$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.mft File: PusZaI0z1iGZTls9nkbsqqUJ9CM.mft (raw, json) Hash identifier: x84VD5CiHtbFSmQ55d0eEDW/iwGEIPtoRjK1WKxTZ/I= Subject key identifier: EF:BD:79:17:B7:F3:01:51:8F:DA:55:39:D6:22:BA:20:2C:36:1C:DB Authority key identifier: 3E:EB:19:68:8D:33:D6:21:99:4E:5B:3D:9E:46:EC:AA:A5:09:F4:23 Certificate issuer: /CN=A91DE4AC/serialNumber=3EEB19688D33D621994E5B3D9E46ECAAA509F423 Certificate serial: 046C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PusZaI0z1iGZTls9nkbsqqUJ9CM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.mft Manifest number: 0466 Signing time: Mon 03 Nov 2025 00:08:30 +0000 Manifest this update: Mon 03 Nov 2025 00:08:30 +0000 Manifest next update: Mon 10 Nov 2025 00:08:30 +0000 Files and hashes: 1: PusZaI0z1iGZTls9nkbsqqUJ9CM.crl (hash: bLQn7vzosUfIk8rE6HkZ2A+if2H+xyJ9Yg+hszjInOI=) 2: 0716B2646C7111EC8C5E6967C4F9AE02.roa (hash: FC5KH7zmbNiXwzzDmtV6gG59796J2EuM05tZKkGKGqk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.crl rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PusZaI0z1iGZTls9nkbsqqUJ9CM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:08:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1132 (0x46c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE4AC, serialNumber=3EEB19688D33D621994E5B3D9E46ECAAA509F423 Validity Not Before: Nov 3 00:08:30 2025 GMT Not After : Nov 10 00:08:30 2025 GMT Subject: CN=6907f27e-c610 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a1:64:ee:d2:cd:61:24:e9:fe:85:5f:0b:59: ba:12:01:d4:e9:6b:03:a4:63:86:a8:ac:21:9e:ae: 0d:9d:2c:b8:d3:ec:58:51:22:d7:d4:a0:a3:bd:e0: ce:85:ff:97:8e:d9:10:f7:9b:08:48:84:0f:3b:62: 14:0c:58:21:e9:1b:69:27:8c:d4:57:a3:09:93:c7: d5:46:29:8a:0d:10:a4:2c:b6:a0:15:8b:b5:e0:69: 08:de:84:d2:84:58:fd:25:b7:86:80:82:48:19:76: 1b:ef:72:88:56:38:e1:50:02:8e:9c:50:90:bc:d1: 1c:87:6b:5e:88:6a:37:6e:95:21:f4:74:2d:c0:1f: 34:41:b8:5e:5a:0e:52:58:cb:44:95:53:ab:f0:12: 99:5e:58:20:7c:e1:4f:f0:73:5d:63:1b:2f:d7:0a: 36:1b:2f:41:df:09:22:cd:5b:06:92:b4:71:b9:9b: d4:39:97:63:81:00:65:3c:6c:85:f3:e7:c9:67:da: 6d:a5:a0:4a:29:50:a4:60:de:f3:d3:a2:8b:ad:76: aa:79:40:3f:f1:99:ea:0e:fb:bd:5d:2a:36:3c:51: d7:a7:d2:18:bd:1e:d6:09:23:8a:7e:6e:0e:d0:58: 7e:e4:99:36:76:16:5f:0f:c2:02:4f:48:4a:ff:40: 77:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:BD:79:17:B7:F3:01:51:8F:DA:55:39:D6:22:BA:20:2C:36:1C:DB X509v3 Authority Key Identifier: keyid:3E:EB:19:68:8D:33:D6:21:99:4E:5B:3D:9E:46:EC:AA:A5:09:F4:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PusZaI0z1iGZTls9nkbsqqUJ9CM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:c8:b2:6f:d8:a1:4d:f4:12:82:21:4e:f8:6d:5d:cc:fe:28: 50:77:ba:24:47:6c:3f:74:19:df:d3:40:bf:7b:25:dd:0a:38: 11:42:78:4e:d9:b6:95:b4:32:b1:ad:57:52:cd:45:41:56:01: f5:b5:0f:a7:eb:97:58:59:03:24:73:a9:15:e8:14:c6:c5:c5: 17:25:21:ef:63:5a:63:61:a0:90:a0:db:ba:d6:24:e5:a9:2c: b1:73:b1:20:bb:b8:cd:fd:f9:54:86:5c:45:4f:ed:1e:bd:45: 21:46:45:23:4b:88:25:5a:24:d7:40:62:8b:2f:f4:e2:96:39: 27:d5:58:d0:05:97:d4:a1:d6:d1:3d:c2:3f:19:9a:ef:79:d2: cc:7b:1f:d7:b1:b4:f8:56:c6:77:81:1d:98:9a:86:c7:7d:89: ef:a0:7e:a4:af:73:f2:1c:e2:50:51:80:70:34:e7:d8:bb:65: c2:02:eb:60:88:91:1f:92:16:9d:2e:28:57:a4:32:b9:c1:49: 67:48:ed:e6:ae:1c:08:99:50:f9:b5:7e:d1:aa:bf:0d:af:46: 41:f5:5e:a8:59:6d:57:25:b1:57:76:47:19:02:6f:69:f6:23: 74:77:c2:9d:f4:8d:17:dc:c6:26:e9:09:fa:9d:60:49:a2:ae: 64:44:16:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU0QUMxMTAvBgNVBAUTKDNFRUIxOTY4OEQzM0Q2MjE5OTRFNUIzRDlFNDZFQ0FB QTUwOUY0MjMwHhcNMjUxMTAzMDAwODMwWhcNMjUxMTEwMDAwODMwWjAYMRYwFAYD VQQDEw02OTA3ZjI3ZS1jNjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArKFk7tLNYSTp/oVfC1m6EgHU6WsDpGOGqKwhnq4NnSy40+xYUSLX1KCjveDO hf+XjtkQ95sISIQPO2IUDFgh6RtpJ4zUV6MJk8fVRimKDRCkLLagFYu14GkI3oTS hFj9JbeGgIJIGXYb73KIVjjhUAKOnFCQvNEch2teiGo3bpUh9HQtwB80QbheWg5S WMtElVOr8BKZXlggfOFP8HNdYxsv1wo2Gy9B3wkizVsGkrRxuZvUOZdjgQBlPGyF 8+fJZ9ptpaBKKVCkYN7z06KLrXaqeUA/8ZnqDvu9XSo2PFHXp9IYvR7WCSOKfm4O 0Fh+5Jk2dhZfD8ICT0hK/0B3eQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO+9eRe3 8wFRj9pVOdYiuiAsNhzbMB8GA1UdIwQYMBaAFD7rGWiNM9YhmU5bPZ5G7KqlCfQj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTRBQy8zNDQxRDJEMDZD NkUxMUVDQjIzM0ZCNjFDNEY5QUUwMi9QdXNaYUkwejFpR1pUbHM5bmtic3FxVUo5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1B1c1phSTB6MWlHWlRsczlua2JzcXFVSjlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTRBQy8zNDQxRDJEMDZDNkUxMUVDQjIzM0ZCNjFDNEY5QUUwMi9QdXNaYUkwejFp R1pUbHM5bmtic3FxVUo5Q00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSyLJv2KFN9BKCIU74bV3M/ihQd7okR2w/dBnf00C/eyXdCjgRQnhO 2baVtDKxrVdSzUVBVgH1tQ+n65dYWQMkc6kV6BTGxcUXJSHvY1pjYaCQoNu61iTl qSyxc7Egu7jN/flUhlxFT+0evUUhRkUjS4glWiTXQGKLL/Tiljkn1VjQBZfUodbR PcI/GZrvedLMex/XsbT4VsZ3gR2YmobHfYnvoH6kr3PyHOJQUYBwNOfYu2XCAutg iJEfkhadLihXpDK5wUlnSO3mrhwImVD5tX7Rqr8Nr0ZB9V6oWW1XJbFXdkcZAm9p 9iN0d8Kd9I0X3MYm6Qn6nWBJoq5kRBYi -----END CERTIFICATE-----Generated at Tue Nov 4 02:14:59 2025 by rpki-client