$ rpki-client -vvf rpki.apnic.net/member_repository/A91190B4/BC8C10AE573C11EAB0A4E335C4F9AE02/peado7v7jl3TlkjmpD4A-nI95lg.mft File: peado7v7jl3TlkjmpD4A-nI95lg.mft (raw, json) Hash identifier: NyAcsYuH8qiLA32aHRuNhALAdCr5gWtTE7wEperH0IA= Subject key identifier: C4:C2:7E:16:11:0B:2E:EC:0B:70:D8:38:00:D0:36:AB:74:3F:7F:CB Authority key identifier: A5:E6:9D:A3:BB:FB:8E:5D:D3:96:48:E6:A4:3E:00:FA:72:3D:E6:58 Certificate issuer: /CN=A91190B4/serialNumber=A5E69DA3BBFB8E5DD39648E6A43E00FA723DE658 Certificate serial: 0AF2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/peado7v7jl3TlkjmpD4A-nI95lg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91190B4/BC8C10AE573C11EAB0A4E335C4F9AE02/peado7v7jl3TlkjmpD4A-nI95lg.mft Manifest number: 0AEA Signing time: Sat 18 Oct 2025 20:20:56 +0000 Manifest this update: Sat 18 Oct 2025 20:20:56 +0000 Manifest next update: Sat 25 Oct 2025 20:20:56 +0000 Files and hashes: 1: peado7v7jl3TlkjmpD4A-nI95lg.crl (hash: 8Cz4S/+sJAPCAPcSbklS3H9fRhPEqdv0hJTFIC83GZY=) 2: 55BC5674573F11EAA8901D3EC4F9AE02.roa (hash: GpKaeFCXgLqKWUd4/mw0J3pe4Cuty7kr/IEGoWg6an0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91190B4/BC8C10AE573C11EAB0A4E335C4F9AE02/peado7v7jl3TlkjmpD4A-nI95lg.crl rsync://rpki.apnic.net/member_repository/A91190B4/BC8C10AE573C11EAB0A4E335C4F9AE02/peado7v7jl3TlkjmpD4A-nI95lg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/peado7v7jl3TlkjmpD4A-nI95lg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:20:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2802 (0xaf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91190B4, serialNumber=A5E69DA3BBFB8E5DD39648E6A43E00FA723DE658 Validity Not Before: Oct 18 20:20:56 2025 GMT Not After : Oct 25 20:20:56 2025 GMT Subject: CN=68f3f6a8-4246 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:40:dc:3c:39:fa:24:5e:c4:2f:d0:77:a6:80: f4:08:75:3a:79:3b:ec:6e:a9:6e:70:76:83:63:6a: a1:a8:9f:fc:aa:34:b0:01:f2:a4:bf:e6:5e:c3:dd: d9:7c:bb:3e:6f:9b:b2:b1:96:c3:5b:39:1e:bc:87: a9:c3:e5:89:dc:81:fb:c7:d4:8e:2f:3a:b5:00:67: 12:cb:39:4e:4e:70:74:8f:4d:c0:d7:49:f1:f6:1a: af:e2:e2:98:b6:6d:e2:54:d7:58:d0:ab:34:a1:03: 6e:ea:66:40:57:28:c4:d1:67:c6:8e:07:ae:5e:09: e7:88:cb:ae:b7:56:ef:76:75:7e:11:c7:63:2a:48: d7:49:cb:3e:ee:6b:c4:b4:bd:05:41:60:24:8c:38: 4b:08:78:a4:1c:f0:b3:81:34:1d:25:01:bd:e2:23: 64:03:5c:ca:54:28:d6:79:71:8e:c4:83:70:04:83: 81:7d:9e:94:c0:0d:b9:b3:07:d5:eb:40:1d:d6:c1: 8e:2c:1b:62:e3:07:87:b7:47:e9:d9:40:e8:63:07: d4:a2:64:af:a8:20:0d:5b:9e:c5:dc:bb:14:ad:6c: f0:5d:17:66:ac:ad:90:6a:49:09:4e:29:e6:51:d3: a7:4e:dc:04:c4:ec:78:3d:f0:f0:6a:d8:51:4d:21: 8e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:C2:7E:16:11:0B:2E:EC:0B:70:D8:38:00:D0:36:AB:74:3F:7F:CB X509v3 Authority Key Identifier: keyid:A5:E6:9D:A3:BB:FB:8E:5D:D3:96:48:E6:A4:3E:00:FA:72:3D:E6:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91190B4/BC8C10AE573C11EAB0A4E335C4F9AE02/peado7v7jl3TlkjmpD4A-nI95lg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/peado7v7jl3TlkjmpD4A-nI95lg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91190B4/BC8C10AE573C11EAB0A4E335C4F9AE02/peado7v7jl3TlkjmpD4A-nI95lg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:4f:24:85:56:c4:2f:18:07:74:82:8e:4d:a2:1d:db:9a:5f: 3d:82:ef:c0:97:25:fe:e3:84:45:c0:7d:97:15:92:de:e1:ba: b2:23:5f:5c:0d:8a:45:e9:f4:1b:ad:61:f4:77:cf:79:ed:12: 88:fe:21:c5:af:87:71:2c:c3:64:5e:c9:11:e8:c4:5d:65:7c: c9:d4:96:d1:51:d0:8e:71:3e:09:bb:f8:4f:ee:8f:31:44:51: 76:73:4a:55:79:96:fd:3f:23:89:c9:4f:21:cd:a8:6f:ad:38: 1b:ab:5a:91:6e:18:b2:1b:ce:ca:58:42:a1:58:1b:57:e6:3a: 57:48:87:23:5c:0f:06:3d:6d:81:92:55:ca:ef:1b:1c:e5:e8: b7:57:a4:3a:2e:18:06:6e:1c:3f:a3:18:43:ec:bb:0c:0e:1a: 90:3a:6f:b8:6f:59:99:75:85:43:21:14:47:4c:f9:88:67:9c: 68:58:05:d6:15:c1:e5:53:06:23:2f:2b:17:d0:03:e1:c1:d9: 96:0e:5f:9a:26:27:a7:bb:bf:63:90:04:9a:1e:29:c5:af:39: 62:3d:07:b3:2b:1c:93:49:d6:c2:3b:98:0f:27:c1:17:9b:88: 49:f4:46:3c:b8:25:62:5c:83:11:0c:ef:98:9e:30:bb:00:1f: 7c:9e:16:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCvIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkwQjQxMTAvBgNVBAUTKEE1RTY5REEzQkJGQjhFNUREMzk2NDhFNkE0M0UwMEZB NzIzREU2NTgwHhcNMjUxMDE4MjAyMDU2WhcNMjUxMDI1MjAyMDU2WjAYMRYwFAYD VQQDEw02OGYzZjZhOC00MjQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA90DcPDn6JF7EL9B3poD0CHU6eTvsbqlucHaDY2qhqJ/8qjSwAfKkv+Zew93Z fLs+b5uysZbDWzkevIepw+WJ3IH7x9SOLzq1AGcSyzlOTnB0j03A10nx9hqv4uKY tm3iVNdY0Ks0oQNu6mZAVyjE0WfGjgeuXgnniMuut1bvdnV+EcdjKkjXScs+7mvE tL0FQWAkjDhLCHikHPCzgTQdJQG94iNkA1zKVCjWeXGOxINwBIOBfZ6UwA25swfV 60Ad1sGOLBti4weHt0fp2UDoYwfUomSvqCANW57F3LsUrWzwXRdmrK2QakkJTinm UdOnTtwExOx4PfDwathRTSGOcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMTCfhYR Cy7sC3DYOADQNqt0P3/LMB8GA1UdIwQYMBaAFKXmnaO7+45d05ZI5qQ+APpyPeZY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTBCNC9CQzhDMTBBRTU3 M0MxMUVBQjBBNEUzMzVDNEY5QUUwMi9wZWFkbzd2N2psM1Rsa2ptcEQ0QS1uSTk1 bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BlYWRvN3Y3amwzVGxram1wRDRBLW5JOTVsZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTBCNC9CQzhDMTBBRTU3M0MxMUVBQjBBNEUzMzVDNEY5QUUwMi9wZWFkbzd2N2ps M1Rsa2ptcEQ0QS1uSTk1bGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkTySFVsQvGAd0go5Noh3bml89gu/AlyX+44RFwH2XFZLe4bqyI19c DYpF6fQbrWH0d8957RKI/iHFr4dxLMNkXskR6MRdZXzJ1JbRUdCOcT4Ju/hP7o8x RFF2c0pVeZb9PyOJyU8hzahvrTgbq1qRbhiyG87KWEKhWBtX5jpXSIcjXA8GPW2B klXK7xsc5ei3V6Q6LhgGbhw/oxhD7LsMDhqQOm+4b1mZdYVDIRRHTPmIZ5xoWAXW FcHlUwYjLysX0APhwdmWDl+aJienu79jkASaHinFrzliPQezKxyTSdbCO5gPJ8EX m4hJ9EY8uCViXIMRDO+YnjC7AB98nhYS -----END CERTIFICATE-----Generated at Mon Oct 20 21:42:35 2025 by rpki-client