$ rpki-client -vvf rpki.apnic.net/member_repository/A91F02EA/DB15CDE011DB11EA95F2B059C4F9AE02/PShwiOOGgqTkudgoRQszZr3q1d0.mft File: PShwiOOGgqTkudgoRQszZr3q1d0.mft (raw, json) Hash identifier: gaQmwwi+1EqFhi+k7Ul22TY4LbQ2cUrQ/psh6xujBBs= Subject key identifier: 29:84:32:E8:6E:42:D9:26:C3:20:DF:02:A0:7B:3D:66:4A:92:26:6C Authority key identifier: 3D:28:70:88:E3:86:82:A4:E4:B9:D8:28:45:0B:33:66:BD:EA:D5:DD Certificate issuer: /CN=A91F02EA/serialNumber=3D287088E38682A4E4B9D828450B3366BDEAD5DD Certificate serial: 0C6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PShwiOOGgqTkudgoRQszZr3q1d0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F02EA/DB15CDE011DB11EA95F2B059C4F9AE02/PShwiOOGgqTkudgoRQszZr3q1d0.mft Manifest number: 0C5B Signing time: Sun 02 Nov 2025 18:35:19 +0000 Manifest this update: Sun 02 Nov 2025 18:35:18 +0000 Manifest next update: Sun 09 Nov 2025 18:35:18 +0000 Files and hashes: 1: PShwiOOGgqTkudgoRQszZr3q1d0.crl (hash: rKfJDodmo7f35XqHYTlwsNplP7Fwy1xwhv4TMktZW1Y=) 2: 7716938A416211EB9B0F3C54C4F9AE02.roa (hash: SaoXuslBHecNHa04UZ0EBB+W8ns+FIPHvzYnnMHMCbU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F02EA/DB15CDE011DB11EA95F2B059C4F9AE02/PShwiOOGgqTkudgoRQszZr3q1d0.crl rsync://rpki.apnic.net/member_repository/A91F02EA/DB15CDE011DB11EA95F2B059C4F9AE02/PShwiOOGgqTkudgoRQszZr3q1d0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PShwiOOGgqTkudgoRQszZr3q1d0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:35:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3179 (0xc6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F02EA, serialNumber=3D287088E38682A4E4B9D828450B3366BDEAD5DD Validity Not Before: Nov 2 18:35:18 2025 GMT Not After : Nov 9 18:35:18 2025 GMT Subject: CN=6907a467-3be4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:fd:ba:d0:b6:8b:e4:4b:3d:01:bc:be:92:9e: 9d:d7:b5:32:ea:4b:c4:3e:5e:0b:6c:39:f0:a0:20: 50:25:b4:ab:eb:aa:20:79:27:08:bf:3a:95:4a:b1: 47:33:32:63:fa:01:37:df:5c:32:c6:ce:8e:90:5e: f7:f8:42:15:4d:52:22:9a:71:7f:5e:0f:f4:b0:3e: 84:80:36:e7:1c:03:b4:d7:94:6e:fb:6d:4e:a9:3d: 0c:51:13:67:af:66:07:1f:41:0e:9a:95:60:f0:95: 89:27:d2:ec:41:52:32:7a:f3:4c:0f:1c:7f:34:2b: 38:3e:ff:42:b3:8c:29:97:12:82:de:60:c5:84:a0: 55:16:c5:76:12:96:a9:87:18:27:5c:c6:6c:b0:ac: 3c:f0:6f:f8:9b:7a:23:aa:fb:90:e8:2c:e9:38:e8: e5:87:87:c6:ce:36:99:a9:19:52:5f:52:79:9e:71: ab:04:8d:4b:99:a1:98:12:a1:34:0b:e9:bc:18:c2: e9:bc:cf:a7:51:dd:e2:37:23:fb:90:19:89:dc:b2: 13:44:ca:bd:69:a0:cc:b0:82:60:d4:bc:54:55:4d: c6:fd:f0:f5:64:88:0e:61:f3:c2:91:ec:34:bc:82: 82:80:d4:39:7e:06:7a:9f:e2:00:5b:87:b2:d1:b2: 9d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:84:32:E8:6E:42:D9:26:C3:20:DF:02:A0:7B:3D:66:4A:92:26:6C X509v3 Authority Key Identifier: keyid:3D:28:70:88:E3:86:82:A4:E4:B9:D8:28:45:0B:33:66:BD:EA:D5:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F02EA/DB15CDE011DB11EA95F2B059C4F9AE02/PShwiOOGgqTkudgoRQszZr3q1d0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PShwiOOGgqTkudgoRQszZr3q1d0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F02EA/DB15CDE011DB11EA95F2B059C4F9AE02/PShwiOOGgqTkudgoRQszZr3q1d0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:2a:2b:8c:22:64:c7:4a:f4:65:80:79:1a:5f:18:30:26:b3: 93:94:2a:88:ee:2a:b1:16:79:98:d3:33:2f:86:ae:05:65:b7: aa:7e:4d:99:a3:96:f0:bd:b8:05:f9:e7:21:ba:90:ff:3c:6c: 11:2f:f4:35:5c:2c:46:ed:2c:94:4a:8a:e2:ad:72:ab:87:04: 9f:74:16:d5:44:a8:03:81:3d:97:9e:c1:c6:f8:f4:cd:15:3c: 04:35:60:60:f3:42:7b:da:fe:9c:fc:23:b9:2f:a3:08:b8:1d: 0a:2c:4a:9f:81:6d:09:4b:7c:18:9a:51:f6:13:26:15:9d:47: 80:b7:b9:c0:4a:c7:43:c7:d5:e8:d2:19:c3:6b:f1:83:53:fe: bd:6c:db:06:bd:56:5e:79:19:92:6e:b6:cd:dd:64:95:f4:9c: 3c:84:14:8c:a1:26:02:3b:bd:b9:17:ce:32:5b:bb:9a:9d:cb: ae:4c:81:a8:b0:ca:72:4a:31:48:f8:c6:18:50:fa:b2:b7:bb: 23:cb:a7:67:c5:75:bf:25:a0:14:6e:34:7e:b5:5f:1e:55:64: 72:92:a6:fd:90:d9:42:14:b1:7d:5c:3e:fd:06:07:e2:10:50: 0b:eb:38:fc:3a:e6:14:9d:0e:6c:aa:95:a0:4f:57:a9:5f:f0: 7e:4f:ff:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjAyRUExMTAvBgNVBAUTKDNEMjg3MDg4RTM4NjgyQTRFNEI5RDgyODQ1MEIzMzY2 QkRFQUQ1REQwHhcNMjUxMTAyMTgzNTE4WhcNMjUxMTA5MTgzNTE4WjAYMRYwFAYD VQQDEw02OTA3YTQ2Ny0zYmU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1P260LaL5Es9Aby+kp6d17Uy6kvEPl4LbDnwoCBQJbSr66ogeScIvzqVSrFH MzJj+gE331wyxs6OkF73+EIVTVIimnF/Xg/0sD6EgDbnHAO015Ru+21OqT0MURNn r2YHH0EOmpVg8JWJJ9LsQVIyevNMDxx/NCs4Pv9Cs4wplxKC3mDFhKBVFsV2Epap hxgnXMZssKw88G/4m3ojqvuQ6CzpOOjlh4fGzjaZqRlSX1J5nnGrBI1LmaGYEqE0 C+m8GMLpvM+nUd3iNyP7kBmJ3LITRMq9aaDMsIJg1LxUVU3G/fD1ZIgOYfPCkew0 vIKCgNQ5fgZ6n+IAW4ey0bKdWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCmEMuhu QtkmwyDfAqB7PWZKkiZsMB8GA1UdIwQYMBaAFD0ocIjjhoKk5LnYKEULM2a96tXd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDJFQS9EQjE1Q0RFMDEx REIxMUVBOTVGMkIwNTlDNEY5QUUwMi9QU2h3aU9PR2dxVGt1ZGdvUlFzelpyM3Ex ZDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BTaHdpT09HZ3FUa3VkZ29SUXN6WnIzcTFkMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDJFQS9EQjE1Q0RFMDExREIxMUVBOTVGMkIwNTlDNEY5QUUwMi9QU2h3aU9PR2dx VGt1ZGdvUlFzelpyM3ExZDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8KiuMImTHSvRlgHkaXxgwJrOTlCqI7iqxFnmY0zMvhq4FZbeqfk2Z o5bwvbgF+echupD/PGwRL/Q1XCxG7SyUSorirXKrhwSfdBbVRKgDgT2XnsHG+PTN FTwENWBg80J72v6c/CO5L6MIuB0KLEqfgW0JS3wYmlH2EyYVnUeAt7nASsdDx9Xo 0hnDa/GDU/69bNsGvVZeeRmSbrbN3WSV9Jw8hBSMoSYCO725F84yW7uancuuTIGo sMpySjFI+MYYUPqyt7sjy6dnxXW/JaAUbjR+tV8eVWRykqb9kNlCFLF9XD79Bgfi EFAL6zj8OuYUnQ5sqpWgT1epX/B+T/9i -----END CERTIFICATE-----Generated at Tue Nov 4 19:14:46 2025 by rpki-client