$ rpki-client -vvf rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.mft File: PbzLvnvpFslu6uzZi_XVPhw5DqE.mft (raw, json) Hash identifier: 6S0+J3CeWV2uMnikAATWRArhwzczApTo7rH9tl70z/E= Subject key identifier: 70:99:B7:8A:37:22:10:83:BC:EB:38:50:40:FE:19:D0:8B:C2:40:E1 Authority key identifier: 3D:BC:CB:BE:7B:E9:16:C9:6E:EA:EC:D9:8B:F5:D5:3E:1C:39:0E:A1 Certificate issuer: /CN=A912614B/serialNumber=3DBCCBBE7BE916C96EEAECD98BF5D53E1C390EA1 Certificate serial: 0BC2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbzLvnvpFslu6uzZi_XVPhw5DqE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.mft Manifest number: 0BBA Signing time: Sun 02 Nov 2025 18:54:11 +0000 Manifest this update: Sun 02 Nov 2025 18:54:11 +0000 Manifest next update: Sun 09 Nov 2025 18:54:11 +0000 Files and hashes: 1: PbzLvnvpFslu6uzZi_XVPhw5DqE.crl (hash: FjYY4YvUJaU+0814zz/kdcAAxC1HH3Gq82apEfrWf8g=) 2: AF57B9EC2F7811EABC011040C4F9AE02.roa (hash: 7clxci5sYL0ZKeUn3xOVCzgzac7VXWrYaajUILDcB+8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.crl rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbzLvnvpFslu6uzZi_XVPhw5DqE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:54:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3010 (0xbc2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912614B, serialNumber=3DBCCBBE7BE916C96EEAECD98BF5D53E1C390EA1 Validity Not Before: Nov 2 18:54:11 2025 GMT Not After : Nov 9 18:54:11 2025 GMT Subject: CN=6907a8d3-8226 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fd:a2:5d:3a:62:b0:75:81:cd:f2:32:60:0d: 56:17:9a:4c:2f:46:b6:eb:4b:57:a7:31:50:a9:f4: 8c:0a:a4:cb:38:5c:d2:d4:0c:74:b2:79:b1:4d:20: 38:f7:6b:96:c9:5f:a0:a2:77:1c:da:2d:26:a4:e9: 8c:dd:b9:ed:3d:b7:5c:c4:03:2d:ad:7c:72:14:60: a4:1f:ba:5f:45:f1:39:19:f1:a9:82:e8:98:9f:a3: 65:90:8b:b5:c0:53:7f:86:1e:29:97:25:9e:e9:f4: 44:e7:aa:69:3c:13:56:66:4d:64:89:d2:8a:b9:a4: 17:7c:7c:5b:b8:1b:16:88:1d:50:8b:fd:a1:64:14: b4:00:fa:b2:9a:b8:c7:4f:4d:a2:c9:b6:f2:f9:00: 67:59:ad:dd:77:33:e7:c1:ba:5d:2b:70:c7:9e:b5: e5:f2:41:b3:63:73:7c:79:c5:d6:74:f6:63:22:d3: 64:22:e8:db:db:b5:d4:9c:e8:7a:06:37:4b:99:09: 03:2d:7f:b0:e6:75:7c:c5:2f:33:9c:38:30:8d:67: 4c:4e:82:06:f9:37:75:dc:3b:db:98:f6:96:35:cd: 7d:58:47:f4:cc:57:d6:d3:23:a4:66:b7:e6:d9:b3: 9f:f7:3b:f9:b8:0c:67:dc:0a:b3:bb:7a:05:ed:72: 03:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:99:B7:8A:37:22:10:83:BC:EB:38:50:40:FE:19:D0:8B:C2:40:E1 X509v3 Authority Key Identifier: keyid:3D:BC:CB:BE:7B:E9:16:C9:6E:EA:EC:D9:8B:F5:D5:3E:1C:39:0E:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbzLvnvpFslu6uzZi_XVPhw5DqE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:d9:56:52:07:8f:95:e0:ca:cb:57:ae:41:70:0a:e9:6d:87: a4:e2:10:64:b9:8b:5f:1d:bb:ee:0f:0d:bb:f0:e2:03:68:bf: 89:69:0e:b5:b8:93:f4:25:3e:2d:7e:e7:48:a2:64:24:37:33: bd:03:e3:1d:32:53:80:3a:93:5a:f7:12:98:b6:6c:c5:c9:1a: 0d:93:e4:a4:53:5d:ed:08:16:4d:33:85:98:ca:b3:99:83:e9: 19:9f:e3:52:b7:ed:e7:e0:ae:ed:6d:22:fc:cc:3d:23:14:a7: 00:a4:fc:8a:7f:da:df:3b:36:06:7b:92:8d:40:92:35:a9:40: b2:dc:6c:96:f3:d4:17:b5:d8:00:10:c6:a5:b3:a4:1c:05:8f: 35:d7:a4:31:9c:43:9b:36:a7:b6:0a:2c:a5:25:ba:d6:ec:2b: 26:b8:2e:ce:ef:04:78:04:dd:57:f3:5f:aa:a0:44:90:91:2c: 7e:0b:e8:23:5e:7d:50:fe:57:6e:93:78:2a:d4:f2:3f:e4:9f: 34:6a:f4:63:ba:f0:c3:d8:1e:e4:2d:04:2b:b1:db:ab:7f:27: da:91:85:a3:1b:76:02:f8:9a:95:b5:98:d4:45:2a:b5:38:65: 3e:91:4f:7d:f9:6a:77:58:18:e9:fc:6f:f1:11:e9:e6:55:b9: 40:da:6f:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC8IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYxNEIxMTAvBgNVBAUTKDNEQkNDQkJFN0JFOTE2Qzk2RUVBRUNEOThCRjVENTNF MUMzOTBFQTEwHhcNMjUxMTAyMTg1NDExWhcNMjUxMTA5MTg1NDExWjAYMRYwFAYD VQQDEw02OTA3YThkMy04MjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvv2iXTpisHWBzfIyYA1WF5pML0a260tXpzFQqfSMCqTLOFzS1Ax0snmxTSA4 92uWyV+goncc2i0mpOmM3bntPbdcxAMtrXxyFGCkH7pfRfE5GfGpguiYn6NlkIu1 wFN/hh4plyWe6fRE56ppPBNWZk1kidKKuaQXfHxbuBsWiB1Qi/2hZBS0APqymrjH T02iybby+QBnWa3ddzPnwbpdK3DHnrXl8kGzY3N8ecXWdPZjItNkIujb27XUnOh6 BjdLmQkDLX+w5nV8xS8znDgwjWdMToIG+Td13DvbmPaWNc19WEf0zFfW0yOkZrfm 2bOf9zv5uAxn3Aqzu3oF7XID/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHCZt4o3 IhCDvOs4UED+GdCLwkDhMB8GA1UdIwQYMBaAFD28y7576RbJburs2Yv11T4cOQ6h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjE0Qi9GMkE0OTI0RTJG NzYxMUVBOTFGRENCM0NDNEY5QUUwMi9QYnpMdm52cEZzbHU2dXpaaV9YVlBodzVE cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Biekx2bnZwRnNsdTZ1elppX1hWUGh3NURxRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjE0Qi9GMkE0OTI0RTJGNzYxMUVBOTFGRENCM0NDNEY5QUUwMi9QYnpMdm52cEZz bHU2dXpaaV9YVlBodzVEcUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCX2VZSB4+V4MrLV65BcArpbYek4hBkuYtfHbvuDw278OIDaL+JaQ61 uJP0JT4tfudIomQkNzO9A+MdMlOAOpNa9xKYtmzFyRoNk+SkU13tCBZNM4WYyrOZ g+kZn+NSt+3n4K7tbSL8zD0jFKcApPyKf9rfOzYGe5KNQJI1qUCy3GyW89QXtdgA EMals6QcBY8116QxnEObNqe2CiylJbrW7CsmuC7O7wR4BN1X81+qoESQkSx+C+gj Xn1Q/lduk3gq1PI/5J80avRjuvDD2B7kLQQrsdurfyfakYWjG3YC+JqVtZjURSq1 OGU+kU99+Wp3WBjp/G/xEenmVblA2m80 -----END CERTIFICATE-----Generated at Tue Nov 4 02:15:13 2025 by rpki-client