$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft File: PnOyvhMDe-dEOR06iZzdICuC920.mft (raw, json) Hash identifier: sM/SPef8ZhFeCZjPDCdBSgqghaoesaH8q7Xq7kXarkg= Subject key identifier: 86:23:DD:B7:AA:91:5B:52:C2:1C:CC:78:C7:BF:96:DF:D1:BD:21:94 Authority key identifier: 3E:73:B2:BE:13:03:7B:E7:44:39:1D:3A:89:9C:DD:20:2B:82:F7:6D Certificate issuer: /CN=A91E5D0C/serialNumber=3E73B2BE13037BE744391D3A899CDD202B82F76D Certificate serial: 04FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft Manifest number: 04EA Signing time: Mon 08 Sep 2025 23:51:07 +0000 Manifest this update: Mon 08 Sep 2025 23:51:07 +0000 Manifest next update: Mon 15 Sep 2025 23:51:07 +0000 Files and hashes: 1: PnOyvhMDe-dEOR06iZzdICuC920.crl (hash: 8A9TJ88hy2HxDmhlz4KIGyuuJrBIl8ZzAy9wJEdjsHU=) 2: EFFA034837D111EC9337B812C4F9AE02.roa (hash: GRUpCE+gVb2TzuJuLp6/bFNygGmQWG7Yo+BJcqN3ABA=) 3: 9C581C28B07511EF9D153813C4F9AE02.roa (hash: 2ILq0YdLX+uDk2zpnZWvB9sk0e06nVHIZcSy04DKJII=) 4: FE76F7D8EC4A11EFA7845862C4F9AE02.roa (hash: JmLkpvQJH0Uq9XtysKaBXjhAS8plkz/VizJFG4sBHBE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.crl rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 23:51:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1279 (0x4ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D0C, serialNumber=3E73B2BE13037BE744391D3A899CDD202B82F76D Validity Not Before: Sep 8 23:51:07 2025 GMT Not After : Sep 15 23:51:07 2025 GMT Subject: CN=68bf6beb-a660 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:11:0c:be:bd:58:51:37:b7:46:71:49:2f:4b: 8e:5b:28:10:a4:f6:bd:00:71:c0:c8:7e:21:2f:0b: 34:c5:c6:39:2e:5d:ef:1b:c4:58:b7:df:63:08:64: 9a:81:a0:53:13:83:d2:f0:32:42:c4:5a:8a:57:0a: 23:85:d9:8e:6d:80:54:8b:b5:e8:39:af:cf:3e:bd: cb:28:1c:ad:fb:73:93:9b:78:7c:9f:0a:d7:38:58: be:bf:de:3b:45:5f:e4:aa:1f:69:14:9d:7e:ef:7f: b8:9b:fa:8a:52:f7:9c:e6:df:7e:2a:e2:4d:86:6b: 15:48:eb:41:f7:a5:fa:2e:fd:f2:af:45:87:cd:93: d6:6c:d1:b8:f9:59:9b:aa:b2:5f:81:a6:09:7f:9a: fe:3d:5d:49:50:37:b3:9e:89:0f:44:9d:a1:0f:79: 6c:57:37:a1:06:73:37:92:7b:0f:a9:ff:11:a1:67: 09:4b:96:a8:78:7c:d8:cc:ce:96:96:1c:0a:04:1e: 48:88:26:5b:26:76:11:af:b2:68:2c:52:4b:7d:fe: 70:4a:af:6f:a8:f3:9e:6f:02:44:f4:5d:22:75:04: c7:a8:09:7d:e4:df:b7:75:f9:df:41:a8:ce:e4:73: 0c:55:a3:02:75:53:8a:c7:c5:5e:1f:82:02:00:6e: 6b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:23:DD:B7:AA:91:5B:52:C2:1C:CC:78:C7:BF:96:DF:D1:BD:21:94 X509v3 Authority Key Identifier: keyid:3E:73:B2:BE:13:03:7B:E7:44:39:1D:3A:89:9C:DD:20:2B:82:F7:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:4e:1e:b7:6b:47:2f:c2:41:b0:90:58:62:46:d5:a0:90:6c: 98:c2:72:3e:e9:9f:de:83:b9:23:bd:3f:9d:b1:c9:e8:1d:4c: eb:ea:eb:e1:96:64:97:67:f8:c9:b2:fe:51:78:9a:17:11:ee: 10:15:4f:fe:37:7d:8f:93:4e:1c:72:77:55:d4:63:5e:b7:14: 63:1f:6f:b4:f1:0a:3a:1b:4f:bb:de:01:36:e4:a2:a7:82:02: 3b:2b:96:d1:bb:99:c8:43:c8:71:d6:02:52:87:a9:31:d8:c9: fe:58:83:e9:14:7a:f4:eb:78:c7:65:d2:4c:a8:8c:8a:74:f0: 6a:5d:cf:f4:ef:4a:0b:71:71:1c:da:a2:47:fb:00:cd:73:64: 1e:ea:95:a5:0f:3c:22:8e:44:97:13:b9:ed:61:f9:28:56:a4: 0e:1a:dd:4f:c1:9b:13:0c:c9:f1:bf:11:0f:63:b7:82:72:94: 1d:0a:82:a9:a3:f3:3b:b2:32:81:3b:82:50:25:e3:76:88:33: be:9a:8f:c7:0d:96:21:80:b1:a3:16:91:5d:8b:b0:31:b9:35: be:66:7f:34:6a:4c:39:be:41:39:5c:2d:46:69:ad:2f:67:eb: bc:dd:d3:88:82:b0:5b:b0:03:6b:77:8a:de:cf:3b:cc:52:c1: 41:a1:37:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVEMEMxMTAvBgNVBAUTKDNFNzNCMkJFMTMwMzdCRTc0NDM5MUQzQTg5OUNERDIw MkI4MkY3NkQwHhcNMjUwOTA4MjM1MTA3WhcNMjUwOTE1MjM1MTA3WjAYMRYwFAYD VQQDEw02OGJmNmJlYi1hNjYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyxEMvr1YUTe3RnFJL0uOWygQpPa9AHHAyH4hLws0xcY5Ll3vG8RYt99jCGSa gaBTE4PS8DJCxFqKVwojhdmObYBUi7XoOa/PPr3LKByt+3OTm3h8nwrXOFi+v947 RV/kqh9pFJ1+73+4m/qKUvec5t9+KuJNhmsVSOtB96X6Lv3yr0WHzZPWbNG4+Vmb qrJfgaYJf5r+PV1JUDeznokPRJ2hD3lsVzehBnM3knsPqf8RoWcJS5aoeHzYzM6W lhwKBB5IiCZbJnYRr7JoLFJLff5wSq9vqPOebwJE9F0idQTHqAl95N+3dfnfQajO 5HMMVaMCdVOKx8VeH4ICAG5rqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIYj3beq kVtSwhzMeMe/lt/RvSGUMB8GA1UdIwQYMBaAFD5zsr4TA3vnRDkdOomc3SArgvdt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUQwQy84OTFCNEVDQTMy MzYxMUVDODk4Mzg3NTZDNEY5QUUwMi9Qbk95dmhNRGUtZEVPUjA2aVp6ZElDdUM5 MjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BuT3l2aE1EZS1kRU9SMDZpWnpkSUN1QzkyMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUQwQy84OTFCNEVDQTMyMzYxMUVDODk4Mzg3NTZDNEY5QUUwMi9Qbk95dmhNRGUt ZEVPUjA2aVp6ZElDdUM5MjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsTh63a0cvwkGwkFhiRtWgkGyYwnI+6Z/eg7kjvT+dscnoHUzr6uvh lmSXZ/jJsv5ReJoXEe4QFU/+N32Pk04ccndV1GNetxRjH2+08Qo6G0+73gE25KKn ggI7K5bRu5nIQ8hx1gJSh6kx2Mn+WIPpFHr063jHZdJMqIyKdPBqXc/070oLcXEc 2qJH+wDNc2Qe6pWlDzwijkSXE7ntYfkoVqQOGt1PwZsTDMnxvxEPY7eCcpQdCoKp o/M7sjKBO4JQJeN2iDO+mo/HDZYhgLGjFpFdi7AxuTW+Zn80akw5vkE5XC1Gaa0v Z+u83dOIgrBbsANrd4rezzvMUsFBoTeU -----END CERTIFICATE-----Generated at Tue Sep 9 17:28:52 2025 by rpki-client