$ rpki-client -vvf rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.mft File: pStC19RpVfQoUSa7DcS-qnNKkr0.mft (raw, json) Hash identifier: mEC3wiNpbfaH92JnkOhh+dhEYG4aWMih52YqxLVhpQ4= Subject key identifier: 3E:B6:2C:82:73:22:A2:4D:0B:01:B8:FE:11:73:52:C1:37:96:DC:A0 Authority key identifier: A5:2B:42:D7:D4:69:55:F4:28:51:26:BB:0D:C4:BE:AA:73:4A:92:BD Certificate issuer: /CN=A91E51AD/serialNumber=A52B42D7D46955F4285126BB0DC4BEAA734A92BD Certificate serial: 34D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pStC19RpVfQoUSa7DcS-qnNKkr0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.mft Manifest number: 34D9 Signing time: Sun 02 Nov 2025 14:34:43 +0000 Manifest this update: Sun 02 Nov 2025 14:34:43 +0000 Manifest next update: Sun 09 Nov 2025 14:34:43 +0000 Files and hashes: 1: pStC19RpVfQoUSa7DcS-qnNKkr0.crl (hash: NKT6iMnfAoJVn/xU0FrFNCupIDKyoSFzcA/LxaLjxog=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.crl rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pStC19RpVfQoUSa7DcS-qnNKkr0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 14:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13529 (0x34d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E51AD, serialNumber=A52B42D7D46955F4285126BB0DC4BEAA734A92BD Validity Not Before: Nov 2 14:34:43 2025 GMT Not After : Nov 9 14:34:43 2025 GMT Subject: CN=69076c03-502c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b6:c8:17:cc:a6:84:63:d4:e6:8f:63:85:5a: 54:07:8a:06:36:7b:ca:ff:f1:7c:e0:09:5e:f6:cd: 8a:28:43:8a:6b:33:90:a6:10:f6:a1:b9:5f:03:9f: 4d:8b:d4:60:c0:09:f5:e6:16:b7:1c:62:9a:ef:95: 85:f3:a4:3f:08:67:21:0b:99:b4:8a:7e:2d:cd:b5: 85:bf:d5:14:77:23:d0:70:d2:db:a8:e9:f5:7b:f2: c6:36:19:c7:b9:d1:31:e3:b0:94:28:5b:b5:e3:05: 5b:88:05:b8:f6:0e:20:ae:30:58:d9:07:a6:3f:03: 7d:cf:5f:c6:3d:2f:33:32:0c:97:8b:30:35:dc:8c: c9:46:f9:eb:c7:d7:20:5b:44:ce:80:03:75:54:82: 03:df:ec:8f:0e:29:7b:2b:f1:bd:d6:56:df:fa:db: 71:26:08:51:fa:a5:4d:b4:84:44:20:65:b5:2d:51: 46:b9:2d:ea:ba:80:c6:85:1d:a7:9c:eb:06:1d:11: b5:4a:a3:32:44:de:7d:6a:47:8c:50:f9:52:b0:0d: 9c:2e:87:d0:6f:e4:2d:d1:eb:6f:e6:16:79:a7:7d: fe:b6:74:ff:08:77:73:f4:88:2a:6f:c3:23:0a:7e: 39:da:00:fa:62:21:45:b0:a1:2a:98:4f:8a:a5:88: f3:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:B6:2C:82:73:22:A2:4D:0B:01:B8:FE:11:73:52:C1:37:96:DC:A0 X509v3 Authority Key Identifier: keyid:A5:2B:42:D7:D4:69:55:F4:28:51:26:BB:0D:C4:BE:AA:73:4A:92:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pStC19RpVfQoUSa7DcS-qnNKkr0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:a9:97:0d:1e:69:68:81:ab:eb:ab:18:da:a6:e0:21:dc:1e: 51:10:69:07:2d:5c:7c:39:8d:77:98:13:ee:14:aa:b6:1b:53: 2e:b9:68:6e:c6:c6:48:68:48:dd:0b:92:9c:07:36:90:cc:b0: c2:f6:83:f2:0b:d9:69:95:fe:47:51:75:4f:26:09:28:67:88: 38:32:00:04:ba:8e:a9:b3:3f:b7:ef:52:bd:a5:ec:8a:b8:5a: 38:54:91:97:7b:4b:28:ce:31:d6:35:4a:5c:2a:66:90:76:a8: 20:08:1e:f5:35:d7:01:a9:73:86:d3:83:02:c5:8a:7c:b3:ad: 6f:4f:1d:1e:02:1a:39:07:f9:ce:d0:4c:12:07:94:a4:a2:d7: e7:c0:b0:43:a5:83:24:e4:d0:8a:35:15:d5:ed:e5:13:ee:22: d2:75:f7:b6:d0:fd:a1:d1:64:22:2c:9f:b6:35:f4:61:81:ad: b9:7b:84:2f:00:10:09:cd:e7:af:a8:eb:9e:01:84:4b:e6:be: ac:39:c5:07:b2:78:80:26:8a:79:e6:bf:0b:db:e0:4e:1c:6a: 08:5c:0a:a5:e4:8c:03:d7:9f:ad:4b:8b:36:96:30:f3:34:56: b5:dd:ca:63:f8:e9:7e:86:80:72:ac:49:ce:33:ab:88:c7:2d: 21:16:84:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTUxQUQxMTAvBgNVBAUTKEE1MkI0MkQ3RDQ2OTU1RjQyODUxMjZCQjBEQzRCRUFB NzM0QTkyQkQwHhcNMjUxMTAyMTQzNDQzWhcNMjUxMTA5MTQzNDQzWjAYMRYwFAYD VQQDEw02OTA3NmMwMy01MDJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0rbIF8ymhGPU5o9jhVpUB4oGNnvK//F84Ale9s2KKEOKazOQphD2oblfA59N i9RgwAn15ha3HGKa75WF86Q/CGchC5m0in4tzbWFv9UUdyPQcNLbqOn1e/LGNhnH udEx47CUKFu14wVbiAW49g4grjBY2QemPwN9z1/GPS8zMgyXizA13IzJRvnrx9cg W0TOgAN1VIID3+yPDil7K/G91lbf+ttxJghR+qVNtIREIGW1LVFGuS3quoDGhR2n nOsGHRG1SqMyRN59akeMUPlSsA2cLofQb+Qt0etv5hZ5p33+tnT/CHdz9Igqb8Mj Cn452gD6YiFFsKEqmE+KpYjz3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD62LIJz IqJNCwG4/hFzUsE3ltygMB8GA1UdIwQYMBaAFKUrQtfUaVX0KFEmuw3EvqpzSpK9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTFBRC8yMjk1ODFENDFE OEMxMUUyQjdCNDI4RTcwOEIwMkNEMi9wU3RDMTlScFZmUW9VU2E3RGNTLXFuTktr cjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BTdEMxOVJwVmZRb1VTYTdEY1MtcW5OS2tyMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTFBRC8yMjk1ODFENDFEOEMxMUUyQjdCNDI4RTcwOEIwMkNEMi9wU3RDMTlScFZm UW9VU2E3RGNTLXFuTktrcjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDqZcNHmlogavrqxjapuAh3B5REGkHLVx8OY13mBPuFKq2G1MuuWhu xsZIaEjdC5KcBzaQzLDC9oPyC9lplf5HUXVPJgkoZ4g4MgAEuo6psz+371K9peyK uFo4VJGXe0sozjHWNUpcKmaQdqggCB71NdcBqXOG04MCxYp8s61vTx0eAho5B/nO 0EwSB5SkotfnwLBDpYMk5NCKNRXV7eUT7iLSdfe20P2h0WQiLJ+2NfRhga25e4Qv ABAJzeevqOueAYRL5r6sOcUHsniAJop55r8L2+BOHGoIXAql5IwD15+tS4s2ljDz NFa13cpj+Ol+hoByrEnOM6uIxy0hFoQM -----END CERTIFICATE-----Generated at Mon Nov 3 18:16:37 2025 by rpki-client