$ rpki-client -vvf rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.mft File: pGM3j5KTiRbgseQTrw8MinPCH08.mft (raw, json) Hash identifier: 110sn2kRx/bciiDvsJrr17ULdHcTMkcuGhU4mR1qaTc= Subject key identifier: 32:3A:9E:9E:38:E1:B4:79:90:52:97:7C:E7:37:EB:3D:D6:2B:3C:D1 Authority key identifier: A4:63:37:8F:92:93:89:16:E0:B1:E4:13:AF:0F:0C:8A:73:C2:1F:4F Certificate issuer: /CN=A917C3A7/serialNumber=A463378F92938916E0B1E413AF0F0C8A73C21F4F Certificate serial: 049D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGM3j5KTiRbgseQTrw8MinPCH08.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.mft Manifest number: 049D Signing time: Sun 19 Oct 2025 01:49:17 +0000 Manifest this update: Sun 19 Oct 2025 01:49:17 +0000 Manifest next update: Sun 26 Oct 2025 01:49:17 +0000 Files and hashes: 1: pGM3j5KTiRbgseQTrw8MinPCH08.crl (hash: Ju+3fYTbo4c6qUdjXPj5EHJ/9O4T9SkyXzpRauiHc8s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.crl rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGM3j5KTiRbgseQTrw8MinPCH08.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:49:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1181 (0x49d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C3A7, serialNumber=A463378F92938916E0B1E413AF0F0C8A73C21F4F Validity Not Before: Oct 19 01:49:17 2025 GMT Not After : Oct 26 01:49:17 2025 GMT Subject: CN=68f4439d-98c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:ea:34:9a:2e:72:09:39:75:7c:b3:c4:93:6e: cd:7c:f7:ad:45:49:0c:73:7c:33:32:bc:e1:c7:ac: dc:ab:7b:f7:08:27:34:dc:7b:bb:cc:c2:72:b2:69: 9b:2e:09:d8:c3:a0:c9:de:7e:a1:e8:5f:fc:d6:f4: 02:4a:fa:5f:6e:17:8a:a6:b8:6a:15:f7:17:46:a0: 8e:78:59:6f:74:0a:85:43:42:84:02:01:b0:d8:26: c6:67:86:13:c1:de:60:e8:f1:be:73:34:5f:09:f0: 5c:bb:43:56:b0:69:da:3b:45:42:c2:96:2d:a9:c1: 54:d1:5f:56:e8:bd:bc:c1:b5:e1:f4:ca:55:92:1c: e8:46:b6:a1:50:74:61:ef:d8:e7:a0:3f:e7:cd:30: 13:a3:6c:8e:ca:be:8e:6a:ae:62:0a:07:84:f2:d5: 1e:16:54:d7:3e:52:62:d8:f7:e1:4d:f3:58:a4:9c: 30:2d:3f:cd:16:f5:02:f4:c7:fa:fb:16:8e:bf:f1: 69:d9:e4:30:d4:20:04:a4:80:91:94:c8:41:e3:dd: 55:64:0e:4d:b8:f0:f5:e7:5b:da:9a:97:4e:62:06: a6:19:3f:6c:fd:16:81:9b:85:44:05:5a:35:d1:b6: 95:5d:d3:37:5e:59:11:dc:65:d3:58:47:87:12:8d: 88:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:3A:9E:9E:38:E1:B4:79:90:52:97:7C:E7:37:EB:3D:D6:2B:3C:D1 X509v3 Authority Key Identifier: keyid:A4:63:37:8F:92:93:89:16:E0:B1:E4:13:AF:0F:0C:8A:73:C2:1F:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGM3j5KTiRbgseQTrw8MinPCH08.