$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8475/6B6582F23EF011EDA1F3051AC4F9AE02/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.mft File: pIyb1KXbEZ4VQzJBNuAu6kvKrzg.mft (raw, json) Hash identifier: L+FiljjK9HE52r4pXObS42NsbiFRIrD+9DYM2Pi+cII= Subject key identifier: FF:9D:7E:B6:43:13:D3:C8:1C:4F:6F:E6:77:EC:7A:16:D9:07:89:03 Authority key identifier: A4:8C:9B:D4:A5:DB:11:9E:15:43:32:41:36:E0:2E:EA:4B:CA:AF:38 Certificate issuer: /CN=A91A8475/serialNumber=A48C9BD4A5DB119E1543324136E02EEA4BCAAF38 Certificate serial: 024B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8475/6B6582F23EF011EDA1F3051AC4F9AE02/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.mft Manifest number: 0244 Signing time: Sun 19 Oct 2025 04:01:26 +0000 Manifest this update: Sun 19 Oct 2025 04:01:25 +0000 Manifest next update: Sun 26 Oct 2025 04:01:25 +0000 Files and hashes: 1: pIyb1KXbEZ4VQzJBNuAu6kvKrzg.crl (hash: Y9P40DZtEdMf/O2Tr2qPl1ZTh/N9dCeUNbSxcZ6F068=) 2: A4E607B6B1C511EDA095B220C4F9AE02.roa (hash: IaOYa65tPNoGSKOth9OBnqEo5IgGVd7ufuneStp8ah8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8475/6B6582F23EF011EDA1F3051AC4F9AE02/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.crl rsync://rpki.apnic.net/member_repository/A91A8475/6B6582F23EF011EDA1F3051AC4F9AE02/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 587 (0x24b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8475, serialNumber=A48C9BD4A5DB119E1543324136E02EEA4BCAAF38 Validity Not Before: Oct 19 04:01:25 2025 GMT Not After : Oct 26 04:01:25 2025 GMT Subject: CN=68f46296-3f51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:97:33:2c:7b:b5:e2:9f:b6:8b:1a:31:19:e9: bd:60:b7:63:01:4e:8f:6c:b8:46:0a:90:f0:f5:77: cf:dd:0f:0e:ed:d1:f5:f5:17:d3:c2:ab:91:8b:55: bc:85:87:f8:34:8b:60:43:97:a0:b7:a1:7b:46:15: eb:83:ac:de:14:0d:9d:59:72:c3:1c:b0:00:a6:74: 3a:fe:26:85:b0:ad:75:40:a7:89:72:c4:65:b5:6e: f6:be:0f:e2:a5:51:2a:48:4b:75:fe:b2:d7:c5:b2: ab:8a:cd:f8:38:57:52:48:a1:ab:db:c4:40:5c:82: 0c:54:c8:b3:c7:df:43:b9:52:05:6c:e0:93:7d:7c: bf:f7:0f:59:27:e7:22:81:5c:e2:88:63:9c:1b:b1: 4d:9a:5e:45:30:d4:9b:45:bc:8f:50:5d:4a:7e:89: a5:0e:78:42:0d:10:58:e7:25:87:89:1e:88:b8:bc: 5b:5c:f2:f3:af:fc:a9:5e:bf:d0:f9:86:c1:47:21: 01:18:26:b5:8b:18:71:5f:eb:10:6d:c0:de:8b:4c: 35:1d:41:56:c0:04:52:6c:43:7c:2c:34:27:ff:61: 6c:0a:82:54:b2:d3:bd:51:fc:3f:aa:94:dc:13:51: bd:14:59:80:3e:26:1d:97:e8:fe:54:04:63:42:e0: e6:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:9D:7E:B6:43:13:D3:C8:1C:4F:6F:E6:77:EC:7A:16:D9:07:89:03 X509v3 Authority Key Identifier: