$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft File: pcmHAk0KjqwJZAn9mewy7JBHC6M.mft (raw, json) Hash identifier: +gMtJAELXRH91k1gFqxSCKAu6EKbJLbAfIEYLJJqkqo= Subject key identifier: B1:39:EA:C8:27:12:DD:76:40:B1:72:CC:64:EC:90:98:4F:6B:5D:E1 Authority key identifier: A5:C9:87:02:4D:0A:8E:AC:09:64:09:FD:99:EC:32:EC:90:47:0B:A3 Certificate issuer: /CN=A91E4B86/serialNumber=A5C987024D0A8EAC096409FD99EC32EC90470BA3 Certificate serial: 85 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pcmHAk0KjqwJZAn9mewy7JBHC6M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft Manifest number: 82 Signing time: Fri 07 Nov 2025 02:03:18 +0000 Manifest this update: Fri 07 Nov 2025 02:03:17 +0000 Manifest next update: Fri 14 Nov 2025 02:03:17 +0000 Files and hashes: 1: pcmHAk0KjqwJZAn9mewy7JBHC6M.crl (hash: OGspMCxobK+Ou6rUKbYAnJ67Ig7r7sjtG4MEFKg1Ljk=) 2: 4C51E1D4F7E511EF9A28D363C4F9AE02.roa (hash: EWVCVV5zCZB19LClSuWFTWXQU193NPHqHKJqFm4wMOE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.crl rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pcmHAk0KjqwJZAn9mewy7JBHC6M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Nov 2025 02:03:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 133 (0x85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4B86, serialNumber=A5C987024D0A8EAC096409FD99EC32EC90470BA3 Validity Not Before: Nov 7 02:03:17 2025 GMT Not After : Nov 14 02:03:17 2025 GMT Subject: CN=690d5365-7c5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d1:f3:33:c5:65:df:d8:84:41:6c:9b:ae:7c: fd:9c:88:f2:73:d5:96:98:aa:4a:31:ea:cf:1c:4d: 90:86:fe:da:1a:e4:33:94:00:36:d5:e9:8d:a5:52: 40:3d:1c:4a:7c:c5:b6:43:45:77:77:b5:2e:3e:e2: 14:6c:c5:20:95:9b:ee:2e:69:31:c0:a3:10:0b:76: 6e:e1:d0:6c:56:be:6c:cb:62:83:16:27:d7:5f:96: 3e:73:b3:c1:55:63:6e:0a:02:9f:ba:ad:85:16:95: f6:47:ec:e9:96:c9:88:bb:1c:18:35:d3:5d:d0:0f: 80:6a:05:02:0c:45:f7:69:f7:2f:c9:eb:f4:9d:6c: 29:2c:98:28:d6:73:88:23:5d:7f:3b:bf:b4:60:68: 88:23:c8:d7:4e:fd:83:20:1f:24:b8:11:35:bb:20: 3c:37:b5:25:8f:11:ee:92:0a:9c:fd:7f:a0:a1:11: 6f:cd:1d:cd:34:f0:c4:e6:1f:b3:82:fe:ba:e6:53: 03:b8:23:62:b0:9e:9c:b0:75:3a:63:29:0f:c6:bf: 3a:55:0b:9d:f1:af:3b:53:ac:ff:91:26:e8:d4:16: 8a:a9:39:fc:91:7c:d4:96:3a:02:72:28:2a:98:2c: 7e:8a:0f:27:a6:de:3e:89:d3:f1:97:df:28:90:0d: 82:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:39:EA:C8:27:12:DD:76:40:B1:72:CC:64:EC:90:98:4F:6B:5D:E1 X509v3 Authority Key Identifier: keyid:A5:C9:87:02:4D:0A:8E:AC:09:64:09:FD:99:EC:32:EC:90:47:0B:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pcmHAk0KjqwJZAn9mewy7JBHC6M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:c9:e5:95:6a:c9:8c:b3:c6:fb:17:74:2e:33:96:c2:28:1f: 98:f4:cc:0d:c7:12:ea:82:d2:fb:39:73:53:5f:b8:dd:22:1e: 20:22:8e:91:a8:ac:e8:57:88:35:95:12:05:7d:f3:9a:d0:75: 89:65:5c:87:93:da:35:2d:ec:1b:b7:53:cf:77:dc:42:7b:31: ee:2f:a3:4e:af:27:56:d2:16:11:69:d4:fe:84:38:f1:e3:08: fe:b6:ad:28:fd:39:dd:f0:1a:aa:b2:f2:9c:d6:0b:12:97:5b: 7c:9f:01:b3:5b:a8:f0:cd:60:03:e3:1d:0c:bc:5c:c4:ea:d6: 24:86:ad:6a:e5:27:59:d7:2a:4e:53:39:6c:f8:06:d8:bb:14: 43:3b:67:25:e6:7e:ea:d1:7b:38:e6:c3:f1:e9:b9:a6:d3:92: 1d:9d:71:14:26:bb:42:3e:a6:0d:13:0a:b9:80:47:2b:29:b9: a5:6d:c7:13:25:0d:70:6d:50:bd:df:f1:a3:9c:f2:59:22:8f: e8:aa:5a:da:36:70:4e:58:df:bb:79:8d:d8:cc:87:76:3c:c5: 69:bd:42:80:88:9c:27:46:2c:16:b2:69:ef:ef:11:95:d2:1e: 56:76:24:a5:5d:d9:88:15:5d:60:c5:34:35:0a:56:64:48:71: 30:94:b6:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRCODYxMTAvBgNVBAUTKEE1Qzk4NzAyNEQwQThFQUMwOTY0MDlGRDk5RUMzMkVD OTA0NzBCQTMwHhcNMjUxMTA3MDIwMzE3WhcNMjUxMTE0MDIwMzE3WjAYMRYwFAYD VQQDEw02OTBkNTM2NS03YzVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsNHzM8Vl39iEQWybrnz9nIjyc9WWmKpKMerPHE2Qhv7aGuQzlAA21emNpVJA PRxKfMW2Q0V3d7UuPuIUbMUglZvuLmkxwKMQC3Zu4dBsVr5sy2KDFifXX5Y+c7PB VWNuCgKfuq2FFpX2R+zplsmIuxwYNdNd0A+AagUCDEX3afcvyev0nWwpLJgo1nOI I11/O7+0YGiII8jXTv2DIB8kuBE1uyA8N7UljxHukgqc/X+goRFvzR3NNPDE5h+z gv665lMDuCNisJ6csHU6YykPxr86VQud8a87U6z/kSbo1BaKqTn8kXzUljoCcigq mCx+ig8npt4+idPxl98okA2CJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLE56sgn Et12QLFyzGTskJhPa13hMB8GA1UdIwQYMBaAFKXJhwJNCo6sCWQJ/ZnsMuyQRwuj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEI4Ni84OTMzMTQ4QUY3 RTMxMUVGOEFEQThBNDFDNEY5QUUwMi9wY21IQWswS2pxd0paQW45bWV3eTdKQkhD Nk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3BjbUhBazBLanF3SlpBbjltZXd5N0pCSEM2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEI4Ni84OTMzMTQ4QUY3RTMxMUVGOEFEQThBNDFDNEY5QUUwMi9wY21IQWswS2px d0paQW45bWV3eTdKQkhDNk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyyeWVasmMs8b7F3QuM5bCKB+Y9MwNxxLqgtL7OXNTX7jdIh4gIo6R qKzoV4g1lRIFffOa0HWJZVyHk9o1Lewbt1PPd9xCezHuL6NOrydW0hYRadT+hDjx 4wj+tq0o/Tnd8BqqsvKc1gsSl1t8nwGzW6jwzWAD4x0MvFzE6tYkhq1q5SdZ1ypO Uzls+AbYuxRDO2cl5n7q0Xs45sPx6bmm05IdnXEUJrtCPqYNEwq5gEcrKbmlbccT JQ1wbVC93/GjnPJZIo/oqlraNnBOWN+7eY3YzId2PMVpvUKAiJwnRiwWsmnv7xGV 0h5WdiSlXdmIFV1gxTQ1ClZkSHEwlLY0 -----END CERTIFICATE-----Generated at Fri Nov 7 16:54:36 2025 by rpki-client