$ rpki-client -vvf rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.mft File: pRz7iig43CPyh2RKRzXvwT2MMRM.mft (raw, json) Hash identifier: vn83a1mUZOmzWnxio4w8+M6cMkj1shotOsl62su/p6A= Subject key identifier: 90:61:38:D7:22:C2:09:D5:E0:5A:43:89:18:0D:B6:57:A5:5E:08:82 Authority key identifier: A5:1C:FB:8A:28:38:DC:23:F2:87:64:4A:47:35:EF:C1:3D:8C:31:13 Certificate issuer: /CN=A9197724/serialNumber=A51CFB8A2838DC23F287644A4735EFC13D8C3113 Certificate serial: BC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pRz7iig43CPyh2RKRzXvwT2MMRM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.mft Manifest number: BB Signing time: Sun 19 Oct 2025 09:05:54 +0000 Manifest this update: Sun 19 Oct 2025 09:05:53 +0000 Manifest next update: Sun 26 Oct 2025 09:05:53 +0000 Files and hashes: 1: pRz7iig43CPyh2RKRzXvwT2MMRM.crl (hash: exMyKnmLrwJ3Wfc6Gbh50JTnaOOrSemTt75XCgAf6WY=) 2: A2C3AA7E904E11EF9FC6B922C4F9AE02.roa (hash: bRFbzj6pr/OF3ESUy9ky5waEguFBGACn3nS0+utKTXI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.crl rsync://rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pRz7iig43CPyh2RKRzXvwT2MMRM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:05:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 188 (0xbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197724, serialNumber=A51CFB8A2838DC23F287644A4735EFC13D8C3113 Validity Not Before: Oct 19 09:05:53 2025 GMT Not After : Oct 26 09:05:53 2025 GMT Subject: CN=68f4a9f2-ab21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e6:2c:a3:13:76:af:32:b1:af:4b:14:b4:cd: 19:bb:1b:f8:46:55:91:91:7d:82:9e:d3:c2:d1:6c: 8a:ca:05:02:19:80:63:0d:89:bc:8b:64:c7:ba:d8: b0:f1:06:4a:5d:c0:d1:2d:c1:d8:61:19:c7:94:3e: 56:26:ba:01:98:41:d6:7d:71:a2:2e:af:34:0f:bc: 02:bc:e1:87:99:0c:cb:62:ec:d5:14:55:56:df:a4: 70:75:f1:33:c7:85:59:6b:82:91:7f:e9:14:d5:cf: 3b:66:24:a9:8b:1e:42:c5:9c:b1:46:45:a1:d4:74: f3:f7:a2:d1:76:41:31:a8:6b:6f:02:7b:89:62:bf: 09:0b:ce:80:f2:77:ab:19:05:a0:aa:a7:b8:c9:f0: df:83:5f:8d:e2:09:ad:50:36:0a:64:1e:e2:41:4b: 6e:df:76:e7:f2:b7:03:0f:3b:e5:1c:54:b7:45:6c: 6e:00:55:9d:eb:41:8a:24:f5:11:87:ca:8d:52:fd: 66:79:6e:6b:0c:3b:de:54:65:c2:39:b2:06:4a:72: 69:a5:40:d4:c3:c0:82:4a:ae:15:ec:7a:51:cf:7c: 77:b0:f6:09:51:f5:6e:3a:93:4f:50:96:3b:ec:81: f1:40:7a:23:3c:14:00:cf:59:86:e1:31:82:ef:f2: d7:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:61:38:D7:22:C2:09:D5:E0:5A:43:89:18:0D:B6:57:A5:5E:08:82 X509v3 Authority Key Identifier: