$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft File: PnOyvhMDe-dEOR06iZzdICuC920.mft (raw, json) Hash identifier: 6WQ3nTT882uPFfLk3LailcOqoicuQx5cMwqqzkaq4DE= Subject key identifier: 4F:D2:69:F9:C5:0C:4F:4D:AD:B1:30:25:6A:4B:12:47:EB:D5:53:12 Authority key identifier: 3E:73:B2:BE:13:03:7B:E7:44:39:1D:3A:89:9C:DD:20:2B:82:F7:6D Certificate issuer: /CN=A91E5D0C/serialNumber=3E73B2BE13037BE744391D3A899CDD202B82F76D Certificate serial: 0516 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft Manifest number: 0501 Signing time: Mon 27 Oct 2025 00:44:18 +0000 Manifest this update: Mon 27 Oct 2025 00:44:18 +0000 Manifest next update: Mon 03 Nov 2025 00:44:18 +0000 Files and hashes: 1: PnOyvhMDe-dEOR06iZzdICuC920.crl (hash: r/SGBn19XXhxYe2ZTHTs5Oonnxgq24s/BoC5LtRU16s=) 2: EFFA034837D111EC9337B812C4F9AE02.roa (hash: GRUpCE+gVb2TzuJuLp6/bFNygGmQWG7Yo+BJcqN3ABA=) 3: 9C581C28B07511EF9D153813C4F9AE02.roa (hash: 2ILq0YdLX+uDk2zpnZWvB9sk0e06nVHIZcSy04DKJII=) 4: FE76F7D8EC4A11EFA7845862C4F9AE02.roa (hash: JmLkpvQJH0Uq9XtysKaBXjhAS8plkz/VizJFG4sBHBE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.crl rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 00:44:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1302 (0x516) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D0C, serialNumber=3E73B2BE13037BE744391D3A899CDD202B82F76D Validity Not Before: Oct 27 00:44:18 2025 GMT Not After : Nov 3 00:44:18 2025 GMT Subject: CN=68fec062-80cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:3a:5e:f2:db:1d:d1:21:94:08:d3:11:fb:02: a9:1b:f8:f1:33:61:b6:ac:f7:2c:50:00:f9:ac:c7: 64:dc:e3:68:b6:3e:25:87:3a:63:e2:49:35:0b:ec: b4:d9:a7:59:d5:03:85:5d:53:b7:2b:28:c2:fe:59: 69:7c:09:f3:4d:32:82:c1:51:f9:f1:b7:7b:71:21: 50:1e:22:91:f1:e2:63:f4:fc:ce:33:0f:20:46:8f: 95:66:65:78:05:b7:47:55:e0:c3:ba:d4:47:89:10: 34:58:d3:f1:5e:7f:13:e6:13:55:cf:66:0c:4a:67: bd:74:66:36:c4:f9:93:6b:f0:18:62:cf:c3:cc:c8: 2e:0d:92:ec:ee:bb:a8:f9:2f:fe:14:1a:08:04:1f: 34:51:9b:e5:97:a3:a4:75:49:1e:0a:53:8f:da:2e: 07:7c:5c:19:1e:40:51:15:a1:61:c5:45:cf:fb:ed: 58:56:e9:b5:75:37:d0:3c:4a:db:00:df:f0:5f:8e: 23:6f:61:80:c7:15:eb:7f:8d:3d:c5:d2:a3:de:7d: 36:04:f0:e5:b1:d9:6f:df:06:f5:a2:d7:86:aa:bd: a6:4f:16:9a:c2:18:e9:d3:53:41:e3:5e:58:94:38: dc:fc:03:32:d6:73:59:0b:6a:2f:f8:f3:a4:de:d4: 33:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:D2:69:F9:C5:0C:4F:4D:AD:B1:30:25:6A:4B:12:47:EB:D5:53:12 X509v3 Authority Key Identifier: