$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft File: PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft (raw, json) Hash identifier: WgGI4rL9tWF8At7vRMQ1agAH9beEWXE0Kvi3bo8mAK4= Subject key identifier: BE:85:8E:ED:48:C9:3F:8F:8E:A7:FC:01:E7:80:1A:3E:0E:BA:F9:76 Authority key identifier: 3C:69:B9:B6:01:D2:C9:F2:A3:91:5A:6F:FB:CA:3D:AD:62:E9:92:45 Certificate issuer: /CN=A91EE09C/serialNumber=3C69B9B601D2C9F2A3915A6FFBCA3DAD62E99245 Certificate serial: 01B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft Manifest number: 018E Signing time: Mon 27 Oct 2025 05:54:17 +0000 Manifest this update: Mon 27 Oct 2025 05:54:17 +0000 Manifest next update: Mon 03 Nov 2025 05:54:17 +0000 Files and hashes: 1: PGm5tgHSyfKjkVpv-8o9rWLpkkU.crl (hash: jtxQg3uSM18y1izy+PGY92CzAL/m5oX9A0dIyp2gVhg=) 2: A3E08ED6825711EFB7585B6FC4F9AE02.roa (hash: c6Y5sHXtnUIlloWQfNj0Oltc+Rkovm/FExQvQHllfw0=) 3: 23D4183024D711EF932FC941C4F9AE02.roa (hash: PEdc3Ajz5VckvHX4I+KQ2ScP909N/JzMHxUtf14BV6s=) 4: 1D98617687B311EFB4972044C4F9AE02.roa (hash: h8bAcU4fUoKskIhMDXeBIXC9uHuKpiNxD6RQQxWm6fQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.crl rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 05:54:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 435 (0x1b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE09C, serialNumber=3C69B9B601D2C9F2A3915A6FFBCA3DAD62E99245 Validity Not Before: Oct 27 05:54:17 2025 GMT Not After : Nov 3 05:54:17 2025 GMT Subject: CN=68ff0909-6f54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fb:ca:64:7a:80:f1:75:83:25:d5:7c:ed:a3: 5f:a0:ac:ee:9e:0c:8d:6c:02:f2:17:13:a8:57:e5: 1a:9d:35:01:22:a2:b6:ce:bc:5d:09:00:89:7e:cf: 7a:4d:70:dc:03:29:be:d0:2a:a6:4d:38:0a:08:15: 19:2b:35:fb:77:d7:63:7e:65:75:f3:c6:39:ae:9f: 39:e6:07:8e:03:68:77:d2:2e:47:e5:f5:b1:06:f2: cc:a0:83:57:5d:7d:c9:70:ba:aa:b7:d2:1e:9f:b8: 4c:b5:42:48:e7:01:b0:65:2c:a7:1b:16:2e:57:2e: 76:d2:1b:6e:d2:f4:e5:23:ca:7a:8a:44:e6:60:45: 0e:bb:de:4c:ee:54:15:b6:54:7b:50:7c:0c:8b:cd: 33:88:8c:e1:c4:e5:80:79:a0:63:e8:19:36:e9:af: 6f:9d:ca:ee:eb:8d:0c:49:a7:75:0d:60:73:4a:b2: 28:f5:97:37:34:70:65:46:cf:d2:55:03:e7:99:80: a7:14:4c:15:3b:41:c7:3c:bd:a0:09:7f:7a:8e:0e: 0d:e5:a8:93:db:15:7c:50:a5:e1:cb:52:e6:9d:19: 2e:a3:01:45:14:56:79:46:4a:6d:d8:08:d0:90:b6: ad:47:32:1b:96:55:dd:08:a2:db:92:cc:78:39:16: 99:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:85:8E:ED:48:C9:3F:8F:8E:A7:FC:01:E7:80:1A:3E:0E:BA:F9:76 X509v3 Authority Key Identifier: keyid:3C:69:B9:B6:01:D2:C9:F2:A3:91:5A:6F:FB:CA:3D:AD:62:E9:92:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:e2:99:0a:60:ae:da:6d:aa:37:29:cb:49:ae:96:c1:3e:d4: c5:17:7d:2a:d0:57:e8:c8:e2:e4:1a:3e:1a:d1:fa:ec:e1:4e: 52:86:f6:0f:95:b9:72:5c:f5:4f:53:2f:df:68:59:97:7b:ba: e6:15:42:c6:b8:53:1c:2a:10:1e:8f:f9:67:30:7c:d6:ad:a5: e4:63:aa:15:60:27:b3:aa:18:a9:95:99:fc:04:bd:4b:88:36: 1a:bc:6f:41:91:c5:ad:78:1a:bc:f8:8a:79:3a:04:a9:06:cd: 21:81:7a:c8:b9:b9:e5:17:06:aa:3a:58:88:46:60:2a:26:4b: 07:71:08:f7:a8:2d:a8:e8:28:70:77:2c:5f:29:0e:b5:7a:70: 6e:06:8b:f6:8b:11:fc:39:34:31:64:93:0f:de:37:5e:b8:33: dc:df:49:2a:20:4f:f0:59:5a:22:3f:f5:93:38:00:3e:c3:9f: ec:43:86:c4:1b:96:1c:a6:ba:9b:96:4a:43:f6:e9:bb:27:e1: 9f:f5:cb:eb:c3:44:3c:8e:69:fd:1e:6f:a3:0c:05:4e:9b:d2: 39:99:a5:c6:ba:66:a7:6c:bd:30:5e:89:8a:1b:b2:b1:75:96: 65:10:b3:af:51:c6:ff:16:af:68:a1:bd:a2:02:77:29:9f:52: 6a:64:4d:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUUwOUMxMTAvBgNVBAUTKDNDNjlCOUI2MDFEMkM5RjJBMzkxNUE2RkZCQ0EzREFE NjJFOTkyNDUwHhcNMjUxMDI3MDU1NDE3WhcNMjUxMTAzMDU1NDE3WjAYMRYwFAYD VQQDEw02OGZmMDkwOS02ZjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtfvKZHqA8XWDJdV87aNfoKzungyNbALyFxOoV+UanTUBIqK2zrxdCQCJfs96 TXDcAym+0CqmTTgKCBUZKzX7d9djfmV188Y5rp855geOA2h30i5H5fWxBvLMoINX XX3JcLqqt9Ien7hMtUJI5wGwZSynGxYuVy520htu0vTlI8p6ikTmYEUOu95M7lQV tlR7UHwMi80ziIzhxOWAeaBj6Bk26a9vncru640MSad1DWBzSrIo9Zc3NHBlRs/S VQPnmYCnFEwVO0HHPL2gCX96jg4N5aiT2xV8UKXhy1LmnRkuowFFFFZ5Rkpt2AjQ kLatRzIbllXdCKLbksx4ORaZEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL6Fju1I yT+Pjqf8AeeAGj4Ouvl2MB8GA1UdIwQYMBaAFDxpubYB0snyo5Fab/vKPa1i6ZJF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTA5Qy9FRUY3NjJDMDkw NzUxMUVFODdEMjY2ODBDNEY5QUUwMi9QR201dGdIU3lmS2prVnB2LThvOXJXTHBr a1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BHbTV0Z0hTeWZLamtWcHYtOG85cldMcGtrVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RTA5Qy9FRUY3NjJDMDkwNzUxMUVFODdEMjY2ODBDNEY5QUUwMi9QR201dGdIU3lm S2prVnB2LThvOXJXTHBra1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAx4pkKYK7abao3KctJrpbBPtTFF30q0FfoyOLkGj4a0frs4U5ShvYP lblyXPVPUy/faFmXe7rmFULGuFMcKhAej/lnMHzWraXkY6oVYCezqhiplZn8BL1L iDYavG9BkcWteBq8+Ip5OgSpBs0hgXrIubnlFwaqOliIRmAqJksHcQj3qC2o6Chw dyxfKQ61enBuBov2ixH8OTQxZJMP3jdeuDPc30kqIE/wWVoiP/WTOAA+w5/sQ4bE G5YcprqblkpD9um7J+Gf9cvrw0Q8jmn9Hm+jDAVOm9I5maXGumanbL0wXomKG7Kx dZZlELOvUcb/Fq9oob2iAncpn1JqZE1N -----END CERTIFICATE-----Generated at Mon Oct 27 14:59:27 2025 by rpki-client