$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.mft File: Pxd5CYkXL0CSZ-D_50TuSLAXkec.mft (raw, json) Hash identifier: yPQTx6Jt0k9PqB0aHSGa/71gLwVl82Ow2oaiut+5Hjs= Subject key identifier: 1B:41:0F:30:95:9A:CD:FA:DA:24:79:E0:F6:6C:A7:28:EF:50:31:5A Authority key identifier: 3F:17:79:09:89:17:2F:40:92:67:E0:FF:E7:44:EE:48:B0:17:91:E7 Certificate issuer: /CN=A91F1303/serialNumber=3F17790989172F409267E0FFE744EE48B01791E7 Certificate serial: 4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pxd5CYkXL0CSZ-D_50TuSLAXkec.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.mft Manifest number: 4C Signing time: Mon 03 Nov 2025 07:18:42 +0000 Manifest this update: Mon 03 Nov 2025 07:18:41 +0000 Manifest next update: Mon 10 Nov 2025 07:18:41 +0000 Files and hashes: 1: Pxd5CYkXL0CSZ-D_50TuSLAXkec.crl (hash: 5G2Wc5Apu/M+EO8QV7IvMXSH4ssoAkpeW2MV5gb6avk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.crl rsync://rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pxd5CYkXL0CSZ-D_50TuSLAXkec.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:18:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1303, serialNumber=3F17790989172F409267E0FFE744EE48B01791E7 Validity Not Before: Nov 3 07:18:41 2025 GMT Not After : Nov 10 07:18:41 2025 GMT Subject: CN=69085751-5b03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ec:6d:0e:02:91:7c:40:46:0e:a2:60:2f:83: 82:5b:e2:bb:7b:b7:22:b5:74:82:31:cd:de:15:6b: c8:cf:7c:cc:1b:bb:f3:5b:d7:15:c8:d8:e5:c3:9c: 63:7f:e8:6e:e3:e0:dc:3c:59:21:0d:d0:33:02:e5: ca:f0:75:c4:01:c2:6f:31:45:81:bb:ad:c6:b1:16: 9c:0c:8d:b3:d7:2a:55:3a:69:ae:de:a1:c3:cc:6a: 82:00:8c:90:02:ea:1f:73:08:08:ad:19:8e:9e:59: 2c:64:3f:7a:e2:82:cb:1a:10:fd:93:49:94:52:4e: 45:af:b2:25:2d:ce:c5:d6:b9:57:57:a2:04:61:1a: f4:09:c2:b2:2a:63:de:96:03:83:aa:d2:3c:01:84: f5:88:a0:83:f3:28:3b:50:02:5d:c0:db:86:ab:19: 22:8d:ff:b0:61:a0:0c:01:af:01:fb:5d:ba:dd:dc: 61:77:7c:a5:de:44:db:e0:8d:95:c9:b7:61:e4:f2: d5:c4:ed:28:c4:0e:a5:5d:d6:8d:a6:40:98:6f:28: 18:48:1a:09:02:47:f7:2c:f0:90:4b:71:06:a6:87: 9c:84:09:02:2f:17:af:a5:02:a6:6a:0c:17:21:78: 4d:17:e8:37:b2:23:d6:fa:eb:bc:45:ff:0b:96:d1: 55:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:41:0F:30:95:9A:CD:FA:DA:24:79:E0:F6:6C:A7:28:EF:50:31:5A X509v3 Authority Key Identifier: keyid:3F:17:79:09:89:17:2F:40:92:67:E0:FF:E7:44:EE:48:B0:17:91:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pxd5CYkXL0CSZ-D_50TuSLAXkec.