$ rpki-client -vvf rpki.apnic.net/member_repository/A91389E7/A27FE6DC4C0911F09F38B628C4F9AE02/PwmXnYiKPadxYLPIBzfMNgDGuN4.mft File: PwmXnYiKPadxYLPIBzfMNgDGuN4.mft (raw, json) Hash identifier: IwmxfL5oKkwOaFAnzmtVs9Di0kiHvpQLyVIYqYpf2YM= Subject key identifier: AE:0F:1E:44:86:A8:E9:2B:55:7B:B4:DA:C5:6E:B9:82:DE:4D:64:A9 Authority key identifier: 3F:09:97:9D:88:8A:3D:A7:71:60:B3:C8:07:37:CC:36:00:C6:B8:DE Certificate issuer: /CN=A91389E7/serialNumber=3F09979D888A3DA77160B3C80737CC3600C6B8DE Certificate serial: 41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PwmXnYiKPadxYLPIBzfMNgDGuN4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91389E7/A27FE6DC4C0911F09F38B628C4F9AE02/PwmXnYiKPadxYLPIBzfMNgDGuN4.mft Manifest number: 41 Signing time: Sun 19 Oct 2025 10:54:24 +0000 Manifest this update: Sun 19 Oct 2025 10:54:23 +0000 Manifest next update: Sun 26 Oct 2025 10:54:23 +0000 Files and hashes: 1: PwmXnYiKPadxYLPIBzfMNgDGuN4.crl (hash: hKx96rj4rl4MFgDkBcwfH5DwJwloV/6qJ7gvx6NDV1M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91389E7/A27FE6DC4C0911F09F38B628C4F9AE02/PwmXnYiKPadxYLPIBzfMNgDGuN4.crl rsync://rpki.apnic.net/member_repository/A91389E7/A27FE6DC4C0911F09F38B628C4F9AE02/PwmXnYiKPadxYLPIBzfMNgDGuN4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PwmXnYiKPadxYLPIBzfMNgDGuN4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:54:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91389E7, serialNumber=3F09979D888A3DA77160B3C80737CC3600C6B8DE Validity Not Before: Oct 19 10:54:23 2025 GMT Not After : Oct 26 10:54:23 2025 GMT Subject: CN=68f4c35f-fea9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:2a:53:32:ba:4e:ed:70:54:88:91:c0:bd:0f: 34:21:59:13:2d:99:9a:94:27:12:69:2d:31:8c:32: c7:dc:a5:74:1f:98:76:aa:07:8a:64:0c:91:e7:43: e2:9d:a8:9f:05:bc:11:3b:51:e5:64:7f:f5:88:ce: d1:25:61:64:96:8e:85:c1:23:57:27:c6:1a:61:47: 01:35:4a:85:c7:d4:c1:bd:7e:29:50:6e:9a:5d:97: e1:65:da:47:54:33:4f:6a:05:b7:d2:bb:0f:92:52: 71:81:07:0a:10:67:f3:8f:82:c0:06:cb:54:ce:76: 97:57:0e:f9:22:e4:72:d3:1b:7a:06:4b:6e:f2:04: be:a6:f0:b4:d8:85:3c:a2:1b:3d:c0:d4:4c:23:b0: 2a:a4:4d:e9:06:e7:83:3e:53:07:21:c8:fd:3a:2c: 07:03:cd:2d:04:01:df:e4:85:f3:fc:24:71:b2:a1: 75:f5:d8:d4:ca:94:3c:c4:04:db:9e:87:1c:63:25: 46:a9:2d:2a:d4:25:c3:9e:56:db:65:7a:23:80:f6: 98:33:47:49:28:6b:39:a9:f8:ec:db:fe:99:9b:55: d0:98:e6:9b:d9:4f:da:f7:30:e8:67:62:09:2e:21: 88:3f:8a:13:d6:ad:ef:27:da:06:ae:ba:fb:e8:fc: d0:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:0F:1E:44:86:A8:E9:2B:55:7B:B4:DA:C5:6E:B9:82:DE:4D:64:A9 X509v3 Authority Key Identifier: