1:cf:88:09:36: b6:e8:01:65:f8:0a:57:cd:bc:38:ea:02:74:40:e0: 25:4c:7b:8d:24:bd:40:70:10:17:73:41:ef:c0:6d: 28:f1:4a:38:e6:ec:b9:bc:b5:a8:fc:0b:7d:61:49: fd:2c:77:cb:69:a2:ea:61:ba:0e:83:fe:7b:e4:1a: de:6c:7f:ef:74:52:48:47:17:bc:81:25:51:27:14: f6:ad:b9:4c:bc:0c:11:73:b0:b5:4f:c5:bc:98:ad: ec:bb:7a:35:36:dd:f7:52:26:8d:bf:d2:3a:39:d1: e5:8d:c2:b8:3b:c0:de:e9:b6:ad:9d:e6:aa:e7:69: 50:fc:e4:ea:05:b2:22:24:14:4c:60:0a:15:71:67: 5d:e3:63:92:c7:4e:0f:4a:0d:fa:8a:2b:ac:65:ad: 8e:b7:c3:f4:dd:af:00:ef:97:c8:d0:bc:1e:82:0a: e4:2b:b9:2f:fd:f0:de:43:d8:ca:cd:15:52:03:bd: 09:34:aa:df:54:85:81:8f:88:a9:df:eb:59:5e:9f: 85:7d:c3:f1:5c:1b:c1:ea:cf:88:29:5c:c7:4a:c3: 9f:bf:e4:83:87:60:9b:64:10:78:07:51:43:d5:30: 6c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:06:BF:23:71:A0:08:D5:D2:39:2C:7D:34:1C:53:BB:82:25:7E:05 X509v3 Authority Key Identifier: keyid:A6:C9:61:11:30:C5:16:74:55:13:6E:85:AB:F2:36:AA:AA:93:7B:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/pslhETDFFnRVE26Fq_I2qqqTe60.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pslhETDFFnRVE26Fq_I2qqqTe60.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/pslhETDFFnRVE26Fq_I2qqqTe60.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:41:5a:86:1e:ee:82:e2:40:f2:a3:5e:11:a9:4d:e1:69:14: 9c:4f:91:d7:16:d2:6c:03:3c:6a:fe:48:c9:29:b9:63:e4:0d: dc:65:cd:39:5b:36:75:cc:e1:90:d2:d5:27:21:64:ff:b8:1b: 1c:23:05:61:a3:eb:39:2b:3a:48:b9:a6:f4:2e:e9:ca:4d:d6: 43:e5:18:32:60:db:cb:b8:fb:d6:5b:b8:d4:c8:75:3b:af:4f: 02:d6:ce:94:ab:6d:f3:e1:b2:b7:15:b5:cf:63:a0:c7:22:e8: 8c:c5:b5:c2:f1:96:ec:de:8a:37:72:27:c4:77:3c:3c:e0:50: 66:9f:4c:e8:4e:9a:55:86:ac:d3:22:c5:ac:3f:f5:3c:99:36: 0b:ec:8c:22:4d:48:a7:6b:57:da:4f:23:e3:d2:db:66:bf:f2: f5:72:2d:1a:d4:6d:96:4d:4b:c9:cf:19:e1:b7:f7:da:01:57: ef:17:47:48:78:8b:fc:cd:3a:e4:23:53:0c:29:dc:db:79:96: af:85:d6:88:08:e3:2a:15:cd:d7:8d:e4:1c:15:5d:6d:22:93: 5f:57:80:11:9d:95:c1:23:1b:c0:2b:aa:8a:dd:f7:43:4c:31: 73:83:02:75:e0:57:4c:de:f5:f0:eb:4e:47:55:5d:fc:09:85: 8f:f5:7e:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNEQzgxMTAvBgNVBAUTKEE2Qzk2MTExMzBDNTE2NzQ1NTEzNkU4NUFCRjIzNkFB QUE5MzdCQUQwHhcNMjUxMTAyMTgzNTAzWhcNMjUxMTA5MTgzNTAzWjAYMRYwFAYD VQQDEw02OTA3YTQ1OC03YmZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA091czJwh3IL3pVZy7dK4uD1fNaSXHEi5sc+ICTa26AFl+ApXzbw46gJ0QOAl THuNJL1AcBAXc0HvwG0o8Uo45uy5vLWo/At9YUn9LHfLaaLqYboOg/575BrebH/v dFJIRxe8gSVRJxT2rblMvAwRc7C1T8W8mK3su3o1Nt33UiaNv9I6OdHljcK4O8De 6batneaq52lQ/OTqBbIiJBRMYAoVcWdd42OSx04PSg36iiusZa2Ot8P03a8A75fI 0LweggrkK7kv/fDeQ9jKzRVSA70JNKrfVIWBj4ip3+tZXp+FfcPxXBvB6s+IKVzH SsOfv+SDh2CbZBB4B1FD1TBsCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA0GvyNx oAjV0jksfTQcU7uCJX4FMB8GA1UdIwQYMBaAFKbJYREwxRZ0VRNuhavyNqqqk3ut MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0RDOC9FNUNBRjkzRTEx RDgxMUVBQjcxNjdDNEZDNEY5QUUwMi9wc2xoRVRERkZuUlZFMjZGcV9JMnFxcVRl NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BzbGhFVERGRm5SVkUyNkZxX0kycXFxVGU2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0RDOC9FNUNBRjkzRTExRDgxMUVBQjcxNjdDNEZDNEY5QUUwMi9wc2xoRVRERkZu UlZFMjZGcV9JMnFxcVRlNjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArQVqGHu6C4kDyo14RqU3haRScT5HXFtJsAzxq/kjJKblj5A3cZc05 WzZ1zOGQ0tUnIWT/uBscIwVho+s5KzpIuab0LunKTdZD5RgyYNvLuPvWW7jUyHU7 r08C1s6Uq23z4bK3FbXPY6DHIuiMxbXC8Zbs3oo3cifEdzw84FBmn0zoTppVhqzT IsWsP/U8mTYL7IwiTUina1faTyPj0ttmv/L1ci0a1G2WTUvJzxnht/faAVfvF0dI eIv8zTrkI1MMKdzbeZavhdaICOMqFc3XjeQcFV1tIpNfV4ARnZXBIxvAK6qK3fdD TDFzgwJ14FdM3vXw605HVV38CYWP9X7J -----END CERTIFICATE-----Generated at Tue Nov 4 01:07:20 2025 by rpki-client