$ rpki-client -vvf rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/PXe1hqP2gsVjtkJlJiiR1NpGp6g.mft File: PXe1hqP2gsVjtkJlJiiR1NpGp6g.mft (raw, json) Hash identifier: I5C/unwRitHqsNrcCwMrTs1VvsUkTwdiI2Oop77bgLg= Subject key identifier: CB:06:9A:1F:09:C7:8E:94:BA:8E:2A:1D:86:7A:E9:63:76:4F:51:B1 Authority key identifier: 3D:77:B5:86:A3:F6:82:C5:63:B6:42:65:26:28:91:D4:DA:46:A7:A8 Certificate issuer: /CN=A91B10B9/serialNumber=3D77B586A3F682C563B64265262891D4DA46A7A8 Certificate serial: 03DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXe1hqP2gsVjtkJlJiiR1NpGp6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/PXe1hqP2gsVjtkJlJiiR1NpGp6g.mft Manifest number: 03D5 Signing time: Sun 19 Oct 2025 02:35:46 +0000 Manifest this update: Sun 19 Oct 2025 02:35:45 +0000 Manifest next update: Sun 26 Oct 2025 02:35:45 +0000 Files and hashes: 1: PXe1hqP2gsVjtkJlJiiR1NpGp6g.crl (hash: dvsfZjhdd4aH1c5o5T6v7R2n4cWuINFGucpbOgWPXgc=) 2: BCD0F6B0A0FF11EC924D4461C4F9AE02.roa (hash: eYkm574zXfPZBssf+KqgdlPvB8riPVJCVgCP7O8B6S0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/PXe1hqP2gsVjtkJlJiiR1NpGp6g.crl rsync://rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/PXe1hqP2gsVjtkJlJiiR1NpGp6g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXe1hqP2gsVjtkJlJiiR1NpGp6g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:35:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 986 (0x3da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B10B9, serialNumber=3D77B586A3F682C563B64265262891D4DA46A7A8 Validity Not Before: Oct 19 02:35:45 2025 GMT Not After : Oct 26 02:35:45 2025 GMT Subject: CN=68f44e81-07e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:db:67:55:47:5e:09:aa:63:ef:05:14:73:67: e6:21:6c:ac:61:94:f3:c1:92:c4:70:03:0a:e1:47: 28:38:e5:9b:71:e8:8d:17:0f:45:86:ec:8c:5d:04: 7b:af:7f:cf:1f:43:80:a5:8b:95:95:4b:39:af:45: d3:f1:0b:f2:64:9e:47:7a:9e:cf:cd:2f:97:0a:c5: 39:d9:a4:40:fb:f1:29:da:47:68:2f:54:72:b8:81: 37:19:70:e8:3a:8f:25:e6:83:c1:1b:9e:ac:8b:53: e3:6b:48:dc:cb:f9:46:a7:c7:cd:17:8a:78:0d:84: dd:eb:4f:9e:02:eb:b8:90:30:c3:f0:cc:11:1e:79: 92:11:81:78:1a:f6:c0:bb:fa:bd:3e:47:91:f8:5e: 3e:fb:4f:19:9a:52:9b:71:d7:ce:7a:8e:6a:70:9a: ee:3f:76:e7:96:26:ea:bc:80:f2:91:48:0e:71:24: 01:c1:a7:99:0f:6e:cb:0d:be:fa:90:62:e3:5c:ba: 94:ad:d8:84:0d:d2:8a:6d:52:45:55:72:f5:d6:4d: e4:c3:8d:6b:a8:e5:53:af:44:5a:ce:f6:fd:95:5b: bb:c4:78:58:88:16:40:6b:3e:2c:76:81:09:06:95: e6:29:d5:ba:de:37:01:26:1b:13:0e:22:77:42:6f: 1b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:06:9A:1F:09:C7:8E:94:BA:8E:2A:1D:86:7A:E9:63:76:4F:51:B1 X509v3 Authority Key Identifier: keyid:3D:77:B5:86:A3:F6:82:C5:63:B6:42:65:26:28:91:D4:DA:46:A7:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/PXe1hqP2gsVjtkJlJiiR1NpGp6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXe1hqP2gsVjtkJlJiiR1NpGp6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/PXe1hqP2gsVjtkJlJiiR1NpGp6g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:91:be:dc:1e:b6:a5:7f:2f:62:c3:10:ae:d9:96:8a:8a:56: 46:d4:6d:aa:f6:49:dc:41:42:12:2d:ba:ec:e1:67:87:18:20: 67:04:ee:f0:04:70:14:59:d1:1b:0c:32:b0:eb:0a:52:99:38: 95:57:97:26:41:b1:6f:6d:fe:5e:27:c7:f5:9c:3f:28:6e:70: 5b:2b:b9:a2:e6:d3:0e:dd:91:2c:d3:f5:cc:b6:b1:13:3c:db: 71:3e:24:87:0a:05:d5:2c:24:64:eb:ae:f9:c3:98:48:a7:97: 31:cb:1f:cf:7e:6a:8c:d5:fa:be:45:98:e7:d7:24:6c:df:d5: aa:6c:02:93:43:17:b7:13:28:d1:d7:1c:68:dd:bf:02:9c:72: 7c:c4:ac:5b:ae:09:e1:28:96:d9:33:10:2f:af:2b:9f:36:be: 97:a5:87:91:32:36:0b:85:10:79:79:07:18:b9:15:7a:0b:72: 39:d8:9f:00:90:73:ce:13:15:ed:82:e7:b0:5f:c2:70:ce:4f: 59:ea:e8:2a:d7:f0:d4:31:d6:66:d2:65:2a:ba:98:d6:4e:ba: 47:71:fa:e4:a0:79:fb:a1:88:80:79:b9:f6:df:55:46:9d:d8: e7:00:cd:f5:66:9e:95:de:ec:c6:cb:4e:8c:e7:e0:b8:bc:f3: 6c:f3:fb:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjEwQjkxMTAvBgNVBAUTKDNENzdCNTg2QTNGNjgyQzU2M0I2NDI2NTI2Mjg5MUQ0 REE0NkE3QTgwHhcNMjUxMDE5MDIzNTQ1WhcNMjUxMDI2MDIzNTQ1WjAYMRYwFAYD VQQDEw02OGY0NGU4MS0wN2U4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAottnVUdeCapj7wUUc2fmIWysYZTzwZLEcAMK4UcoOOWbceiNFw9FhuyMXQR7 r3/PH0OApYuVlUs5r0XT8QvyZJ5Hep7PzS+XCsU52aRA+/Ep2kdoL1RyuIE3GXDo Oo8l5oPBG56si1Pja0jcy/lGp8fNF4p4DYTd60+eAuu4kDDD8MwRHnmSEYF4GvbA u/q9PkeR+F4++08ZmlKbcdfOeo5qcJruP3bnlibqvIDykUgOcSQBwaeZD27LDb76 kGLjXLqUrdiEDdKKbVJFVXL11k3kw41rqOVTr0Razvb9lVu7xHhYiBZAaz4sdoEJ BpXmKdW63jcBJhsTDiJ3Qm8brwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMsGmh8J x46Uuo4qHYZ66WN2T1GxMB8GA1UdIwQYMBaAFD13tYaj9oLFY7ZCZSYokdTaRqeo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTBCOS9EMTNCRUFBQUEw RkIxMUVDQTVEMURGNUJDNEY5QUUwMi9QWGUxaHFQMmdzVmp0a0psSmlpUjFOcEdw NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BYZTFocVAyZ3NWanRrSmxKaWlSMU5wR3A2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTBCOS9EMTNCRUFBQUEwRkIxMUVDQTVEMURGNUJDNEY5QUUwMi9QWGUxaHFQMmdz Vmp0a0psSmlpUjFOcEdwNmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHkb7cHralfy9iwxCu2ZaKilZG1G2q9kncQUISLbrs4WeHGCBnBO7w BHAUWdEbDDKw6wpSmTiVV5cmQbFvbf5eJ8f1nD8obnBbK7mi5tMO3ZEs0/XMtrET PNtxPiSHCgXVLCRk6675w5hIp5cxyx/PfmqM1fq+RZjn1yRs39WqbAKTQxe3EyjR 1xxo3b8CnHJ8xKxbrgnhKJbZMxAvryufNr6XpYeRMjYLhRB5eQcYuRV6C3I52J8A kHPOExXtguewX8Jwzk9Z6ugq1/DUMdZm0mUqupjWTrpHcfrkoHn7oYiAebn231VG ndjnAM31Zp6V3uzGy06M5+C4vPNs8/sc -----END CERTIFICATE-----Generated at Mon Oct 20 04:04:11 2025 by rpki-client