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:b4:43:15:e1:1d:a4:ee:a3:61:f6:47:37:ac:e7:7c:52:83: dc:4e:bf:c0:cb:ef:49:33:0a:3e:e8:c6:f7:da:2b:ed:83:5e: 29:71:c9:0c:d3:c7:b4:ca:5c:58:7d:44:c1:3e:bc:b2:10:ad: b2:8d:86:0f:f5:df:74:9a:c0:24:45:a7:de:63:6f:ef:83:69: a8:bc:0d:fd:f3:5a:f0:04:e9:59:f4:96:8c:e1:c4:d4:65:04: ec:fa:e1:9c:b9:79:d2:14:28:2e:5a:72:00:bf:37:7e:42:2c: 0c:f8:88:01:63:86:29:53:c8:0d:d8:44:bd:5a:e3:8e:2a:25: 80:3b:af:6a:58:b8:3d:ad:a9:9f:f9:b8:c4:72:4c:de:7a:98: 87:e6:46:01:60:b9:3e:4c:52:85:26:c1:22:2a:98:f8:8f:51: 0d:b9:95:8c:ff:1d:bc:61:97:4d:b7:90:80:16:bc:f2:8d:0f: 3a:7f:62:6f:18:58:ad:8e:d0:2f:6d:ae:c0:6f:85:46:c6:b5: a5:9b:ac:a1:e7:6c:1c:12:7f:a9:e2:73:dd:7f:25:fd:c6:e3: 0a:c1:5e:19:3a:c0:a5:b3:b6:22:c1:fe:04:16:7b:2a:9e:27: 59:2d:46:0f:35:94:29:ee:e9:54:47:24:dc:11:d1:0f:77:16: 3e:f0:24:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MzQTcxMTAvBgNVBAUTKEE0NjMzNzhGOTI5Mzg5MTZFMEIxRTQxM0FGMEYwQzhB NzNDMjFGNEYwHhcNMjUxMDE5MDE0OTE3WhcNMjUxMDI2MDE0OTE3WjAYMRYwFAYD VQQDEw02OGY0NDM5ZC05OGM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6uo0mi5yCTl1fLPEk27NfPetRUkMc3wzMrzhx6zcq3v3CCc03Hu7zMJysmmb LgnYw6DJ3n6h6F/81vQCSvpfbheKprhqFfcXRqCOeFlvdAqFQ0KEAgGw2CbGZ4YT wd5g6PG+czRfCfBcu0NWsGnaO0VCwpYtqcFU0V9W6L28wbXh9MpVkhzoRrahUHRh 79jnoD/nzTATo2yOyr6Oaq5iCgeE8tUeFlTXPlJi2PfhTfNYpJwwLT/NFvUC9Mf6 +xaOv/Fp2eQw1CAEpICRlMhB491VZA5NuPD151vampdOYgamGT9s/RaBm4VEBVo1 0baVXdM3XlkR3GXTWEeHEo2IBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDI6np44 4bR5kFKXfOc36z3WKzzRMB8GA1UdIwQYMBaAFKRjN4+Sk4kW4LHkE68PDIpzwh9P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzNBNy9FNDFGRjBBNjUz MjgxMUVDODM1MkQyNDVDNEY5QUUwMi9wR00zajVLVGlSYmdzZVFUcnc4TWluUENI MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BHTTNqNUtUaVJiZ3NlUVRydzhNaW5QQ0gwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzNBNy9FNDFGRjBBNjUzMjgxMUVDODM1MkQyNDVDNEY5QUUwMi9wR00zajVLVGlS YmdzZVFUcnc4TWluUENIMDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVtEMV4R2k7qNh9kc3rOd8UoPcTr/Ay+9JMwo+6Mb32ivtg14pcckM 08e0ylxYfUTBPryyEK2yjYYP9d90msAkRafeY2/vg2movA3981rwBOlZ9JaM4cTU ZQTs+uGcuXnSFCguWnIAvzd+QiwM+IgBY4YpU8gN2ES9WuOOKiWAO69qWLg9ramf +bjEckzeepiH5kYBYLk+TFKFJsEiKpj4j1ENuZWM/x28YZdNt5CAFrzyjQ86f2Jv GFitjtAvba7Ab4VGxrWlm6yh52wcEn+p4nPdfyX9xuMKwV4ZOsCls7Yiwf4EFnsq nidZLUYPNZQp7ulURyTcEdEPdxY+8CSE -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:17 2025 by rpki-client