$ rpki-client -vvf rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.mft File: pWcIHaZpXdN7LCsbF6Abo95ZHss.mft (raw, json) Hash identifier: c25iQu1H1b3zjS3HKgQy9x8x7N3l8jNhs8cBpL8sB+A= Subject key identifier: 82:1E:7C:D9:17:B7:5F:CB:03:99:F2:CA:03:1C:3C:D8:CC:0B:F0:5E Authority key identifier: A5:67:08:1D:A6:69:5D:D3:7B:2C:2B:1B:17:A0:1B:A3:DE:59:1E:CB Certificate issuer: /CN=A91A284E/serialNumber=A567081DA6695DD37B2C2B1B17A01BA3DE591ECB Certificate serial: 07C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWcIHaZpXdN7LCsbF6Abo95ZHss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.mft Manifest number: 07C3 Signing time: Sat 18 Oct 2025 22:33:50 +0000 Manifest this update: Sat 18 Oct 2025 22:33:49 +0000 Manifest next update: Sat 25 Oct 2025 22:33:49 +0000 Files and hashes: 1: pWcIHaZpXdN7LCsbF6Abo95ZHss.crl (hash: P4pfHOfatwT3E2RF/Od4sdnIF6EB1v0TQ8zr3Hj5xkk=) 2: A3205106142511EB8FED0427C4F9AE02.roa (hash: TqVDmXTOpWhB7LjPM5fEs8JCov1/4rLFhY6xqhp627c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.crl rsync://rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWcIHaZpXdN7LCsbF6Abo95ZHss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:33:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1993 (0x7c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A284E, serialNumber=A567081DA6695DD37B2C2B1B17A01BA3DE591ECB Validity Not Before: Oct 18 22:33:49 2025 GMT Not After : Oct 25 22:33:49 2025 GMT Subject: CN=68f415ce-5a3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1f:0c:df:1b:99:bd:6c:81:ab:1b:73:ae:a4: 48:f8:fe:65:82:2d:53:6c:2c:4f:a6:66:42:ca:4e: 2f:9e:66:8b:30:69:44:46:b0:2d:1c:5d:f6:56:e8: b9:84:9b:0f:d2:fa:99:30:02:8a:a1:06:36:e1:e8: 15:5d:a1:0a:da:de:30:91:c9:3c:62:5a:2f:a6:b5: 8d:67:f5:13:06:8e:ab:3f:77:0f:59:74:c2:62:93: 09:04:51:ae:be:d8:78:24:0d:1a:79:ae:3f:35:89: 00:56:14:a6:b1:74:3a:57:af:86:af:72:de:fb:68: 36:a6:71:0d:5a:2a:62:c3:5b:6e:78:da:53:2f:d7: 87:1e:2a:1f:ff:87:a2:8c:a6:e9:cf:5f:23:0e:21: cb:59:aa:ba:2e:40:77:47:56:8d:9a:ad:44:bd:7d: 93:9c:bd:e9:b7:57:a2:a3:81:85:85:4d:d1:0e:d4: 03:3b:1f:88:37:2d:1f:8a:02:e0:b7:8a:89:79:20: 54:37:d9:4b:74:be:e6:46:22:7e:b7:6d:3a:b8:5c: 3e:28:2e:b0:72:ae:88:34:cb:dd:d1:65:c5:1a:14: 1c:75:a3:97:bd:d0:12:e3:de:77:95:ab:ac:48:63: b8:aa:e4:ba:a5:21:05:f6:97:bf:89:80:98:0b:01: b1:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:1E:7C:D9:17:B7:5F:CB:03:99:F2:CA:03:1C:3C:D8:CC:0B:F0:5E X509v3 Authority Key Identifier: keyid:A5:67:08:1D:A6:69:5D:D3:7B:2C:2B:1B:17:A0:1B:A3:DE:59:1E:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWcIHaZpXdN7LCsbF6Abo95ZHss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:c4:76:93:08:0a:51:85:f7:fc:d3:e9:6c:5e:19:e4:17:c6: bd:b0:f4:a5:b5:3d:75:b6:8d:8e:6a:50:1e:72:d8:bf:a9:8a: f4:e7:c3:21:4d:1d:1d:fe:80:1c:19:47:3c:9e:5b:fa:8a:e3: df:90:d7:6e:e3:10:6f:93:1a:64:a0:d3:dd:dd:bb:f9:be:9c: d7:80:80:96:09:e0:2f:9d:f4:84:5b:03:d8:bc:3a:cf:12:8e: 1b:6e:5b:85:a9:81:69:35:7b:ba:43:d3:25:d4:7c:4f:b2:58: 94:38:4b:ef:13:49:dd:88:6e:03:49:10:bc:a1:ee:88:67:79: 62:41:a5:65:81:b2:a2:0b:a6:b6:fa:b7:25:b3:25:60:f1:35: 58:76:b1:6f:cc:91:97:85:6d:da:60:39:81:ae:85:9f:ca:fe: 3d:76:dc:cc:49:0b:11:f7:c4:22:be:d9:12:7b:ac:03:e2:e5: 83:bf:93:ae:a7:7f:5c:8f:25:ca:a9:81:66:bd:87:f0:49:10: 6d:3b:6f:0b:d4:51:35:c0:31:e7:f7:26:05:f5:aa:1c:ea:42: fd:cb:ae:b1:e4:d1:0d:0e:53:b9:01:61:3d:3b:60:1d:e2:d4: 22:d1:72:05:21:36:b7:35:e6:02:e7:4a:d7:93:11:f4:f5:e9: c6:8a:1f:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTI4NEUxMTAvBgNVBAUTKEE1NjcwODFEQTY2OTVERDM3QjJDMkIxQjE3QTAxQkEz REU1OTFFQ0IwHhcNMjUxMDE4MjIzMzQ5WhcNMjUxMDI1MjIzMzQ5WjAYMRYwFAYD VQQDEw02OGY0MTVjZS01YTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArx8M3xuZvWyBqxtzrqRI+P5lgi1TbCxPpmZCyk4vnmaLMGlERrAtHF32Vui5 hJsP0vqZMAKKoQY24egVXaEK2t4wkck8YlovprWNZ/UTBo6rP3cPWXTCYpMJBFGu vth4JA0aea4/NYkAVhSmsXQ6V6+Gr3Le+2g2pnENWipiw1tueNpTL9eHHiof/4ei jKbpz18jDiHLWaq6LkB3R1aNmq1EvX2TnL3pt1eio4GFhU3RDtQDOx+INy0figLg t4qJeSBUN9lLdL7mRiJ+t206uFw+KC6wcq6INMvd0WXFGhQcdaOXvdAS4953laus SGO4quS6pSEF9pe/iYCYCwGxlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIIefNkX t1/LA5nyygMcPNjMC/BeMB8GA1UdIwQYMBaAFKVnCB2maV3TeywrGxegG6PeWR7L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjg0RS9FOTA1RENCMDE0 MjMxMUVCOUZDNEMyMjRDNEY5QUUwMi9wV2NJSGFacFhkTjdMQ3NiRjZBYm85NVpI c3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BXY0lIYVpwWGRON0xDc2JGNkFibzk1Wkhzcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Mjg0RS9FOTA1RENCMDE0MjMxMUVCOUZDNEMyMjRDNEY5QUUwMi9wV2NJSGFacFhk TjdMQ3NiRjZBYm85NVpIc3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgxHaTCApRhff80+lsXhnkF8a9sPSltT11to2OalAecti/qYr058Mh TR0d/oAcGUc8nlv6iuPfkNdu4xBvkxpkoNPd3bv5vpzXgICWCeAvnfSEWwPYvDrP Eo4bbluFqYFpNXu6Q9Ml1HxPsliUOEvvE0ndiG4DSRC8oe6IZ3liQaVlgbKiC6a2 +rclsyVg8TVYdrFvzJGXhW3aYDmBroWfyv49dtzMSQsR98QivtkSe6wD4uWDv5Ou p39cjyXKqYFmvYfwSRBtO28L1FE1wDHn9yYF9aoc6kL9y66x5NENDlO5AWE9O2Ad 4tQi0XIFITa3NeYC50rXkxH09enGih+o -----END CERTIFICATE-----Generated at Sun Oct 19 23:28:47 2025 by rpki-client