$ rpki-client -vvf rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/plEE3Hao4Oaj2SFGeJaAtz3eX1g.mft File: plEE3Hao4Oaj2SFGeJaAtz3eX1g.mft (raw, json) Hash identifier: w+I02OH4W85zvWdnnX8t+Q0Z6J5Zvg1WpTp9ObCNRa0= Subject key identifier: C7:BB:DF:9C:1D:B7:B3:BF:9F:BF:73:E1:8B:8E:BF:E1:F1:BF:39:E9 Authority key identifier: A6:51:04:DC:76:A8:E0:E6:A3:D9:21:46:78:96:80:B7:3D:DE:5F:58 Certificate issuer: /CN=A9120974/serialNumber=A65104DC76A8E0E6A3D92146789680B73DDE5F58 Certificate serial: 10AF Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/plEE3Hao4Oaj2SFGeJaAtz3eX1g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/plEE3Hao4Oaj2SFGeJaAtz3eX1g.mft Manifest number: 10A6 Signing time: Tue 04 Nov 2025 17:26:06 +0000 Manifest this update: Tue 04 Nov 2025 17:26:05 +0000 Manifest next update: Tue 11 Nov 2025 17:26:05 +0000 Files and hashes: 1: plEE3Hao4Oaj2SFGeJaAtz3eX1g.crl (hash: MUdgDIJvw5JCyzFzI5DFJpRWmt7liTJe+b+o6A0NOYY=) 2: A87BA1063A4B11E99182B31BC4F9AE02.roa (hash: qPjQ6qU9b4Y2Yxe9iOnxcnbbcXQxddrSOa1xx9RMf9M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/plEE3Hao4Oaj2SFGeJaAtz3eX1g.crl rsync://rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/plEE3Hao4Oaj2SFGeJaAtz3eX1g.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/plEE3Hao4Oaj2SFGeJaAtz3eX1g.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:26:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4271 (0x10af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120974, serialNumber=A65104DC76A8E0E6A3D92146789680B73DDE5F58 Validity Not Before: Nov 4 17:26:05 2025 GMT Not After : Nov 11 17:26:05 2025 GMT Subject: CN=690a372d-67d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d8:00:0c:3f:23:b5:e1:43:e0:b6:23:4d:d9: c6:00:ea:00:b7:e3:49:97:a5:dc:a5:3d:74:06:7b: e3:c9:91:29:33:fb:3b:20:b5:2f:3f:c8:67:98:73: 3d:59:ac:75:27:de:17:40:d6:db:19:00:14:0a:25: b0:f6:78:de:5d:89:36:cb:7b:49:e0:b4:13:2d:59: b6:ae:81:5f:93:aa:ad:c6:32:7f:12:01:eb:1d:53: 4a:f1:4a:eb:ac:20:89:04:c2:8f:c5:7c:c1:0c:54: 90:db:ca:05:a3:b6:23:57:1b:df:df:da:7f:0d:aa: f0:ca:9f:86:8d:b3:5a:2d:d8:87:f0:e0:a1:15:b5: 54:b2:50:de:2e:29:fc:ca:8a:be:f7:ae:01:06:c6: b7:8c:a6:20:0e:80:3a:b0:58:dd:eb:c8:ab:c9:fe: 5a:16:2b:dc:2a:6d:60:f1:bc:02:22:a6:2d:4b:a3: c8:34:d7:a6:87:b1:96:90:77:bb:58:fa:7e:b1:50: 86:81:64:17:d3:6a:1d:f3:d6:d8:db:2b:7e:57:8b: a1:84:bc:19:b8:ff:90:68:bb:d3:68:b1:ee:da:be: dc:cc:5e:36:01:0c:62:b6:6d:f5:6f:14:96:fb:02: 47:ef:c3:17:bf:fb:0a:d5:39:2a:b1:35:67:aa:54: 15:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:BB:DF:9C:1D:B7:B3:BF:9F:BF:73:E1:8B:8E:BF:E1:F1:BF:39:E9 X509v3 Authority Key Identifier: