$ rpki-client -vvf rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft File: Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft (raw, json) Hash identifier: y3zSoa7bUA5MgZpsN5hHWNTNrMAW5ARX5v0/39P269g= Subject key identifier: FA:80:AA:BF:E3:A8:3C:24:F0:D3:AC:9D:C7:35:F7:4B:10:7A:CD:9D Authority key identifier: 3E:5B:3C:AB:9F:14:1A:06:EB:83:2E:63:F5:86:CB:0E:66:76:04:02 Certificate issuer: /CN=A91D06FC/serialNumber=3E5B3CAB9F141A06EB832E63F586CB0E66760402 Certificate serial: 03E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pls8q58UGgbrgy5j9YbLDmZ2BAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft Manifest number: 03E0 Signing time: Mon 03 Nov 2025 00:30:43 +0000 Manifest this update: Mon 03 Nov 2025 00:30:43 +0000 Manifest next update: Mon 10 Nov 2025 00:30:43 +0000 Files and hashes: 1: Pls8q58UGgbrgy5j9YbLDmZ2BAI.crl (hash: 4uMJlKh1hnb5ACV/mccQfGWm7Plz7qqnzPE0QdXQf7A=) 2: AF8386E29EEF11EC8450760EC4F9AE02.roa (hash: 33pUrgoOiAaMxnDUMOqU1bZyw6PC3oCJBm1dIi55b3s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.crl rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pls8q58UGgbrgy5j9YbLDmZ2BAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:30:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 996 (0x3e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D06FC, serialNumber=3E5B3CAB9F141A06EB832E63F586CB0E66760402 Validity Not Before: Nov 3 00:30:43 2025 GMT Not After : Nov 10 00:30:43 2025 GMT Subject: CN=6907f7b3-389e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:61:9b:18:39:83:40:ae:14:05:58:5f:6c:68: c3:fc:b5:47:1c:a6:ce:7e:ae:05:41:c8:7e:e0:41: d1:0b:97:f3:25:fa:12:56:e4:b2:5b:54:78:c0:34: ce:22:4d:3f:fe:17:78:99:51:ba:92:43:3c:20:7c: d9:c4:67:fe:76:c8:4a:30:47:da:f8:56:52:f5:1b: 3d:e5:81:4f:ce:71:e0:fd:4f:05:48:46:1c:8a:a3: 69:24:c9:4f:72:2a:17:3f:56:96:41:f1:82:f7:ad: dc:e4:5f:8d:f3:e2:05:53:2d:f2:83:63:32:38:2d: 91:0c:c1:1b:08:c8:e8:71:e1:e6:35:2e:fd:75:75: f9:55:cf:57:53:7e:83:24:0e:5d:8c:6a:c1:bf:d8: cc:4b:37:ac:c7:17:04:1f:2f:41:34:56:c6:6b:19: f2:a3:1e:a4:59:5b:ee:bb:2e:d8:5c:8e:dd:b3:09: d3:1d:2c:9e:d2:23:d8:cd:62:ef:4f:b4:cd:16:58: 24:eb:23:85:ad:49:ce:9f:87:fe:65:22:13:b7:22: bf:95:fb:c1:a7:4e:8d:74:77:28:67:1f:be:fa:8e: 01:69:14:32:27:e5:95:b6:7b:f2:69:41:ab:54:5b: 6c:3f:f8:bb:4f:1a:07:5e:de:28:9d:49:5b:c0:b6: 5a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:80:AA:BF:E3:A8:3C:24:F0:D3:AC:9D:C7:35:F7:4B:10:7A:CD:9D X509v3 Authority Key Identifier: