$ rpki-client -vvf rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft File: Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft (raw, json) Hash identifier: M1oOyPkBU2Kfxc9V3+u0TfwFLdwylZMrngnVVdVcdf8= Subject key identifier: EA:E0:98:C9:37:27:D1:F5:84:D1:4B:83:B8:04:8D:9D:DD:A9:18:56 Authority key identifier: 3E:5B:3C:AB:9F:14:1A:06:EB:83:2E:63:F5:86:CB:0E:66:76:04:02 Certificate issuer: /CN=A91D06FC/serialNumber=3E5B3CAB9F141A06EB832E63F586CB0E66760402 Certificate serial: 03E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pls8q58UGgbrgy5j9YbLDmZ2BAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft Manifest number: 03E1 Signing time: Wed 05 Nov 2025 00:38:29 +0000 Manifest this update: Wed 05 Nov 2025 00:38:28 +0000 Manifest next update: Wed 12 Nov 2025 00:38:28 +0000 Files and hashes: 1: Pls8q58UGgbrgy5j9YbLDmZ2BAI.crl (hash: Uqn7hVRdqS48UYrYnyfCkLC2KGcFGdWwwp+ID62cmIQ=) 2: AF8386E29EEF11EC8450760EC4F9AE02.roa (hash: 33pUrgoOiAaMxnDUMOqU1bZyw6PC3oCJBm1dIi55b3s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.crl rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pls8q58UGgbrgy5j9YbLDmZ2BAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:38:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 997 (0x3e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D06FC, serialNumber=3E5B3CAB9F141A06EB832E63F586CB0E66760402 Validity Not Before: Nov 5 00:38:28 2025 GMT Not After : Nov 12 00:38:28 2025 GMT Subject: CN=690a9c85-63c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b2:81:9a:c0:df:ac:e4:98:fb:3a:00:9a:d6: 34:15:b7:de:bb:a4:06:56:cd:a7:be:75:73:fb:c0: 0c:3a:d6:a0:8d:c5:89:02:ef:ff:b4:6b:6a:20:95: 1a:fb:a5:c8:85:fb:e8:ff:ae:9d:23:3b:a4:c7:32: 17:2d:f4:d1:a7:92:c8:7a:be:22:c2:dc:3c:02:59: 55:3b:af:c2:57:51:f5:cd:db:44:6a:46:55:13:73: d3:ca:5f:1a:ef:2c:c0:91:ce:30:48:e5:01:df:12: 10:78:1d:6a:d6:5b:b0:81:c3:83:e6:be:d4:53:63: 52:68:86:dc:f8:12:a6:5a:c9:96:4e:73:fa:80:1c: 46:e4:4e:8c:af:92:0c:34:31:cf:e3:ce:c7:0e:81: 06:62:9e:a4:af:db:9c:83:90:96:45:80:c2:89:32: 07:25:16:5c:5e:d0:ad:41:2e:89:2d:0b:be:3a:e3: ec:0d:4a:c9:78:da:73:89:41:eb:fd:38:91:ed:0e: d6:fd:48:39:91:5d:14:4c:79:3f:76:73:12:2a:ac: 26:16:fc:76:e5:c8:cf:91:9f:42:27:eb:a8:8a:49: 58:10:0c:9e:10:ce:64:17:ec:a8:84:56:12:8d:a4: 6f:7a:13:79:e7:6e:d9:8d:88:0c:c0:7f:f2:c7:bf: 44:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:E0:98:C9:37:27:D1:F5:84:D1:4B:83:B8:04:8D:9D:DD:A9:18:56 X509v3 Authority Key Identifier: keyid:3E:5B:3C:AB:9F:14:1A:06:EB:83:2E:63:F5:86:CB:0E:66:76:04:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pls8q58UGgbrgy5j9YbLDmZ2BAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:83:70:ae:1b:6e:e5:e2:55:39:8d:61:eb:1f:44:b6:16:dd: 71:f2:4a:74:65:b9:fc:80:a0:ed:d3:b2:08:68:37:f7:48:6d: d1:8f:1b:e4:84:35:67:57:f6:85:42:b4:ed:d1:ab:bd:ed:df: a7:c6:4e:2f:97:29:8d:14:85:d2:51:ad:41:87:ce:a5:1c:82: e4:a1:90:f2:3b:b1:c1:9c:e1:1d:00:a6:9c:12:4d:51:d6:39: d0:d7:b8:f2:d7:32:e9:fc:16:92:08:a9:de:57:ce:38:bf:59: 83:25:31:33:ec:1f:22:4d:8a:95:04:e6:2d:e4:88:81:b2:87: 24:68:9b:f9:37:98:b2:c5:52:c2:e9:67:32:67:8c:a3:0f:52: 54:34:b7:47:f4:01:59:13:6a:a7:2e:dd:7c:4a:dd:7c:e3:8e: 6b:34:b5:1d:5a:ff:a7:4f:c4:02:b9:75:67:be:bd:e5:33:4f: 5c:80:e2:ec:e7:46:f6:ba:4b:3f:9f:d2:3a:69:33:71:87:dc: 9a:6b:b2:62:40:b0:0a:28:05:eb:a7:ec:05:8d:ce:41:46:0b: 7f:fb:62:51:56:55:a2:01:2c:ef:e5:24:17:39:40:4c:be:3f: 43:09:3d:bc:e8:2f:ac:0e:0d:c1:91:0c:90:5b:f2:1c:d5:7c: 75:13:2e:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDA2RkMxMTAvBgNVBAUTKDNFNUIzQ0FCOUYxNDFBMDZFQjgzMkU2M0Y1ODZDQjBF NjY3NjA0MDIwHhcNMjUxMTA1MDAzODI4WhcNMjUxMTEyMDAzODI4WjAYMRYwFAYD VQQDEw02OTBhOWM4NS02M2M1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtrKBmsDfrOSY+zoAmtY0Fbfeu6QGVs2nvnVz+8AMOtagjcWJAu//tGtqIJUa +6XIhfvo/66dIzukxzIXLfTRp5LIer4iwtw8AllVO6/CV1H1zdtEakZVE3PTyl8a 7yzAkc4wSOUB3xIQeB1q1luwgcOD5r7UU2NSaIbc+BKmWsmWTnP6gBxG5E6Mr5IM NDHP487HDoEGYp6kr9ucg5CWRYDCiTIHJRZcXtCtQS6JLQu+OuPsDUrJeNpziUHr /TiR7Q7W/Ug5kV0UTHk/dnMSKqwmFvx25cjPkZ9CJ+uoiklYEAyeEM5kF+yohFYS jaRvehN5527ZjYgMwH/yx79EHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOrgmMk3 J9H1hNFLg7gEjZ3dqRhWMB8GA1UdIwQYMBaAFD5bPKufFBoG64MuY/WGyw5mdgQC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDZGQy9BRUYyMzBFMjlF RUIxMUVDODA0OUEyN0ZDNEY5QUUwMi9QbHM4cTU4VUdnYnJneTVqOVliTERtWjJC QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BsczhxNThVR2dicmd5NWo5WWJMRG1aMkJBSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDZGQy9BRUYyMzBFMjlFRUIxMUVDODA0OUEyN0ZDNEY5QUUwMi9QbHM4cTU4VUdn YnJneTVqOVliTERtWjJCQUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpg3CuG27l4lU5jWHrH0S2Ft1x8kp0Zbn8gKDt07IIaDf3SG3Rjxvk hDVnV/aFQrTt0au97d+nxk4vlymNFIXSUa1Bh86lHILkoZDyO7HBnOEdAKacEk1R 1jnQ17jy1zLp/BaSCKneV844v1mDJTEz7B8iTYqVBOYt5IiBsockaJv5N5iyxVLC 6WcyZ4yjD1JUNLdH9AFZE2qnLt18St18445rNLUdWv+nT8QCuXVnvr3lM09cgOLs 50b2uks/n9I6aTNxh9yaa7JiQLAKKAXrp+wFjc5BRgt/+2JRVlWiASzv5SQXOUBM vj9DCT286C+sDg3BkQyQW/Ic1Xx1Ey7T -----END CERTIFICATE-----Generated at Wed Nov 5 19:18:43 2025 by rpki-client