$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.mft File: pgyYIfUwsNU6Z6mLdnGWxAotWmY.mft (raw, json) Hash identifier: s+7Ajt8oaT3ZX7/8pRrBhOIORMhHASg5XT48zxrQB3s= Subject key identifier: A3:1F:A8:E9:37:9D:A2:8E:FB:66:29:63:B5:18:98:17:53:66:95:75 Authority key identifier: A6:0C:98:21:F5:30:B0:D5:3A:67:A9:8B:76:71:96:C4:0A:2D:5A:66 Certificate issuer: /CN=A91E3B25/serialNumber=A60C9821F530B0D53A67A98B767196C40A2D5A66 Certificate serial: 16FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgyYIfUwsNU6Z6mLdnGWxAotWmY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.mft Manifest number: 2032 Signing time: Thu 18 Sep 2025 16:46:16 +0000 Manifest this update: Thu 18 Sep 2025 16:46:16 +0000 Manifest next update: Thu 25 Sep 2025 16:46:16 +0000 Files and hashes: 1: pgyYIfUwsNU6Z6mLdnGWxAotWmY.crl (hash: 6OZQrM25pQ94ZaPA6e3SZYtQtHdNEfEsXR4sDQpcFqg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.crl rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgyYIfUwsNU6Z6mLdnGWxAotWmY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 16:46:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5885 (0x16fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3B25, serialNumber=A60C9821F530B0D53A67A98B767196C40A2D5A66 Validity Not Before: Sep 18 16:46:16 2025 GMT Not After : Sep 25 16:46:16 2025 GMT Subject: CN=68cc3758-2f0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:7c:7d:e0:50:fb:a9:3d:b8:94:bf:20:86:4a: c9:8f:bb:8d:c4:7e:86:08:bb:ed:d7:cb:11:05:6e: f0:e6:41:1f:d9:7e:26:ec:cc:1f:49:56:e7:a8:45: a2:95:81:60:35:58:a4:e3:c7:10:7a:ee:a5:b5:4c: f5:0e:2a:06:07:f6:c3:16:76:ab:f8:ed:d3:b8:cc: 84:ee:cf:ec:a9:5f:78:86:b6:a2:32:79:ca:3b:28: ac:92:00:51:3e:4d:8f:e3:eb:ab:92:c3:58:d3:74: 9b:79:0d:d0:8a:20:1b:7a:6c:42:85:2d:61:8b:21: 91:0b:10:9b:92:b5:b1:eb:10:23:21:ba:ec:cf:99: 1e:b9:6f:84:c9:c1:a3:8e:ec:70:ac:f5:ae:07:21: 97:90:ec:1d:3b:9e:68:05:3f:e3:89:84:fb:ce:57: ef:7d:e3:0d:20:b2:2b:15:41:35:ab:fd:dd:15:dc: 3b:eb:76:95:a7:7a:b8:cb:bc:90:a2:9e:f6:90:ab: 5d:46:fb:ee:26:70:38:08:a7:ab:48:8d:bf:57:91: a1:55:57:c1:ed:cd:61:4a:c1:8a:5d:3c:f4:69:0e: 1e:7b:0e:e5:0d:a1:7c:15:a4:85:40:3f:75:13:c8: 70:74:d5:92:60:97:68:f0:a7:7a:92:26:4b:68:cc: 87:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:1F:A8:E9:37:9D:A2:8E:FB:66:29:63:B5:18:98:17:53:66:95:75 X509v3 Authority Key Identifier: keyid:A6:0C:98:21:F5:30:B0:D5:3A:67:A9:8B:76:71:96:C4:0A:2D:5A:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgyYIfUwsNU6Z6mLdnGWxAotWmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:90:fc:bd:50:4d:b9:00:52:95:cf:57:70:da:06:0d:18:e4: 