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:79:47:4c:50:fd:84:c6:47:7e:c9:f4:6e:9a:ff:94:ae:dd: 5b:ab:90:b2:2e:59:4e:b1:47:23:97:fb:e5:a4:bc:04:2f:2a: 98:1f:02:16:6a:de:0a:40:ea:8a:bb:05:4e:74:12:30:88:9b: 7d:51:b5:f1:f8:c6:84:83:1e:69:27:39:79:80:e5:16:dc:eb: ad:13:d7:4f:ba:14:67:55:ae:62:7b:61:d7:00:53:49:3f:dc: 3d:62:a7:a6:ff:9d:61:5a:02:09:ac:1b:8e:7d:8e:8b:63:ec: 94:64:ec:c6:de:dc:cb:02:f8:2a:11:53:b3:c5:b1:1a:0b:17: 02:7c:bf:a1:ad:1d:f9:50:04:10:cd:6d:20:58:c1:dd:66:ae: 6d:d8:86:34:d3:74:11:63:70:9e:41:8d:45:f2:e9:75:f5:c3: ff:1a:34:85:13:05:1f:07:51:af:36:3d:9c:a2:1c:eb:ff:35: e0:fd:a5:b2:30:28:a7:df:72:f4:42:d6:a6:df:f2:9d:cf:34: ca:8a:17:e3:52:62:46:86:42:af:02:a2:c4:f5:2d:7b:09:d5: 54:54:ca:cc:e4:68:27:1a:84:4d:53:56:d9:da:35:64:8d:91: b5:0a:fd:52:51:83:d6:07:b7:e4:66:8a:3b:04:11:4f:73:09: 62:18:f0:c8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MTMwMzExMC8GA1UEBRMoM0YxNzc5MDk4OTE3MkY0MDkyNjdFMEZGRTc0NEVFNDhC MDE3OTFFNzAeFw0yNTExMDMwNzE4NDFaFw0yNTExMTAwNzE4NDFaMBgxFjAUBgNV BAMTDTY5MDg1NzUxLTViMDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC87G0OApF8QEYOomAvg4Jb4rt7tyK1dIIxzd4Va8jPfMwbu/Nb1xXI2OXDnGN/ 6G7j4Nw8WSEN0DMC5crwdcQBwm8xRYG7rcaxFpwMjbPXKlU6aa7eocPMaoIAjJAC 6h9zCAitGY6eWSxkP3rigssaEP2TSZRSTkWvsiUtzsXWuVdXogRhGvQJwrIqY96W A4Oq0jwBhPWIoIPzKDtQAl3A24arGSKN/7BhoAwBrwH7Xbrd3GF3fKXeRNvgjZXJ t2Hk8tXE7SjEDqVd1o2mQJhvKBhIGgkCR/cs8JBLcQamh5yECQIvF6+lAqZqDBch eE0X6DeyI9b667xF/wuW0VVFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUG0EPMJWa zfraJHng9mynKO9QMVowHwYDVR0jBBgwFoAUPxd5CYkXL0CSZ+D/50TuSLAXkecw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYxMzAzLzlCNDI0RDMwNDY4 NTExRjBBODgxODgzRUM0RjlBRTAyL1B4ZDVDWWtYTDBDU1otRF81MFR1U0xBWGtl Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUHhkNUNZa1hMMENTWi1EXzUwVHVTTEFYa2VjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYx MzAzLzlCNDI0RDMwNDY4NTExRjBBODgxODgzRUM0RjlBRTAyL1B4ZDVDWWtYTDBD U1otRF81MFR1U0xBWGtlYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD95R0xQ/YTGR37J9G6a/5Su3VurkLIuWU6xRyOX++WkvAQvKpgfAhZq 3gpA6oq7BU50EjCIm31RtfH4xoSDHmknOXmA5Rbc660T10+6FGdVrmJ7YdcAU0k/ 3D1ip6b/nWFaAgmsG459jotj7JRk7Mbe3MsC+CoRU7PFsRoLFwJ8v6GtHflQBBDN bSBYwd1mrm3YhjTTdBFjcJ5BjUXy6XX1w/8aNIUTBR8HUa82PZyiHOv/NeD9pbIw KKffcvRC1qbf8p3PNMqKF+NSYkaGQq8CosT1LXsJ1VRUyszkaCcahE1TVtnaNWSN kbUK/VJRg9YHt+RmijsEEU9zCWIY8Mg= -----END CERTIFICATE-----Generated at Tue Nov 4 16:33:43 2025 by rpki-client