keyid:A4:8C:9B:D4:A5:DB:11:9E:15:43:32:41:36:E0:2E:EA:4B:CA:AF:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8475/6B6582F23EF011EDA1F3051AC4F9AE02/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8475/6B6582F23EF011EDA1F3051AC4F9AE02/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:f2:60:77:2a:1b:33:4a:ca:9e:f0:a6:59:eb:1b:a4:61:a5: 61:dc:5a:22:3b:38:56:63:db:29:e6:39:a2:04:7f:21:ed:c4: 4e:2a:43:3b:e8:1d:e2:b7:f4:9d:b2:7e:87:af:33:7d:43:17: 34:9c:27:fb:05:cb:71:d3:bc:ac:a9:d4:e3:2c:20:90:c2:b9: b2:ee:51:d8:93:cd:de:d8:c5:4b:a8:76:3f:ca:48:9d:ce:be: cb:6f:8a:9c:7e:7c:9e:9d:51:95:54:4e:7e:52:5d:f5:6f:c9: e9:c6:73:ca:a5:85:b1:78:40:ad:74:f9:2d:eb:e9:5f:2e:65: db:c1:60:42:38:2e:2f:fd:c5:12:bf:f7:7e:be:08:b6:bf:70: bc:80:12:90:74:ec:3a:ac:9d:b9:6c:56:d2:0f:cf:7c:a9:42: 12:ee:1d:5c:72:0b:98:da:cf:1a:a6:11:39:b1:2b:85:92:e2: 90:31:22:68:d6:f9:d4:29:32:7d:cc:6f:99:f1:9a:b2:ac:81: 4f:f8:e1:65:55:7b:40:b3:86:79:60:11:58:84:78:e1:1b:c4: cb:39:f6:c7:93:c7:7e:49:51:4e:96:a6:ab:87:b9:6c:a3:62: 34:2f:bb:12:29:67:50:62:73:9b:8f:c4:2f:70:62:27:ad:74: 65:61:0a:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg0NzUxMTAvBgNVBAUTKEE0OEM5QkQ0QTVEQjExOUUxNTQzMzI0MTM2RTAyRUVB NEJDQUFGMzgwHhcNMjUxMDE5MDQwMTI1WhcNMjUxMDI2MDQwMTI1WjAYMRYwFAYD VQQDEw02OGY0NjI5Ni0zZjUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2pczLHu14p+2ixoxGem9YLdjAU6PbLhGCpDw9XfP3Q8O7dH19RfTwquRi1W8 hYf4NItgQ5egt6F7RhXrg6zeFA2dWXLDHLAApnQ6/iaFsK11QKeJcsRltW72vg/i pVEqSEt1/rLXxbKris34OFdSSKGr28RAXIIMVMizx99DuVIFbOCTfXy/9w9ZJ+ci gVziiGOcG7FNml5FMNSbRbyPUF1KfomlDnhCDRBY5yWHiR6IuLxbXPLzr/ypXr/Q +YbBRyEBGCa1ixhxX+sQbcDei0w1HUFWwARSbEN8LDQn/2FsCoJUstO9Ufw/qpTc E1G9FFmAPiYdl+j+VARjQuDmvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP+dfrZD E9PIHE9v5nfsehbZB4kDMB8GA1UdIwQYMBaAFKSMm9Sl2xGeFUMyQTbgLupLyq84 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODQ3NS82QjY1ODJGMjNF RjAxMUVEQTFGMzA1MUFDNEY5QUUwMi9wSXliMUtYYkVaNFZRekpCTnVBdTZrdkty emcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BJeWIxS1hiRVo0VlF6SkJOdUF1Nmt2S3J6Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODQ3NS82QjY1ODJGMjNFRjAxMUVEQTFGMzA1MUFDNEY5QUUwMi9wSXliMUtYYkVa NFZRekpCTnVBdTZrdktyemcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAG8mB3KhszSsqe8KZZ6xukYaVh3FoiOzhWY9sp5jmiBH8h7cROKkM7 6B3it/Sdsn6HrzN9Qxc0nCf7Bctx07ysqdTjLCCQwrmy7lHYk83e2MVLqHY/ykid zr7Lb4qcfnyenVGVVE5+Ul31b8npxnPKpYWxeECtdPkt6+lfLmXbwWBCOC4v/cUS v/d+vgi2v3C8gBKQdOw6rJ25bFbSD898qUIS7h1ccguY2s8aphE5sSuFkuKQMSJo 1vnUKTJ9zG+Z8ZqyrIFP+OFlVXtAs4Z5YBFYhHjhG8TLOfbHk8d+SVFOlqarh7ls o2I0L7sSKWdQYnObj8QvcGInrXRlYQq7 -----END CERTIFICATE-----Generated at Mon Oct 20 16:42:47 2025 by rpki-client