$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFD20/C26FA276A1DA11F080B26453C4F9AE02/pBG7PJekzTyP_HCtY6ny7JaSrbc.mft File: pBG7PJekzTyP_HCtY6ny7JaSrbc.mft (raw, json) Hash identifier: xgBUCXoDl+7g2WZLkPfX8Gj9EnGc1w6GvQ+5WhQ8/1s= Subject key identifier: 7A:A4:E0:3C:DC:DD:4E:37:EF:05:0D:6F:CE:E5:3A:15:63:D8:D3:96 Authority key identifier: A4:11:BB:3C:97:A4:CD:3C:8F:FC:70:AD:63:A9:F2:EC:96:92:AD:B7 Certificate issuer: /CN=A91EFD20/serialNumber=A411BB3C97A4CD3C8FFC70AD63A9F2EC9692ADB7 Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBG7PJekzTyP_HCtY6ny7JaSrbc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFD20/C26FA276A1DA11F080B26453C4F9AE02/pBG7PJekzTyP_HCtY6ny7JaSrbc.mft Manifest number: 10 Signing time: Mon 03 Nov 2025 05:13:09 +0000 Manifest this update: Mon 03 Nov 2025 05:13:08 +0000 Manifest next update: Mon 10 Nov 2025 05:13:08 +0000 Files and hashes: 1: pBG7PJekzTyP_HCtY6ny7JaSrbc.crl (hash: bBL26qgHvscCCIELTSOVfwai114KE+WdsumuCdUcIuM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFD20/C26FA276A1DA11F080B26453C4F9AE02/pBG7PJekzTyP_HCtY6ny7JaSrbc.crl rsync://rpki.apnic.net/member_repository/A91EFD20/C26FA276A1DA11F080B26453C4F9AE02/pBG7PJekzTyP_HCtY6ny7JaSrbc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBG7PJekzTyP_HCtY6ny7JaSrbc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:13:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFD20, serialNumber=A411BB3C97A4CD3C8FFC70AD63A9F2EC9692ADB7 Validity Not Before: Nov 3 05:13:08 2025 GMT Not After : Nov 10 05:13:08 2025 GMT Subject: CN=690839e4-615a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:3c:70:82:ac:40:74:91:dd:0d:9d:41:9c:d0: 54:3e:e3:7d:fc:ca:51:fa:e8:1d:1a:bc:f8:c0:43: 12:1b:82:fd:6e:a6:3d:44:ee:cd:71:99:7d:05:38: 28:10:73:d8:20:db:a1:88:fc:1e:24:26:58:74:50: 2f:e6:52:90:1f:44:00:98:8f:10:98:8d:44:2a:a3: c2:26:b5:34:88:4f:fd:02:30:25:d0:94:3f:59:2d: 9e:8c:eb:4d:d1:9b:54:0a:57:89:09:2e:6b:28:2e: 1a:9a:fc:f6:d4:40:50:e6:63:ed:f5:05:69:b1:8d: fb:7f:e8:74:19:3e:9d:70:95:96:12:fb:b8:e8:4a: 78:ee:a5:ae:3b:a6:65:8e:18:d4:80:73:91:90:03: 00:5c:ec:49:33:d1:86:4e:0c:51:c3:1b:7d:18:a2: df:ad:5c:99:b4:56:e2:91:35:4e:0a:9c:58:85:fd: dc:36:e0:58:b2:36:71:c6:a4:5d:c0:b1:ff:93:70: fa:59:85:4b:39:83:0a:0c:8d:41:40:ec:be:1b:42: 7b:58:32:0d:93:6e:e0:ef:ca:40:d5:72:f1:ba:a1: 22:61:4d:4e:af:e5:b6:c7:56:ed:47:04:22:48:58: 5c:5e:fe:d7:e0:10:4c:5f:86:7e:31:29:6d:02:9c: bd:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:A4:E0:3C:DC:DD:4E:37:EF:05:0D:6F:CE:E5:3A:15:63:D8:D3:96 X509v3 Authority Key Identifier: