$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/pg-NpHi9dy9PKz5MedXBgd3laJM.mft File: pg-NpHi9dy9PKz5MedXBgd3laJM.mft (raw, json) Hash identifier: 7T6+0woQEpnZgO87IcHnrnRC3ZZ5QO2K8c3otG0Ja8U= Subject key identifier: 2C:63:97:56:B0:5E:57:58:D8:42:7E:CC:F4:D8:BC:2E:4F:D0:C0:AA Authority key identifier: A6:0F:8D:A4:78:BD:77:2F:4F:2B:3E:4C:79:D5:C1:81:DD:E5:68:93 Certificate issuer: /CN=A91EDADE/serialNumber=A60F8DA478BD772F4F2B3E4C79D5C181DDE56893 Certificate serial: 01E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pg-NpHi9dy9PKz5MedXBgd3laJM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/pg-NpHi9dy9PKz5MedXBgd3laJM.mft Manifest number: 01E3 Signing time: Wed 05 Nov 2025 02:46:21 +0000 Manifest this update: Wed 05 Nov 2025 02:46:20 +0000 Manifest next update: Wed 12 Nov 2025 02:46:20 +0000 Files and hashes: 1: pg-NpHi9dy9PKz5MedXBgd3laJM.crl (hash: EZcIeA/8SJsjlYfpamTl6w0TLXi+p5tQCWRG8/S7ggY=) 2: 763018B4D29811ED8CDDB83AC4F9AE02.roa (hash: kB/0ibOjCq9dbW0BRMR/SkO1yELJz7RuZWoFT7e9L1o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/pg-NpHi9dy9PKz5MedXBgd3laJM.crl rsync://rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/pg-NpHi9dy9PKz5MedXBgd3laJM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pg-NpHi9dy9PKz5MedXBgd3laJM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:46:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 487 (0x1e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EDADE, serialNumber=A60F8DA478BD772F4F2B3E4C79D5C181DDE56893 Validity Not Before: Nov 5 02:46:20 2025 GMT Not After : Nov 12 02:46:20 2025 GMT Subject: CN=690aba7d-4428 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:94:30:db:64:a5:58:a4:85:2c:50:97:a3:ac: dc:51:a8:cb:89:0e:c5:18:1f:16:7f:b9:2b:4a:0e: b5:67:45:15:5b:76:cc:b5:e8:13:ab:a3:46:06:dd: ae:6a:f5:56:aa:f9:8b:27:2d:d5:7e:49:71:f8:95: 3d:b4:7f:0d:fe:91:06:7a:b4:6e:e5:6c:18:08:2d: c9:ae:6f:f8:21:c4:53:9f:af:09:19:3b:bf:a1:4a: 66:c3:86:b4:2d:75:e7:9c:29:d0:37:df:6f:95:37: de:23:43:a9:b7:75:7b:06:c3:bb:9a:05:11:47:66: 9c:9f:06:91:a9:6d:f8:ee:bb:44:a8:38:05:75:1c: c6:78:a8:96:61:f7:bd:20:ea:6b:73:13:61:89:ad: 3a:8e:0e:33:eb:90:5c:31:34:e7:75:a4:ce:5d:04: b8:17:85:d7:b9:26:a6:77:b8:e9:34:69:ac:26:e7: e5:62:b4:81:b2:49:db:07:72:8f:bd:75:12:80:d5: e4:f3:9b:fb:56:39:d4:3c:56:63:bb:89:0c:dc:d4: 28:01:f6:eb:d7:02:07:45:1e:02:1b:e1:09:b3:f0: 7a:12:cf:86:df:87:d3:ab:7b:ec:6f:86:0b:79:79: 8e:95:f7:a4:ff:23:f7:43:5d:bb:8c:ad:0a:5f:57: 03:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:63:97:56:B0:5E:57:58:D8:42:7E:CC:F4:D8:BC:2E:4F:D0:C0:AA X509v3 Authority Key Identifier: keyid:A6:0F:8D:A4:78:BD:77:2F:4F:2B:3E:4C:79:D5:C1:81:DD:E5:68:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/pg-NpHi9dy9PKz5MedXBgd3laJM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pg-NpHi9dy9PKz5MedXBgd3laJM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/pg-NpHi9dy9PKz5MedXBgd3laJM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d1:d7:64:3c:13:79:fe:00:e5:4b:06:fe:7b:8b:48:25:a6:9d: 18:f5:27:2e:65:f7:25:13:3c:0c:88:19:02:73:7b:4e:ae:b9: 3d:2c:a1:71:ff:8d:af:62:5c:f9:6a:f6:f6:4b:0c:83:f0:55: 83:6b:53:0a:86:44:c0:3f:72:ca:84:00:1a:a6:f8:93:ef:5f: 2f:1f:f9:d7:17:d8:d7:17:1f:97:b4:21:4c:40:bd:92:58:39: 46:20:e7:2b:f4:92:8e:9d:91:ac:4c:f5:8c:5d:59:69:d0:29: 6e:da:11:da:d9:2e:6e:b5:26:bf:0c:d3:f2:a2:c8:b1:00:69: fd:67:de:ef:6d:c6:75:c8:b7:65:c4:35:36:8d:96:92:a4:36: d0:f6:e8:5e:90:a7:6a:cf:1f:95:10:78:59:38:f3:67:ca:24: b8:c2:e4:1e:fe:76:ef:db:af:0e:a9:1b:26:d0:c8:42:56:e9: 77:f4:b6:19:0a:eb:46:9a:58:30:82:ef:7a:2c:52:2a:cf:82: 90:4d:1c:0a:89:34:f5:e2:f1:fa:cf:da:29:92:a6:9b:1a:e7: 93:fd:04:da:93:bb:0a:4c:f2:1f:db:72:ef:86:6d:12:5a:d6: e6:90:a8:70:06:16:80:e6:e7:fd:3d:19:ff:21:d7:fe:f2:10: 14:3d:b7:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RURBREUxMTAvBgNVBAUTKEE2MEY4REE0NzhCRDc3MkY0RjJCM0U0Qzc5RDVDMTgx RERFNTY4OTMwHhcNMjUxMTA1MDI0NjIwWhcNMjUxMTEyMDI0NjIwWjAYMRYwFAYD VQQDEw02OTBhYmE3ZC00NDI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwZQw22SlWKSFLFCXo6zcUajLiQ7FGB8Wf7krSg61Z0UVW3bMtegTq6NGBt2u avVWqvmLJy3Vfklx+JU9tH8N/pEGerRu5WwYCC3Jrm/4IcRTn68JGTu/oUpmw4a0 LXXnnCnQN99vlTfeI0Opt3V7BsO7mgURR2acnwaRqW347rtEqDgFdRzGeKiWYfe9 IOprcxNhia06jg4z65BcMTTndaTOXQS4F4XXuSamd7jpNGmsJuflYrSBsknbB3KP vXUSgNXk85v7VjnUPFZju4kM3NQoAfbr1wIHRR4CG+EJs/B6Es+G34fTq3vsb4YL eXmOlfek/yP3Q127jK0KX1cDbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCxjl1aw XldY2EJ+zPTYvC5P0MCqMB8GA1UdIwQYMBaAFKYPjaR4vXcvTys+THnVwYHd5WiT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREFERS83MDk4RjREQ0Qy OTUxMUVEQTI0MTg0MzlDNEY5QUUwMi9wZy1OcEhpOWR5OVBLejVNZWRYQmdkM2xh Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BnLU5wSGk5ZHk5UEt6NU1lZFhCZ2QzbGFKTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF REFERS83MDk4RjREQ0QyOTUxMUVEQTI0MTg0MzlDNEY5QUUwMi9wZy1OcEhpOWR5 OVBLejVNZWRYQmdkM2xhSk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDR12Q8E3n+AOVLBv57i0glpp0Y9ScuZfclEzwMiBkCc3tOrrk9LKFx /42vYlz5avb2SwyD8FWDa1MKhkTAP3LKhAAapviT718vH/nXF9jXFx+XtCFMQL2S WDlGIOcr9JKOnZGsTPWMXVlp0Clu2hHa2S5utSa/DNPyosixAGn9Z97vbcZ1yLdl xDU2jZaSpDbQ9uhekKdqzx+VEHhZOPNnyiS4wuQe/nbv268OqRsm0MhCVul39LYZ CutGmlgwgu96LFIqz4KQTRwKiTT14vH6z9opkqabGueT/QTak7sKTPIf23Lvhm0S WtbmkKhwBhaA5uf9PRn/Idf+8hAUPbeP -----END CERTIFICATE-----Generated at Wed Nov 5 17:59:45 2025 by rpki-client