$ rpki-client -vvf rpki.apnic.net/member_repository/A919089B/1BCD43B6B11111EF8E23056FC4F9AE02/PHaPDCMj1G0yHorJk-dbCxuCHlQ.mft File: PHaPDCMj1G0yHorJk-dbCxuCHlQ.mft (raw, json) Hash identifier: OPC3J167mAjdXo30s+06kPK2wwmQ79KiizRVYFT6YyI= Subject key identifier: 84:DA:55:A9:FB:81:99:08:93:16:22:C8:60:88:2C:89:E7:FD:B8:5B Authority key identifier: 3C:76:8F:0C:23:23:D4:6D:32:1E:8A:C9:93:E7:5B:0B:1B:82:1E:54 Certificate issuer: /CN=A919089B/serialNumber=3C768F0C2323D46D321E8AC993E75B0B1B821E54 Certificate serial: B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PHaPDCMj1G0yHorJk-dbCxuCHlQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919089B/1BCD43B6B11111EF8E23056FC4F9AE02/PHaPDCMj1G0yHorJk-dbCxuCHlQ.mft Manifest number: B4 Signing time: Mon 03 Nov 2025 06:09:47 +0000 Manifest this update: Mon 03 Nov 2025 06:09:47 +0000 Manifest next update: Mon 10 Nov 2025 06:09:47 +0000 Files and hashes: 1: PHaPDCMj1G0yHorJk-dbCxuCHlQ.crl (hash: H0PI1Q/rEZZysRidUCOcodieuD1PE7jGOUZ3e9ZQ5Kw=) 2: A60814E423E811F0B464ED15C4F9AE02.roa (hash: o8tRdqNOQIbG95SJjSBfAjf8aQSDYDsFIp6TlR0v9gM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919089B/1BCD43B6B11111EF8E23056FC4F9AE02/PHaPDCMj1G0yHorJk-dbCxuCHlQ.crl rsync://rpki.apnic.net/member_repository/A919089B/1BCD43B6B11111EF8E23056FC4F9AE02/PHaPDCMj1G0yHorJk-dbCxuCHlQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PHaPDCMj1G0yHorJk-dbCxuCHlQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:09:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 184 (0xb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919089B, serialNumber=3C768F0C2323D46D321E8AC993E75B0B1B821E54 Validity Not Before: Nov 3 06:09:47 2025 GMT Not After : Nov 10 06:09:47 2025 GMT Subject: CN=6908472b-b313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:64:23:74:36:5c:81:f5:3e:ed:94:70:ac:f6: 92:de:83:6e:2a:30:c3:1d:aa:9a:5f:ca:93:a9:2e: c0:fb:43:da:4c:ec:60:82:6f:ab:ba:47:30:b0:77: eb:40:92:a7:66:74:88:85:b0:1b:9a:6d:6f:20:cd: 34:5a:7a:fe:73:02:c4:e4:2c:de:c4:dc:cc:5b:d7: cb:1f:6b:e3:4d:8c:12:b4:7b:6e:e5:75:66:40:dd: 06:f1:d0:81:13:1a:a6:8d:ce:b4:3e:6c:a1:f7:e9: f9:36:2f:69:cb:35:6f:6e:bf:5a:cf:88:36:bb:36: d2:ab:f4:f0:d4:8d:81:b9:97:c8:de:e0:d6:1d:bb: 03:15:4d:74:cc:3c:11:2e:68:d3:32:9e:37:e2:37: 00:13:6c:47:1e:5d:e4:4a:0b:d5:6d:ea:fc:1d:7a: 2a:de:65:07:53:cf:5f:43:6f:9c:e4:6f:33:37:11: 7a:20:ed:7f:91:96:d9:5c:83:1b:83:37:fe:cf:95: ef:ff:cd:89:7f:b1:dc:52:54:28:c5:8d:f8:4d:c3: 8e:88:b8:c5:83:b7:e6:08:2e:85:be:d8:36:6e:2b: be:5f:71:63:4a:9e:04:79:28:9a:c2:9b:db:8f:8d: 1b:ce:e3:30:cd:bd:d2:9b:44:0f:47:6c:04:51:ad: 65:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:DA:55:A9:FB:81:99:08:93:16:22:C8:60:88:2C:89:E7:FD:B8:5B X509v3 Authority Key Identifier: keyid:3C:76:8F:0C:23:23:D4:6D:32:1E:8A:C9:93:E7:5B:0B:1B:82:1E:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919089B/1BCD43B6B11111EF8E23056FC4F9AE02/PHaPDCMj1G0yHorJk-dbCxuCHlQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PHaPDCMj1G0yHorJk-dbCxuCHlQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919089B/1BCD43B6B11111EF8E23056FC4F9AE02/PHaPDCMj1G0yHorJk-dbCxuCHlQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:21:30:5b:4b:fa:09:d0:3f:e5:fd:2d:3c:8f:07:73:22:68: dd:bc:47:7a:7a:4b:35:48:4a:d9:3e:21:56:d4:66:2f:a7:06: 05:f2:30:c9:ab:3a:12:e1:11:c9:59:14:34:56:33:9c:b5:f9: 7a:db:b0:fd:d6:b2:1d:fe:79:b3:5d:5e:fa:30:03:bc:96:87: 8a:9d:7d:af:0c:55:5f:e3:13:0d:c6:12:4a:af:ea:54:80:3c: 44:b6:f8:9c:f5:0b:08:84:a2:74:0b:c2:85:5e:1f:48:70:61: ce:ec:1a:31:bf:e8:06:7c:60:4a:a3:84:9b:27:67:22:48:fa: ae:d1:91:03:6a:d6:08:8a:48:a5:b5:b8:da:ec:97:5c:87:ec: 35:d3:71:f8:55:cc:08:1e:6d:62:c8:38:24:0a:6d:5c:48:53: c4:cf:fa:31:8c:6b:96:3e:5c:0a:5e:a5:50:3d:88:c3:c5:db: bf:de:14:f9:7e:e6:1c:64:94:38:fe:f7:25:26:11:7d:57:84: 92:f1:6c:46:d5:b0:1d:fc:7f:60:96:28:88:f7:50:6f:08:ce: 48:8a:65:bd:6b:2d:fd:69:6e:bc:b2:ec:f2:23:4a:61:fb:3e: 90:2d:39:5f:e0:5b:e9:7e:46:2f:e7:5c:2c:3c:e8:a6:f5:56: e9:62:dc:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTA4OUIxMTAvBgNVBAUTKDNDNzY4RjBDMjMyM0Q0NkQzMjFFOEFDOTkzRTc1QjBC MUI4MjFFNTQwHhcNMjUxMTAzMDYwOTQ3WhcNMjUxMTEwMDYwOTQ3WjAYMRYwFAYD VQQDEw02OTA4NDcyYi1iMzEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxWQjdDZcgfU+7ZRwrPaS3oNuKjDDHaqaX8qTqS7A+0PaTOxggm+rukcwsHfr QJKnZnSIhbAbmm1vIM00Wnr+cwLE5CzexNzMW9fLH2vjTYwStHtu5XVmQN0G8dCB Exqmjc60Pmyh9+n5Ni9pyzVvbr9az4g2uzbSq/Tw1I2BuZfI3uDWHbsDFU10zDwR LmjTMp434jcAE2xHHl3kSgvVber8HXoq3mUHU89fQ2+c5G8zNxF6IO1/kZbZXIMb gzf+z5Xv/82Jf7HcUlQoxY34TcOOiLjFg7fmCC6Fvtg2biu+X3FjSp4EeSiawpvb j40bzuMwzb3Sm0QPR2wEUa1ldwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFITaVan7 gZkIkxYiyGCILInn/bhbMB8GA1UdIwQYMBaAFDx2jwwjI9RtMh6KyZPnWwsbgh5U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDg5Qi8xQkNENDNCNkIx MTExMUVGOEUyMzA1NkZDNEY5QUUwMi9QSGFQRENNajFHMHlIb3JKay1kYkN4dUNI bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BIYVBEQ01qMUcweUhvckprLWRiQ3h1Q0hsUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MDg5Qi8xQkNENDNCNkIxMTExMUVGOEUyMzA1NkZDNEY5QUUwMi9QSGFQRENNajFH MHlIb3JKay1kYkN4dUNIbFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsITBbS/oJ0D/l/S08jwdzImjdvEd6eks1SErZPiFW1GYvpwYF8jDJ qzoS4RHJWRQ0VjOctfl627D91rId/nmzXV76MAO8loeKnX2vDFVf4xMNxhJKr+pU gDxEtvic9QsIhKJ0C8KFXh9IcGHO7Boxv+gGfGBKo4SbJ2ciSPqu0ZEDatYIikil tbja7Jdch+w103H4VcwIHm1iyDgkCm1cSFPEz/oxjGuWPlwKXqVQPYjDxdu/3hT5 fuYcZJQ4/vclJhF9V4SS8WxG1bAd/H9gliiI91BvCM5IimW9ay39aW68suzyI0ph +z6QLTlf4FvpfkYv51wsPOim9VbpYtyN -----END CERTIFICATE-----Generated at Tue Nov 4 15:54:18 2025 by rpki-client