keyid:3F:09:97:9D:88:8A:3D:A7:71:60:B3:C8:07:37:CC:36:00:C6:B8:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91389E7/A27FE6DC4C0911F09F38B628C4F9AE02/PwmXnYiKPadxYLPIBzfMNgDGuN4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PwmXnYiKPadxYLPIBzfMNgDGuN4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91389E7/A27FE6DC4C0911F09F38B628C4F9AE02/PwmXnYiKPadxYLPIBzfMNgDGuN4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:94:99:0d:2a:fd:9a:4d:2c:44:e4:d3:41:55:d9:c9:e3:ba: 55:eb:f8:04:d3:e8:dd:09:ae:c8:04:e8:74:d5:86:81:33:f1: 36:ea:cb:2a:46:d6:09:87:f6:45:86:6f:2a:42:93:b8:0d:62: d2:b9:92:ab:90:7e:62:10:cf:2b:54:68:f3:d4:7e:17:49:39: 93:6d:31:e9:b1:ab:2e:00:7c:40:b0:99:62:b5:c9:3e:a2:f9: de:77:ac:80:51:77:c8:72:fe:cc:ce:16:a6:9b:fa:8b:b4:33: 6b:8b:19:91:66:d8:20:00:c9:a6:10:08:37:46:ab:ea:cb:e0: 0c:98:db:a6:7d:7d:6b:fe:43:01:5f:5e:94:91:3f:03:cd:c9: da:41:e7:56:d0:11:8d:18:fc:03:0b:82:c8:e6:75:44:4b:d5: e5:80:52:0b:96:4d:36:fb:a8:0b:1b:9b:5c:10:82:14:e2:7b: eb:23:2c:6f:ee:9d:f7:0e:52:23:30:a9:f1:9a:e5:90:01:d4: 1d:0d:8e:ae:62:1a:d2:4b:f9:07:70:41:69:ee:18:26:b0:94: 05:30:e3:15:8a:ce:4d:b5:2e:3c:b6:66:f2:25:81:ef:81:cc: 5b:d9:fb:50:e3:7f:60:99:4f:92:8d:a7:a4:06:4f:a7:a9:af: e1:c3:8e:87 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz ODlFNzExMC8GA1UEBRMoM0YwOTk3OUQ4ODhBM0RBNzcxNjBCM0M4MDczN0NDMzYw MEM2QjhERTAeFw0yNTEwMTkxMDU0MjNaFw0yNTEwMjYxMDU0MjNaMBgxFjAUBgNV BAMTDTY4ZjRjMzVmLWZlYTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDwKlMyuk7tcFSIkcC9DzQhWRMtmZqUJxJpLTGMMsfcpXQfmHaqB4pkDJHnQ+Kd qJ8FvBE7UeVkf/WIztElYWSWjoXBI1cnxhphRwE1SoXH1MG9filQbppdl+Fl2kdU M09qBbfSuw+SUnGBBwoQZ/OPgsAGy1TOdpdXDvki5HLTG3oGS27yBL6m8LTYhTyi Gz3A1EwjsCqkTekG54M+UwchyP06LAcDzS0EAd/khfP8JHGyoXX12NTKlDzEBNue hxxjJUapLSrUJcOeVttleiOA9pgzR0koazmp+Ozb/pmbVdCY5pvZT9r3MOhnYgku IYg/ihPWre8n2gauuvvo/NDtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUrg8eRIao 6StVe7TaxW65gt5NZKkwHwYDVR0jBBgwFoAUPwmXnYiKPadxYLPIBzfMNgDGuN4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4OUU3L0EyN0ZFNkRDNEMw OTExRjA5RjM4QjYyOEM0RjlBRTAyL1B3bVhuWWlLUGFkeFlMUElCemZNTmdER3VO NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUHdtWG5ZaUtQYWR4WUxQSUJ6Zk1OZ0RHdU40LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4 OUU3L0EyN0ZFNkRDNEMwOTExRjA5RjM4QjYyOEM0RjlBRTAyL1B3bVhuWWlLUGFk eFlMUElCemZNTmdER3VONC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB6UmQ0q/ZpNLETk00FV2cnjulXr+ATT6N0JrsgE6HTVhoEz8TbqyypG 1gmH9kWGbypCk7gNYtK5kquQfmIQzytUaPPUfhdJOZNtMemxqy4AfECwmWK1yT6i +d53rIBRd8hy/szOFqab+ou0M2uLGZFm2CAAyaYQCDdGq+rL4AyY26Z9fWv+QwFf XpSRPwPNydpB51bQEY0Y/AMLgsjmdURL1eWAUguWTTb7qAsbm1wQghTie+sjLG/u nfcOUiMwqfGa5ZAB1B0Njq5iGtJL+QdwQWnuGCawlAUw4xWKzk21Ljy2ZvIlge+B zFvZ+1Djf2CZT5KNp6QGT6epr+HDjoc= -----END CERTIFICATE-----Generated at Mon Oct 20 19:04:51 2025 by rpki-client