keyid:A4:11:BB:3C:97:A4:CD:3C:8F:FC:70:AD:63:A9:F2:EC:96:92:AD:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFD20/C26FA276A1DA11F080B26453C4F9AE02/pBG7PJekzTyP_HCtY6ny7JaSrbc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBG7PJekzTyP_HCtY6ny7JaSrbc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFD20/C26FA276A1DA11F080B26453C4F9AE02/pBG7PJekzTyP_HCtY6ny7JaSrbc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:14:59:95:c7:29:01:7e:08:9f:c6:a6:ab:47:00:35:77:38: 62:95:f4:fc:f5:55:e8:8b:ce:f1:20:d9:49:f0:02:17:1d:f5: 88:db:7e:0e:a6:1f:4f:9d:99:4e:71:3f:15:77:94:c1:ae:1a: 4b:b6:a6:ca:d6:18:70:b0:10:ad:9a:28:d3:28:a1:2f:4b:aa: 0e:1a:27:93:45:5f:48:08:fb:8c:b2:30:ef:59:aa:06:44:51: 9e:ad:1d:d4:52:3d:19:59:5c:93:93:60:48:3d:c4:05:93:b1: d2:87:7c:a8:00:5d:42:50:d5:e5:82:fa:54:c9:df:d6:4f:27: b2:cd:d5:0e:7f:e1:f5:e0:2d:1c:91:e0:31:8b:2d:9c:4e:03: a9:3d:a5:f1:cb:65:d0:9d:b5:1a:28:8c:c6:4e:8d:d0:70:9a: 23:d1:39:28:c1:b6:fa:61:2a:f0:fc:0c:d3:ca:29:0a:1b:77: f8:62:4f:47:15:fb:64:da:48:c0:af:05:4d:31:9d:78:14:c0: 13:52:9c:2d:9f:79:49:64:75:67:7f:78:9d:4b:19:1d:5c:f5: 61:c8:a8:c2:42:95:7b:49:39:b3:c2:52:38:ef:9b:ae:7e:b3: 7c:36:9f:20:53:70:60:a4:22:ec:bd:c8:58:58:c0:30:99:9d: 92:3f:f9:00 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RkQyMDExMC8GA1UEBRMoQTQxMUJCM0M5N0E0Q0QzQzhGRkM3MEFENjNBOUYyRUM5 NjkyQURCNzAeFw0yNTExMDMwNTEzMDhaFw0yNTExMTAwNTEzMDhaMBgxFjAUBgNV BAMTDTY5MDgzOWU0LTYxNWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSPHCCrEB0kd0NnUGc0FQ+4338ylH66B0avPjAQxIbgv1upj1E7s1xmX0FOCgQ c9gg26GI/B4kJlh0UC/mUpAfRACYjxCYjUQqo8ImtTSIT/0CMCXQlD9ZLZ6M603R m1QKV4kJLmsoLhqa/PbUQFDmY+31BWmxjft/6HQZPp1wlZYS+7joSnjupa47pmWO GNSAc5GQAwBc7Ekz0YZODFHDG30Yot+tXJm0VuKRNU4KnFiF/dw24FiyNnHGpF3A sf+TcPpZhUs5gwoMjUFA7L4bQntYMg2TbuDvykDVcvG6oSJhTU6v5bbHVu1HBCJI WFxe/tfgEExfhn4xKW0CnL0tAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUeqTgPNzd TjfvBQ1vzuU6FWPY05YwHwYDVR0jBBgwFoAUpBG7PJekzTyP/HCtY6ny7JaSrbcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVGRDIwL0MyNkZBMjc2QTFE QTExRjA4MEIyNjQ1M0M0RjlBRTAyL3BCRzdQSmVrelR5UF9IQ3RZNm55N0phU3Ji Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcEJHN1BKZWt6VHlQX0hDdFk2bnk3SmFTcmJjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVG RDIwL0MyNkZBMjc2QTFEQTExRjA4MEIyNjQ1M0M0RjlBRTAyL3BCRzdQSmVrelR5 UF9IQ3RZNm55N0phU3JiYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ8UWZXHKQF+CJ/GpqtHADV3OGKV9Pz1VeiLzvEg2UnwAhcd9Yjbfg6m H0+dmU5xPxV3lMGuGku2psrWGHCwEK2aKNMooS9Lqg4aJ5NFX0gI+4yyMO9ZqgZE UZ6tHdRSPRlZXJOTYEg9xAWTsdKHfKgAXUJQ1eWC+lTJ39ZPJ7LN1Q5/4fXgLRyR 4DGLLZxOA6k9pfHLZdCdtRoojMZOjdBwmiPROSjBtvphKvD8DNPKKQobd/hiT0cV +2TaSMCvBU0xnXgUwBNSnC2feUlkdWd/eJ1LGR1c9WHIqMJClXtJObPCUjjvm65+ s3w2nyBTcGCkIuy9yFhYwDCZnZI/+QA= -----END CERTIFICATE-----Generated at Mon Nov 3 18:09:52 2025 by rpki-client