$ rpki-client -vvf rpki.apnic.net/member_repository/A914EE0C/22D53652D67211E4A2122351C4F9AE02/PitYQ36GJEE5rkzQPZf0A0KFBzY.mft File: PitYQ36GJEE5rkzQPZf0A0KFBzY.mft (raw, json) Hash identifier: kLsHvYRAX5zBju/bZ/xWZ/AQnH7wqHYXjSHTuwLC/dI= Subject key identifier: 46:E5:CC:A4:30:2B:44:F0:CD:84:92:CD:CF:99:B8:8D:9E:88:A8:59 Authority key identifier: 3E:2B:58:43:7E:86:24:41:39:AE:4C:D0:3D:97:F4:03:42:85:07:36 Certificate issuer: /CN=A914EE0C/serialNumber=3E2B58437E86244139AE4CD03D97F40342850736 Certificate serial: 2736 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PitYQ36GJEE5rkzQPZf0A0KFBzY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EE0C/22D53652D67211E4A2122351C4F9AE02/PitYQ36GJEE5rkzQPZf0A0KFBzY.mft Manifest number: 2712 Signing time: Sun 02 Nov 2025 15:40:34 +0000 Manifest this update: Sun 02 Nov 2025 15:40:33 +0000 Manifest next update: Sun 09 Nov 2025 15:40:33 +0000 Files and hashes: 1: PitYQ36GJEE5rkzQPZf0A0KFBzY.crl (hash: bSoWYO3zlBGgTx5kZi9l8UZTtvXDooOToJ7V+PcBQa4=) 2: 7CEC0182B10C11E5BB6B2A16C4F9AE02.roa (hash: rWS5j2TJ+tCGGvBtanx4musy7r04IRKphVI4Md/BpKk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EE0C/22D53652D67211E4A2122351C4F9AE02/PitYQ36GJEE5rkzQPZf0A0KFBzY.crl rsync://rpki.apnic.net/member_repository/A914EE0C/22D53652D67211E4A2122351C4F9AE02/PitYQ36GJEE5rkzQPZf0A0KFBzY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PitYQ36GJEE5rkzQPZf0A0KFBzY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 15:40:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10038 (0x2736) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EE0C, serialNumber=3E2B58437E86244139AE4CD03D97F40342850736 Validity Not Before: Nov 2 15:40:33 2025 GMT Not After : Nov 9 15:40:33 2025 GMT Subject: CN=69077b71-dadb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:a6:46:5a:94:75:6c:0e:09:d4:4b:04:e7:88: db:37:9e:0e:2b:67:5f:00:4d:95:f8:63:5e:33:1b: 8d:cc:2a:80:11:c5:de:7a:bf:7e:e9:f4:38:ba:6d: b8:b7:92:62:18:62:0d:2e:13:a8:28:4d:e9:d7:44: a6:d0:1b:53:21:24:c6:a7:46:eb:7e:7e:75:b7:9f: cb:09:90:97:13:a5:c7:b2:4d:f2:45:1f:bf:e1:b7: 96:20:0e:ee:5a:02:ad:2d:0f:a3:03:1d:94:b0:92: 95:65:43:3e:c4:a2:17:7f:73:ec:d0:dd:b2:e9:67: 18:b0:64:d8:73:46:90:d5:76:2a:e3:6c:7b:ee:47: 71:c8:50:6d:71:09:c6:66:63:7d:75:63:fd:19:bc: 15:d7:1c:d3:d2:7f:9a:73:9e:7d:b1:d7:dc:71:b0: 4c:0b:bd:9f:bc:cb:9a:cd:df:60:89:29:a4:b4:3e: 12:5c:c5:0b:a1:cf:47:c6:ea:92:67:7c:7d:9f:7e: fe:78:b6:ba:88:7d:aa:49:8f:98:a4:f7:3d:5a:1f: 7b:f0:bc:92:8a:ef:57:32:86:0c:f0:ed:d6:dd:b8: 2a:dd:40:64:2e:e4:1d:68:e5:0d:d0:4e:fc:36:7d: b4:e3:0d:ff:f0:64:e8:79:aa:10:d1:fc:1b:48:10: 90:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:E5:CC:A4:30:2B:44:F0:CD:84:92:CD:CF:99:B8:8D:9E:88:A8:59 X509v3 Authority Key Identifier: keyid:3E:2B:58:43:7E:86:24:41:39:AE:4C:D0:3D:97:F4:03:42:85:07:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EE0C/22D53652D67211E4A2122351C4F9AE02/PitYQ36GJEE5rkzQPZf0A0KFBzY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PitYQ36GJEE5rkzQPZf0A0KFBzY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EE0C/22D53652D67211E4A2122351C4F9AE02/PitYQ36GJEE5rkzQPZf0A0KFBzY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:49:dc:16:5f:c8:3f:b6:05:e0:79:70:2d:52:e2:9b:4f:b1: 6f:43:e0:c9:68:51:39:59:8e:ba:c8:88:8d:39:39:92:a7:e4: 81:2a:96:96:e5:ed:eb:c5:17:92:67:9a:c7:0b:c5:b5:9c:f2: 28:c5:cb:7e:85:9c:3a:a8:41:98:d2:e9:6b:a3:f1:c1:77:8d: c2:68:43:43:90:14:4e:17:9f:cd:52:50:d8:f1:7d:ba:b4:43: fe:ee:09:72:5d:29:e8:7a:da:7f:27:48:8b:f7:81:76:18:9e: d5:26:9a:82:fc:87:ec:97:77:8e:e4:c5:47:03:5b:84:09:4a: cb:04:57:a3:b6:c6:ef:dc:a5:d0:95:87:f2:fa:e2:fc:0e:0d: 8b:f4:07:38:58:8f:c2:cb:a6:db:dd:87:ce:e6:81:5a:a9:92: 48:3a:39:5e:5e:af:89:fb:55:05:7a:6d:72:8c:c4:84:e0:e2: e8:6b:2f:1c:1c:d0:e7:a6:19:f1:23:d2:64:44:85:a8:d0:4b: 1e:13:85:03:03:26:4b:28:62:84:8d:0c:e6:d9:cf:65:84:b9: 92:a8:34:3c:49:81:31:0d:ca:43:ad:39:05:79:55:67:10:98: 78:14:bf:43:a1:c6:7d:fa:2e:8e:8c:db:19:28:60:e4:e4:ae: 49:10:a3:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJzYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVFMEMxMTAvBgNVBAUTKDNFMkI1ODQzN0U4NjI0NDEzOUFFNENEMDNEOTdGNDAz NDI4NTA3MzYwHhcNMjUxMTAyMTU0MDMzWhcNMjUxMTA5MTU0MDMzWjAYMRYwFAYD VQQDEw02OTA3N2I3MS1kYWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5qZGWpR1bA4J1EsE54jbN54OK2dfAE2V+GNeMxuNzCqAEcXeer9+6fQ4um24 t5JiGGINLhOoKE3p10Sm0BtTISTGp0brfn51t5/LCZCXE6XHsk3yRR+/4beWIA7u WgKtLQ+jAx2UsJKVZUM+xKIXf3Ps0N2y6WcYsGTYc0aQ1XYq42x77kdxyFBtcQnG ZmN9dWP9GbwV1xzT0n+ac559sdfccbBMC72fvMuazd9giSmktD4SXMULoc9HxuqS Z3x9n37+eLa6iH2qSY+YpPc9Wh978LySiu9XMoYM8O3W3bgq3UBkLuQdaOUN0E78 Nn204w3/8GToeaoQ0fwbSBCQnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEblzKQw K0TwzYSSzc+ZuI2eiKhZMB8GA1UdIwQYMBaAFD4rWEN+hiRBOa5M0D2X9ANChQc2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUUwQy8yMkQ1MzY1MkQ2 NzIxMUU0QTIxMjIzNTFDNEY5QUUwMi9QaXRZUTM2R0pFRTVya3pRUFpmMEEwS0ZC elkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BpdFlRMzZHSkVFNXJrelFQWmYwQTBLRkJ6WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUUwQy8yMkQ1MzY1MkQ2NzIxMUU0QTIxMjIzNTFDNEY5QUUwMi9QaXRZUTM2R0pF RTVya3pRUFpmMEEwS0ZCelkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcSdwWX8g/tgXgeXAtUuKbT7FvQ+DJaFE5WY66yIiNOTmSp+SBKpaW 5e3rxReSZ5rHC8W1nPIoxct+hZw6qEGY0ulro/HBd43CaENDkBROF5/NUlDY8X26 tEP+7glyXSnoetp/J0iL94F2GJ7VJpqC/Ifsl3eO5MVHA1uECUrLBFejtsbv3KXQ lYfy+uL8Dg2L9Ac4WI/Cy6bb3YfO5oFaqZJIOjleXq+J+1UFem1yjMSE4OLoay8c HNDnphnxI9JkRIWo0EseE4UDAyZLKGKEjQzm2c9lhLmSqDQ8SYExDcpDrTkFeVVn EJh4FL9DocZ9+i6OjNsZKGDk5K5JEKP7 -----END CERTIFICATE-----Generated at Mon Nov 3 18:11:05 2025 by rpki-client