keyid:A6:51:04:DC:76:A8:E0:E6:A3:D9:21:46:78:96:80:B7:3D:DE:5F:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/plEE3Hao4Oaj2SFGeJaAtz3eX1g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/plEE3Hao4Oaj2SFGeJaAtz3eX1g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/plEE3Hao4Oaj2SFGeJaAtz3eX1g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:16:de:15:2b:3d:c0:c8:ce:21:13:bb:18:09:97:63:10:a5: e4:13:dc:e7:96:6d:57:69:da:d6:e0:59:9f:ec:8b:ea:37:ae: 7e:c4:27:76:95:07:da:23:b5:38:fe:4b:88:2c:22:4d:91:70: d7:09:36:0b:e3:24:00:46:db:87:b1:b9:21:9b:58:db:6e:f8: 25:04:ff:a6:a8:52:0c:1e:af:ca:8f:83:6d:51:82:4a:e7:17: bd:80:7c:6b:34:00:83:55:03:2e:ca:5c:ca:bd:a5:0f:34:a8: bf:26:26:a3:48:91:df:5d:63:d8:63:7d:5c:aa:d8:5e:ef:9d: 72:81:e2:d1:c7:b4:09:91:ca:df:8c:d4:db:87:97:dd:70:ba: aa:8b:ed:5b:94:05:b3:dc:b8:e9:7a:05:c6:23:ba:dc:0d:d2: 31:81:df:41:91:be:70:c7:a0:5e:c5:b3:f4:55:00:2f:3f:f5: 08:3f:16:14:d5:f9:06:6f:c2:c4:b2:80:f9:05:9e:ab:99:f9: c8:ef:89:50:22:46:5d:02:66:1c:31:d6:94:aa:18:01:05:9b: e6:0b:f9:8c:9c:2f:4a:14:04:9e:af:1b:80:25:7c:7d:22:52: 9f:ad:27:6d:69:86:ce:13:96:82:62:63:ca:5a:6d:1e:18:2f: 8b:d2:d4:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA5NzQxMTAvBgNVBAUTKEE2NTEwNERDNzZBOEUwRTZBM0Q5MjE0Njc4OTY4MEI3 M0RERTVGNTgwHhcNMjUxMTA0MTcyNjA1WhcNMjUxMTExMTcyNjA1WjAYMRYwFAYD VQQDEw02OTBhMzcyZC02N2QwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApdgADD8jteFD4LYjTdnGAOoAt+NJl6XcpT10BnvjyZEpM/s7ILUvP8hnmHM9 Wax1J94XQNbbGQAUCiWw9njeXYk2y3tJ4LQTLVm2roFfk6qtxjJ/EgHrHVNK8Urr rCCJBMKPxXzBDFSQ28oFo7YjVxvf39p/Darwyp+GjbNaLdiH8OChFbVUslDeLin8 yoq+964BBsa3jKYgDoA6sFjd68iryf5aFivcKm1g8bwCIqYtS6PINNemh7GWkHe7 WPp+sVCGgWQX02od89bY2yt+V4uhhLwZuP+QaLvTaLHu2r7czF42AQxitm31bxSW +wJH78MXv/sK1TkqsTVnqlQV/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMe735wd t7O/n79z4YuOv+HxvznpMB8GA1UdIwQYMBaAFKZRBNx2qODmo9khRniWgLc93l9Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDk3NC8wMzMyNDBDMDNB NEExMUU5OTQwRjJEMTZDNEY5QUUwMi9wbEVFM0hhbzRPYWoyU0ZHZUphQXR6M2VY MWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3BsRUUzSGFvNE9hajJTRkdlSmFBdHozZVgxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDk3NC8wMzMyNDBDMDNBNEExMUU5OTQwRjJEMTZDNEY5QUUwMi9wbEVFM0hhbzRP YWoyU0ZHZUphQXR6M2VYMWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7Ft4VKz3AyM4hE7sYCZdjEKXkE9znlm1XadrW4Fmf7IvqN65+xCd2 lQfaI7U4/kuILCJNkXDXCTYL4yQARtuHsbkhm1jbbvglBP+mqFIMHq/Kj4NtUYJK 5xe9gHxrNACDVQMuylzKvaUPNKi/JiajSJHfXWPYY31cqthe751ygeLRx7QJkcrf jNTbh5fdcLqqi+1blAWz3LjpegXGI7rcDdIxgd9Bkb5wx6BexbP0VQAvP/UIPxYU 1fkGb8LEsoD5BZ6rmfnI74lQIkZdAmYcMdaUqhgBBZvmC/mMnC9KFASerxuAJXx9 IlKfrSdtaYbOE5aCYmPKWm0eGC+L0tSq -----END CERTIFICATE-----Generated at Wed Nov 5 21:14:39 2025 by rpki-client