$ rpki-client -vvf rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/psUEnf_CZCcfSnelrurkd9fu6vM.mft File: psUEnf_CZCcfSnelrurkd9fu6vM.mft (raw, json) Hash identifier: CIHghDOR2dFFgschH/eyuzCwJBu+sa4fmGItHoRiDfY= Subject key identifier: 2D:E5:DA:2F:2D:AC:6A:0A:BF:8E:5B:30:44:99:0A:0B:F0:16:60:2A Authority key identifier: A6:C5:04:9D:FF:C2:64:27:1F:4A:77:A5:AE:EA:E4:77:D7:EE:EA:F3 Certificate issuer: /CN=A916683C/serialNumber=A6C5049DFFC264271F4A77A5AEEAE477D7EEEAF3 Certificate serial: 0A35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/psUEnf_CZCcfSnelrurkd9fu6vM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/psUEnf_CZCcfSnelrurkd9fu6vM.mft Manifest number: 0A29 Signing time: Tue 04 Nov 2025 19:52:29 +0000 Manifest this update: Tue 04 Nov 2025 19:52:29 +0000 Manifest next update: Tue 11 Nov 2025 19:52:29 +0000 Files and hashes: 1: psUEnf_CZCcfSnelrurkd9fu6vM.crl (hash: wJMDOEruOmIeE2dl7RiO3CqopXJd0EVc6Dcac70tVCU=) 2: 800F1868BEB311EAAFE28B42C4F9AE02.roa (hash: DJlPhIx4YqqClR2h+Oy9c2Nr2oIq6a7gz2KUzsszzP4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/psUEnf_CZCcfSnelrurkd9fu6vM.crl rsync://rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/psUEnf_CZCcfSnelrurkd9fu6vM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/psUEnf_CZCcfSnelrurkd9fu6vM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:17:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2613 (0xa35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916683C, serialNumber=A6C5049DFFC264271F4A77A5AEEAE477D7EEEAF3 Validity Not Before: Nov 4 19:52:29 2025 GMT Not After : Nov 11 19:52:29 2025 GMT Subject: CN=690a597d-c65f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fe:73:1a:82:5e:61:b2:fc:68:fc:1b:3b:33: 83:80:04:ae:65:ce:fb:b7:cc:61:21:3a:18:03:c0: be:09:06:b7:df:a2:ba:b6:d4:5d:c6:6e:06:7c:29: 01:70:56:2b:5f:00:e3:b6:dc:8a:b9:b1:9b:6e:8e: fe:8e:57:1d:ff:13:83:0b:32:e1:1e:59:1f:48:84: 6f:26:49:b4:26:21:59:e0:31:fd:22:84:5a:d7:32: 48:3e:3b:ff:9b:e0:93:16:28:b2:7e:c6:8d:ad:9f: 86:3a:d8:88:0e:87:ef:71:df:ff:2d:06:70:a5:28: 25:82:78:61:a5:9f:9c:75:90:33:e2:4f:b1:86:fe: f0:4c:b4:98:9c:a3:e5:76:ae:22:43:8f:21:8f:8e: 7c:ad:5a:5a:cf:15:c4:68:f2:60:ed:4a:17:60:f5: 57:75:2b:b5:ed:cb:78:1c:20:9c:78:b7:11:63:f6: 97:64:d2:75:f3:01:4c:33:7b:9d:6c:71:81:d7:dd: 05:c7:ed:b7:73:29:c5:9c:a3:89:e8:91:78:a7:a5: 68:63:60:9d:ac:48:c5:91:48:79:44:f8:b0:be:fc: c5:77:89:e5:fb:69:6e:38:d0:c3:35:81:02:ed:04: 0e:d3:1b:a6:86:3c:29:36:df:d5:65:7f:79:08:b6: 75:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:E5:DA:2F:2D:AC:6A:0A:BF:8E:5B:30:44:99:0A:0B:F0:16:60:2A X509v3 Authority Key Identifier: keyid:A6:C5:04:9D:FF:C2:64:27:1F:4A:77:A5:AE:EA:E4:77:D7:EE:EA:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/psUEnf_CZCcfSnelrurkd9fu6vM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/psUEnf_CZCcfSnelrurkd9fu6vM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/psUEnf_CZCcfSnelrurkd9fu6vM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:d3:2b:1c:08:ec:fd:d9:d9:9b:68:d4:ef:fb:e6:a0:29:75: e2:bd:5f:1f:6f:9d:48:f0:ad:74:21:92:1e:8c:7b:ca:8f:5b: e8:4e:3c:c8:2f:7b:55:e3:05:a0:b4:b9:6c:e7:b9:36:4f:45: 46:b2:e6:b4:df:9c:67:2c:92:b5:9f:67:a7:43:fa:51:af:79: 86:7e:8c:9f:9c:7c:c8:b3:17:53:d0:1d:e2:a9:98:19:c6:57: e1:ae:07:89:2d:c5:48:a4:a5:02:ed:8c:9c:1e:8a:f2:b5:17: 25:ba:df:42:60:77:e4:5a:95:8e:45:ff:42:04:7b:1c:90:24: b5:0f:7c:d8:54:75:08:cd:a7:ae:70:88:3e:3f:78:b3:20:a8: d8:f9:8e:10:45:86:a1:d7:18:5f:ce:1c:c9:e0:1f:f8:dd:9c: ec:87:43:ce:e4:61:b1:de:0b:74:92:55:06:d5:e9:92:a3:47: 1a:67:c3:df:62:83:a7:9a:39:7e:0e:3c:3e:95:71:50:32:bd: 51:d0:bb:3f:3b:0b:9c:7b:15:c0:e5:33:11:89:1e:0f:54:63: 2f:2e:ee:c5:01:7e:d1:35:3a:2d:80:b1:1c:5f:06:11:01:6b: b1:30:32:cb:73:55:25:b4:50:bf:2d:f1:07:b8:51:ef:66:2d: a8:6f:9c:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCjUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjY4M0MxMTAvBgNVBAUTKEE2QzUwNDlERkZDMjY0MjcxRjRBNzdBNUFFRUFFNDc3 RDdFRUVBRjMwHhcNMjUxMTA0MTk1MjI5WhcNMjUxMTExMTk1MjI5WjAYMRYwFAYD VQQDEw02OTBhNTk3ZC1jNjVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs/5zGoJeYbL8aPwbOzODgASuZc77t8xhIToYA8C+CQa336K6ttRdxm4GfCkB cFYrXwDjttyKubGbbo7+jlcd/xODCzLhHlkfSIRvJkm0JiFZ4DH9IoRa1zJIPjv/ m+CTFiiyfsaNrZ+GOtiIDofvcd//LQZwpSglgnhhpZ+cdZAz4k+xhv7wTLSYnKPl dq4iQ48hj458rVpazxXEaPJg7UoXYPVXdSu17ct4HCCceLcRY/aXZNJ18wFMM3ud bHGB190Fx+23cynFnKOJ6JF4p6VoY2CdrEjFkUh5RPiwvvzFd4nl+2luONDDNYEC 7QQO0xumhjwpNt/VZX95CLZ1/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC3l2i8t rGoKv45bMESZCgvwFmAqMB8GA1UdIwQYMBaAFKbFBJ3/wmQnH0p3pa7q5HfX7urz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NjgzQy9FMEI1ODAyRTgw N0IxMUVBODI0NDYxMjVDNEY5QUUwMi9wc1VFbmZfQ1pDY2ZTbmVscnVya2Q5ZnU2 dk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BzVUVuZl9DWkNjZlNuZWxydXJrZDlmdTZ2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NjgzQy9FMEI1ODAyRTgwN0IxMUVBODI0NDYxMjVDNEY5QUUwMi9wc1VFbmZfQ1pD Y2ZTbmVscnVya2Q5ZnU2dk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAw0yscCOz92dmbaNTv++agKXXivV8fb51I8K10IZIejHvKj1voTjzI L3tV4wWgtLls57k2T0VGsua035xnLJK1n2enQ/pRr3mGfoyfnHzIsxdT0B3iqZgZ xlfhrgeJLcVIpKUC7YycHorytRclut9CYHfkWpWORf9CBHsckCS1D3zYVHUIzaeu cIg+P3izIKjY+Y4QRYah1xhfzhzJ4B/43Zzsh0PO5GGx3gt0klUG1emSo0caZ8Pf YoOnmjl+Djw+lXFQMr1R0Ls/OwucexXA5TMRiR4PVGMvLu7FAX7RNTotgLEcXwYR AWuxMDLLc1UltFC/LfEHuFHvZi2ob5xf -----END CERTIFICATE-----Generated at Tue Nov 4 21:34:58 2025 by rpki-client