$ rpki-client -vvf rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.mft File: pUy3dCqrz05Y5dTB87nRLa2RtAY.mft (raw, json) Hash identifier: 7D7WtTs4+K1XU9Woe1yM746+lDm1XQQCyz6arDQWYM8= Subject key identifier: 39:25:11:5B:55:91:43:88:76:F5:C0:A7:EB:5F:41:51:61:E8:23:8E Authority key identifier: A5:4C:B7:74:2A:AB:CF:4E:58:E5:D4:C1:F3:B9:D1:2D:AD:91:B4:06 Certificate issuer: /CN=A9190D72/serialNumber=A54CB7742AABCF4E58E5D4C1F3B9D12DAD91B406 Certificate serial: 0140 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pUy3dCqrz05Y5dTB87nRLa2RtAY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.mft Manifest number: 013D Signing time: Mon 03 Nov 2025 04:26:19 +0000 Manifest this update: Mon 03 Nov 2025 04:26:19 +0000 Manifest next update: Mon 10 Nov 2025 04:26:19 +0000 Files and hashes: 1: pUy3dCqrz05Y5dTB87nRLa2RtAY.crl (hash: BtXOJgHBZGvUq7DHQozyqZs6uIHqwmboSq2GGNhs35A=) 2: 35D2294C4AB511EF87AB161BC4F9AE02.roa (hash: ojSPB0ISIGRw3cOfBtrECwI7sYrCbgl9SiZcYTomn1Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.crl rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pUy3dCqrz05Y5dTB87nRLa2RtAY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 320 (0x140) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190D72, serialNumber=A54CB7742AABCF4E58E5D4C1F3B9D12DAD91B406 Validity Not Before: Nov 3 04:26:19 2025 GMT Not After : Nov 10 04:26:19 2025 GMT Subject: CN=69082eeb-a92d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:56:06:03:b3:b1:c3:dc:6f:2a:ba:9a:5a:f9: 81:fd:b2:6c:e9:d5:4c:1e:bd:72:0c:02:92:bd:bc: 68:87:1b:ea:a0:8f:84:54:04:49:77:04:86:47:47: 64:4a:4b:d5:e4:46:37:fd:e7:1c:09:e2:ee:7a:f5: 95:52:7a:a4:02:0a:23:5f:39:81:ee:cd:4b:13:67: dc:56:7b:48:c7:d0:22:f6:c6:b9:27:f4:f7:84:4c: e5:61:c9:ef:83:c6:89:bb:ea:f2:ad:fb:6e:51:9c: 96:c5:b4:e9:e7:bb:93:8f:11:24:79:19:7a:e6:e8: de:02:7f:0b:87:67:1f:df:11:14:bf:0e:39:2c:81: 6d:b0:fe:2b:99:49:ec:db:49:2c:6d:47:59:86:b2: 0c:82:54:ed:71:b8:3e:2a:2e:1d:00:9f:9e:7f:7f: d0:41:c3:cb:9f:f0:1b:bf:83:0a:69:88:5e:92:6e: d0:bd:f5:45:51:5b:73:5f:33:80:c1:c0:94:0e:46: 9c:c5:51:81:aa:03:e0:bc:f4:c6:6a:ff:04:d8:cc: c3:65:11:34:36:9a:93:de:ed:1d:d4:a0:c4:a1:60: c1:ba:85:15:97:fa:95:54:9f:f0:ca:f1:29:01:fb: c6:bf:84:ac:2f:51:61:d3:ff:73:1f:7b:7c:ec:23: cf:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:25:11:5B:55:91:43:88:76:F5:C0:A7:EB:5F:41:51:61:E8:23:8E X509v3 Authority Key Identifier: