$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.mft File: PVlGAD7uVIrZXXlssYi3UcV82sg.mft (raw, json) Hash identifier: ZsJ4EaFrXasvW+ZbpWrSsuj0Y/AtWMPyG/pxIMueNAU= Subject key identifier: 8F:5D:D3:15:C3:44:E7:46:D9:78:5A:16:4F:51:E0:67:A3:75:3C:C9 Authority key identifier: 3D:59:46:00:3E:EE:54:8A:D9:5D:79:6C:B1:88:B7:51:C5:7C:DA:C8 Certificate issuer: /CN=A91F9E0A/serialNumber=3D5946003EEE548AD95D796CB188B751C57CDAC8 Certificate serial: 0103 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVlGAD7uVIrZXXlssYi3UcV82sg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.mft Manifest number: FD Signing time: Mon 27 Oct 2025 07:22:21 +0000 Manifest this update: Mon 27 Oct 2025 07:22:21 +0000 Manifest next update: Mon 03 Nov 2025 07:22:21 +0000 Files and hashes: 1: PVlGAD7uVIrZXXlssYi3UcV82sg.crl (hash: 3wRLhillAcD+1TfJOjqa13VT/6IwVTuhrxDQ7mpk1Sk=) 2: D0CDFEEA406E11EFA085272AC4F9AE02.roa (hash: aewA7Recxf1QEkAlzyh8eNS8lnCo6hOfpjo3yvsUTtM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.crl rsync://rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVlGAD7uVIrZXXlssYi3UcV82sg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 07:22:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 259 (0x103) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9E0A, serialNumber=3D5946003EEE548AD95D796CB188B751C57CDAC8 Validity Not Before: Oct 27 07:22:21 2025 GMT Not After : Nov 3 07:22:21 2025 GMT Subject: CN=68ff1dad-ae28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:9a:f4:30:69:55:ab:d9:c7:0a:00:a3:1b:49: 4e:35:68:61:aa:98:9d:34:6f:3f:11:aa:de:59:4c: 09:dc:85:ca:4d:f4:df:0d:16:99:71:6d:c7:45:6e: 58:89:c4:e3:cb:d5:60:73:6e:7f:f9:4a:4f:7d:f0: 42:a5:db:a2:f3:92:d6:be:19:e8:12:10:47:cf:31: 2a:3b:e3:7a:97:bb:a9:c3:f9:97:c4:65:cf:3a:ec: b1:25:b4:fa:bc:ee:38:f2:e6:23:cf:d4:b7:8b:31: 56:bc:12:ac:63:18:c4:5e:8b:a8:0f:47:b9:83:d5: a7:93:2e:a5:0a:4b:8e:b3:24:43:d8:b3:69:05:55: 79:aa:83:1c:46:70:0c:3a:05:f6:f0:2d:5f:0d:c3: c4:24:46:79:3f:1c:b3:14:95:18:2b:11:8a:2e:be: 54:67:2d:a0:68:2c:31:30:1d:d6:ff:7f:ff:c1:f5: d9:64:ef:b8:42:1f:14:33:47:51:fd:8f:93:a8:05: d9:64:51:26:2a:41:e2:05:7e:64:b9:78:7f:d6:11: 0a:b6:d4:17:63:ca:da:20:c2:86:0c:35:f8:7c:f4: f6:d8:7e:8f:53:e0:ea:fb:1e:63:f4:9f:6a:eb:7a: 63:f6:5c:b6:bc:84:0f:11:1a:7b:76:02:7c:5f:ce: b4:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:5D:D3:15:C3:44:E7:46:D9:78:5A:16:4F:51:E0:67:A3:75:3C:C9 X509v3 Authority Key Identifier: keyid:3D:59:46:00:3E:EE:54:8A:D9:5D:79:6C:B1:88:B7:51:C5:7C:DA:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVlGAD7uVIrZXXlssYi3UcV82sg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:27:ae:cc:4d:bd:cd:ce:8e:6c:c4:c1:59:f9:e7:f2:e5:30: 81:e9:df:5f:a0:34:4b:bd:34:05:89:60:be:9a:01:46:9a:13: 4b:68:eb:b5:86:e5:01:fa:e5:00:92:30:ed:2f:98:50:27:a7: dd:df:ce:3b:ba:c0:88:37:95:b9:43:8f:3b:71:13:b7:0e:88: 2d:c0:3c:e2:ca:54:d3:c5:0d:57:8d:3e:75:9e:10:ec:17:8f: 70:6b:47:8e:6d:5f:50:a9:b6:c8:08:02:77:8a:30:fa:b8:ff: d8:fa:05:00:38:04:13:2c:90:b6:80:a0:f6:d6:ef:8d:cf:2c: e6:0e:64:1e:ec:3b:27:51:16:22:da:e2:a3:9c:cb:6e:07:30: d2:b3:0f:61:69:19:84:c1:48:c9:f6:69:6f:12:f8:13:18:15: 7f:bb:36:72:5f:3e:25:c5:ef:d8:65:72:92:a6:33:ee:cb:a5: 41:60:59:fa:aa:b9:63:c4:af:a8:a0:ef:d3:5b:53:e1:7e:b3: 1c:d8:f1:4e:dc:ac:26:c4:59:3f:a4:d8:17:4e:60:7d:5a:59: 70:bd:7b:27:19:66:4b:3a:2c:e0:8e:dd:2b:72:fe:be:98:e7: e7:fb:22:4b:fe:d9:af:c2:4b:09:93:b8:8d:aa:09:45:4c:31: f8:36:86:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlFMEExMTAvBgNVBAUTKDNENTk0NjAwM0VFRTU0OEFEOTVENzk2Q0IxODhCNzUx QzU3Q0RBQzgwHhcNMjUxMDI3MDcyMjIxWhcNMjUxMTAzMDcyMjIxWjAYMRYwFAYD VQQDEw02OGZmMWRhZC1hZTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Jr0MGlVq9nHCgCjG0lONWhhqpidNG8/EareWUwJ3IXKTfTfDRaZcW3HRW5Y icTjy9Vgc25/+UpPffBCpdui85LWvhnoEhBHzzEqO+N6l7upw/mXxGXPOuyxJbT6 vO448uYjz9S3izFWvBKsYxjEXouoD0e5g9Wnky6lCkuOsyRD2LNpBVV5qoMcRnAM OgX28C1fDcPEJEZ5PxyzFJUYKxGKLr5UZy2gaCwxMB3W/3//wfXZZO+4Qh8UM0dR /Y+TqAXZZFEmKkHiBX5kuXh/1hEKttQXY8raIMKGDDX4fPT22H6PU+Dq+x5j9J9q 63pj9ly2vIQPERp7dgJ8X8603QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI9d0xXD ROdG2XhaFk9R4GejdTzJMB8GA1UdIwQYMBaAFD1ZRgA+7lSK2V15bLGIt1HFfNrI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUUwQS8wQkQ5ODVFODNF NjkxMUVGQTJDRTY3NkFDNEY5QUUwMi9QVmxHQUQ3dVZJclpYWGxzc1lpM1VjVjgy c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BWbEdBRDd1VklyWlhYbHNzWWkzVWNWODJzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUUwQS8wQkQ5ODVFODNFNjkxMUVGQTJDRTY3NkFDNEY5QUUwMi9QVmxHQUQ3dVZJ clpYWGxzc1lpM1VjVjgyc2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCJ67MTb3Nzo5sxMFZ+efy5TCB6d9foDRLvTQFiWC+mgFGmhNLaOu1 huUB+uUAkjDtL5hQJ6fd3847usCIN5W5Q487cRO3DogtwDziylTTxQ1XjT51nhDs F49wa0eObV9QqbbICAJ3ijD6uP/Y+gUAOAQTLJC2gKD21u+NzyzmDmQe7DsnURYi 2uKjnMtuBzDSsw9haRmEwUjJ9mlvEvgTGBV/uzZyXz4lxe/YZXKSpjPuy6VBYFn6 qrljxK+ooO/TW1PhfrMc2PFO3KwmxFk/pNgXTmB9WllwvXsnGWZLOizgjt0rcv6+ mOfn+yJL/tmvwksJk7iNqglFTDH4NoYs -----END CERTIFICATE-----Generated at Tue Oct 28 14:09:54 2025 by rpki-client