$ rpki-client -vvf rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.mft File: PzsvWzuuUqa1aSyvkqJVSwbahj0.mft (raw, json) Hash identifier: 1cSrSdAX/g4hGBOxoiy0MG5I+Fs4pDMwo9dJyp/B+8I= Subject key identifier: 9F:58:A5:CF:72:ED:1D:6C:81:0F:50:6E:E3:1B:E0:E5:B0:4F:AC:2C Authority key identifier: 3F:3B:2F:5B:3B:AE:52:A6:B5:69:2C:AF:92:A2:55:4B:06:DA:86:3D Certificate issuer: /CN=A917C81C/serialNumber=3F3B2F5B3BAE52A6B5692CAF92A2554B06DA863D Certificate serial: 0578 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PzsvWzuuUqa1aSyvkqJVSwbahj0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.mft Manifest number: 0573 Signing time: Tue 04 Nov 2025 23:22:23 +0000 Manifest this update: Tue 04 Nov 2025 23:22:22 +0000 Manifest next update: Tue 11 Nov 2025 23:22:22 +0000 Files and hashes: 1: PzsvWzuuUqa1aSyvkqJVSwbahj0.crl (hash: YEzL+QC6oCbKsv2neMSzPxayPd2L3qJv0yaRpVQNOxU=) 2: 1953EB90FF1B11EBA5CEF970C4F9AE02.roa (hash: GyNWMA5uS2CM++CZD9BiRxHkePo3mscOl1IpeulPgT0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.crl rsync://rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PzsvWzuuUqa1aSyvkqJVSwbahj0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:22:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1400 (0x578) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C81C, serialNumber=3F3B2F5B3BAE52A6B5692CAF92A2554B06DA863D Validity Not Before: Nov 4 23:22:22 2025 GMT Not After : Nov 11 23:22:22 2025 GMT Subject: CN=690a8aae-8534 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:a1:09:83:de:6b:22:dc:73:04:39:00:9e:64: 22:c2:27:60:24:3f:75:c3:b3:01:44:72:76:c3:7d: b4:09:1f:46:43:69:5f:af:7b:8f:37:a5:7f:08:ca: 21:1f:5a:ba:23:4e:a4:ae:23:cf:98:6a:cd:8d:0d: 6a:16:cf:4b:24:21:9e:d6:1d:5e:e8:ca:e0:76:6b: 85:8b:86:30:65:7a:20:dd:af:d5:91:29:a4:ad:5e: da:25:f0:cc:8c:b9:50:6e:e8:93:a4:7c:e2:61:de: cb:d8:1b:43:31:84:ff:21:50:b4:9f:57:58:c9:5a: c1:e9:5f:54:29:df:6e:40:da:90:3f:5e:f5:06:2a: 25:69:9f:e4:10:be:28:c1:5a:cf:72:76:0b:38:ab: ea:ae:15:99:3b:4c:57:b8:e7:d9:a3:0d:b7:9d:96: 2a:38:01:34:c5:40:0e:7e:e3:ea:cb:1f:46:5c:bc: 24:67:92:39:59:a7:5d:f3:88:f7:4b:ec:d7:76:8d: 88:e4:14:0c:b0:c1:1a:32:f9:df:21:48:35:14:a8: 25:57:92:3c:ab:f4:90:20:74:89:10:48:53:e6:41: 4d:38:e2:53:7c:7b:bf:f3:9f:1e:b3:14:04:03:ce: 18:fe:f9:27:ca:e6:d5:ec:b3:73:ab:96:41:3c:f9: 2a:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:58:A5:CF:72:ED:1D:6C:81:0F:50:6E:E3:1B:E0:E5:B0:4F:AC:2C X509v3 Authority Key Identifier: keyid:3F:3B:2F:5B:3B:AE:52:A6:B5:69:2C:AF:92:A2:55:4B:06:DA:86:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PzsvWzuuUqa1aSyvkqJVSwbahj0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:7d:04:a4:d7:11:8a:5d:52:6f:d8:f5:3f:fd:2c:fd:91:c6: 8f:2b:fa:08:98:df:2d:45:a7:a8:ea:89:8e:46:d1:37:14:00: 33:b5:2e:f1:d8:a0:83:3b:5e:d0:ae:9c:3f:ca:3e:68:21:5f: 68:d1:27:d2:5d:7d:da:f0:c4:59:30:38:2c:04:0e:78:02:52: b0:28:80:c6:5c:97:a7:6c:a2:48:94:67:f4:f4:f8:16:09:6c: 59:6c:f5:2f:38:86:bd:28:c9:59:06:39:7a:61:c3:e5:b1:be: 18:c2:d3:c8:89:ce:1f:dd:a1:ca:69:20:31:89:d2:00:ee:3d: ca:8e:83:c5:13:fe:c9:fb:29:74:bd:32:eb:e5:a7:14:98:9e: e1:7a:fb:7e:c4:f0:a5:5e:87:d1:32:df:e4:95:71:22:67:16: 73:39:b5:ff:31:79:ef:56:ea:c3:3c:66:74:ec:4a:c9:c0:cf: a5:bd:bf:bd:cb:41:4b:ee:2b:09:06:eb:4e:fc:e6:cb:bc:4c: a3:a3:a0:83:ef:8e:d0:90:21:ed:61:36:2b:6b:3a:45:b9:ad: 0d:d8:91:1a:4c:1c:26:2d:43:d5:7a:02:73:f4:9e:60:b7:ce: 76:6f:01:d5:d6:2c:71:48:db:03:36:ea:7c:97:ce:ff:45:c3: 25:b1:4f:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M4MUMxMTAvBgNVBAUTKDNGM0IyRjVCM0JBRTUyQTZCNTY5MkNBRjkyQTI1NTRC MDZEQTg2M0QwHhcNMjUxMTA0MjMyMjIyWhcNMjUxMTExMjMyMjIyWjAYMRYwFAYD VQQDEw02OTBhOGFhZS04NTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA86EJg95rItxzBDkAnmQiwidgJD91w7MBRHJ2w320CR9GQ2lfr3uPN6V/CMoh H1q6I06kriPPmGrNjQ1qFs9LJCGe1h1e6MrgdmuFi4YwZXog3a/VkSmkrV7aJfDM jLlQbuiTpHziYd7L2BtDMYT/IVC0n1dYyVrB6V9UKd9uQNqQP171BiolaZ/kEL4o wVrPcnYLOKvqrhWZO0xXuOfZow23nZYqOAE0xUAOfuPqyx9GXLwkZ5I5Wadd84j3 S+zXdo2I5BQMsMEaMvnfIUg1FKglV5I8q/SQIHSJEEhT5kFNOOJTfHu/858esxQE A84Y/vknyubV7LNzq5ZBPPkq9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ9Ypc9y 7R1sgQ9QbuMb4OWwT6wsMB8GA1UdIwQYMBaAFD87L1s7rlKmtWksr5KiVUsG2oY9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzgxQy9EMTlBRUUzRUZG MTAxMUVCOUJEMTNENkNDNEY5QUUwMi9QenN2V3p1dVVxYTFhU3l2a3FKVlN3YmFo ajAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1B6c3ZXenV1VXFhMWFTeXZrcUpWU3diYWhqMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzgxQy9EMTlBRUUzRUZGMTAxMUVCOUJEMTNENkNDNEY5QUUwMi9QenN2V3p1dVVx YTFhU3l2a3FKVlN3YmFoajAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXfQSk1xGKXVJv2PU//Sz9kcaPK/oImN8tRaeo6omORtE3FAAztS7x 2KCDO17Qrpw/yj5oIV9o0SfSXX3a8MRZMDgsBA54AlKwKIDGXJenbKJIlGf09PgW CWxZbPUvOIa9KMlZBjl6YcPlsb4YwtPIic4f3aHKaSAxidIA7j3KjoPFE/7J+yl0 vTLr5acUmJ7hevt+xPClXofRMt/klXEiZxZzObX/MXnvVurDPGZ07ErJwM+lvb+9 y0FL7isJButO/ObLvEyjo6CD747QkCHtYTYrazpFua0N2JEaTBwmLUPVegJz9J5g t852bwHV1ixxSNsDNup8l87/RcMlsU/D -----END CERTIFICATE-----Generated at Wed Nov 5 05:48:15 2025 by rpki-client