keyid:3E:73:B2:BE:13:03:7B:E7:44:39:1D:3A:89:9C:DD:20:2B:82:F7:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:72:78:c7:0a:a3:ed:0f:91:13:6d:83:16:bb:98:8a:59:5e: d5:67:b5:76:42:6c:32:48:cd:7a:32:e5:c7:6b:25:ec:0b:27: 56:99:3d:b5:1e:98:c9:8c:27:95:ac:b0:7b:97:af:3d:d6:d6: a4:5d:04:29:a5:9d:62:79:d2:3b:06:2a:6c:aa:90:45:d8:be: 42:26:a0:3b:f4:20:58:4b:7e:03:de:6a:49:ba:bf:69:4f:8e: 80:b7:61:f2:2a:e1:57:d4:38:ee:90:4e:a2:f3:26:cd:b6:60: f2:29:e2:b3:da:11:88:81:19:c0:97:53:08:7a:5c:7c:bf:55: b6:c8:58:44:70:c2:a5:a5:6b:f9:32:e1:45:67:2e:c9:04:09: 38:70:25:fb:26:b1:4a:1a:55:4e:4f:96:7e:d3:39:33:01:b1: be:8a:6b:6a:3d:91:3d:2c:a5:ab:06:7e:80:20:8e:69:d5:66: 6b:96:27:99:7c:be:39:c7:c2:fc:11:bb:41:78:cb:40:d3:2d: 9c:ef:5f:28:6e:e5:cd:cc:b3:6c:23:41:fc:d0:6f:08:5e:45: 66:96:f8:f8:34:19:83:d1:bf:a0:62:9f:2a:63:fb:27:3f:23: 54:7d:c8:1a:e2:6f:3e:b6:72:34:02:e7:e2:e6:0a:d9:ec:8f: bd:e8:14:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBRYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVEMEMxMTAvBgNVBAUTKDNFNzNCMkJFMTMwMzdCRTc0NDM5MUQzQTg5OUNERDIw MkI4MkY3NkQwHhcNMjUxMDI3MDA0NDE4WhcNMjUxMTAzMDA0NDE4WjAYMRYwFAYD VQQDEw02OGZlYzA2Mi04MGNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyzpe8tsd0SGUCNMR+wKpG/jxM2G2rPcsUAD5rMdk3ONotj4lhzpj4kk1C+y0 2adZ1QOFXVO3KyjC/llpfAnzTTKCwVH58bd7cSFQHiKR8eJj9PzOMw8gRo+VZmV4 BbdHVeDDutRHiRA0WNPxXn8T5hNVz2YMSme9dGY2xPmTa/AYYs/DzMguDZLs7ruo +S/+FBoIBB80UZvll6OkdUkeClOP2i4HfFwZHkBRFaFhxUXP++1YVum1dTfQPErb AN/wX44jb2GAxxXrf409xdKj3n02BPDlsdlv3wb1oteGqr2mTxaawhjp01NB415Y lDjc/AMy1nNZC2ov+POk3tQz5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE/SafnF DE9NrbEwJWpLEkfr1VMSMB8GA1UdIwQYMBaAFD5zsr4TA3vnRDkdOomc3SArgvdt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUQwQy84OTFCNEVDQTMy MzYxMUVDODk4Mzg3NTZDNEY5QUUwMi9Qbk95dmhNRGUtZEVPUjA2aVp6ZElDdUM5 MjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BuT3l2aE1EZS1kRU9SMDZpWnpkSUN1QzkyMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUQwQy84OTFCNEVDQTMyMzYxMUVDODk4Mzg3NTZDNEY5QUUwMi9Qbk95dmhNRGUt ZEVPUjA2aVp6ZElDdUM5MjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCucnjHCqPtD5ETbYMWu5iKWV7VZ7V2QmwySM16MuXHayXsCydWmT21 HpjJjCeVrLB7l6891takXQQppZ1iedI7BipsqpBF2L5CJqA79CBYS34D3mpJur9p T46At2HyKuFX1DjukE6i8ybNtmDyKeKz2hGIgRnAl1MIelx8v1W2yFhEcMKlpWv5 MuFFZy7JBAk4cCX7JrFKGlVOT5Z+0zkzAbG+imtqPZE9LKWrBn6AII5p1WZrlieZ fL45x8L8EbtBeMtA0y2c718obuXNzLNsI0H80G8IXkVmlvj4NBmD0b+gYp8qY/sn PyNUfcga4m8+tnI0Aufi5grZ7I+96BRH -----END CERTIFICATE-----Generated at Tue Oct 28 17:02:42 2025 by rpki-client