$ rpki-client -vvf rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft File: PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft (raw, json) Hash identifier: iG/YTKsmtBCzKzjtZ0KmRIcGkYIKDYKekT7B+nWr3l0= Subject key identifier: B6:16:2C:DB:93:CE:50:CB:95:0D:A2:F0:A0:4B:57:C5:B4:AF:41:66 Authority key identifier: 3D:93:EB:66:D8:1A:27:6A:03:92:46:16:8D:32:78:B2:67:EB:AE:EC Certificate issuer: /CN=A9140A8F/serialNumber=3D93EB66D81A276A039246168D3278B267EBAEEC Certificate serial: 07C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PZPrZtgaJ2oDkkYWjTJ4smfrruw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft Manifest number: 07B3 Signing time: Tue 04 Nov 2025 21:29:49 +0000 Manifest this update: Tue 04 Nov 2025 21:29:48 +0000 Manifest next update: Tue 11 Nov 2025 21:29:48 +0000 Files and hashes: 1: PZPrZtgaJ2oDkkYWjTJ4smfrruw.crl (hash: rYFDvwMVoq+MZLhvt3K9e71NLMOdcHBZWga3TKIAj6Q=) 2: ED8E5BC8CFD411EBA3172446C4F9AE02.roa (hash: 1IWRKHioOXMwyjTTWNWycmySSHih4LoHTQzkoE2T/Mc=) 3: 20322C32233F11EB9E4D160EC4F9AE02.roa (hash: v+QXD6bTtJAGlVNjOl+dSqWjB8ujPNeWcMRgTCNmmWA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.crl rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PZPrZtgaJ2oDkkYWjTJ4smfrruw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:29:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1993 (0x7c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140A8F, serialNumber=3D93EB66D81A276A039246168D3278B267EBAEEC Validity Not Before: Nov 4 21:29:48 2025 GMT Not After : Nov 11 21:29:48 2025 GMT Subject: CN=690a704c-30f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:bd:62:85:6b:8a:31:d3:69:cd:f6:27:cd:fa: 40:42:62:a1:e5:43:a5:db:b5:07:1e:ae:8b:56:08: 84:26:8f:56:89:66:eb:ed:72:03:24:78:fc:6a:3d: 8e:5b:29:d1:b2:dc:db:46:5b:ce:ff:15:ad:dd:7f: 31:40:3d:81:d9:5c:84:66:1b:c4:ae:21:c3:af:20: 43:18:4b:74:14:eb:04:5a:28:71:30:4b:d6:d5:23: 54:bc:8b:9f:e3:69:4a:b0:de:f0:15:ce:4b:6b:7a: c7:ea:bb:43:ed:eb:4f:4d:ae:34:50:f1:82:a7:b5: 78:dc:02:7e:c2:6a:dd:f7:89:39:13:ab:8e:6f:19: b5:dd:c0:cc:ee:56:a5:63:24:9e:6d:ec:c3:c9:53: 0b:9d:30:e0:7d:da:47:dd:d7:55:e3:e0:e3:29:c9: f4:d4:9f:b7:49:d8:79:ef:2d:10:49:5b:a9:06:33: 1d:a5:d5:7f:15:c2:b7:0f:ee:c5:73:ef:4b:1b:2b: c3:9e:f5:32:ef:b3:f3:03:46:4f:da:5b:9e:78:51: a7:80:e0:b1:f6:b5:17:11:f3:dd:6d:fb:43:d8:6f: be:0e:d9:17:9c:17:1c:9c:f8:32:85:09:78:a7:65: f5:67:7b:2e:f4:95:f6:16:a7:a4:33:d3:79:39:25: 4e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:16:2C:DB:93:CE:50:CB:95:0D:A2:F0:A0:4B:57:C5:B4:AF:41:66 X509v3 Authority Key Identifier: keyid:3D:93:EB:66:D8:1A:27:6A:03:92:46:16:8D:32:78:B2:67:EB:AE:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PZPrZtgaJ2oDkkYWjTJ4smfrruw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:4c:68:a0:92:72:63:0c:d6:91:34:72:e7:7d:32:af:d6:1a: 38:71:d7:32:9a:d9:c0:6d:c4:1a:9b:f9:53:2b:54:0f:d8:e8: fd:2b:04:3d:2a:7b:c2:19:9d:2e:b2:e0:48:ee:5a:c8:93:af: e9:e8:1a:97:f3:f2:bc:34:4f:10:e5:82:c9:84:06:e5:ec:ff: 76:15:f2:07:7e:d7:9e:06:4e:c1:b5:42:46:a8:12:ee:e2:9f: c1:37:38:ec:e0:dc:ea:c1:98:bb:78:74:4c:11:1d:ca:d5:ee: ee:d2:fd:41:bb:f2:85:8f:e1:f6:8a:61:85:2b:27:b2:6c:a4: ef:a6:94:2e:4b:00:f1:32:69:9f:9d:e4:fa:82:cc:bb:c3:4a: aa:df:36:2b:2d:bd:98:37:13:23:ef:43:3a:d7:5b:9e:a5:38: 3e:ab:08:1c:77:ad:ff:71:68:32:7c:2f:18:d1:8d:46:42:3d: ea:f6:f2:dc:fb:ba:79:33:2c:ca:a5:65:8d:89:73:9a:5e:3c: 77:b9:e7:45:4f:29:40:ed:e8:90:b8:cb:2e:32:34:a7:ae:98: a6:51:d2:28:19:26:f8:9a:65:a6:d5:c5:a1:92:c0:f0:96:4c: bf:4d:c4:e1:30:54:90:17:ce:ba:6d:0a:5f:09:14:5b:d4:cb: 38:7f:ac:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBBOEYxMTAvBgNVBAUTKDNEOTNFQjY2RDgxQTI3NkEwMzkyNDYxNjhEMzI3OEIy NjdFQkFFRUMwHhcNMjUxMTA0MjEyOTQ4WhcNMjUxMTExMjEyOTQ4WjAYMRYwFAYD VQQDEw02OTBhNzA0Yy0zMGY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvr1ihWuKMdNpzfYnzfpAQmKh5UOl27UHHq6LVgiEJo9WiWbr7XIDJHj8aj2O WynRstzbRlvO/xWt3X8xQD2B2VyEZhvEriHDryBDGEt0FOsEWihxMEvW1SNUvIuf 42lKsN7wFc5La3rH6rtD7etPTa40UPGCp7V43AJ+wmrd94k5E6uObxm13cDM7lal YySebezDyVMLnTDgfdpH3ddV4+DjKcn01J+3Sdh57y0QSVupBjMdpdV/FcK3D+7F c+9LGyvDnvUy77PzA0ZP2lueeFGngOCx9rUXEfPdbftD2G++DtkXnBccnPgyhQl4 p2X1Z3su9JX2FqekM9N5OSVOgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLYWLNuT zlDLlQ2i8KBLV8W0r0FmMB8GA1UdIwQYMBaAFD2T62bYGidqA5JGFo0yeLJn667s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEE4Ri8zMzA1MjQ3QTIz M0MxMUVCODQ5QzVENkVDNEY5QUUwMi9QWlByWnRnYUoyb0Rra1lXalRKNHNtZnJy dXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BaUHJadGdhSjJvRGtrWVdqVEo0c21mcnJ1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEE4Ri8zMzA1MjQ3QTIzM0MxMUVCODQ5QzVENkVDNEY5QUUwMi9QWlByWnRnYUoy b0Rra1lXalRKNHNtZnJydXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaTGigknJjDNaRNHLnfTKv1ho4cdcymtnAbcQam/lTK1QP2Oj9KwQ9 KnvCGZ0usuBI7lrIk6/p6BqX8/K8NE8Q5YLJhAbl7P92FfIHfteeBk7BtUJGqBLu 4p/BNzjs4NzqwZi7eHRMER3K1e7u0v1Bu/KFj+H2imGFKyeybKTvppQuSwDxMmmf neT6gsy7w0qq3zYrLb2YNxMj70M611uepTg+qwgcd63/cWgyfC8Y0Y1GQj3q9vLc +7p5MyzKpWWNiXOaXjx3uedFTylA7eiQuMsuMjSnrpimUdIoGSb4mmWm1cWhksDw lky/TcThMFSQF866bQpfCRRb1Ms4f6ye -----END CERTIFICATE-----Generated at Wed Nov 5 22:31:25 2025 by rpki-client