$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.mft File: PTiRpGy8urR0eN6kDSkI9nzOOyo.mft (raw, json) Hash identifier: nzOe/9n0Hrvtdr/1Szxc0aq+zZHgi3frgTPS29jPxaE= Subject key identifier: 33:89:EC:A3:2A:4B:DF:70:28:25:D4:E3:51:A8:8B:0F:D8:90:89:FC Authority key identifier: 3D:38:91:A4:6C:BC:BA:B4:74:78:DE:A4:0D:29:08:F6:7C:CE:3B:2A Certificate issuer: /CN=A91AAEC2/serialNumber=3D3891A46CBCBAB47478DEA40D2908F67CCE3B2A Certificate serial: 08CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PTiRpGy8urR0eN6kDSkI9nzOOyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.mft Manifest number: 08C2 Signing time: Sat 18 Oct 2025 21:36:52 +0000 Manifest this update: Sat 18 Oct 2025 21:36:52 +0000 Manifest next update: Sat 25 Oct 2025 21:36:52 +0000 Files and hashes: 1: PTiRpGy8urR0eN6kDSkI9nzOOyo.crl (hash: URP5+7wghyETyq5jfpy8F2G9dLSJ9qd3qoQMHyYpwtY=) 2: DFEA30745C3011EEB250DE0EC4F9AE02.roa (hash: /a+ZA2ERE3wFJg9UM9vnT7hTqkW6cEzxlPnScilW2Xc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.crl rsync://rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PTiRpGy8urR0eN6kDSkI9nzOOyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:36:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2251 (0x8cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAEC2, serialNumber=3D3891A46CBCBAB47478DEA40D2908F67CCE3B2A Validity Not Before: Oct 18 21:36:52 2025 GMT Not After : Oct 25 21:36:52 2025 GMT Subject: CN=68f40874-dc6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:57:2c:1f:c3:d0:11:17:d6:f0:27:1a:3b:0f: b1:46:56:0d:b2:da:74:49:55:25:6a:7d:46:5d:14: 4f:c2:30:ef:c9:1d:aa:8f:b6:ff:81:83:c2:61:7c: 29:6f:f5:98:6c:3c:2f:24:ca:30:a5:ad:f9:64:ea: a8:41:91:97:9f:d0:74:78:14:81:d6:d7:dd:9e:77: d1:d2:6a:d9:04:15:53:00:75:ff:51:67:20:70:f6: 9a:18:d7:83:cd:01:65:25:75:11:1c:55:34:52:50: 88:7f:02:09:45:c7:c4:22:38:1c:a1:bf:3a:2a:35: ca:fb:f1:3d:f6:bb:13:dd:50:b0:6f:69:1f:a0:72: d7:7d:2d:d0:d0:d7:53:ca:8e:09:99:7e:26:8d:a1: 1d:62:57:bd:22:1e:f8:92:dd:8d:cf:22:6b:70:8c: 64:e0:ba:b3:23:58:7e:47:c8:20:af:af:8b:64:54: 15:b3:56:cb:46:69:be:8d:c3:85:f4:d7:bc:e9:48: a5:44:35:0a:08:46:44:ac:49:59:e0:ef:a8:ee:e8: 49:8f:e6:a2:2c:ea:65:4a:06:e9:39:d5:ed:2e:e6: f8:55:a6:70:93:75:7d:0f:ab:dc:12:25:d1:a5:2c: 56:85:a5:d3:d0:e9:b7:91:36:bc:d6:35:d0:b2:36: ed:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:89:EC:A3:2A:4B:DF:70:28:25:D4:E3:51:A8:8B:0F:D8:90:89:FC X509v3 Authority Key Identifier: