$ rpki-client -vvf rpki.apnic.net/member_repository/A917E65B/7F4BE9A226F411F084F59772C4F9AE02/PgYolveWFAxkBV5H1FMISCOnCCQ.mft File: PgYolveWFAxkBV5H1FMISCOnCCQ.mft (raw, json) Hash identifier: yST54SM7ZmfTt0KOYapdrHHaT14U+XKjCzwV0k1QIFs= Subject key identifier: 0E:E0:BB:EC:D1:47:9A:FB:E4:53:8F:5A:B4:C8:52:F7:65:EC:A9:F2 Authority key identifier: 3E:06:28:96:F7:96:14:0C:64:05:5E:47:D4:53:08:48:23:A7:08:24 Certificate issuer: /CN=A917E65B/serialNumber=3E062896F796140C64055E47D453084823A70824 Certificate serial: 60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgYolveWFAxkBV5H1FMISCOnCCQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E65B/7F4BE9A226F411F084F59772C4F9AE02/PgYolveWFAxkBV5H1FMISCOnCCQ.mft Manifest number: 5F Signing time: Mon 03 Nov 2025 07:04:53 +0000 Manifest this update: Mon 03 Nov 2025 07:04:52 +0000 Manifest next update: Mon 10 Nov 2025 07:04:52 +0000 Files and hashes: 1: PgYolveWFAxkBV5H1FMISCOnCCQ.crl (hash: 5C1eU/jj1C6rE3hFgV0EfOXwicC2dBJwDGp0amixW5o=) 2: B7498170318011F0A5A76C39C4F9AE02.roa (hash: 4xMCpId57nfxz7XEfKoBdilLfSUib+cCTUbVdicWXMY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E65B/7F4BE9A226F411F084F59772C4F9AE02/PgYolveWFAxkBV5H1FMISCOnCCQ.crl rsync://rpki.apnic.net/member_repository/A917E65B/7F4BE9A226F411F084F59772C4F9AE02/PgYolveWFAxkBV5H1FMISCOnCCQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgYolveWFAxkBV5H1FMISCOnCCQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:04:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 96 (0x60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E65B, serialNumber=3E062896F796140C64055E47D453084823A70824 Validity Not Before: Nov 3 07:04:52 2025 GMT Not After : Nov 10 07:04:52 2025 GMT Subject: CN=69085415-ccf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6a:e6:3c:10:dd:42:f8:a3:2f:3c:78:76:d3: 33:79:f2:7a:e8:8f:6a:5b:a3:a1:87:61:f6:86:06: 4b:b2:cf:aa:fa:bb:43:09:37:ad:a1:3a:88:e3:17: 53:1a:b8:e1:b9:1c:6c:97:68:6b:e4:b9:97:7d:d5: f1:de:d5:63:02:a2:0b:81:20:1a:ac:73:17:da:af: 11:8d:d9:cf:02:6e:52:70:2a:1f:d9:44:8b:88:7f: 50:55:b8:9e:5e:18:67:eb:a7:55:c6:9e:d5:99:2c: a6:48:33:f7:9b:e1:f0:f7:bc:fa:eb:c8:9a:02:b2: b9:ae:c6:10:f4:a4:3b:80:c3:36:2e:c3:f7:58:19: a5:c3:92:ea:2f:1a:18:e2:86:3b:26:1e:6e:b3:31: 3e:6a:b4:95:22:6f:8e:15:4c:9b:b2:f4:5e:e8:ec: ed:11:bf:20:0e:e6:5c:b6:c9:ae:e1:6e:0a:e7:19: 9f:2a:f3:ee:f1:65:34:37:ae:f8:f7:b7:a6:69:78: 8a:6a:47:ff:71:7b:c8:39:c0:59:5b:51:2a:75:43: ec:85:9a:a1:81:af:89:c6:1d:e3:08:84:17:86:63: 9f:15:fc:9c:cc:62:e5:b2:4c:92:ad:70:1e:8e:39: 2c:64:44:da:97:a9:7b:dc:60:aa:a9:9a:b8:c2:f5: d7:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:E0:BB:EC:D1:47:9A:FB:E4:53:8F:5A:B4:C8:52:F7:65:EC:A9:F2 X509v3 Authority Key Identifier: keyid:3E:06:28:96:F7:96:14:0C:64:05:5E:47:D4:53:08:48:23:A7:08:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E65B/7F4BE9A226F411F084F59772C4F9AE02/PgYolveWFAxkBV5H1FMISCOnCCQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgYolveWFAxkBV5H1FMISCOnCCQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E65B/7F4BE9A226F411F084F59772C4F9AE02/PgYolveWFAxkBV5H1FMISCOnCCQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:b6:d2:34:11:a0:9f:cb:0d:cf:57:b7:ac:e9:f9:14:e8:ad: a5:0a:93:c0:50:7d:1a:f7:d1:35:52:d4:f3:a2:8d:a0:1f:b3: 91:17:7d:ea:78:2b:97:38:e1:55:41:93:18:76:cc:f1:86:2e: 11:d4:95:46:0d:5e:22:b5:c0:e5:97:0d:85:f2:ad:89:eb:8c: 96:72:92:d0:97:e2:af:af:b0:22:32:91:b3:41:e1:bc:0a:f9: 09:b8:28:b1:bd:e0:0e:97:e0:6a:84:d7:88:6b:9d:da:fd:d4: 79:80:54:00:35:10:0c:7f:19:73:ce:30:46:cc:29:8f:f1:a0: 94:d9:77:42:f0:fb:52:cc:92:31:24:0f:9f:d1:f3:53:77:4d: 9a:70:8f:0a:d5:9b:d9:9e:94:f3:b4:b3:58:3b:ab:b6:26:3b: 3d:b7:e6:f6:fa:28:0c:33:e7:fc:42:3e:bc:ba:dc:9b:1c:ae: 03:50:7b:1f:48:dc:4d:1c:35:fc:59:8b:2c:69:ac:66:52:17: de:d0:19:c2:7d:03:ec:3b:f8:46:03:49:05:52:7d:c3:f3:63: 65:3d:58:91:f2:5f:e2:5c:b9:f2:e8:2f:56:da:6c:21:f2:60: b2:ae:6a:cc:2c:9d:d4:e1:d4:1e:e9:dc:36:7d:35:e8:d1:7a: 0b:55:21:66 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RTY1QjExMC8GA1UEBRMoM0UwNjI4OTZGNzk2MTQwQzY0MDU1RTQ3RDQ1MzA4NDgy M0E3MDgyNDAeFw0yNTExMDMwNzA0NTJaFw0yNTExMTAwNzA0NTJaMBgxFjAUBgNV BAMTDTY5MDg1NDE1LWNjZjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3auY8EN1C+KMvPHh20zN58nroj2pbo6GHYfaGBkuyz6r6u0MJN62hOojjF1Ma uOG5HGyXaGvkuZd91fHe1WMCoguBIBqscxfarxGN2c8CblJwKh/ZRIuIf1BVuJ5e GGfrp1XGntWZLKZIM/eb4fD3vPrryJoCsrmuxhD0pDuAwzYuw/dYGaXDkuovGhji hjsmHm6zMT5qtJUib44VTJuy9F7o7O0RvyAO5ly2ya7hbgrnGZ8q8+7xZTQ3rvj3 t6ZpeIpqR/9xe8g5wFlbUSp1Q+yFmqGBr4nGHeMIhBeGY58V/JzMYuWyTJKtcB6O OSxkRNqXqXvcYKqpmrjC9dctAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDuC77NFH mvvkU49atMhS92XsqfIwHwYDVR0jBBgwFoAUPgYolveWFAxkBV5H1FMISCOnCCQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdFNjVCLzdGNEJFOUEyMjZG NDExRjA4NEY1OTc3MkM0RjlBRTAyL1BnWW9sdmVXRkF4a0JWNUgxRk1JU0NPbkND US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUGdZb2x2ZVdGQXhrQlY1SDFGTUlTQ09uQ0NRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdF NjVCLzdGNEJFOUEyMjZGNDExRjA4NEY1OTc3MkM0RjlBRTAyL1BnWW9sdmVXRkF4 a0JWNUgxRk1JU0NPbkNDUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAq20jQRoJ/LDc9Xt6zp+RToraUKk8BQfRr30TVS1POijaAfs5EXfep4 K5c44VVBkxh2zPGGLhHUlUYNXiK1wOWXDYXyrYnrjJZyktCX4q+vsCIykbNB4bwK +Qm4KLG94A6X4GqE14hrndr91HmAVAA1EAx/GXPOMEbMKY/xoJTZd0Lw+1LMkjEk D5/R81N3TZpwjwrVm9melPO0s1g7q7YmOz235vb6KAwz5/xCPry63JscrgNQex9I 3E0cNfxZiyxprGZSF97QGcJ9A+w7+EYDSQVSfcPzY2U9WJHyX+JcufLoL1babCHy YLKuaswsndTh1B7p3DZ9NejRegtVIWY= -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:11 2025 by rpki-client