$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.mft File: PLSpAEGL6dzcXgSgumKoTahf5uA.mft (raw, json) Hash identifier: zSfOHQsbMS1g0BJfGFT16jiJ9N0GWqMo4+2wA5WZbDw= Subject key identifier: 65:83:E0:14:34:2B:67:F4:AC:4E:33:59:96:DF:F3:3D:E8:E0:CE:AA Authority key identifier: 3C:B4:A9:00:41:8B:E9:DC:DC:5E:04:A0:BA:62:A8:4D:A8:5F:E6:E0 Certificate issuer: /CN=A91D0FCB/serialNumber=3CB4A900418BE9DCDC5E04A0BA62A84DA85FE6E0 Certificate serial: CE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PLSpAEGL6dzcXgSgumKoTahf5uA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.mft Manifest number: CC Signing time: Mon 03 Nov 2025 05:43:51 +0000 Manifest this update: Mon 03 Nov 2025 05:43:50 +0000 Manifest next update: Mon 10 Nov 2025 05:43:50 +0000 Files and hashes: 1: PLSpAEGL6dzcXgSgumKoTahf5uA.crl (hash: NAYidOF2yyVj3j62rfwgx6ZGgj/Bqd3nzEs98H+S+s4=) 2: DFAC1D02816911EFBC73980DC4F9AE02.roa (hash: jhgv9aU9R5cyiS+8jQVzOexFGNK8rhaSdkQTaqCgMHg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.crl rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PLSpAEGL6dzcXgSgumKoTahf5uA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:43:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 206 (0xce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0FCB, serialNumber=3CB4A900418BE9DCDC5E04A0BA62A84DA85FE6E0 Validity Not Before: Nov 3 05:43:50 2025 GMT Not After : Nov 10 05:43:50 2025 GMT Subject: CN=69084116-9c28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:3d:49:48:85:17:cc:8f:87:05:d8:16:6a:d8: 3b:9d:a6:8d:ac:8b:70:e0:06:fd:6b:b6:5a:3c:07: 65:97:24:e9:be:ca:3d:9e:40:3c:66:1b:f1:3e:e4: 4e:f1:2d:54:16:8c:ce:a7:73:6f:29:68:9b:7b:48: 97:f4:b6:f9:2c:09:d7:b1:cb:b8:26:aa:d8:88:d0: 79:0e:c3:94:06:85:5b:2d:32:17:a4:8b:a7:38:0d: b7:12:6f:60:b7:c5:e0:29:23:2d:67:26:ca:46:11: f7:f3:26:cf:4d:ba:41:1f:a5:a3:41:f9:6b:8d:02: 4f:4b:6e:4b:a5:da:db:1c:82:ab:fe:c9:1e:63:6b: b7:1f:3c:d3:5d:84:97:a4:7d:21:83:1d:d6:c5:f6: b9:f5:73:db:05:5a:0f:ab:8c:ae:74:05:cf:e7:1a: aa:9e:9b:fc:c7:46:3a:99:42:aa:f3:4c:f6:14:64: 2f:cd:c4:e8:bd:31:c3:54:6e:91:2b:9a:a5:84:78: 31:4e:70:d2:50:4b:76:93:78:81:90:65:f2:4a:c5: 7b:57:98:47:b3:2f:ef:14:72:0c:7a:3a:29:c0:99: be:27:92:45:3e:7e:45:83:08:e4:00:33:84:41:1a: 0f:cf:84:6e:c1:e5:3c:1e:92:a4:79:ca:3c:c8:33: 5f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:83:E0:14:34:2B:67:F4:AC:4E:33:59:96:DF:F3:3D:E8:E0:CE:AA X509v3 Authority Key Identifier: keyid:3C:B4:A9:00:41:8B:E9:DC:DC:5E:04:A0:BA:62:A8:4D:A8:5F:E6:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PLSpAEGL6dzcXgSgumKoTahf5uA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:c0:9e:af:8d:f2:74:21:94:3f:03:86:12:f6:e5:8c:58:90: b9:c5:9c:5d:c6:89:ce:18:50:48:bb:a0:7e:c5:33:a9:59:a8: d4:64:bb:c5:74:da:ff:74:3c:24:0f:76:bb:fa:76:3e:23:11: 16:db:25:b6:54:8e:1d:10:ba:95:07:72:90:af:f7:b0:12:42: e9:f5:8b:7c:de:af:dc:f2:eb:45:3f:dc:5c:66:f5:71:f1:38: 5f:62:3f:24:40:52:1a:80:b3:42:95:a0:94:0c:3f:1e:c7:97: 10:93:70:c6:52:0e:8e:62:34:17:af:66:28:d3:74:ea:db:b6: e0:50:fd:01:7b:f5:fa:00:28:59:cb:27:32:98:5c:09:33:99: 3d:b7:45:15:f3:75:a6:e7:e2:49:03:92:31:a0:08:c0:fa:13: 97:32:d1:97:1e:43:00:75:d8:85:c2:28:b0:74:e1:f0:b0:a1: 46:36:98:39:78:f6:e4:f0:e6:eb:a7:58:b7:9e:6c:c2:99:1c: e7:8d:ef:08:d4:b6:82:e6:ce:50:a5:ab:4a:29:51:09:98:fd: 0b:90:1d:8c:ca:17:5c:74:71:ec:a0:52:30:cf:7b:6a:d2:b6: 83:45:0b:f1:88:78:04:36:d5:2e:a8:7c:07:53:5f:a9:f6:81: 97:ee:a3:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDBGQ0IxMTAvBgNVBAUTKDNDQjRBOTAwNDE4QkU5RENEQzVFMDRBMEJBNjJBODRE QTg1RkU2RTAwHhcNMjUxMTAzMDU0MzUwWhcNMjUxMTEwMDU0MzUwWjAYMRYwFAYD VQQDEw02OTA4NDExNi05YzI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6j1JSIUXzI+HBdgWatg7naaNrItw4Ab9a7ZaPAdllyTpvso9nkA8ZhvxPuRO 8S1UFozOp3NvKWibe0iX9Lb5LAnXscu4JqrYiNB5DsOUBoVbLTIXpIunOA23Em9g t8XgKSMtZybKRhH38ybPTbpBH6WjQflrjQJPS25LpdrbHIKr/skeY2u3HzzTXYSX pH0hgx3Wxfa59XPbBVoPq4yudAXP5xqqnpv8x0Y6mUKq80z2FGQvzcTovTHDVG6R K5qlhHgxTnDSUEt2k3iBkGXySsV7V5hHsy/vFHIMejopwJm+J5JFPn5FgwjkADOE QRoPz4RuweU8HpKkeco8yDNfNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGWD4BQ0 K2f0rE4zWZbf8z3o4M6qMB8GA1UdIwQYMBaAFDy0qQBBi+nc3F4EoLpiqE2oX+bg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEZDQi84OUM3OEY3MDgx NjkxMUVGODIxM0ZCMENDNEY5QUUwMi9QTFNwQUVHTDZkemNYZ1NndW1Lb1RhaGY1 dUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1BMU3BBRUdMNmR6Y1hnU2d1bUtvVGFoZjV1QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MEZDQi84OUM3OEY3MDgxNjkxMUVGODIxM0ZCMENDNEY5QUUwMi9QTFNwQUVHTDZk emNYZ1NndW1Lb1RhaGY1dUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1wJ6vjfJ0IZQ/A4YS9uWMWJC5xZxdxonOGFBIu6B+xTOpWajUZLvF dNr/dDwkD3a7+nY+IxEW2yW2VI4dELqVB3KQr/ewEkLp9Yt83q/c8utFP9xcZvVx 8ThfYj8kQFIagLNClaCUDD8ex5cQk3DGUg6OYjQXr2Yo03Tq27bgUP0Be/X6AChZ yycymFwJM5k9t0UV83Wm5+JJA5IxoAjA+hOXMtGXHkMAddiFwiiwdOHwsKFGNpg5 ePbk8Obrp1i3nmzCmRznje8I1LaC5s5QpatKKVEJmP0LkB2MyhdcdHHsoFIwz3tq 0raDRQvxiHgENtUuqHwHU1+p9oGX7qPK -----END CERTIFICATE-----Generated at Tue Nov 4 21:32:39 2025 by rpki-client