$ rpki-client -vvf rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.mft File: pTZ74UJBVZweuH0NXqPuxZPtz-w.mft (raw, json) Hash identifier: S346Me6seHKQOH3jI2FMb3TVDOqTvi9lvrOmb0GnLAw= Subject key identifier: 55:E5:D3:66:0A:D0:66:F1:42:3D:A2:6A:EB:16:35:96:04:29:E7:46 Authority key identifier: A5:36:7B:E1:42:41:55:9C:1E:B8:7D:0D:5E:A3:EE:C5:93:ED:CF:EC Certificate issuer: /CN=A912BAA5/serialNumber=A5367BE14241559C1EB87D0D5EA3EEC593EDCFEC Certificate serial: 34E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTZ74UJBVZweuH0NXqPuxZPtz-w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.mft Manifest number: 34E0 Signing time: Tue 04 Nov 2025 14:44:44 +0000 Manifest this update: Tue 04 Nov 2025 14:44:44 +0000 Manifest next update: Tue 11 Nov 2025 14:44:44 +0000 Files and hashes: 1: pTZ74UJBVZweuH0NXqPuxZPtz-w.crl (hash: qQRNd1SNjkToJkbm3Ic4QxKdfpj1M2R2EGyQmQXyepM=) 2: 214B85D87C0311EBB2F8C86CC4F9AE02.roa (hash: lyo3KeYKS41I3zCvbwFM3YRuu5a+CzwSrlJ2GPJMVKo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.crl rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTZ74UJBVZweuH0NXqPuxZPtz-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:44:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13543 (0x34e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BAA5, serialNumber=A5367BE14241559C1EB87D0D5EA3EEC593EDCFEC Validity Not Before: Nov 4 14:44:44 2025 GMT Not After : Nov 11 14:44:44 2025 GMT Subject: CN=690a115c-e03e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:30:a2:f2:9c:40:b5:32:5d:b3:fa:c7:a1:3e: 30:64:df:18:20:e9:d6:fb:bf:f5:ff:5f:61:75:a3: 2f:33:f9:34:0e:41:ef:e5:e2:5e:cd:01:f1:f9:8c: cf:43:19:81:37:ce:ca:98:fb:14:73:9a:78:f8:25: 0a:02:b7:d3:1e:0f:d9:9b:e2:5e:f6:20:d7:1b:e0: 72:86:55:3f:72:ce:6f:31:a5:83:8f:13:a8:a0:0e: 9e:a2:94:03:1c:e3:ad:10:3b:82:0b:7d:ac:c5:63: 03:23:89:0c:b2:94:b5:ac:59:d0:f2:f3:4b:b3:fb: b7:36:cb:83:ad:53:3f:02:9a:c4:23:df:e4:02:4d: c7:06:f4:86:da:fe:d4:42:56:13:11:fa:01:83:7e: d6:a9:2c:bc:9a:6c:8d:a6:45:4f:10:f6:4e:30:cd: 01:cd:89:4f:7c:9a:04:56:34:3e:29:6a:fc:64:af: 12:47:1e:6a:2e:6c:36:f0:59:aa:53:0a:c5:1c:96: 5e:49:8e:7b:ec:2c:bb:71:42:8f:7a:2b:6b:7e:f1: e0:4b:b7:4e:fe:9a:20:bd:3a:55:4b:0a:0e:32:43: f8:14:2d:99:cf:37:12:eb:f0:c5:6d:c5:b5:5a:9a: 65:84:7e:7b:68:0d:67:24:6c:16:2e:ef:41:2e:f8: d9:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:E5:D3:66:0A:D0:66:F1:42:3D:A2:6A:EB:16:35:96:04:29:E7:46 X509v3 Authority Key Identifier: keyid:A5:36:7B:E1:42:41:55:9C:1E:B8:7D:0D:5E:A3:EE:C5:93:ED:CF:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTZ74UJBVZweuH0NXqPuxZPtz-w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:e6:fd:04:63:85:61:03:29:89:55:7b:5e:a2:57:68:48:70: 07:17:8f:e2:0c:3f:1e:8b:38:3a:46:bb:4a:2d:dc:a5:95:05: 71:16:36:55:90:d9:b9:01:c7:2e:ea:fe:c0:a8:fa:7a:1a:f9: 91:06:e4:91:7e:a7:03:b1:c0:19:69:9d:b3:df:49:01:55:58: 72:09:d3:92:07:e1:c7:86:a5:99:9b:2b:ab:e4:55:44:c7:6c: f4:2a:5c:ec:50:65:bf:72:e1:8d:34:1f:f8:54:67:c5:0a:eb: 6c:2b:8f:fd:5d:c2:61:57:ab:28:1c:f6:11:f3:30:48:28:2f: 87:9c:70:23:8f:c7:95:fd:8b:4f:27:46:7f:41:4a:00:f0:f7: fe:00:cb:a3:60:ff:a2:12:ff:16:be:ce:88:2e:21:96:eb:35: 15:b5:51:73:0f:97:e0:1c:55:10:b9:8e:cc:b0:2a:32:67:e8: 85:db:9f:f4:15:0f:26:0b:6d:ff:6a:06:5b:7b:1c:c7:fa:14: 53:02:cd:d3:b7:1a:37:d0:8d:8b:da:d2:dd:18:e3:0d:15:69: f3:48:ba:51:82:7d:d0:a8:5c:d3:24:42:6e:e7:3c:77:7d:82: 87:dd:81:d9:cc:1e:27:cb:1b:fe:a8:4f:2e:7c:ce:e1:59:03: 31:34:13:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJBQTUxMTAvBgNVBAUTKEE1MzY3QkUxNDI0MTU1OUMxRUI4N0QwRDVFQTNFRUM1 OTNFRENGRUMwHhcNMjUxMTA0MTQ0NDQ0WhcNMjUxMTExMTQ0NDQ0WjAYMRYwFAYD VQQDEw02OTBhMTE1Yy1lMDNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAujCi8pxAtTJds/rHoT4wZN8YIOnW+7/1/19hdaMvM/k0DkHv5eJezQHx+YzP QxmBN87KmPsUc5p4+CUKArfTHg/Zm+Je9iDXG+ByhlU/cs5vMaWDjxOooA6eopQD HOOtEDuCC32sxWMDI4kMspS1rFnQ8vNLs/u3NsuDrVM/AprEI9/kAk3HBvSG2v7U QlYTEfoBg37WqSy8mmyNpkVPEPZOMM0BzYlPfJoEVjQ+KWr8ZK8SRx5qLmw28Fmq UwrFHJZeSY577Cy7cUKPeitrfvHgS7dO/pogvTpVSwoOMkP4FC2ZzzcS6/DFbcW1 WpplhH57aA1nJGwWLu9BLvjZJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFXl02YK 0GbxQj2iausWNZYEKedGMB8GA1UdIwQYMBaAFKU2e+FCQVWcHrh9DV6j7sWT7c/s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkFBNS9FNjdGNjM2NDFE OEYxMUUyQjU0RTQzRUYwOEIwMkNEMi9wVFo3NFVKQlZad2V1SDBOWHFQdXhaUHR6 LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BUWjc0VUpCVlp3ZXVIME5YcVB1eFpQdHotdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkFBNS9FNjdGNjM2NDFEOEYxMUUyQjU0RTQzRUYwOEIwMkNEMi9wVFo3NFVKQlZa d2V1SDBOWHFQdXhaUHR6LXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBK5v0EY4VhAymJVXteoldoSHAHF4/iDD8eizg6RrtKLdyllQVxFjZV kNm5Accu6v7AqPp6GvmRBuSRfqcDscAZaZ2z30kBVVhyCdOSB+HHhqWZmyur5FVE x2z0KlzsUGW/cuGNNB/4VGfFCutsK4/9XcJhV6soHPYR8zBIKC+HnHAjj8eV/YtP J0Z/QUoA8Pf+AMujYP+iEv8Wvs6ILiGW6zUVtVFzD5fgHFUQuY7MsCoyZ+iF25/0 FQ8mC23/agZbexzH+hRTAs3Ttxo30I2L2tLdGOMNFWnzSLpRgn3QqFzTJEJu5zx3 fYKH3YHZzB4nyxv+qE8ufM7hWQMxNBNE -----END CERTIFICATE-----Generated at Wed Nov 5 22:31:51 2025 by rpki-client