$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.mft File: PzbQyAdues-oPQS3IwcXKogp1bM.mft (raw, json) Hash identifier: z8GP0LE3Yu3zqV+u1Qd0E+ez8W8iXTucbW51iAj8f1I= Subject key identifier: 90:E4:3A:C4:44:F5:76:38:EF:A6:2A:CF:29:F3:C4:18:5C:33:55:5C Authority key identifier: 3F:36:D0:C8:07:6E:7A:CF:A8:3D:04:B7:23:07:17:2A:88:29:D5:B3 Certificate issuer: /CN=A9172B65/serialNumber=3F36D0C8076E7ACFA83D04B72307172A8829D5B3 Certificate serial: F6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PzbQyAdues-oPQS3IwcXKogp1bM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.mft Manifest number: F4 Signing time: Wed 05 Nov 2025 05:26:15 +0000 Manifest this update: Wed 05 Nov 2025 05:26:15 +0000 Manifest next update: Wed 12 Nov 2025 05:26:15 +0000 Files and hashes: 1: PzbQyAdues-oPQS3IwcXKogp1bM.crl (hash: XzKBDpJEVHJBQmEO16Wa+o+fUqmEELciG9fCxawd8/I=) 2: 76C3F7C645B711EFA2F0C732C4F9AE02.roa (hash: 6KE/6WiXMHutimLQnkuyk/FwzPL7cpRiOFuQR2vWv2I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.crl rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PzbQyAdues-oPQS3IwcXKogp1bM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:26:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 246 (0xf6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172B65, serialNumber=3F36D0C8076E7ACFA83D04B72307172A8829D5B3 Validity Not Before: Nov 5 05:26:15 2025 GMT Not After : Nov 12 05:26:15 2025 GMT Subject: CN=690adff7-7022 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:67:a5:cd:b6:53:df:87:66:e3:aa:87:31:c0: 93:26:f6:32:b4:9a:43:65:fb:4a:f8:4c:a7:0e:76: 84:7d:e9:cd:f3:6a:a2:51:19:d2:7a:13:38:cd:2b: 79:99:93:45:fa:f9:32:8c:69:1c:9a:b7:15:c8:7c: 94:dd:2f:17:e0:11:e7:7c:7b:f6:c6:69:62:83:ae: 40:bc:5b:8d:9c:98:c4:8c:15:39:4f:fc:90:aa:1a: bb:54:71:76:17:90:02:5b:7d:01:c8:66:62:57:0f: e8:38:2f:61:8b:d6:2a:d9:ad:c5:bb:cd:62:c2:b3: da:2e:06:60:7b:c6:ea:02:db:78:e1:22:8a:56:c7: 3f:b2:20:69:ad:0e:0b:52:ab:51:88:4d:6b:a7:88: 3b:a4:e6:63:c4:17:4c:a4:e3:7d:63:08:00:48:8e: d7:72:49:f1:d8:c5:95:41:7b:4c:b0:04:99:dd:9e: 4b:cf:7a:8e:89:84:f6:6b:08:4a:79:71:26:71:d6: da:db:23:dd:0b:bb:2a:8f:c9:02:0f:e8:e9:1c:b1: b2:5f:7e:df:14:17:b6:7e:c8:4b:ee:aa:6f:fa:af: 2e:a3:02:fd:11:62:7d:2b:06:46:a4:cd:ef:95:1d: 84:2b:90:20:c1:17:36:e7:b8:09:0f:b4:a5:0c:15: 0b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:E4:3A:C4:44:F5:76:38:EF:A6:2A:CF:29:F3:C4:18:5C:33:55:5C X509v3 Authority Key Identifier: keyid:3F:36:D0:C8:07:6E:7A:CF:A8:3D:04:B7:23:07:17:2A:88:29:D5:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PzbQyAdues-oPQS3IwcXKogp1bM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:43:28:82:7c:e5:1c:d3:a4:41:2e:81:1e:2d:66:e3:0a:d7: 15:f0:bd:f8:f0:75:8c:79:2d:cf:bf:e4:fd:30:54:47:c4:9d: 35:7c:8a:6d:a3:3f:35:aa:22:42:70:bd:c5:cb:a3:d5:94:9d: 18:5c:1f:8a:27:82:02:e5:54:54:38:22:65:3c:11:3f:ad:38: 1f:4e:14:c6:eb:13:fe:a7:94:cd:58:81:5f:89:67:0d:31:ff: 00:9c:66:eb:62:c2:61:0e:d2:fb:e5:06:6f:fa:73:68:0d:fc: 38:d9:d2:20:9b:5e:e3:b6:f5:f2:74:c4:ed:3d:f6:54:76:93: c5:ea:18:73:56:e3:89:78:99:b7:f1:b6:b9:23:81:be:94:22: 27:6a:a9:8a:14:02:0d:dd:d3:fa:6d:91:0c:a5:ad:73:35:e8: be:85:f8:fa:98:cf:78:aa:bd:61:5b:25:12:ad:c4:d1:d6:9c: 90:59:00:23:be:11:52:12:4e:8c:b5:64:92:8e:45:a2:93:d6: 30:1f:dc:91:78:53:6c:b6:bf:76:37:c1:7c:cc:a8:e2:c1:d9: e1:3d:24:af:ea:ec:7b:5e:25:f0:41:ec:9e:e5:20:92:6c:d0: a2:fa:b4:c4:19:4a:3d:58:46:d7:0e:b4:a5:39:f3:9b:1d:72: a6:e8:2b:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJCNjUxMTAvBgNVBAUTKDNGMzZEMEM4MDc2RTdBQ0ZBODNEMDRCNzIzMDcxNzJB ODgyOUQ1QjMwHhcNMjUxMTA1MDUyNjE1WhcNMjUxMTEyMDUyNjE1WjAYMRYwFAYD VQQDEw02OTBhZGZmNy03MDIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3melzbZT34dm46qHMcCTJvYytJpDZftK+EynDnaEfenN82qiURnSehM4zSt5 mZNF+vkyjGkcmrcVyHyU3S8X4BHnfHv2xmlig65AvFuNnJjEjBU5T/yQqhq7VHF2 F5ACW30ByGZiVw/oOC9hi9Yq2a3Fu81iwrPaLgZge8bqAtt44SKKVsc/siBprQ4L UqtRiE1rp4g7pOZjxBdMpON9YwgASI7Xcknx2MWVQXtMsASZ3Z5Lz3qOiYT2awhK eXEmcdba2yPdC7sqj8kCD+jpHLGyX37fFBe2fshL7qpv+q8uowL9EWJ9KwZGpM3v lR2EK5AgwRc257gJD7SlDBULBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJDkOsRE 9XY476YqzynzxBhcM1VcMB8GA1UdIwQYMBaAFD820MgHbnrPqD0EtyMHFyqIKdWz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkI2NS8wMTVGNkRFRTQ1 QjcxMUVGQTU5RTEzMzJDNEY5QUUwMi9QemJReUFkdWVzLW9QUVMzSXdjWEtvZ3Ax Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1B6YlF5QWR1ZXMtb1BRUzNJd2NYS29ncDFiTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkI2NS8wMTVGNkRFRTQ1QjcxMUVGQTU5RTEzMzJDNEY5QUUwMi9QemJReUFkdWVz LW9QUVMzSXdjWEtvZ3AxYk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcQyiCfOUc06RBLoEeLWbjCtcV8L348HWMeS3Pv+T9MFRHxJ01fIpt oz81qiJCcL3Fy6PVlJ0YXB+KJ4IC5VRUOCJlPBE/rTgfThTG6xP+p5TNWIFfiWcN Mf8AnGbrYsJhDtL75QZv+nNoDfw42dIgm17jtvXydMTtPfZUdpPF6hhzVuOJeJm3 8ba5I4G+lCInaqmKFAIN3dP6bZEMpa1zNei+hfj6mM94qr1hWyUSrcTR1pyQWQAj vhFSEk6MtWSSjkWik9YwH9yReFNstr92N8F8zKjiwdnhPSSv6ux7XiXwQeye5SCS bNCi+rTEGUo9WEbXDrSlOfObHXKm6Cv4 -----END CERTIFICATE-----Generated at Wed Nov 5 10:05:42 2025 by rpki-client