$ rpki-client -vvf rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/PgP9FZgAmbW_UCHpC-H0p34Ax5w.mft File: PgP9FZgAmbW_UCHpC-H0p34Ax5w.mft (raw, json) Hash identifier: BT4yGsFZsqPq5+itk95Cy/fVW88ASRnErDhB3hP5w6k= Subject key identifier: EC:36:C2:99:15:AC:07:0F:88:59:35:2C:41:95:5C:EC:09:04:85:78 Authority key identifier: 3E:03:FD:15:98:00:99:B5:BF:50:21:E9:0B:E1:F4:A7:7E:00:C7:9C Certificate issuer: /CN=A91538E7/serialNumber=3E03FD15980099B5BF5021E90BE1F4A77E00C79C Certificate serial: 31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgP9FZgAmbW_UCHpC-H0p34Ax5w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/PgP9FZgAmbW_UCHpC-H0p34Ax5w.mft Manifest number: 0827 Signing time: Sat 18 Oct 2025 22:16:01 +0000 Manifest this update: Sat 18 Oct 2025 22:16:01 +0000 Manifest next update: Sat 25 Oct 2025 22:16:01 +0000 Files and hashes: 1: PgP9FZgAmbW_UCHpC-H0p34Ax5w.crl (hash: VvLL/JQzAtgjGwHw6hmTgq3p8hjMT/zAZ8DAU8yPRn0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/PgP9FZgAmbW_UCHpC-H0p34Ax5w.crl rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/PgP9FZgAmbW_UCHpC-H0p34Ax5w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgP9FZgAmbW_UCHpC-H0p34Ax5w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:16:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91538E7, serialNumber=3E03FD15980099B5BF5021E90BE1F4A77E00C79C Validity Not Before: Oct 18 22:16:01 2025 GMT Not After : Oct 25 22:16:01 2025 GMT Subject: CN=68f411a1-fa07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:af:25:09:96:f5:8b:5c:71:b6:2f:20:a0:3c: ff:12:a3:f1:a6:32:43:f0:19:9d:68:9f:a4:00:1e: 08:63:45:ac:79:70:ca:de:9b:a7:80:2e:61:0d:d4: 78:73:3e:35:8e:2a:8c:8b:01:4e:6f:ba:e6:43:d3: 7a:71:d7:56:cb:7b:68:66:b9:4e:0d:ed:2b:6c:aa: 14:b4:73:ce:66:33:1c:bd:38:74:8f:65:15:fe:03: c6:08:85:3f:13:20:6f:64:3c:2c:79:fd:b4:54:79: b4:c7:d4:ec:34:5e:da:c3:12:82:0f:3a:37:1c:06: 97:9f:93:83:23:d8:42:22:bf:09:da:67:1b:b1:f6: 36:83:b6:9a:24:ba:12:25:d7:4e:92:5e:77:f1:8b: 75:97:21:3e:8f:09:8a:a3:44:09:7f:ea:66:8f:58: 51:60:48:9b:f0:fe:f1:24:0f:36:cd:a0:76:78:a7: 09:28:6f:f3:87:6a:16:f0:0d:13:7c:98:f2:b8:5b: a0:95:72:03:ae:e6:5d:33:98:d5:1c:19:7b:5c:58: 56:d4:a9:38:db:99:83:b9:a6:f6:35:d7:fa:f0:11: 56:cc:df:e0:3a:89:ca:ac:71:bf:64:f0:34:b5:c0: e8:d4:32:47:84:c5:82:19:c9:d1:7c:67:e6:c9:2a: be:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:36:C2:99:15:AC:07:0F:88:59:35:2C:41:95:5C:EC:09:04:85:78 X509v3 Authority Key Identifier: