$ rpki-client -vvf rpki.apnic.net/member_repository/A917AF13/538732FE294C11EBA6BF6D31C4F9AE02/PfacqYyxMelltbxKM_znG50156g.mft File: PfacqYyxMelltbxKM_znG50156g.mft (raw, json) Hash identifier: mZnQVr0sHuV+AJ83ihIAgY+EYoZRVG8kJej9fJz5UOI= Subject key identifier: 87:FE:37:9A:5F:42:C5:BE:ED:05:C7:03:EA:CF:77:2C:F2:3B:A7:47 Authority key identifier: 3D:F6:9C:A9:8C:B1:31:E9:65:B5:BC:4A:33:FC:E7:1B:9D:35:E7:A8 Certificate issuer: /CN=A917AF13/serialNumber=3DF69CA98CB131E965B5BC4A33FCE71B9D35E7A8 Certificate serial: 07A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfacqYyxMelltbxKM_znG50156g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917AF13/538732FE294C11EBA6BF6D31C4F9AE02/PfacqYyxMelltbxKM_znG50156g.mft Manifest number: 0794 Signing time: Sat 18 Oct 2025 22:49:10 +0000 Manifest this update: Sat 18 Oct 2025 22:49:09 +0000 Manifest next update: Sat 25 Oct 2025 22:49:09 +0000 Files and hashes: 1: PfacqYyxMelltbxKM_znG50156g.crl (hash: zzq3pYwQGspNKQFAfSz2VNGL9skEuGdmXQiJbFU9Ums=) 2: F1C686AA1D5811EFA8D26E3EC4F9AE02.roa (hash: TkoNa9ji5ztcG7b34KFx+YNM0+7Oo5t7XfdNpMfZbEo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917AF13/538732FE294C11EBA6BF6D31C4F9AE02/PfacqYyxMelltbxKM_znG50156g.crl rsync://rpki.apnic.net/member_repository/A917AF13/538732FE294C11EBA6BF6D31C4F9AE02/PfacqYyxMelltbxKM_znG50156g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfacqYyxMelltbxKM_znG50156g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:49:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1954 (0x7a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917AF13, serialNumber=3DF69CA98CB131E965B5BC4A33FCE71B9D35E7A8 Validity Not Before: Oct 18 22:49:09 2025 GMT Not After : Oct 25 22:49:09 2025 GMT Subject: CN=68f41965-4801 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c8:1a:40:9d:10:05:95:dc:d3:d4:df:f2:64: 38:9d:95:db:de:40:5e:9d:9e:55:66:25:cc:16:3d: 4e:2a:70:b7:bd:66:d0:4b:db:98:f9:16:69:38:0b: cf:88:fc:e7:36:7a:f5:6b:62:ed:c1:47:ef:a1:0f: 10:04:90:af:14:cf:60:64:a3:66:22:77:50:ad:02: ed:30:60:33:14:d3:7c:d1:d8:9b:3a:1b:bf:8a:22: 94:28:a1:d3:7e:52:3d:fe:1d:1d:c1:df:ef:8f:e6: 16:5e:37:81:5c:56:45:9b:aa:89:65:41:e8:13:de: 91:31:84:07:6f:c8:42:98:d4:65:69:ab:07:2b:ff: a5:54:7c:c9:33:45:68:5f:51:6f:99:73:14:49:fe: 6a:be:25:eb:c1:3e:71:eb:de:0e:db:d4:97:8c:51: 7c:16:b5:74:37:cd:54:23:45:be:95:2f:89:c6:69: d8:d8:1f:b7:92:e3:cb:0e:68:37:ae:18:9c:97:f8: b1:d6:82:d7:05:b0:dd:ee:e4:f6:65:99:96:a3:19: 2a:83:22:7d:5d:31:a7:f9:d1:5a:17:31:95:a1:88: e9:a2:cf:dc:ac:ce:88:cf:71:99:2f:25:5a:f3:c7: eb:e9:71:84:c1:b9:7d:05:30:a0:e2:0e:26:93:de: bc:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:FE:37:9A:5F:42:C5:BE:ED:05:C7:03:EA:CF:77:2C:F2:3B:A7:47 X509v3 Authority Key Identifier: keyid:3D:F6:9C:A9:8C:B1:31:E9:65:B5:BC:4A:33:FC:E7:1B:9D:35:E7:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917AF13/538732FE294C11EBA6BF6D31C4F9AE02/PfacqYyxMelltbxKM_znG50156g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfacqYyxMelltbxKM_znG50156g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AF13/538732FE294C11EBA6BF6D31C4F9AE02/PfacqYyxMelltbxKM_znG50156g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption df:f2:be:b9:75:ed:36:7b:bb:4b:46:02:e0:14:2e:9a:41:3f: 63:40:c0:79:cb:fb:1f:66:5c:54:a2:a4:b1:7f:26:28:e5:f0: e5:54:20:a4:3b:6d:70:1e:0d:93:63:fa:8d:f5:8f:60:03:c4: 4f:2f:60:b1:ea:4c:fc:8b:70:07:c0:99:b2:aa:81:de:51:36: e9:3f:70:0e:fe:fe:a1:97:e9:1e:e0:4c:38:23:a9:cf:7e:ed: ce:e2:ae:da:af:b2:6d:ab:f8:a8:78:6f:56:c2:86:0e:9f:1d: 80:7c:13:a2:5f:a8:56:df:64:97:69:2b:4e:99:7e:87:72:34: 1c:8f:99:47:4a:b4:33:88:53:42:c2:fc:e3:22:ff:dc:c6:7e: 93:bd:00:e3:68:31:53:c7:cd:34:67:0f:b4:4a:bc:62:a5:93: ea:3a:1b:f3:35:3f:97:06:42:d5:57:a8:5c:2d:d8:fe:cc:b2: ab:5c:46:61:8a:59:69:24:77:db:f1:f7:66:6e:e8:e8:7e:5e: 9e:9f:54:fa:71:b1:e0:bf:84:6f:e4:de:e9:b1:9a:9a:40:f0: 4e:1c:35:d1:3c:29:0f:03:27:86:ad:60:b2:30:d6:e0:c7:ed: 59:67:b1:8b:da:2b:cc:24:70:95:b7:f5:44:d1:14:44:5a:8c: 1f:5e:d4:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FGMTMxMTAvBgNVBAUTKDNERjY5Q0E5OENCMTMxRTk2NUI1QkM0QTMzRkNFNzFC OUQzNUU3QTgwHhcNMjUxMDE4MjI0OTA5WhcNMjUxMDI1MjI0OTA5WjAYMRYwFAYD VQQDEw02OGY0MTk2NS00ODAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAycgaQJ0QBZXc09Tf8mQ4nZXb3kBenZ5VZiXMFj1OKnC3vWbQS9uY+RZpOAvP iPznNnr1a2LtwUfvoQ8QBJCvFM9gZKNmIndQrQLtMGAzFNN80dibOhu/iiKUKKHT flI9/h0dwd/vj+YWXjeBXFZFm6qJZUHoE96RMYQHb8hCmNRlaasHK/+lVHzJM0Vo X1FvmXMUSf5qviXrwT5x694O29SXjFF8FrV0N81UI0W+lS+JxmnY2B+3kuPLDmg3 rhicl/ix1oLXBbDd7uT2ZZmWoxkqgyJ9XTGn+dFaFzGVoYjpos/crM6Iz3GZLyVa 88fr6XGEwbl9BTCg4g4mk968lwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIf+N5pf QsW+7QXHA+rPdyzyO6dHMB8GA1UdIwQYMBaAFD32nKmMsTHpZbW8SjP85xudNeeo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUYxMy81Mzg3MzJGRTI5 NEMxMUVCQTZCRjZEMzFDNEY5QUUwMi9QZmFjcVl5eE1lbGx0YnhLTV96bkc1MDE1 NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BmYWNxWXl4TWVsbHRieEtNX3puRzUwMTU2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUYxMy81Mzg3MzJGRTI5NEMxMUVCQTZCRjZEMzFDNEY5QUUwMi9QZmFjcVl5eE1l bGx0YnhLTV96bkc1MDE1NmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDf8r65de02e7tLRgLgFC6aQT9jQMB5y/sfZlxUoqSxfyYo5fDlVCCk O21wHg2TY/qN9Y9gA8RPL2Cx6kz8i3AHwJmyqoHeUTbpP3AO/v6hl+ke4Ew4I6nP fu3O4q7ar7Jtq/ioeG9WwoYOnx2AfBOiX6hW32SXaStOmX6HcjQcj5lHSrQziFNC wvzjIv/cxn6TvQDjaDFTx800Zw+0SrxipZPqOhvzNT+XBkLVV6hcLdj+zLKrXEZh illpJHfb8fdmbujofl6en1T6cbHgv4Rv5N7psZqaQPBOHDXRPCkPAyeGrWCyMNbg x+1ZZ7GL2ivMJHCVt/VE0RREWowfXtTn -----END CERTIFICATE-----Generated at Mon Oct 20 19:26:48 2025 by rpki-client