keyid:A5:4C:B7:74:2A:AB:CF:4E:58:E5:D4:C1:F3:B9:D1:2D:AD:91:B4:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pUy3dCqrz05Y5dTB87nRLa2RtAY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:ee:40:bc:ff:2d:23:cd:59:7d:79:da:33:a5:ac:be:02:f4: 95:8d:17:0a:55:c5:4b:fe:27:7c:66:ac:89:d2:ee:01:07:63: f2:05:c7:38:32:5a:bd:b5:42:8b:13:f7:11:f3:83:b0:75:6c: cb:4f:6c:4f:e8:bc:51:56:fa:fd:82:51:8e:7e:40:48:0c:ba: 78:12:eb:75:1b:17:c5:50:3c:76:09:ab:77:15:e3:0a:ae:a3: a4:d5:2f:ef:a1:21:f0:e8:ae:f0:53:54:db:1b:cd:d9:28:60: c9:cc:07:87:86:7e:41:80:cb:1b:4b:1d:dd:b1:cf:1c:09:fd: 49:3b:eb:d4:77:06:b6:0b:fb:c6:5e:06:b0:eb:c7:73:b4:34: 99:02:b3:7d:6c:6e:ea:ed:01:61:1b:ff:e3:c7:38:20:06:50: 74:d1:a5:72:8f:a8:14:98:49:ab:83:dc:7c:64:35:a6:da:ff: 60:67:4c:79:34:98:76:06:3b:58:22:d9:3e:14:e6:9e:71:66: cb:6d:dd:fa:9e:c1:a6:ae:8c:9b:2c:0d:cc:aa:38:48:7b:64: ab:8a:cb:74:b0:0b:74:4c:ee:54:82:a9:85:c6:92:d9:c8:e4: 3f:e8:be:3c:8e:e5:f1:3b:0d:b8:bc:ce:0f:67:0c:a6:b5:24: 55:17:a0:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBENzIxMTAvBgNVBAUTKEE1NENCNzc0MkFBQkNGNEU1OEU1RDRDMUYzQjlEMTJE QUQ5MUI0MDYwHhcNMjUxMTAzMDQyNjE5WhcNMjUxMTEwMDQyNjE5WjAYMRYwFAYD VQQDEw02OTA4MmVlYi1hOTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzFYGA7Oxw9xvKrqaWvmB/bJs6dVMHr1yDAKSvbxohxvqoI+EVARJdwSGR0dk SkvV5EY3/eccCeLuevWVUnqkAgojXzmB7s1LE2fcVntIx9Ai9sa5J/T3hEzlYcnv g8aJu+ryrftuUZyWxbTp57uTjxEkeRl65ujeAn8Lh2cf3xEUvw45LIFtsP4rmUns 20ksbUdZhrIMglTtcbg+Ki4dAJ+ef3/QQcPLn/Abv4MKaYhekm7QvfVFUVtzXzOA wcCUDkacxVGBqgPgvPTGav8E2MzDZRE0NpqT3u0d1KDEoWDBuoUVl/qVVJ/wyvEp AfvGv4SsL1Fh0/9zH3t87CPP1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDklEVtV kUOIdvXAp+tfQVFh6COOMB8GA1UdIwQYMBaAFKVMt3Qqq89OWOXUwfO50S2tkbQG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEQ3Mi82QUM5ODlGMEQ0 ODIxMUVFODdENUQ3MjRDNEY5QUUwMi9wVXkzZENxcnowNVk1ZFRCODduUkxhMlJ0 QVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3BVeTNkQ3FyejA1WTVkVEI4N25STGEyUnRBWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MEQ3Mi82QUM5ODlGMEQ0ODIxMUVFODdENUQ3MjRDNEY5QUUwMi9wVXkzZENxcnow NVk1ZFRCODduUkxhMlJ0QVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB87kC8/y0jzVl9edozpay+AvSVjRcKVcVL/id8ZqyJ0u4BB2PyBcc4 Mlq9tUKLE/cR84OwdWzLT2xP6LxRVvr9glGOfkBIDLp4Eut1GxfFUDx2Cat3FeMK rqOk1S/voSHw6K7wU1TbG83ZKGDJzAeHhn5BgMsbSx3dsc8cCf1JO+vUdwa2C/vG Xgaw68dztDSZArN9bG7q7QFhG//jxzggBlB00aVyj6gUmEmrg9x8ZDWm2v9gZ0x5 NJh2BjtYItk+FOaecWbLbd36nsGmroybLA3MqjhIe2Srist0sAt0TO5UgqmFxpLZ yOQ/6L48juXxOw24vM4PZwymtSRVF6CR -----END CERTIFICATE-----Generated at Wed Nov 5 04:48:45 2025 by rpki-client