$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5319/025D7B5C8C2D11EF8122EC11C4F9AE02/puZHuaRPqqc-u4IEBQzGTMpFmOo.mft File: puZHuaRPqqc-u4IEBQzGTMpFmOo.mft (raw, json) Hash identifier: Z3TDiUyHjlkY3ElokysiciXmW0K9XicPcE4JgsNCxMA= Subject key identifier: EE:37:DA:90:A1:68:EA:42:90:36:C4:D6:C0:07:F6:08:94:57:98:7F Authority key identifier: A6:E6:47:B9:A4:4F:AA:A7:3E:BB:82:04:05:0C:C6:4C:CA:45:98:EA Certificate issuer: /CN=A91C5319/serialNumber=A6E647B9A44FAAA73EBB8204050CC64CCA4598EA Certificate serial: C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/puZHuaRPqqc-u4IEBQzGTMpFmOo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5319/025D7B5C8C2D11EF8122EC11C4F9AE02/puZHuaRPqqc-u4IEBQzGTMpFmOo.mft Manifest number: C4 Signing time: Mon 03 Nov 2025 05:50:10 +0000 Manifest this update: Mon 03 Nov 2025 05:50:10 +0000 Manifest next update: Mon 10 Nov 2025 05:50:10 +0000 Files and hashes: 1: puZHuaRPqqc-u4IEBQzGTMpFmOo.crl (hash: ncAJUpSNgHNPAQIIrq+7BtH/b9G8q0b88uLxL8ilbhQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5319/025D7B5C8C2D11EF8122EC11C4F9AE02/puZHuaRPqqc-u4IEBQzGTMpFmOo.crl rsync://rpki.apnic.net/member_repository/A91C5319/025D7B5C8C2D11EF8122EC11C4F9AE02/puZHuaRPqqc-u4IEBQzGTMpFmOo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/puZHuaRPqqc-u4IEBQzGTMpFmOo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:50:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 196 (0xc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5319, serialNumber=A6E647B9A44FAAA73EBB8204050CC64CCA4598EA Validity Not Before: Nov 3 05:50:10 2025 GMT Not After : Nov 10 05:50:10 2025 GMT Subject: CN=69084292-3910 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ce:e0:d5:96:31:c1:03:c9:39:f5:53:75:b5: bf:2c:f4:95:9f:bf:9d:47:cd:c1:e2:7a:81:11:da: ac:28:74:82:ae:67:46:7f:42:47:cc:0b:b5:1b:76: c0:b2:c2:62:31:00:f8:4b:fa:d7:3c:26:8c:85:ad: 92:e4:10:15:05:a4:d3:01:01:44:cf:fc:b5:08:d1: cd:4f:5c:a2:f1:7b:c1:ae:69:25:25:91:81:df:cd: e3:3c:8b:7c:5b:dc:6c:5b:04:f5:0d:56:cc:94:99: d3:58:c8:8d:64:a9:5b:e3:e4:5a:72:e2:d6:63:93: b3:90:3f:74:e3:88:5e:20:a8:f0:01:11:5c:4f:a6: 1f:0b:86:54:c8:95:da:fa:c7:44:d0:3f:14:89:37: 07:c2:b2:f3:10:03:ef:93:73:b2:d3:0d:7b:4a:e6: ad:34:a0:8f:cf:7f:9d:49:53:02:ff:38:7d:21:df: 90:c8:6c:f7:6d:5e:7a:8c:07:ad:5d:0d:1a:ca:7c: 83:95:50:1e:22:24:5f:8a:60:61:38:9f:70:08:72: 83:8f:b1:01:08:6f:42:97:a6:ff:3a:3c:e1:70:08: a3:8e:2b:a2:7a:ef:67:2e:a9:3a:3e:cf:f5:0e:cc: a4:7b:98:be:a7:5a:03:24:b6:1a:2b:72:df:13:63: bc:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:37:DA:90:A1:68:EA:42:90:36:C4:D6:C0:07:F6:08:94:57:98:7F X509v3 Authority Key Identifier: keyid:A6:E6:47:B9:A4:4F:AA:A7:3E:BB:82:04:05:0C:C6:4C:CA:45:98:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5319/025D7B5C8C2D11EF8122EC11C4F9AE02/puZHuaRPqqc-u4IEBQzGTMpFmOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/puZHuaRPqqc-u4IEBQzGTMpFmOo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5319/025D7B5C8C2D11EF8122EC11C4F9AE02/puZHuaRPqqc-u4IEBQzGTMpFmOo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:d3:37:d5:a4:f7:22:38:99:05:d5:cc:6b:3b:d9:b4:24:bb: c9:f0:a3:a6:83:81:b9:3f:d4:fa:89:03:03:d1:6a:76:40:4e: 9c:82:0f:27:5e:47:99:c8:b3:0a:68:b9:0a:29:85:81:bc:28: 25:b2:a7:75:20:12:55:ba:08:69:e4:c5:30:55:c9:48:3d:d9: f5:16:94:f2:55:93:a9:22:81:e1:9a:66:a8:19:63:a1:4d:f5: 7e:30:80:23:b3:29:7f:df:da:f3:b3:19:e2:6d:c4:ba:5d:d3: 01:f5:04:08:bf:14:48:4e:9f:bd:22:27:1c:79:46:09:29:a5: 29:3e:36:ec:bb:97:f4:b4:89:fd:ed:cf:f1:51:0a:a7:26:9a: 94:cf:5e:61:48:43:2e:7f:af:b8:46:35:ad:83:f5:3a:d0:0a: 70:27:1e:70:8a:39:8f:37:7e:1d:5d:9b:b6:38:de:5e:48:52: b2:1d:01:6a:9b:73:b2:1a:b9:a2:79:c2:0d:df:4d:37:33:5e: 58:78:9b:fd:07:25:26:ea:2f:97:a0:6c:7e:28:cc:34:91:d7: 16:21:b9:e6:d6:25:d8:95:7c:ce:aa:6e:bf:30:67:ef:79:55: f6:0e:02:b7:83:99:35:57:70:14:9c:0e:73:28:6f:c9:55:fb: ed:a3:61:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzUzMTkxMTAvBgNVBAUTKEE2RTY0N0I5QTQ0RkFBQTczRUJCODIwNDA1MENDNjRD Q0E0NTk4RUEwHhcNMjUxMTAzMDU1MDEwWhcNMjUxMTEwMDU1MDEwWjAYMRYwFAYD VQQDEw02OTA4NDI5Mi0zOTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2c7g1ZYxwQPJOfVTdbW/LPSVn7+dR83B4nqBEdqsKHSCrmdGf0JHzAu1G3bA ssJiMQD4S/rXPCaMha2S5BAVBaTTAQFEz/y1CNHNT1yi8XvBrmklJZGB383jPIt8 W9xsWwT1DVbMlJnTWMiNZKlb4+RacuLWY5OzkD9044heIKjwARFcT6YfC4ZUyJXa +sdE0D8UiTcHwrLzEAPvk3Oy0w17SuatNKCPz3+dSVMC/zh9Id+QyGz3bV56jAet XQ0aynyDlVAeIiRfimBhOJ9wCHKDj7EBCG9Cl6b/OjzhcAijjiuieu9nLqk6Ps/1 Dsyke5i+p1oDJLYaK3LfE2O82QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO432pCh aOpCkDbE1sAH9giUV5h/MB8GA1UdIwQYMBaAFKbmR7mkT6qnPruCBAUMxkzKRZjq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTMxOS8wMjVEN0I1QzhD MkQxMUVGODEyMkVDMTFDNEY5QUUwMi9wdVpIdWFSUHFxYy11NElFQlF6R1RNcEZt T28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3B1Wkh1YVJQcXFjLXU0SUVCUXpHVE1wRm1Pby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTMxOS8wMjVEN0I1QzhDMkQxMUVGODEyMkVDMTFDNEY5QUUwMi9wdVpIdWFSUHFx Yy11NElFQlF6R1RNcEZtT28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBo0zfVpPciOJkF1cxrO9m0JLvJ8KOmg4G5P9T6iQMD0Wp2QE6cgg8n XkeZyLMKaLkKKYWBvCglsqd1IBJVughp5MUwVclIPdn1FpTyVZOpIoHhmmaoGWOh TfV+MIAjsyl/39rzsxnibcS6XdMB9QQIvxRITp+9IicceUYJKaUpPjbsu5f0tIn9 7c/xUQqnJpqUz15hSEMuf6+4RjWtg/U60ApwJx5wijmPN34dXZu2ON5eSFKyHQFq m3OyGrmiecIN3003M15YeJv9ByUm6i+XoGx+KMw0kdcWIbnm1iXYlXzOqm6/MGfv eVX2DgK3g5k1V3AUnA5zKG/JVfvto2F8 -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:06 2025 by rpki-client