keyid:3D:38:91:A4:6C:BC:BA:B4:74:78:DE:A4:0D:29:08:F6:7C:CE:3B:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PTiRpGy8urR0eN6kDSkI9nzOOyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:f1:dd:3c:9a:88:04:af:4c:89:83:fa:a2:d3:a6:c8:f3:6d: c9:8b:fe:11:c4:ae:cf:2e:45:dd:51:ab:8a:58:71:92:59:ed: 45:90:36:b3:da:51:d3:39:a0:89:7b:a3:f1:21:72:49:ac:44: e9:37:05:a6:c5:eb:fb:dc:21:66:b1:c0:8c:92:47:72:cf:aa: 09:57:14:cc:3e:c8:bd:41:a0:3e:e9:06:b8:b6:a3:96:38:3e: 81:33:f3:6c:e8:5a:03:54:80:be:b0:67:f4:88:51:e5:a7:a0: dd:48:1d:e4:00:77:64:20:47:32:e2:42:84:6e:95:2b:cc:f6: e3:7a:28:10:e3:e4:b5:ba:66:c9:af:02:0a:4c:d0:c0:e7:27: aa:04:d1:42:13:7f:68:a3:89:f2:0a:0e:74:c5:fc:ac:b1:da: ee:06:a1:6a:d7:32:07:2f:59:ac:2d:d1:83:bf:34:6c:e7:c9: 0d:03:af:da:92:eb:00:b5:73:ff:6d:97:d0:e1:3c:36:a4:c9: fb:00:43:9e:67:a7:03:44:d0:7d:51:07:aa:f2:40:db:43:bd: 9b:90:2e:df:e1:25:45:eb:db:87:e7:e6:6b:7d:69:a3:f9:b8: cb:85:83:37:c4:f0:e7:a3:7a:79:1a:23:e6:6d:95:a8:09:b1: 99:6a:e6:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFFQzIxMTAvBgNVBAUTKDNEMzg5MUE0NkNCQ0JBQjQ3NDc4REVBNDBEMjkwOEY2 N0NDRTNCMkEwHhcNMjUxMDE4MjEzNjUyWhcNMjUxMDI1MjEzNjUyWjAYMRYwFAYD VQQDEw02OGY0MDg3NC1kYzZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6VcsH8PQERfW8CcaOw+xRlYNstp0SVUlan1GXRRPwjDvyR2qj7b/gYPCYXwp b/WYbDwvJMowpa35ZOqoQZGXn9B0eBSB1tfdnnfR0mrZBBVTAHX/UWcgcPaaGNeD zQFlJXURHFU0UlCIfwIJRcfEIjgcob86KjXK+/E99rsT3VCwb2kfoHLXfS3Q0NdT yo4JmX4mjaEdYle9Ih74kt2NzyJrcIxk4LqzI1h+R8ggr6+LZFQVs1bLRmm+jcOF 9Ne86UilRDUKCEZErElZ4O+o7uhJj+aiLOplSgbpOdXtLub4VaZwk3V9D6vcEiXR pSxWhaXT0Om3kTa81jXQsjbtqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDOJ7KMq S99wKCXU41Goiw/YkIn8MB8GA1UdIwQYMBaAFD04kaRsvLq0dHjepA0pCPZ8zjsq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUVDMi8yRERERDI2Q0My QzAxMUVBOTNENTg1N0ZDNEY5QUUwMi9QVGlScEd5OHVyUjBlTjZrRFNrSTluek9P eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BUaVJwR3k4dXJSMGVONmtEU2tJOW56T095by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUVDMi8yRERERDI2Q0MyQzAxMUVBOTNENTg1N0ZDNEY5QUUwMi9QVGlScEd5OHVy UjBlTjZrRFNrSTluek9PeW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQ8d08mogEr0yJg/qi06bI823Ji/4RxK7PLkXdUauKWHGSWe1FkDaz 2lHTOaCJe6PxIXJJrETpNwWmxev73CFmscCMkkdyz6oJVxTMPsi9QaA+6Qa4tqOW OD6BM/Ns6FoDVIC+sGf0iFHlp6DdSB3kAHdkIEcy4kKEbpUrzPbjeigQ4+S1umbJ rwIKTNDA5yeqBNFCE39oo4nyCg50xfyssdruBqFq1zIHL1msLdGDvzRs58kNA6/a kusAtXP/bZfQ4Tw2pMn7AEOeZ6cDRNB9UQeq8kDbQ72bkC7f4SVF69uH5+ZrfWmj +bjLhYM3xPDno3p5GiPmbZWoCbGZauZV -----END CERTIFICATE-----Generated at Mon Oct 20 01:45:36 2025 by rpki-client