$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC6A6/A2C621A05F3911EF85DC8E2DC4F9AE02/pLh_nflqIHJhuXtMnjjIO1yA1m4.mft File: pLh_nflqIHJhuXtMnjjIO1yA1m4.mft (raw, json) Hash identifier: RoIboV7dA254Xpc+UntGkdfNYnCeKdyKMo+51ItIMqY= Subject key identifier: 28:E7:49:D8:77:38:49:BA:33:AB:BD:F1:0A:3E:7B:E5:A0:A8:5D:AC Authority key identifier: A4:B8:7F:9D:F9:6A:20:72:61:B9:7B:4C:9E:38:C8:3B:5C:80:D6:6E Certificate issuer: /CN=A91BC6A6/serialNumber=A4B87F9DF96A207261B97B4C9E38C83B5C80D66E Certificate serial: DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLh_nflqIHJhuXtMnjjIO1yA1m4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC6A6/A2C621A05F3911EF85DC8E2DC4F9AE02/pLh_nflqIHJhuXtMnjjIO1yA1m4.mft Manifest number: DB Signing time: Sun 19 Oct 2025 08:35:30 +0000 Manifest this update: Sun 19 Oct 2025 08:35:30 +0000 Manifest next update: Sun 26 Oct 2025 08:35:30 +0000 Files and hashes: 1: pLh_nflqIHJhuXtMnjjIO1yA1m4.crl (hash: HnH+66Yw+AZfi00xWyZNFx3x2p6ljNZUqQdEiiho+c0=) 2: E2FE5F1C5F3911EF9C33492EC4F9AE02.roa (hash: w7XAoEqzOUn2fN+Z5QNERvhpDDcLRxuYcXrspPvLSME=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC6A6/A2C621A05F3911EF85DC8E2DC4F9AE02/pLh_nflqIHJhuXtMnjjIO1yA1m4.crl rsync://rpki.apnic.net/member_repository/A91BC6A6/A2C621A05F3911EF85DC8E2DC4F9AE02/pLh_nflqIHJhuXtMnjjIO1yA1m4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLh_nflqIHJhuXtMnjjIO1yA1m4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:35:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 221 (0xdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC6A6, serialNumber=A4B87F9DF96A207261B97B4C9E38C83B5C80D66E Validity Not Before: Oct 19 08:35:30 2025 GMT Not After : Oct 26 08:35:30 2025 GMT Subject: CN=68f4a2d2-b989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:63:eb:8c:2d:59:4c:3d:76:31:d5:08:ca:6a: 4a:67:43:fc:8c:71:a5:3b:67:2b:fa:f2:97:b9:0f: c1:c8:85:b8:89:dd:66:d2:8f:49:62:fd:cd:c3:d7: ab:69:52:b8:53:ac:8f:2f:7a:b5:ab:28:85:6d:67: 91:86:16:6d:ec:73:ec:1e:bd:49:51:87:54:dd:74: 97:68:c8:72:d4:d3:34:79:42:75:c6:b0:01:66:64: 04:1f:ff:96:a0:de:a0:2d:38:96:4b:b2:29:fc:72: 14:3e:15:85:d7:29:57:2e:03:23:eb:77:57:5e:61: 36:f8:92:3c:3d:df:4d:81:3d:44:96:d7:6e:3f:09: a0:d0:7a:91:80:fe:55:c7:58:93:a9:a8:a2:90:b8: 7d:00:5b:d6:d6:25:1e:db:7d:75:61:2b:7d:bc:59: 90:92:b0:eb:3b:c5:6a:0e:6a:0e:6c:42:75:19:25: eb:48:ba:04:36:09:34:68:a8:f1:47:d8:e1:b5:67: a0:4c:52:e7:b3:4a:8c:bc:a0:e8:dd:cd:37:7f:e3: a9:8b:c4:7f:2f:02:e6:80:8b:c9:bc:7b:dc:9b:f2: 26:65:6f:3a:e4:4a:83:33:c9:f3:79:5c:12:d9:52: 32:33:d0:8d:09:8e:11:31:82:02:b9:b0:e9:17:a7: dc:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:E7:49:D8:77:38:49:BA:33:AB:BD:F1:0A:3E:7B:E5:A0:A8:5D:AC X509v3 Authority Key Identifier: keyid:A4:B8:7F:9D:F9:6A:20:72:61:B9:7B:4C:9E:38:C8:3B:5C:80:D6:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC6A6/A2C621A05F3911EF85DC8E2DC4F9AE02/pLh_nflqIHJhuXtMnjjIO1yA1m4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLh_nflqIHJhuXtMnjjIO1yA1m4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC6A6/A2C621A05F3911EF85DC8E2DC4F9AE02/pLh_nflqIHJhuXtMnjjIO1yA1m4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:c6:97:14:d1:87:80:2c:33:87:96:ba:fe:e3:fb:fd:47:5c: d9:5c:83:a7:0b:b5:f9:01:9a:44:71:9f:09:a1:9b:a4:b2:57: 36:03:33:0a:b1:30:b4:e4:d9:5f:2d:10:29:c9:ea:cd:73:71: 49:98:d1:bd:5c:05:67:c4:b6:38:bb:18:78:18:1b:a2:c7:03: 1b:c6:f9:08:0f:1d:d9:04:25:32:0d:04:6a:14:d1:f6:02:9a: f8:8a:3b:ca:9d:9e:d6:05:97:da:25:69:14:24:7f:3c:d5:16: c8:28:c0:c4:5c:6f:a5:d7:50:8c:88:c5:44:a1:e0:d4:02:95: 44:dd:48:15:bf:58:dc:d1:2d:e5:18:e8:a4:70:de:27:f5:e0: 37:c6:82:ed:c9:47:93:6e:c1:c3:7c:74:ac:b8:c0:40:01:a2: 7e:d7:d5:29:53:82:b9:4f:f9:0e:04:cd:e2:8f:6f:38:f7:8b: 84:6a:12:6c:42:09:68:1d:0b:4b:7c:25:23:7a:6e:6c:ce:08: ed:6c:c0:2d:fc:a2:6c:16:33:aa:20:52:ce:25:fc:ca:93:3a: 0d:ef:6f:82:72:6e:9d:18:1e:5c:d9:8e:61:08:0b:7b:24:5f: c1:75:35:3e:4b:57:62:db:f7:c8:9a:e5:87:55:f7:01:da:b6: 45:e4:6f:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM2QTYxMTAvBgNVBAUTKEE0Qjg3RjlERjk2QTIwNzI2MUI5N0I0QzlFMzhDODNC NUM4MEQ2NkUwHhcNMjUxMDE5MDgzNTMwWhcNMjUxMDI2MDgzNTMwWjAYMRYwFAYD VQQDEw02OGY0YTJkMi1iOTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtmPrjC1ZTD12MdUIympKZ0P8jHGlO2cr+vKXuQ/ByIW4id1m0o9JYv3Nw9er aVK4U6yPL3q1qyiFbWeRhhZt7HPsHr1JUYdU3XSXaMhy1NM0eUJ1xrABZmQEH/+W oN6gLTiWS7Ip/HIUPhWF1ylXLgMj63dXXmE2+JI8Pd9NgT1EltduPwmg0HqRgP5V x1iTqaiikLh9AFvW1iUe2311YSt9vFmQkrDrO8VqDmoObEJ1GSXrSLoENgk0aKjx R9jhtWegTFLns0qMvKDo3c03f+Opi8R/LwLmgIvJvHvcm/ImZW865EqDM8nzeVwS 2VIyM9CNCY4RMYICubDpF6fcFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCjnSdh3 OEm6M6u98Qo+e+WgqF2sMB8GA1UdIwQYMBaAFKS4f535aiByYbl7TJ44yDtcgNZu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzZBNi9BMkM2MjFBMDVG MzkxMUVGODVEQzhFMkRDNEY5QUUwMi9wTGhfbmZscUlISmh1WHRNbmpqSU8xeUEx bTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BMaF9uZmxxSUhKaHVYdE1uampJTzF5QTFtNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzZBNi9BMkM2MjFBMDVGMzkxMUVGODVEQzhFMkRDNEY5QUUwMi9wTGhfbmZscUlI Smh1WHRNbmpqSU8xeUExbTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/xpcU0YeALDOHlrr+4/v9R1zZXIOnC7X5AZpEcZ8JoZukslc2AzMK sTC05NlfLRApyerNc3FJmNG9XAVnxLY4uxh4GBuixwMbxvkIDx3ZBCUyDQRqFNH2 Apr4ijvKnZ7WBZfaJWkUJH881RbIKMDEXG+l11CMiMVEoeDUApVE3UgVv1jc0S3l GOikcN4n9eA3xoLtyUeTbsHDfHSsuMBAAaJ+19UpU4K5T/kOBM3ij28494uEahJs QgloHQtLfCUjem5szgjtbMAt/KJsFjOqIFLOJfzKkzoN72+Ccm6dGB5c2Y5hCAt7 JF/BdTU+S1di2/fImuWHVfcB2rZF5G9w -----END CERTIFICATE-----Generated at Tue Oct 21 04:55:05 2025 by rpki-client