$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft File: PfG7945KTnVEGahIyf0My9LmpFg.mft (raw, json) Hash identifier: COrjkgnzYbcmbO4BuCf9/Q9/JL+RcYXpH2bHnUjQDaM= Subject key identifier: 1D:40:CC:45:39:4B:EC:3C:E1:4C:6B:F7:61:90:84:A4:DF:5F:FF:BB Authority key identifier: 3D:F1:BB:F7:8E:4A:4E:75:44:19:A8:48:C9:FD:0C:CB:D2:E6:A4:58 Certificate issuer: /CN=A91C1052/serialNumber=3DF1BBF78E4A4E754419A848C9FD0CCBD2E6A458 Certificate serial: 0211 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfG7945KTnVEGahIyf0My9LmpFg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft Manifest number: 020A Signing time: Fri 19 Sep 2025 02:42:44 +0000 Manifest this update: Fri 19 Sep 2025 02:42:43 +0000 Manifest next update: Fri 26 Sep 2025 02:42:43 +0000 Files and hashes: 1: PfG7945KTnVEGahIyf0My9LmpFg.crl (hash: Z6iw2FCiDTQjZRdwAZxPZt2XKo0BNEiXMUSx8F+ycVs=) 2: 74A3C1988E8311ED903ADA1CC4F9AE02.roa (hash: tRn5pXPKK2uEloHBe0GH9yfzRyq3HlL5LYvlAIQdS38=) 3: D6E2AAC0772911ED95084884C4F9AE02.roa (hash: dJsLSVlZN9Pxyi6rXrFH13Jbq2ezDlbcKNiOzrGi8Nw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.crl rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfG7945KTnVEGahIyf0My9LmpFg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 02:42:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 529 (0x211) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1052, serialNumber=3DF1BBF78E4A4E754419A848C9FD0CCBD2E6A458 Validity Not Before: Sep 19 02:42:43 2025 GMT Not After : Sep 26 02:42:43 2025 GMT Subject: CN=68ccc323-cc12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4e:10:e4:1e:bb:ac:86:6d:0f:76:3c:3f:c1: d9:d7:22:38:2a:fa:57:c7:97:a3:19:9d:de:63:23: b5:19:a0:69:ea:3c:80:60:6a:c2:bf:c7:a9:0f:cd: e5:8a:c7:1e:53:29:46:46:5f:05:32:ae:f5:70:01: c1:5c:8c:35:17:14:2e:d3:f5:7f:d4:c4:61:39:3c: 55:f1:dd:11:b2:4f:82:71:a3:10:04:95:5f:4f:9a: 2e:0d:ac:95:4c:94:a2:44:50:dd:a0:d9:9d:fb:bc: 63:cd:7e:d7:5d:84:27:72:af:e7:f3:b3:3a:be:84: 66:42:64:b5:61:bf:f6:7e:ec:d4:70:31:16:8f:f5: 3b:8c:5f:02:53:3b:1b:6a:49:00:de:6c:cb:dd:30: c3:de:87:fa:00:f7:a8:cd:25:64:ba:88:d7:fe:0a: d3:6e:b7:11:e1:94:f7:20:48:b4:8b:7e:0a:4e:2d: 8a:08:ce:4a:0d:70:10:bc:f5:1b:f1:f0:58:0b:d8: e7:01:72:e9:e3:20:3a:b4:a2:02:2c:98:7b:c9:12: cb:63:2e:bb:1a:fe:fc:3a:16:4a:5b:67:f7:ad:49: 5e:fb:e5:f2:36:06:b8:4f:98:6e:c2:86:4e:5d:71: 93:7e:13:9d:7a:98:f0:85:d7:43:40:f3:e1:aa:a3: 6c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:40:CC:45:39:4B:EC:3C:E1:4C:6B:F7:61:90:84:A4:DF:5F:FF:BB X509v3 Authority Key Identifier: