$ rpki-client -vvf rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.mft File: pfBl_MntoR3KTQ38bXyZB1KY1_8.mft (raw, json) Hash identifier: w8mTaIEnA7DyoRpMH/gcpt+nmCkWFLk/ThpimFI2UTs= Subject key identifier: EC:D6:4C:55:A4:A7:00:88:E7:C8:D8:86:1B:61:C1:82:BD:5D:85:2E Authority key identifier: A5:F0:65:FC:C9:ED:A1:1D:CA:4D:0D:FC:6D:7C:99:07:52:98:D7:FF Certificate issuer: /CN=A9174685/serialNumber=A5F065FCC9EDA11DCA4D0DFC6D7C99075298D7FF Certificate serial: 096F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfBl_MntoR3KTQ38bXyZB1KY1_8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.mft Manifest number: 0959 Signing time: Tue 04 Nov 2025 20:15:00 +0000 Manifest this update: Tue 04 Nov 2025 20:14:59 +0000 Manifest next update: Tue 11 Nov 2025 20:14:59 +0000 Files and hashes: 1: pfBl_MntoR3KTQ38bXyZB1KY1_8.crl (hash: F0yIodW3gK0ivUz1PSkoPBiORb26CeO/KdjtLfDrUlQ=) 2: 8BBD25F4EAE311EF95C23D4DC4F9AE02.roa (hash: JxYPfmW8Tav5SjQHIMJfNEwgSNWW1t6Utgf2ZPhePRI=) 3: 31B2B528217811EEBACF3324C4F9AE02.roa (hash: qYcH8o+mgIEkOx3pGeKtDuFDXODm4W8utEiDwxXgwKU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.crl rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfBl_MntoR3KTQ38bXyZB1KY1_8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:14:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2415 (0x96f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174685, serialNumber=A5F065FCC9EDA11DCA4D0DFC6D7C99075298D7FF Validity Not Before: Nov 4 20:14:59 2025 GMT Not After : Nov 11 20:14:59 2025 GMT Subject: CN=690a5ec4-e792 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:0e:14:1e:80:ee:2d:23:af:35:09:d1:a2:a4: 65:37:ad:36:6c:90:b8:8d:83:96:76:18:59:e9:b0: e4:46:39:00:0a:43:98:a2:f4:cb:2b:c1:1c:08:f8: b4:4a:5d:e3:90:e7:48:64:15:a0:5f:99:7b:c1:57: 82:8e:12:de:da:c7:cd:d2:b8:bb:fb:67:9e:b5:d0: 41:48:ed:10:0a:2a:56:7b:4a:90:d6:27:e1:57:ee: 3d:fe:36:18:ad:f4:3e:4e:d3:3c:89:cf:cd:52:58: 4e:32:f3:1c:e3:32:60:2c:a8:1b:64:cd:ab:85:86: e1:26:15:7c:45:cf:0c:58:48:a7:02:b5:4d:38:6a: 0c:17:0b:49:d3:89:37:3d:c7:60:c1:b0:47:c3:74: 3e:13:d5:b9:e1:4c:3c:c8:df:b7:9f:0e:52:82:95: 79:af:85:22:ae:72:cf:7f:d9:19:40:f9:4f:5e:ef: 25:6d:b5:1f:ce:0d:48:44:18:00:e1:4a:4b:f0:2c: 6a:5d:16:7e:c8:6a:aa:f7:63:87:7f:27:69:c8:56: c3:1e:50:e0:4d:50:1b:c9:08:42:16:25:98:c0:b2: c3:39:37:3e:e8:af:c9:f8:19:a8:cc:d8:d5:e2:ff: 3c:a1:80:f8:fb:d2:ec:01:a2:d5:0a:67:78:4f:7f: 98:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:D6:4C:55:A4:A7:00:88:E7:C8:D8:86:1B:61:C1:82:BD:5D:85:2E X509v3 Authority Key Identifier: keyid:A5:F0:65:FC:C9:ED:A1:1D:CA:4D:0D:FC:6D:7C:99:07:52:98:D7:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfBl_MntoR3KTQ38bXyZB1KY1_8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:30:38:f9:e8:0f:d4:1d:90:95:a9:fd:d7:bf:99:cb:1d:f5: f4:90:99:6e:26:17:04:ae:23:6b:91:48:1d:5a:43:9d:56:7e: 89:cf:e2:3e:09:92:df:dd:eb:f3:e2:24:f8:c7:24:2d:59:b4: 82:2b:5f:82:d1:7b:1d:18:ef:0a:da:d9:da:2c:f5:28:48:2d: 91:4d:e0:24:1b:e6:d6:05:77:d8:3c:55:42:39:b6:34:43:27: 08:da:be:58:e3:da:17:d6:b1:9d:4d:44:1d:f2:15:3d:1e:54: 7f:a3:76:1b:c7:2f:13:a5:09:fc:c2:fb:d7:94:59:bb:3c:a1: 00:bd:22:0d:59:a6:92:c8:6d:21:df:69:62:f3:30:ea:41:26: e4:fa:a3:c7:a3:32:a9:1e:d8:3d:25:23:66:89:12:9e:f3:ca: b7:84:1a:ab:fd:1c:ce:be:fb:1a:2c:1f:af:c6:37:8b:c3:30: 2b:92:a4:34:10:68:4b:dc:7c:ce:1f:8d:7b:ed:31:75:c8:76: 0f:58:bb:b5:3c:35:65:81:97:55:16:39:6e:2e:16:c2:7e:d6: eb:52:39:fd:e8:af:76:c1:f4:6b:40:6c:a8:bc:fd:94:0c:8c: 06:e8:88:7d:5c:f6:6e:7a:b7:c2:b5:36:f5:81:6f:f9:d3:eb: 9a:11:54:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQ2ODUxMTAvBgNVBAUTKEE1RjA2NUZDQzlFREExMURDQTREMERGQzZEN0M5OTA3 NTI5OEQ3RkYwHhcNMjUxMTA0MjAxNDU5WhcNMjUxMTExMjAxNDU5WjAYMRYwFAYD VQQDEw02OTBhNWVjNC1lNzkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7A4UHoDuLSOvNQnRoqRlN602bJC4jYOWdhhZ6bDkRjkACkOYovTLK8EcCPi0 Sl3jkOdIZBWgX5l7wVeCjhLe2sfN0ri7+2eetdBBSO0QCipWe0qQ1ifhV+49/jYY rfQ+TtM8ic/NUlhOMvMc4zJgLKgbZM2rhYbhJhV8Rc8MWEinArVNOGoMFwtJ04k3 PcdgwbBHw3Q+E9W54Uw8yN+3nw5SgpV5r4UirnLPf9kZQPlPXu8lbbUfzg1IRBgA 4UpL8CxqXRZ+yGqq92OHfydpyFbDHlDgTVAbyQhCFiWYwLLDOTc+6K/J+BmozNjV 4v88oYD4+9LsAaLVCmd4T3+YdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOzWTFWk pwCI58jYhhthwYK9XYUuMB8GA1UdIwQYMBaAFKXwZfzJ7aEdyk0N/G18mQdSmNf/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDY4NS8yRDE1OTE4MkE5 NzMxMUVBOUFBQkU5MjNDNEY5QUUwMi9wZkJsX01udG9SM0tUUTM4Ylh5WkIxS1kx XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BmQmxfTW50b1IzS1RRMzhiWHlaQjFLWTFfOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDY4NS8yRDE1OTE4MkE5NzMxMUVBOUFBQkU5MjNDNEY5QUUwMi9wZkJsX01udG9S M0tUUTM4Ylh5WkIxS1kxXzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCMDj56A/UHZCVqf3Xv5nLHfX0kJluJhcEriNrkUgdWkOdVn6Jz+I+ CZLf3evz4iT4xyQtWbSCK1+C0XsdGO8K2tnaLPUoSC2RTeAkG+bWBXfYPFVCObY0 QycI2r5Y49oX1rGdTUQd8hU9HlR/o3Ybxy8TpQn8wvvXlFm7PKEAvSINWaaSyG0h 32li8zDqQSbk+qPHozKpHtg9JSNmiRKe88q3hBqr/RzOvvsaLB+vxjeLwzArkqQ0 EGhL3HzOH4177TF1yHYPWLu1PDVlgZdVFjluLhbCftbrUjn96K92wfRrQGyovP2U DIwG6Ih9XPZuerfCtTb1gW/50+uaEVRM -----END CERTIFICATE-----Generated at Wed Nov 5 21:16:32 2025 by rpki-client