$ rpki-client -vvf rpki.apnic.net/member_repository/A915D6D4/C30171421D8B11E2AF0CA6E608B02CD2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.mft File: pBp2e-TKxusbiXQjNgwrQ1OsH_s.mft (raw, json) Hash identifier: IcaaXcBy5615QcDRAApR1z5DtNwq3IRvS3FyBuw9rjQ= Subject key identifier: F4:C1:A6:D1:F1:1C:DB:C5:4B:1A:2B:40:36:29:18:52:CD:4A:CA:B3 Authority key identifier: A4:1A:76:7B:E4:CA:C6:EB:1B:89:74:23:36:0C:2B:43:53:AC:1F:FB Certificate issuer: /CN=A915D6D4/serialNumber=A41A767BE4CAC6EB1B897423360C2B4353AC1FFB Certificate serial: 34D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D6D4/C30171421D8B11E2AF0CA6E608B02CD2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.mft Manifest number: 3C5B Signing time: Tue 04 Nov 2025 14:39:05 +0000 Manifest this update: Tue 04 Nov 2025 14:39:04 +0000 Manifest next update: Tue 11 Nov 2025 14:39:04 +0000 Files and hashes: 1: pBp2e-TKxusbiXQjNgwrQ1OsH_s.crl (hash: iKd6QgGitSkyBR7ebvx4BhhWf3RMCE8WzBZGp3lCleo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D6D4/C30171421D8B11E2AF0CA6E608B02CD2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.crl rsync://rpki.apnic.net/member_repository/A915D6D4/C30171421D8B11E2AF0CA6E608B02CD2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13529 (0x34d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D6D4, serialNumber=A41A767BE4CAC6EB1B897423360C2B4353AC1FFB Validity Not Before: Nov 4 14:39:04 2025 GMT Not After : Nov 11 14:39:04 2025 GMT Subject: CN=690a1009-6c61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:48:8c:82:68:82:16:44:6d:fc:09:a4:73:ee: 91:5f:a2:33:ea:11:68:b5:a0:40:f2:cf:ea:7f:91: f6:3e:4b:52:0b:1e:cf:ba:22:d3:90:26:3b:56:c1: af:a2:f3:8f:6a:e4:fe:1e:10:39:31:70:8b:4a:97: da:ec:f5:72:0c:c6:87:e3:50:1f:95:74:2a:bb:57: 2d:d7:9d:9d:8b:e1:d1:a3:db:ab:57:6f:7d:60:02: b0:35:24:a1:d8:0e:4d:1b:eb:2e:0c:f3:ae:a0:1f: a3:b0:37:a1:7f:1d:b9:d6:13:b8:5a:22:be:c9:d3: 89:bd:f6:c2:ad:0c:65:3c:0d:22:17:48:76:c0:61: 81:6a:b9:1a:d3:8d:93:f2:d6:40:a1:85:c0:de:0f: 02:cd:36:32:0e:e8:8a:f5:e8:d3:e2:3d:72:75:48: 5c:5d:31:84:7f:db:0d:6f:06:97:ed:b5:01:f6:bc: 53:fb:ed:1e:c5:4a:5f:13:6b:1b:3e:50:f5:03:99: 2b:f3:25:d6:f5:eb:82:78:c9:e9:49:20:1b:d5:98: a1:69:aa:f1:2b:a2:ff:b5:9e:23:ee:42:86:b9:3b: 1f:93:3a:e0:ff:fc:49:28:fc:84:00:7d:ce:ac:92: da:f7:c1:bc:bb:b5:41:39:19:21:03:3c:7d:24:e4: 92:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:C1:A6:D1:F1:1C:DB:C5:4B:1A:2B:40:36:29:18:52:CD:4A:CA:B3 X509v3 Authority Key Identifier: keyid:A4:1A:76:7B:E4:CA:C6:EB:1B:89:74:23:36:0C:2B:43:53:AC:1F:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D6D4/C30171421D8B11E2AF0CA6E608B02CD2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D6D4/C30171421D8B11E2AF0CA6E608B02CD2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:56:06:e4:b1:1d:3e:79:fe:c5:a8:5b:98:49:b4:f7:c6:ad: e7:ed:9c:54:3d:83:45:23:9e:4b:b3:a9:70:ed:94:08:23:a8: f2:6c:ee:28:a9:fe:a5:d2:18:5b:f2:a8:9a:90:df:a0:33:77: 78:f2:86:e7:10:78:0c:d7:80:8f:31:44:d6:4a:3f:74:9a:08: 0c:e1:05:1f:c3:28:f5:54:e8:b6:bb:1b:ef:18:3b:1e:d0:fe: 79:a7:cf:19:fb:ba:e2:3a:b6:a0:25:eb:9c:e6:f1:49:f5:f6: 55:67:da:e4:ac:4e:c6:e1:ff:7b:4b:fd:66:ab:65:70:7b:d4: b4:3e:3f:d2:fb:79:c5:6e:4d:24:6c:a7:24:68:2a:ad:f2:53: a1:cb:6b:1c:71:40:6e:6c:7d:3d:db:dc:12:94:89:4e:c7:1c: 6e:53:7e:28:5d:ba:cf:1d:9c:26:6b:c0:8a:54:e1:a1:a1:db: 1f:81:2d:74:dc:4c:f0:fd:1e:59:73:44:d8:0c:e8:18:15:12: 76:a7:82:49:71:20:f6:af:90:8b:e8:3a:d0:e4:e5:f1:19:fa: db:f0:d2:4f:cc:17:1f:ef:a5:02:bd:e3:f8:17:30:cf:d7:3b: 77:20:81:a1:c8:4d:aa:2d:6f:12:b7:22:01:e2:7f:de:c3:71: 91:2c:4f:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ2RDQxMTAvBgNVBAUTKEE0MUE3NjdCRTRDQUM2RUIxQjg5NzQyMzM2MEMyQjQz NTNBQzFGRkIwHhcNMjUxMTA0MTQzOTA0WhcNMjUxMTExMTQzOTA0WjAYMRYwFAYD VQQDEw02OTBhMTAwOS02YzYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAukiMgmiCFkRt/Amkc+6RX6Iz6hFotaBA8s/qf5H2PktSCx7PuiLTkCY7VsGv ovOPauT+HhA5MXCLSpfa7PVyDMaH41AflXQqu1ct152di+HRo9urV299YAKwNSSh 2A5NG+suDPOuoB+jsDehfx251hO4WiK+ydOJvfbCrQxlPA0iF0h2wGGBarka042T 8tZAoYXA3g8CzTYyDuiK9ejT4j1ydUhcXTGEf9sNbwaX7bUB9rxT++0exUpfE2sb PlD1A5kr8yXW9euCeMnpSSAb1ZihaarxK6L/tZ4j7kKGuTsfkzrg//xJKPyEAH3O rJLa98G8u7VBORkhAzx9JOSSOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPTBptHx HNvFSxorQDYpGFLNSsqzMB8GA1UdIwQYMBaAFKQadnvkysbrG4l0IzYMK0NTrB/7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDZENC9DMzAxNzE0MjFE OEIxMUUyQUYwQ0E2RTYwOEIwMkNEMi9wQnAyZS1US3h1c2JpWFFqTmd3clExT3NI X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BCcDJlLVRLeHVzYmlYUWpOZ3dyUTFPc0hfcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDZENC9DMzAxNzE0MjFEOEIxMUUyQUYwQ0E2RTYwOEIwMkNEMi9wQnAyZS1US3h1 c2JpWFFqTmd3clExT3NIX3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLVgbksR0+ef7FqFuYSbT3xq3n7ZxUPYNFI55Ls6lw7ZQII6jybO4o qf6l0hhb8qiakN+gM3d48obnEHgM14CPMUTWSj90mggM4QUfwyj1VOi2uxvvGDse 0P55p88Z+7riOragJeuc5vFJ9fZVZ9rkrE7G4f97S/1mq2Vwe9S0Pj/S+3nFbk0k bKckaCqt8lOhy2sccUBubH0929wSlIlOxxxuU34oXbrPHZwma8CKVOGhodsfgS10 3Ezw/R5Zc0TYDOgYFRJ2p4JJcSD2r5CL6DrQ5OXxGfrb8NJPzBcf76UCveP4FzDP 1zt3IIGhyE2qLW8StyIB4n/ew3GRLE/G -----END CERTIFICATE-----Generated at Wed Nov 5 05:47:46 2025 by rpki-client