keyid:3E:03:FD:15:98:00:99:B5:BF:50:21:E9:0B:E1:F4:A7:7E:00:C7:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/PgP9FZgAmbW_UCHpC-H0p34Ax5w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgP9FZgAmbW_UCHpC-H0p34Ax5w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/PgP9FZgAmbW_UCHpC-H0p34Ax5w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:e2:14:ff:a5:62:10:1d:18:72:6c:6d:57:af:c2:f6:03:8b: dd:03:c9:a8:2f:08:81:16:b5:e8:be:d9:1a:f3:73:77:d9:bb: 61:b8:8f:65:93:90:bc:ea:45:f9:17:f7:ee:05:d0:65:ba:de: 3e:43:76:08:18:f7:5f:48:08:e0:c6:79:fd:f8:85:47:04:a4: c1:db:fb:da:4f:40:16:a8:5a:b3:25:4e:cc:bf:d8:d4:63:45: bc:78:68:d2:0c:6d:86:ff:9d:d5:84:06:50:a2:1a:f4:79:29: 1a:be:4e:43:87:60:de:d7:f0:e9:92:73:71:dc:8f:9f:59:e3: d2:b3:a7:8c:ad:ab:2b:0f:e4:77:82:3e:f3:23:4c:a4:74:b8: 4a:cc:9d:02:b5:89:48:8e:5e:e6:41:f1:73:ac:61:21:bc:ec: 4c:95:c1:af:37:64:9b:62:93:48:2a:f5:3e:01:21:ff:21:94: 6c:67:b5:4f:9e:f2:44:06:64:fb:18:38:cf:f7:1a:b6:df:0c: 62:97:49:69:b1:d0:e4:a4:26:ff:be:08:1b:2d:e1:d9:b5:28: c8:1f:32:f4:ca:9e:10:1f:34:5b:e8:64:2a:2d:61:73:02:80: 63:14:c3:76:7d:d2:b3:19:3d:57:1a:63:42:ba:6c:87:97:0e: 70:ae:4b:73 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MzhFNzExMC8GA1UEBRMoM0UwM0ZEMTU5ODAwOTlCNUJGNTAyMUU5MEJFMUY0QTc3 RTAwQzc5QzAeFw0yNTEwMTgyMjE2MDFaFw0yNTEwMjUyMjE2MDFaMBgxFjAUBgNV BAMTDTY4ZjQxMWExLWZhMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVryUJlvWLXHG2LyCgPP8So/GmMkPwGZ1on6QAHghjRax5cMrem6eALmEN1Hhz PjWOKoyLAU5vuuZD03px11bLe2hmuU4N7StsqhS0c85mMxy9OHSPZRX+A8YIhT8T IG9kPCx5/bRUebTH1Ow0XtrDEoIPOjccBpefk4Mj2EIivwnaZxux9jaDtpokuhIl 106SXnfxi3WXIT6PCYqjRAl/6maPWFFgSJvw/vEkDzbNoHZ4pwkob/OHahbwDRN8 mPK4W6CVcgOu5l0zmNUcGXtcWFbUqTjbmYO5pvY11/rwEVbM3+A6icqscb9k8DS1 wOjUMkeExYIZydF8Z+bJKr4JAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU7DbCmRWs Bw+IWTUsQZVc7AkEhXgwHwYDVR0jBBgwFoAUPgP9FZgAmbW/UCHpC+H0p34Ax5ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUzOEU3L0JGNDA0QTVBMDI2 NzExRUI4RTFDMzAxQUM0RjlBRTAyL1BnUDlGWmdBbWJXX1VDSHBDLUgwcDM0QXg1 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUGdQOUZaZ0FtYldfVUNIcEMtSDBwMzRBeDV3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUz OEU3L0JGNDA0QTVBMDI2NzExRUI4RTFDMzAxQUM0RjlBRTAyL1BnUDlGWmdBbWJX X1VDSHBDLUgwcDM0QXg1dy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALjiFP+lYhAdGHJsbVevwvYDi90DyagvCIEWtei+2Rrzc3fZu2G4j2WT kLzqRfkX9+4F0GW63j5DdggY919ICODGef34hUcEpMHb+9pPQBaoWrMlTsy/2NRj Rbx4aNIMbYb/ndWEBlCiGvR5KRq+TkOHYN7X8OmSc3Hcj59Z49Kzp4ytqysP5HeC PvMjTKR0uErMnQK1iUiOXuZB8XOsYSG87EyVwa83ZJtik0gq9T4BIf8hlGxntU+e 8kQGZPsYOM/3GrbfDGKXSWmx0OSkJv++CBst4dm1KMgfMvTKnhAfNFvoZCotYXMC gGMUw3Z90rMZPVcaY0K6bIeXDnCuS3M= -----END CERTIFICATE-----Generated at Mon Oct 20 09:36:47 2025 by rpki-client