32:55:a5:51:73:fd:d0:cf:00:a5:91:82:0c:a2:62:58:e0:81: 42:3d:98:03:8e:90:ab:8f:9a:45:ad:e2:0f:cb:3b:11:1b:b1: d3:11:1e:78:1d:b0:28:38:8d:09:db:a6:22:af:4d:91:3f:ef: 47:a8:b6:c3:15:48:ed:a3:1c:c4:f1:94:f3:75:0d:15:95:e9: 83:ef:66:51:2a:a3:a9:ac:5f:d9:7e:9e:bf:12:f8:9e:70:79: 10:b0:e9:de:b8:42:ce:1e:11:f5:60:be:c8:51:d1:ea:88:dc: ae:38:86:c6:5f:20:24:c9:b1:66:41:82:d5:b2:ee:35:05:15: c6:3c:59:9d:50:b2:30:ff:54:05:3e:d7:b9:b6:74:70:77:4f: ae:e0:2c:22:2f:ea:00:0f:df:53:e5:09:4c:93:d2:41:fb:ce: 1b:e4:db:7e:e1:7e:5a:2b:95:e6:8d:57:08:fc:1d:49:6a:50: 53:1a:ec:06:4c:35:16:c8:41:8a:65:e4:28:4a:a1:ff:38:b8: 17:4b:d8:8a:5a:1a:88:ef:82:99:fa:e7:0d:6d:e7:ea:a3:a2: 9f:2f:f5:da:05:7f:72:4b:cd:a8:38:ee:ac:7f:8e:5b:01:2d: e7:31:e2:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFv0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNCMjUxMTAvBgNVBAUTKEE2MEM5ODIxRjUzMEIwRDUzQTY3QTk4Qjc2NzE5NkM0 MEEyRDVBNjYwHhcNMjUwOTE4MTY0NjE2WhcNMjUwOTI1MTY0NjE2WjAYMRYwFAYD VQQDEw02OGNjMzc1OC0yZjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy3x94FD7qT24lL8ghkrJj7uNxH6GCLvt18sRBW7w5kEf2X4m7MwfSVbnqEWi lYFgNVik48cQeu6ltUz1DioGB/bDFnar+O3TuMyE7s/sqV94hraiMnnKOyiskgBR Pk2P4+urksNY03SbeQ3QiiAbemxChS1hiyGRCxCbkrWx6xAjIbrsz5keuW+EycGj juxwrPWuByGXkOwdO55oBT/jiYT7zlfvfeMNILIrFUE1q/3dFdw763aVp3q4y7yQ op72kKtdRvvuJnA4CKerSI2/V5GhVVfB7c1hSsGKXTz0aQ4eew7lDaF8FaSFQD91 E8hwdNWSYJdo8Kd6kiZLaMyHwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKMfqOk3 naKO+2YpY7UYmBdTZpV1MB8GA1UdIwQYMBaAFKYMmCH1MLDVOmepi3ZxlsQKLVpm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0IyNS83RTg5MkNDMkY2 MTUxMUU3QjgzMDA5NkRDNEY5QUUwMi9wZ3lZSWZVd3NOVTZaNm1MZG5HV3hBb3RX bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BneVlJZlV3c05VNlo2bUxkbkdXeEFvdFdtWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0IyNS83RTg5MkNDMkY2MTUxMUU3QjgzMDA5NkRDNEY5QUUwMi9wZ3lZSWZVd3NO VTZaNm1MZG5HV3hBb3RXbVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+kPy9UE25AFKVz1dw2gYNGOQyVaVRc/3QzwClkYIMomJY4IFCPZgD jpCrj5pFreIPyzsRG7HTER54HbAoOI0J26Yir02RP+9HqLbDFUjtoxzE8ZTzdQ0V lemD72ZRKqOprF/Zfp6/EviecHkQsOneuELOHhH1YL7IUdHqiNyuOIbGXyAkybFm QYLVsu41BRXGPFmdULIw/1QFPte5tnRwd0+u4CwiL+oAD99T5QlMk9JB+84b5Nt+ 4X5aK5XmjVcI/B1JalBTGuwGTDUWyEGKZeQoSqH/OLgXS9iKWhqI74KZ+ucNbefq o6KfL/XaBX9yS82oOO6sf45bAS3nMeIT -----END CERTIFICATE-----Generated at Fri Sep 19 01:15:35 2025 by rpki-client