keyid:3E:5B:3C:AB:9F:14:1A:06:EB:83:2E:63:F5:86:CB:0E:66:76:04:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pls8q58UGgbrgy5j9YbLDmZ2BAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:0f:f4:68:5f:7f:98:f8:c3:9a:2f:5a:ee:f5:5c:a5:92:65: 2e:83:66:a1:de:48:d3:ca:6c:a1:4e:3e:b5:8a:e8:10:13:fb: 4d:a8:ef:16:34:2a:97:b7:29:4d:e8:50:92:6f:9e:88:f9:9e: 1f:b0:aa:a8:99:cf:79:e9:8d:43:bf:8a:7d:be:b8:1a:07:4b: 58:0e:4d:33:78:3f:c4:44:35:ee:fa:64:02:9b:38:27:24:09: 43:a4:5a:89:90:e0:71:fb:3d:d9:b6:6f:34:4d:7e:e9:77:dd: 9d:89:8e:df:0e:8b:e8:9d:9d:bc:c6:7b:c8:ed:d6:c8:ba:ac: f5:2e:85:6b:a5:ba:8e:63:73:ef:a8:78:61:f3:2f:4c:3e:63: f6:51:52:3d:9c:2b:7b:70:42:86:bc:8f:8b:46:20:2a:e0:42: bf:b9:4b:fc:d9:34:4b:8b:ee:79:ae:b2:fe:48:fb:23:00:c3: 5c:78:b6:f1:18:11:00:94:70:ed:2a:b2:39:e1:43:66:c2:46: 65:62:24:12:95:c0:c3:48:84:42:3e:d9:c9:99:a9:7f:f0:d8: 03:59:e5:e0:65:ab:ce:9f:7d:56:13:71:b9:5b:83:9e:fa:96: 50:8e:a7:6e:7d:cc:39:29:94:3f:a8:aa:66:b4:17:6f:2b:fc: a5:50:5a:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDA2RkMxMTAvBgNVBAUTKDNFNUIzQ0FCOUYxNDFBMDZFQjgzMkU2M0Y1ODZDQjBF NjY3NjA0MDIwHhcNMjUxMTAzMDAzMDQzWhcNMjUxMTEwMDAzMDQzWjAYMRYwFAYD VQQDEw02OTA3ZjdiMy0zODllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr2GbGDmDQK4UBVhfbGjD/LVHHKbOfq4FQch+4EHRC5fzJfoSVuSyW1R4wDTO Ik0//hd4mVG6kkM8IHzZxGf+dshKMEfa+FZS9Rs95YFPznHg/U8FSEYciqNpJMlP cioXP1aWQfGC963c5F+N8+IFUy3yg2MyOC2RDMEbCMjoceHmNS79dXX5Vc9XU36D JA5djGrBv9jMSzesxxcEHy9BNFbGaxnyox6kWVvuuy7YXI7dswnTHSye0iPYzWLv T7TNFlgk6yOFrUnOn4f+ZSITtyK/lfvBp06NdHcoZx+++o4BaRQyJ+WVtnvyaUGr VFtsP/i7TxoHXt4onUlbwLZa2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPqAqr/j qDwk8NOsncc190sQes2dMB8GA1UdIwQYMBaAFD5bPKufFBoG64MuY/WGyw5mdgQC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDZGQy9BRUYyMzBFMjlF RUIxMUVDODA0OUEyN0ZDNEY5QUUwMi9QbHM4cTU4VUdnYnJneTVqOVliTERtWjJC QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BsczhxNThVR2dicmd5NWo5WWJMRG1aMkJBSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDZGQy9BRUYyMzBFMjlFRUIxMUVDODA0OUEyN0ZDNEY5QUUwMi9QbHM4cTU4VUdn YnJneTVqOVliTERtWjJCQUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChD/RoX3+Y+MOaL1ru9VylkmUug2ah3kjTymyhTj61iugQE/tNqO8W NCqXtylN6FCSb56I+Z4fsKqomc956Y1Dv4p9vrgaB0tYDk0zeD/ERDXu+mQCmzgn JAlDpFqJkOBx+z3Ztm80TX7pd92diY7fDovonZ28xnvI7dbIuqz1LoVrpbqOY3Pv qHhh8y9MPmP2UVI9nCt7cEKGvI+LRiAq4EK/uUv82TRLi+55rrL+SPsjAMNceLbx GBEAlHDtKrI54UNmwkZlYiQSlcDDSIRCPtnJmal/8NgDWeXgZavOn31WE3G5W4Oe +pZQjqdufcw5KZQ/qKpmtBdvK/ylUFrr -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:01 2025 by rpki-client