$ rpki-client -vvf rpki.apnic.net/member_repository/A91B92DC/563287F6812911EDA5B15073C4F9AE02/PtImrpJ_g5gXgFRs42LzNp7bJLM.mft File: PtImrpJ_g5gXgFRs42LzNp7bJLM.mft (raw, json) Hash identifier: FMroUUmmoUJP1dBWkQa82FZ3c307LKS0OTIMxJWDWEA= Subject key identifier: B6:92:6B:64:25:63:38:87:62:32:CD:E6:44:8E:02:FC:FE:7D:DF:74 Authority key identifier: 3E:D2:26:AE:92:7F:83:98:17:80:54:6C:E3:62:F3:36:9E:DB:24:B3 Certificate issuer: /CN=A91B92DC/serialNumber=3ED226AE927F83981780546CE362F3369EDB24B3 Certificate serial: 021E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PtImrpJ_g5gXgFRs42LzNp7bJLM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B92DC/563287F6812911EDA5B15073C4F9AE02/PtImrpJ_g5gXgFRs42LzNp7bJLM.mft Manifest number: 021A Signing time: Wed 05 Nov 2025 02:17:44 +0000 Manifest this update: Wed 05 Nov 2025 02:17:44 +0000 Manifest next update: Wed 12 Nov 2025 02:17:43 +0000 Files and hashes: 1: PtImrpJ_g5gXgFRs42LzNp7bJLM.crl (hash: 3mCDxSZcXCtdKKso0GvLop3nUP0JJVaqNg/3gCxlvx4=) 2: 3CD61DC8812D11ED9C04940EC4F9AE02.roa (hash: cOiY+eFyn2JhrTs/7WoKVeEfi4A0VW9I3AIS/bx3zYY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B92DC/563287F6812911EDA5B15073C4F9AE02/PtImrpJ_g5gXgFRs42LzNp7bJLM.crl rsync://rpki.apnic.net/member_repository/A91B92DC/563287F6812911EDA5B15073C4F9AE02/PtImrpJ_g5gXgFRs42LzNp7bJLM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PtImrpJ_g5gXgFRs42LzNp7bJLM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:17:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 542 (0x21e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B92DC, serialNumber=3ED226AE927F83981780546CE362F3369EDB24B3 Validity Not Before: Nov 5 02:17:44 2025 GMT Not After : Nov 12 02:17:43 2025 GMT Subject: CN=690ab3c8-4fee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:8f:e3:77:dc:1c:72:01:89:37:b2:35:6b:8a: 04:e2:97:e8:7c:7d:b5:f5:93:2a:20:5c:51:53:db: 62:0e:b8:bd:6e:b4:31:66:dc:c7:bd:d5:fe:c4:d9: 46:ed:29:92:a5:1c:33:9d:a3:de:8d:2a:7a:4a:74: 88:aa:5e:16:3b:6e:e6:dc:fa:bc:bc:93:bc:38:65: 82:c6:29:c7:0e:de:5d:09:dd:07:60:c5:ac:c0:f9: 63:9a:6e:e1:2c:82:6c:83:89:a0:0d:4a:71:71:d0: 8a:a4:ef:6f:f6:cd:7a:8f:e1:9d:45:03:59:29:d6: 53:54:f2:2f:bf:f3:f5:62:c8:f1:64:ec:74:a9:32: 7d:68:90:53:2d:bc:f9:c7:43:07:96:96:6d:3c:80: 57:a1:c7:de:27:ab:b1:d9:6b:20:16:56:5f:a0:b2: 34:75:44:18:c0:1b:fe:c9:da:f4:eb:03:73:17:19: 46:1d:46:8c:13:cc:d8:48:f1:6d:84:bd:d2:f1:c3: 43:4d:11:a6:89:10:68:18:66:bb:de:4a:a6:fa:cf: 93:25:2c:cc:cd:11:7d:11:ee:86:68:7e:d5:08:a1: 59:8c:cf:a4:31:e1:4c:7e:6b:16:32:3a:d7:6a:13: 1c:e5:3f:1e:23:f7:2d:ad:a1:83:8d:4b:a3:c5:aa: 0f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:92:6B:64:25:63:38:87:62:32:CD:E6:44:8E:02:FC:FE:7D:DF:74 X509v3 Authority Key Identifier: keyid:3E:D2:26:AE:92:7F:83:98:17:80:54:6C:E3:62:F3:36:9E:DB:24:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B92DC/563287F6812911EDA5B15073C4F9AE02/PtImrpJ_g5gXgFRs42LzNp7bJLM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PtImrpJ_g5gXgFRs42LzNp7bJLM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B92DC/563287F6812911EDA5B15073C4F9AE02/PtImrpJ_g5gXgFRs42LzNp7bJLM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:96:f2:4b:64:61:fe:0d:74:f3:ca:10:67:f2:f0:90:1f:52: 63:db:d8:5c:3c:88:7e:35:21:84:55:c2:b8:c4:d5:1c:de:1a: 1e:9c:2b:02:0e:d8:80:f4:0e:de:64:93:a4:c9:26:82:5f:92: 13:28:76:49:24:7c:4a:48:ea:70:5d:bf:14:ef:2b:99:32:c5: 10:0c:6d:c4:bc:e2:41:65:9f:c5:c3:8f:b9:f1:4b:52:d1:54: ca:ab:35:33:23:e4:a5:fe:f7:07:1f:7c:ce:b8:6e:d1:ef:96: 5d:e2:08:40:91:0c:6a:5f:ff:f2:01:0a:bc:cd:e6:24:be:97: 27:ce:2f:db:3e:21:df:c1:c9:e7:73:df:75:7a:d3:7a:9c:49: 77:aa:eb:e0:57:d6:00:ff:99:81:2d:d2:74:f1:f4:d8:b7:22: d3:d8:64:c7:25:b5:ee:8b:70:a3:3b:20:69:df:53:4d:ac:c2: de:9f:60:74:1f:ea:cf:7b:ca:3d:c2:d6:6d:f9:8e:db:09:ea: 39:8d:91:5c:85:9e:5d:98:01:31:4e:6a:1d:84:69:56:c2:db: 43:46:f1:65:ad:7f:33:68:16:01:c4:6b:c1:4e:b3:ad:ac:db: ce:8e:89:23:37:0b:8f:c4:c6:96:2d:3c:7c:1d:3d:07:55:fc: 1e:46:7d:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkyREMxMTAvBgNVBAUTKDNFRDIyNkFFOTI3RjgzOTgxNzgwNTQ2Q0UzNjJGMzM2 OUVEQjI0QjMwHhcNMjUxMTA1MDIxNzQ0WhcNMjUxMTEyMDIxNzQzWjAYMRYwFAYD VQQDEw02OTBhYjNjOC00ZmVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Y/jd9wccgGJN7I1a4oE4pfofH219ZMqIFxRU9tiDri9brQxZtzHvdX+xNlG 7SmSpRwznaPejSp6SnSIql4WO27m3Pq8vJO8OGWCxinHDt5dCd0HYMWswPljmm7h LIJsg4mgDUpxcdCKpO9v9s16j+GdRQNZKdZTVPIvv/P1YsjxZOx0qTJ9aJBTLbz5 x0MHlpZtPIBXocfeJ6ux2WsgFlZfoLI0dUQYwBv+ydr06wNzFxlGHUaME8zYSPFt hL3S8cNDTRGmiRBoGGa73kqm+s+TJSzMzRF9Ee6GaH7VCKFZjM+kMeFMfmsWMjrX ahMc5T8eI/ctraGDjUujxaoPPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLaSa2Ql YziHYjLN5kSOAvz+fd90MB8GA1UdIwQYMBaAFD7SJq6Sf4OYF4BUbONi8zae2ySz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTJEQy81NjMyODdGNjgx MjkxMUVEQTVCMTUwNzNDNEY5QUUwMi9QdEltcnBKX2c1Z1hnRlJzNDJMek5wN2JK TE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1B0SW1ycEpfZzVnWGdGUnM0Mkx6TnA3YkpMTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTJEQy81NjMyODdGNjgxMjkxMUVEQTVCMTUwNzNDNEY5QUUwMi9QdEltcnBKX2c1 Z1hnRlJzNDJMek5wN2JKTE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhlvJLZGH+DXTzyhBn8vCQH1Jj29hcPIh+NSGEVcK4xNUc3hoenCsC DtiA9A7eZJOkySaCX5ITKHZJJHxKSOpwXb8U7yuZMsUQDG3EvOJBZZ/Fw4+58UtS 0VTKqzUzI+Sl/vcHH3zOuG7R75Zd4ghAkQxqX//yAQq8zeYkvpcnzi/bPiHfwcnn c991etN6nEl3quvgV9YA/5mBLdJ08fTYtyLT2GTHJbXui3CjOyBp31NNrMLen2B0 H+rPe8o9wtZt+Y7bCeo5jZFchZ5dmAExTmodhGlWwttDRvFlrX8zaBYBxGvBTrOt rNvOjokjNwuPxMaWLTx8HT0HVfweRn3D -----END CERTIFICATE-----Generated at Wed Nov 5 05:26:59 2025 by rpki-client