keyid:A5:1C:FB:8A:28:38:DC:23:F2:87:64:4A:47:35:EF:C1:3D:8C:31:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pRz7iig43CPyh2RKRzXvwT2MMRM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:ae:4d:0f:4e:36:2a:2f:21:1e:1d:78:a2:6a:d6:99:b9:aa: 72:00:ea:ef:f4:ff:2b:a8:a4:dc:9c:08:2e:21:3d:8d:c9:86: 8f:d3:1b:e6:1b:52:d5:b2:58:48:98:83:65:85:fe:c1:5c:7a: b7:aa:c7:fe:e7:98:e5:2a:ed:e4:88:0d:cc:51:d4:e8:ea:65: 69:5d:e6:f7:ee:fa:c6:a7:de:d7:f4:1f:b9:b4:ce:b1:b0:28: d2:40:34:97:6b:df:a5:e3:7f:d1:34:c3:06:97:29:17:6a:91: 4d:0b:95:69:a2:16:45:48:b1:f2:fc:cc:f2:96:61:23:f1:1e: c4:d1:19:50:42:f8:07:c4:64:4a:2f:48:0a:69:67:79:35:8c: e5:0e:2e:f3:c1:9a:94:e7:62:7a:77:1c:07:4f:81:9e:ec:4a: 18:9a:a9:4e:fe:d3:b6:c8:ef:2f:bd:d8:00:f4:72:15:f4:e3: 19:b2:b5:21:10:12:c2:c5:71:3e:00:72:9d:2a:bd:39:c9:95: 18:f6:e3:4a:a3:7d:a9:03:11:4b:be:d6:df:23:75:fc:8d:63: cb:af:62:c3:a4:46:88:54:8f:8b:1b:d0:b1:60:42:88:59:6b: bc:31:81:c4:c8:c4:d5:3e:01:28:8c:e3:83:24:d2:7e:7d:55: 11:e3:4a:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTc3MjQxMTAvBgNVBAUTKEE1MUNGQjhBMjgzOERDMjNGMjg3NjQ0QTQ3MzVFRkMx M0Q4QzMxMTMwHhcNMjUxMDE5MDkwNTUzWhcNMjUxMDI2MDkwNTUzWjAYMRYwFAYD VQQDEw02OGY0YTlmMi1hYjIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy+YsoxN2rzKxr0sUtM0Zuxv4RlWRkX2CntPC0WyKygUCGYBjDYm8i2THutiw 8QZKXcDRLcHYYRnHlD5WJroBmEHWfXGiLq80D7wCvOGHmQzLYuzVFFVW36RwdfEz x4VZa4KRf+kU1c87ZiSpix5CxZyxRkWh1HTz96LRdkExqGtvAnuJYr8JC86A8ner GQWgqqe4yfDfg1+N4gmtUDYKZB7iQUtu33bn8rcDDzvlHFS3RWxuAFWd60GKJPUR h8qNUv1meW5rDDveVGXCObIGSnJppUDUw8CCSq4V7HpRz3x3sPYJUfVuOpNPUJY7 7IHxQHojPBQAz1mG4TGC7/LXDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJBhONci wgnV4FpDiRgNtlelXgiCMB8GA1UdIwQYMBaAFKUc+4ooONwj8odkSkc178E9jDET MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzcyNC81NkM2NzA3Njkw NEQxMUVGQTExMDM4NjRDNEY5QUUwMi9wUno3aWlnNDNDUHloMlJLUnpYdndUMk1N Uk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3BSejdpaWc0M0NQeWgyUktSelh2d1QyTU1STS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzcyNC81NkM2NzA3NjkwNEQxMUVGQTExMDM4NjRDNEY5QUUwMi9wUno3aWlnNDND UHloMlJLUnpYdndUMk1NUk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYrk0PTjYqLyEeHXiiataZuapyAOrv9P8rqKTcnAguIT2NyYaP0xvm G1LVslhImINlhf7BXHq3qsf+55jlKu3kiA3MUdTo6mVpXeb37vrGp97X9B+5tM6x sCjSQDSXa9+l43/RNMMGlykXapFNC5VpohZFSLHy/MzylmEj8R7E0RlQQvgHxGRK L0gKaWd5NYzlDi7zwZqU52J6dxwHT4Ge7EoYmqlO/tO2yO8vvdgA9HIV9OMZsrUh EBLCxXE+AHKdKr05yZUY9uNKo32pAxFLvtbfI3X8jWPLr2LDpEaIVI+LG9CxYEKI WWu8MYHEyMTVPgEojOODJNJ+fVUR40q1 -----END CERTIFICATE-----Generated at Tue Oct 21 02:25:34 2025 by rpki-client