$ rpki-client -vvf rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/pTIumCBoFSdtwSYXlhk4_8bIhIo.mft File: pTIumCBoFSdtwSYXlhk4_8bIhIo.mft (raw, json) Hash identifier: 0ueq9SvgR5CbyTHraWqH9/CetbxD+s/QixzUOxXkIIg= Subject key identifier: C0:8C:85:10:41:4B:BD:61:1C:88:93:E5:32:C7:B7:B2:A1:AF:E7:85 Authority key identifier: A5:32:2E:98:20:68:15:27:6D:C1:26:17:96:19:38:FF:C6:C8:84:8A Certificate issuer: /CN=A9186CDF/serialNumber=A5322E98206815276DC12617961938FFC6C8848A Certificate serial: 07E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTIumCBoFSdtwSYXlhk4_8bIhIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/pTIumCBoFSdtwSYXlhk4_8bIhIo.mft Manifest number: 0FA4 Signing time: Tue 04 Nov 2025 21:18:12 +0000 Manifest this update: Tue 04 Nov 2025 21:18:12 +0000 Manifest next update: Tue 11 Nov 2025 21:18:12 +0000 Files and hashes: 1: pTIumCBoFSdtwSYXlhk4_8bIhIo.crl (hash: murxgj6XfeNjGECk4BXfNrTMIXjjVBGqDQYHaw8U/0I=) 2: F409CCBAAF7611EE85B8CF2DC4F9AE02.roa (hash: cY1AExRbNMgLPmC3nhDGO719YIR4CnuH0TePCjqoYxc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/pTIumCBoFSdtwSYXlhk4_8bIhIo.crl rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/pTIumCBoFSdtwSYXlhk4_8bIhIo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTIumCBoFSdtwSYXlhk4_8bIhIo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:18:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2019 (0x7e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186CDF, serialNumber=A5322E98206815276DC12617961938FFC6C8848A Validity Not Before: Nov 4 21:18:12 2025 GMT Not After : Nov 11 21:18:12 2025 GMT Subject: CN=690a6d94-49b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a6:c2:4c:3c:24:d5:e1:97:5c:ce:15:8c:e9: 33:98:47:ae:f7:10:04:d4:37:b2:c9:40:ce:b7:3d: 3b:7d:ef:2b:27:73:11:e3:cb:cf:7f:35:1d:fe:c4: c0:df:91:32:50:7c:f7:77:92:08:54:10:dd:e8:4b: 70:88:f5:e3:f5:44:5c:fb:4e:5a:0c:7b:b2:22:1b: d4:40:5b:20:17:04:8c:fc:8a:ed:b3:01:d2:bb:65: 99:50:39:c9:ce:a3:ec:a0:ab:f4:5d:40:5a:00:f0: 45:2c:b6:06:7e:6b:93:a9:b0:f0:3e:e6:a5:52:d7: 21:9d:be:e0:74:1a:a7:98:3c:41:dc:ab:0b:64:09: 8d:11:53:2d:2b:85:52:05:d1:9b:f6:47:bf:b6:e7: ab:e5:73:e5:e3:79:74:2a:d3:fc:2f:9b:00:9e:6d: aa:19:08:30:e7:5a:7f:82:ac:29:b2:24:10:e6:12: ed:16:88:90:1b:21:b3:f3:0a:a3:6d:e6:2c:66:11: 3b:5b:86:8e:a0:65:57:e7:4b:da:49:95:ef:20:c2: 65:4e:73:70:6d:e3:5a:d9:b5:4b:fa:64:a9:d0:6e: e0:1a:2f:4d:31:fb:b2:aa:eb:7d:95:12:5a:02:f2: 86:ac:d9:2e:50:06:c7:fd:d8:4f:ee:c2:87:1a:f6: c1:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:8C:85:10:41:4B:BD:61:1C:88:93:E5:32:C7:B7:B2:A1:AF:E7:85 X509v3 Authority Key Identifier: