$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3680/D4991862C5C811EB890C0D0BC4F9AE02/PudBKv6HPx1FurYUcUoyAeNilpE.mft File: PudBKv6HPx1FurYUcUoyAeNilpE.mft (raw, json) Hash identifier: /UOSR+3ouhdeH6hHW3GHF5CbnoGlvInWSWRlggYowD0= Subject key identifier: 90:4B:B8:F9:52:7F:4A:EE:40:67:B1:C7:83:52:26:F4:A6:6B:16:8F Authority key identifier: 3E:E7:41:2A:FE:87:3F:1D:45:BA:B6:14:71:4A:32:01:E3:62:96:91 Certificate issuer: /CN=A91E3680/serialNumber=3EE7412AFE873F1D45BAB614714A3201E3629691 Certificate serial: 060F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PudBKv6HPx1FurYUcUoyAeNilpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3680/D4991862C5C811EB890C0D0BC4F9AE02/PudBKv6HPx1FurYUcUoyAeNilpE.mft Manifest number: 0609 Signing time: Tue 04 Nov 2025 22:57:37 +0000 Manifest this update: Tue 04 Nov 2025 22:57:36 +0000 Manifest next update: Tue 11 Nov 2025 22:57:36 +0000 Files and hashes: 1: PudBKv6HPx1FurYUcUoyAeNilpE.crl (hash: g/nOaoqFb/jsloQ3sn6hnsst6CWpL1InBAlLwWHd0/Y=) 2: B46FE2D0C5CA11EBB86D320BC4F9AE02.roa (hash: 3B4/3AAyZ28QeeGH+anThU9lLQ63dUv2fBzc3BmfNS0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3680/D4991862C5C811EB890C0D0BC4F9AE02/PudBKv6HPx1FurYUcUoyAeNilpE.crl rsync://rpki.apnic.net/member_repository/A91E3680/D4991862C5C811EB890C0D0BC4F9AE02/PudBKv6HPx1FurYUcUoyAeNilpE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PudBKv6HPx1FurYUcUoyAeNilpE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:57:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1551 (0x60f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3680, serialNumber=3EE7412AFE873F1D45BAB614714A3201E3629691 Validity Not Before: Nov 4 22:57:36 2025 GMT Not After : Nov 11 22:57:36 2025 GMT Subject: CN=690a84e1-7bc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:98:2e:32:8d:8a:c3:f5:99:00:3b:7d:a6:4b: d5:19:14:aa:91:8e:88:33:b5:a8:10:10:18:78:a2: cc:6f:cb:5d:51:c6:45:1a:6d:9a:09:2a:3f:43:c3: ff:2f:1b:1c:b4:f4:42:ba:4e:b7:77:28:94:09:23: cd:cc:3a:92:ad:12:4f:32:8b:e5:1e:6b:03:c5:21: f7:07:85:71:8b:01:a9:29:45:b3:e5:01:06:02:28: cb:eb:75:10:48:3d:fa:13:6b:35:fa:58:c7:53:c6: b6:0f:fb:84:72:41:ed:91:d5:d7:4f:a1:0a:ff:33: c0:c4:7d:e4:68:7a:35:b8:6d:44:e7:d7:72:d5:2d: 31:8c:e8:7b:ca:90:e2:f7:af:d7:77:f9:68:be:64: f6:56:b1:bc:7f:2a:23:de:ea:ca:99:7e:1d:7d:e5: 8e:df:99:06:08:d0:2d:5c:d7:75:1c:11:a8:e4:29: dd:55:c7:47:50:90:72:c2:b6:64:fc:c5:59:9c:17: 6b:bb:03:18:b4:32:e9:88:46:e3:d8:37:0a:85:e4: 0b:d6:6f:d6:6a:37:2d:ca:09:19:25:92:ad:b0:4d: fb:b1:fc:c5:7f:64:0e:7a:bc:5a:5b:11:34:2d:5d: 34:e9:f2:9b:94:86:55:39:e9:c8:7e:4c:1c:2d:60: a1:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:4B:B8:F9:52:7F:4A:EE:40:67:B1:C7:83:52:26:F4:A6:6B:16:8F X509v3 Authority Key Identifier: keyid:3E:E7:41:2A:FE:87:3F:1D:45:BA:B6:14:71:4A:32:01:E3:62:96:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3680/D4991862C5C811EB890C0D0BC4F9AE02/PudBKv6HPx1FurYUcUoyAeNilpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PudBKv6HPx1FurYUcUoyAeNilpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3680/D4991862C5C811EB890C0D0BC4F9AE02/PudBKv6HPx1FurYUcUoyAeNilpE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:65:db:18:40:05:aa:cc:25:76:29:f8:7e:98:5a:12:74:3c: b1:22:e4:5f:26:2f:7c:96:ba:55:3b:f2:38:79:4a:0a:79:1c: 07:93:da:8d:ca:78:6e:a1:52:08:a5:3e:d4:e8:ed:ae:96:9f: e6:af:0a:16:75:4b:1e:b4:9a:ff:42:03:01:eb:2f:e7:50:31: ab:b4:2e:80:84:3b:ab:b6:1e:9a:28:5d:6d:2a:67:29:06:b0: 6b:6c:2c:07:04:c4:19:1e:c1:0c:56:a2:a0:67:b3:0d:a6:ce: bb:45:32:13:4c:31:66:f0:6e:08:d2:0b:20:ee:c4:c4:58:97: 1e:18:89:44:94:6f:02:d1:8c:ea:64:83:53:e0:e7:15:04:41: f9:46:d2:f0:1d:53:49:86:4c:6c:60:1f:bc:c7:ed:37:55:9a: ce:43:b6:0b:94:b8:46:e4:cd:da:a2:6e:88:73:10:70:8c:1d: 43:34:43:b4:09:d8:3b:d8:a3:9c:32:b0:f1:4e:31:c0:21:b4: e8:04:84:97:b1:7b:3e:6d:b2:83:f8:ea:74:e9:96:21:83:d5: 32:ac:23:aa:56:cc:43:c6:1f:6d:0b:a3:10:91:d6:f7:bd:0f: 0d:86:f4:8e:7f:ff:ef:9e:02:64:45:d2:87:3c:61:96:15:74: ff:2a:57:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBg8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM2ODAxMTAvBgNVBAUTKDNFRTc0MTJBRkU4NzNGMUQ0NUJBQjYxNDcxNEEzMjAx RTM2Mjk2OTEwHhcNMjUxMTA0MjI1NzM2WhcNMjUxMTExMjI1NzM2WjAYMRYwFAYD VQQDEw02OTBhODRlMS03YmM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6pguMo2Kw/WZADt9pkvVGRSqkY6IM7WoEBAYeKLMb8tdUcZFGm2aCSo/Q8P/ LxsctPRCuk63dyiUCSPNzDqSrRJPMovlHmsDxSH3B4VxiwGpKUWz5QEGAijL63UQ SD36E2s1+ljHU8a2D/uEckHtkdXXT6EK/zPAxH3kaHo1uG1E59dy1S0xjOh7ypDi 96/Xd/lovmT2VrG8fyoj3urKmX4dfeWO35kGCNAtXNd1HBGo5CndVcdHUJBywrZk /MVZnBdruwMYtDLpiEbj2DcKheQL1m/WajctygkZJZKtsE37sfzFf2QOerxaWxE0 LV006fKblIZVOenIfkwcLWCh5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJBLuPlS f0ruQGexx4NSJvSmaxaPMB8GA1UdIwQYMBaAFD7nQSr+hz8dRbq2FHFKMgHjYpaR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzY4MC9ENDk5MTg2MkM1 QzgxMUVCODkwQzBEMEJDNEY5QUUwMi9QdWRCS3Y2SFB4MUZ1cllVY1VveUFlTmls cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1B1ZEJLdjZIUHgxRnVyWVVjVW95QWVOaWxwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzY4MC9ENDk5MTg2MkM1QzgxMUVCODkwQzBEMEJDNEY5QUUwMi9QdWRCS3Y2SFB4 MUZ1cllVY1VveUFlTmlscEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6ZdsYQAWqzCV2Kfh+mFoSdDyxIuRfJi98lrpVO/I4eUoKeRwHk9qN ynhuoVIIpT7U6O2ulp/mrwoWdUsetJr/QgMB6y/nUDGrtC6AhDurth6aKF1tKmcp BrBrbCwHBMQZHsEMVqKgZ7MNps67RTITTDFm8G4I0gsg7sTEWJceGIlElG8C0Yzq ZINT4OcVBEH5RtLwHVNJhkxsYB+8x+03VZrOQ7YLlLhG5M3aom6IcxBwjB1DNEO0 Cdg72KOcMrDxTjHAIbToBISXsXs+bbKD+Op06ZYhg9UyrCOqVsxDxh9tC6MQkdb3 vQ8NhvSOf//vngJkRdKHPGGWFXT/KldA -----END CERTIFICATE-----Generated at Wed Nov 5 05:50:08 2025 by rpki-client