$ rpki-client -vvf rpki.apnic.net/member_repository/A91210E0/3EB10C9A6D9811EEAA2AA36AC4F9AE02/PyDCnh1-UV3z49hapE51H4Fycxo.mft File: PyDCnh1-UV3z49hapE51H4Fycxo.mft (raw, json) Hash identifier: bgIcvGKmWSO8U8UENkSO4tKNnBHl4SrGXaYLCnWHLx0= Subject key identifier: 0E:31:8B:92:09:42:EA:69:1D:12:40:3E:83:A3:B0:08:7B:BA:22:9E Authority key identifier: 3F:20:C2:9E:1D:7E:51:5D:F3:E3:D8:5A:A4:4E:75:1F:81:72:73:1A Certificate issuer: /CN=A91210E0/serialNumber=3F20C29E1D7E515DF3E3D85AA44E751F8172731A Certificate serial: 017F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PyDCnh1-UV3z49hapE51H4Fycxo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91210E0/3EB10C9A6D9811EEAA2AA36AC4F9AE02/PyDCnh1-UV3z49hapE51H4Fycxo.mft Manifest number: 017A Signing time: Sun 19 Oct 2025 06:23:26 +0000 Manifest this update: Sun 19 Oct 2025 06:23:26 +0000 Manifest next update: Sun 26 Oct 2025 06:23:25 +0000 Files and hashes: 1: PyDCnh1-UV3z49hapE51H4Fycxo.crl (hash: U3yM1jfUb45CW7lbup/caIIvucbbVbFFa8wvu675Dy4=) 2: 503E43126E5E11EEB39D9E48C4F9AE02.roa (hash: L+aSJH2lWC1anAfV1QDeoFg2+6ljff+C6eVKVad/Lj8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91210E0/3EB10C9A6D9811EEAA2AA36AC4F9AE02/PyDCnh1-UV3z49hapE51H4Fycxo.crl rsync://rpki.apnic.net/member_repository/A91210E0/3EB10C9A6D9811EEAA2AA36AC4F9AE02/PyDCnh1-UV3z49hapE51H4Fycxo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PyDCnh1-UV3z49hapE51H4Fycxo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:23:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 383 (0x17f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91210E0, serialNumber=3F20C29E1D7E515DF3E3D85AA44E751F8172731A Validity Not Before: Oct 19 06:23:26 2025 GMT Not After : Oct 26 06:23:25 2025 GMT Subject: CN=68f483de-c06a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f3:4c:67:2e:41:c3:28:b6:63:7e:13:bb:07: 6f:2c:4d:7d:55:7f:f0:3a:e4:d3:12:39:82:8a:31: 09:c4:c4:0b:08:f4:9e:38:e5:91:02:7b:4f:ec:42: d0:0f:82:4f:78:3e:38:f6:82:37:7e:2a:2b:3e:e5: 51:10:5b:6b:cf:3a:c6:73:04:12:cf:04:9e:0d:3a: 95:8c:81:0a:d7:01:36:0d:22:38:1b:10:15:ce:0b: 8f:43:c5:f5:0a:2e:c2:10:b7:21:f4:5e:d2:55:0b: d2:35:21:b1:74:40:56:5d:47:40:80:50:4f:ce:95: 06:a7:50:8e:7b:2c:4e:ba:bc:02:18:2e:c2:85:ae: 4d:ab:78:c7:73:3e:28:44:97:15:0e:9e:0d:a3:6b: fa:70:b4:ba:cb:4d:2d:a2:e9:f4:10:74:b1:b4:59: a3:ae:7c:6f:50:b4:0d:94:7d:f8:be:a0:48:df:60: 6a:10:54:60:46:43:c0:67:95:bd:58:a3:44:73:bb: a4:21:12:5b:df:74:bb:96:2c:74:72:6b:93:0a:28: 45:f8:e5:69:17:fa:c7:ca:75:4e:a4:44:34:e6:46: fb:c0:83:68:2b:b8:05:ef:6d:bf:2b:59:6b:73:0f: f9:b8:b4:87:b6:8e:50:70:af:cf:92:61:ff:b2:65: 60:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:31:8B:92:09:42:EA:69:1D:12:40:3E:83:A3:B0:08:7B:BA:22:9E X509v3 Authority Key Identifier: keyid:3F:20:C2:9E:1D:7E:51:5D:F3:E3:D8:5A:A4:4E:75:1F:81:72:73:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91210E0/3EB10C9A6D9811EEAA2AA36AC4F9AE02/PyDCnh1-UV3z49hapE51H4Fycxo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PyDCnh1-UV3z49hapE51H4Fycxo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91210E0/3EB10C9A6D9811EEAA2AA36AC4F9AE02/PyDCnh1-UV3z49hapE51H4Fycxo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:06:db:b5:05:46:0d:1a:ad:9f:77:b6:2a:da:b0:19:f1:64: 04:38:91:98:e2:6c:47:24:e1:85:5e:53:1d:90:6b:76:4b:a2: 64:27:15:25:ed:30:ac:78:f4:36:db:e5:d1:df:11:d7:90:c5: 30:18:1e:57:6b:67:2f:d4:bf:de:6d:89:52:11:6f:44:38:0a: d8:6c:7f:a4:3e:6e:c2:1f:34:29:49:b8:35:cc:78:5e:ee:2d: 0b:28:54:51:c0:e3:ae:37:57:3a:f6:2a:e5:32:29:38:fe:f4: 7d:c2:6f:84:da:88:7d:b4:04:b5:55:67:82:b5:98:58:b4:6b: ae:17:c9:cb:ff:9b:87:92:00:2a:ca:b4:28:c7:40:01:17:83: ac:21:9c:90:cd:84:9f:90:91:c9:68:b6:75:42:9d:fa:18:46: 11:cf:49:5d:29:6a:a1:e8:fd:57:4a:96:6b:98:f7:ba:d8:e2: e6:4c:1d:62:b4:09:d2:a2:12:c0:06:f7:d3:2f:51:3c:e8:66: 5d:5e:3a:29:df:7d:c2:7e:7d:3f:fa:3f:69:e2:db:aa:8e:03: 57:36:c0:d1:cc:f8:5b:a4:d8:51:c2:b7:47:91:12:2d:25:91: 33:68:3f:3d:67:4c:c3:3d:cb:26:13:f8:3a:9f:ea:f9:4e:2d: 9f:6e:ff:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjEwRTAxMTAvBgNVBAUTKDNGMjBDMjlFMUQ3RTUxNURGM0UzRDg1QUE0NEU3NTFG ODE3MjczMUEwHhcNMjUxMDE5MDYyMzI2WhcNMjUxMDI2MDYyMzI1WjAYMRYwFAYD VQQDEw02OGY0ODNkZS1jMDZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyPNMZy5Bwyi2Y34TuwdvLE19VX/wOuTTEjmCijEJxMQLCPSeOOWRAntP7ELQ D4JPeD449oI3fiorPuVREFtrzzrGcwQSzwSeDTqVjIEK1wE2DSI4GxAVzguPQ8X1 Ci7CELch9F7SVQvSNSGxdEBWXUdAgFBPzpUGp1COeyxOurwCGC7Cha5Nq3jHcz4o RJcVDp4No2v6cLS6y00toun0EHSxtFmjrnxvULQNlH34vqBI32BqEFRgRkPAZ5W9 WKNEc7ukIRJb33S7lix0cmuTCihF+OVpF/rHynVOpEQ05kb7wINoK7gF722/K1lr cw/5uLSHto5QcK/PkmH/smVg+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA4xi5IJ QuppHRJAPoOjsAh7uiKeMB8GA1UdIwQYMBaAFD8gwp4dflFd8+PYWqROdR+BcnMa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTBFMC8zRUIxMEM5QTZE OTgxMUVFQUEyQUEzNkFDNEY5QUUwMi9QeURDbmgxLVVWM3o0OWhhcEU1MUg0Rnlj eG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1B5RENuaDEtVVYzejQ5aGFwRTUxSDRGeWN4by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTBFMC8zRUIxMEM5QTZEOTgxMUVFQUEyQUEzNkFDNEY5QUUwMi9QeURDbmgxLVVW M3o0OWhhcEU1MUg0RnljeG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvBtu1BUYNGq2fd7Yq2rAZ8WQEOJGY4mxHJOGFXlMdkGt2S6JkJxUl 7TCsePQ22+XR3xHXkMUwGB5Xa2cv1L/ebYlSEW9EOArYbH+kPm7CHzQpSbg1zHhe 7i0LKFRRwOOuN1c69irlMik4/vR9wm+E2oh9tAS1VWeCtZhYtGuuF8nL/5uHkgAq yrQox0ABF4OsIZyQzYSfkJHJaLZ1Qp36GEYRz0ldKWqh6P1XSpZrmPe62OLmTB1i tAnSohLABvfTL1E86GZdXjop333Cfn0/+j9p4tuqjgNXNsDRzPhbpNhRwrdHkRIt JZEzaD89Z0zDPcsmE/g6n+r5Ti2fbv// -----END CERTIFICATE-----Generated at Mon Oct 20 18:37:51 2025 by rpki-client