keyid:3D:F1:BB:F7:8E:4A:4E:75:44:19:A8:48:C9:FD:0C:CB:D2:E6:A4:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfG7945KTnVEGahIyf0My9LmpFg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:b0:57:a4:50:50:93:80:a1:32:98:8c:5d:57:14:70:36:13: bb:66:de:9b:7c:42:3d:18:d3:5f:02:50:93:6a:54:85:52:4c: 13:8e:84:57:f1:fe:1f:98:32:12:5f:95:17:8f:f3:6e:63:f8: 8c:94:6c:a6:ab:61:f0:ff:26:ca:95:e9:1d:25:06:28:55:06: c6:8c:61:ea:d0:95:86:18:f5:a5:c3:0b:dc:41:5a:48:fa:65: b5:f3:c4:2d:b1:84:85:da:72:7e:fc:e4:74:b7:98:f7:28:12: 58:71:c4:eb:45:2d:77:3a:25:1b:ea:da:96:1a:64:54:ad:ff: 65:cb:21:53:5a:8e:a4:64:74:58:c0:1a:66:6c:a0:fe:8f:a9: 63:e1:02:76:6e:18:13:93:ad:e0:87:21:9c:3f:45:a4:62:e2: 11:6b:75:5c:49:07:03:1d:b8:ee:e4:af:95:5c:30:7a:e4:82: e1:79:f5:f8:3d:c9:48:ba:a7:3a:98:4c:6e:12:fb:19:31:85: 5c:16:ff:cf:93:d2:17:68:da:9c:88:7b:cf:bc:f6:70:54:96: 3e:d8:a8:22:e2:fe:b2:ec:57:8a:92:a8:16:5d:7f:8f:26:18: b6:f1:06:7a:4e:0e:07:cf:7e:7d:1d:dc:5e:02:bb:7f:77:cc: 2b:73:85:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzEwNTIxMTAvBgNVBAUTKDNERjFCQkY3OEU0QTRFNzU0NDE5QTg0OEM5RkQwQ0NC RDJFNkE0NTgwHhcNMjUwOTE5MDI0MjQzWhcNMjUwOTI2MDI0MjQzWjAYMRYwFAYD VQQDEw02OGNjYzMyMy1jYzEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyE4Q5B67rIZtD3Y8P8HZ1yI4KvpXx5ejGZ3eYyO1GaBp6jyAYGrCv8epD83l isceUylGRl8FMq71cAHBXIw1FxQu0/V/1MRhOTxV8d0Rsk+CcaMQBJVfT5ouDayV TJSiRFDdoNmd+7xjzX7XXYQncq/n87M6voRmQmS1Yb/2fuzUcDEWj/U7jF8CUzsb akkA3mzL3TDD3of6APeozSVkuojX/grTbrcR4ZT3IEi0i34KTi2KCM5KDXAQvPUb 8fBYC9jnAXLp4yA6tKICLJh7yRLLYy67Gv78OhZKW2f3rUle++XyNga4T5huwoZO XXGTfhOdepjwhddDQPPhqqNsywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB1AzEU5 S+w84Uxr92GQhKTfX/+7MB8GA1UdIwQYMBaAFD3xu/eOSk51RBmoSMn9DMvS5qRY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTA1Mi84MDZGQjI3Njc3 MjYxMUVEODZEMDk2ODBDNEY5QUUwMi9QZkc3OTQ1S1RuVkVHYWhJeWYwTXk5TG1w RmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BmRzc5NDVLVG5WRUdhaEl5ZjBNeTlMbXBGZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTA1Mi84MDZGQjI3Njc3MjYxMUVEODZEMDk2ODBDNEY5QUUwMi9QZkc3OTQ1S1Ru VkVHYWhJeWYwTXk5TG1wRmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAsFekUFCTgKEymIxdVxRwNhO7Zt6bfEI9GNNfAlCTalSFUkwTjoRX 8f4fmDISX5UXj/NuY/iMlGymq2Hw/ybKlekdJQYoVQbGjGHq0JWGGPWlwwvcQVpI +mW188QtsYSF2nJ+/OR0t5j3KBJYccTrRS13OiUb6tqWGmRUrf9lyyFTWo6kZHRY wBpmbKD+j6lj4QJ2bhgTk63ghyGcP0WkYuIRa3VcSQcDHbju5K+VXDB65ILhefX4 PclIuqc6mExuEvsZMYVcFv/Pk9IXaNqciHvPvPZwVJY+2Kgi4v6y7FeKkqgWXX+P Jhi28QZ6Tg4Hz359HdxeArt/d8wrc4VM -----END CERTIFICATE-----Generated at Fri Sep 19 11:56:34 2025 by rpki-client