keyid:A5:32:2E:98:20:68:15:27:6D:C1:26:17:96:19:38:FF:C6:C8:84:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/pTIumCBoFSdtwSYXlhk4_8bIhIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTIumCBoFSdtwSYXlhk4_8bIhIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/pTIumCBoFSdtwSYXlhk4_8bIhIo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:50:59:2b:9b:dd:44:aa:ee:88:8e:08:bd:f4:22:5d:65:52: 14:93:f5:ba:aa:fa:1d:e4:61:4b:b5:5b:86:43:7d:f7:14:d6: 8a:4c:c1:7a:18:62:3c:ac:05:8e:98:48:7a:73:df:65:a0:ce: 0a:b5:9b:35:21:5f:97:39:94:c8:d0:c8:91:47:8d:66:f9:2c: 29:51:90:8f:1c:e4:46:42:04:9f:95:f6:c2:46:ab:6f:7d:80: 70:bd:f4:70:de:6c:62:cb:68:14:11:2a:9b:8f:29:f5:73:88: 80:3e:4d:ad:23:6e:0e:a7:88:73:20:87:33:e4:a6:6e:0e:c2: 82:69:c6:95:c8:c9:dc:02:53:e7:62:3b:01:5e:83:c4:40:f8: 12:c3:e5:28:87:f4:ca:16:1c:b9:87:61:0b:6c:51:0e:5c:4c: 4d:7e:6d:f2:12:26:14:b9:ac:3d:2f:a9:6d:e1:5b:7f:44:d0: af:14:16:c3:de:d1:54:9e:01:9f:2e:33:11:d3:52:14:25:6b: eb:a3:de:9d:51:12:05:54:74:e3:78:15:9e:29:79:08:99:56: 58:9f:80:d6:7f:4f:e8:dd:ab:c7:38:c1:0e:c0:e0:2f:48:1e: 38:ad:7d:b9:50:6b:9e:8f:10:c3:e0:cd:10:a0:fc:18:08:54: 36:18:68:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZDREYxMTAvBgNVBAUTKEE1MzIyRTk4MjA2ODE1Mjc2REMxMjYxNzk2MTkzOEZG QzZDODg0OEEwHhcNMjUxMTA0MjExODEyWhcNMjUxMTExMjExODEyWjAYMRYwFAYD VQQDEw02OTBhNmQ5NC00OWIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt6bCTDwk1eGXXM4VjOkzmEeu9xAE1DeyyUDOtz07fe8rJ3MR48vPfzUd/sTA 35EyUHz3d5IIVBDd6EtwiPXj9URc+05aDHuyIhvUQFsgFwSM/IrtswHSu2WZUDnJ zqPsoKv0XUBaAPBFLLYGfmuTqbDwPualUtchnb7gdBqnmDxB3KsLZAmNEVMtK4VS BdGb9ke/tuer5XPl43l0KtP8L5sAnm2qGQgw51p/gqwpsiQQ5hLtFoiQGyGz8wqj beYsZhE7W4aOoGVX50vaSZXvIMJlTnNwbeNa2bVL+mSp0G7gGi9NMfuyqut9lRJa AvKGrNkuUAbH/dhP7sKHGvbBawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMCMhRBB S71hHIiT5TLHt7Khr+eFMB8GA1UdIwQYMBaAFKUyLpggaBUnbcEmF5YZOP/GyISK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkNERi80NDgxRjBBODEx REUxMUVCQjlGOUY3NzdDNEY5QUUwMi9wVEl1bUNCb0ZTZHR3U1lYbGhrNF84Yklo SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BUSXVtQ0JvRlNkdHdTWVhsaGs0XzhiSWhJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkNERi80NDgxRjBBODExREUxMUVCQjlGOUY3NzdDNEY5QUUwMi9wVEl1bUNCb0ZT ZHR3U1lYbGhrNF84YkloSW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7UFkrm91Equ6Ijgi99CJdZVIUk/W6qvod5GFLtVuGQ333FNaKTMF6 GGI8rAWOmEh6c99loM4KtZs1IV+XOZTI0MiRR41m+SwpUZCPHORGQgSflfbCRqtv fYBwvfRw3mxiy2gUESqbjyn1c4iAPk2tI24Op4hzIIcz5KZuDsKCacaVyMncAlPn YjsBXoPEQPgSw+Uoh/TKFhy5h2ELbFEOXExNfm3yEiYUuaw9L6lt4Vt/RNCvFBbD 3tFUngGfLjMR01IUJWvro96dURIFVHTjeBWeKXkImVZYn4DWf0/o3avHOMEOwOAv SB44rX25UGuejxDD4M0QoPwYCFQ2GGjo -----END CERTIFICATE-----Generated at Wed Nov 5 11:49:01 2025 by rpki-client