$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft File: PfG7945KTnVEGahIyf0My9LmpFg.mft (raw, json) Hash identifier: 4xy9P32t2GFAcQzKNBM+Ml6Pf1pTIMM6n8X3a2+jhDM= Subject key identifier: 3D:7F:EA:64:2A:1C:34:E0:62:50:66:67:83:93:27:A2:26:28:AD:54 Authority key identifier: 3D:F1:BB:F7:8E:4A:4E:75:44:19:A8:48:C9:FD:0C:CB:D2:E6:A4:58 Certificate issuer: /CN=A91C1052/serialNumber=3DF1BBF78E4A4E754419A848C9FD0CCBD2E6A458 Certificate serial: 0220 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfG7945KTnVEGahIyf0My9LmpFg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft Manifest number: 0219 Signing time: Sun 19 Oct 2025 04:27:24 +0000 Manifest this update: Sun 19 Oct 2025 04:27:23 +0000 Manifest next update: Sun 26 Oct 2025 04:27:23 +0000 Files and hashes: 1: PfG7945KTnVEGahIyf0My9LmpFg.crl (hash: aLbxtkUPJG+9MrfCSk0w/uFD0Z8a3/GqwrJ/+57PtAU=) 2: 74A3C1988E8311ED903ADA1CC4F9AE02.roa (hash: tRn5pXPKK2uEloHBe0GH9yfzRyq3HlL5LYvlAIQdS38=) 3: D6E2AAC0772911ED95084884C4F9AE02.roa (hash: dJsLSVlZN9Pxyi6rXrFH13Jbq2ezDlbcKNiOzrGi8Nw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.crl rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfG7945KTnVEGahIyf0My9LmpFg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:27:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 544 (0x220) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1052, serialNumber=3DF1BBF78E4A4E754419A848C9FD0CCBD2E6A458 Validity Not Before: Oct 19 04:27:23 2025 GMT Not After : Oct 26 04:27:23 2025 GMT Subject: CN=68f468ac-3604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:dd:1a:68:e1:91:34:c6:ae:55:7d:e3:0e:77: 75:bd:ad:e6:a4:81:63:0b:8b:c0:64:8a:c7:ef:2e: 39:79:df:c8:46:6e:16:46:87:5b:ad:e5:ee:be:74: f7:fb:eb:19:17:1c:c4:b6:c6:3e:4f:8a:7c:43:56: a2:c5:e5:58:aa:89:00:fe:69:10:a2:6c:93:99:71: c6:57:24:a7:ef:93:d4:b2:8f:9f:93:b6:d0:4d:bb: 07:56:e0:7e:a5:61:e8:7b:54:14:48:38:6d:17:1c: ea:b5:57:55:56:57:28:8c:aa:d4:5c:2d:bd:0a:98: 6b:7c:1b:94:33:e5:73:2d:d9:ba:f8:e6:5a:58:ed: 43:b7:58:ce:30:52:4a:6f:bd:b0:45:fa:5a:87:ed: 92:48:2c:2d:1d:86:62:cc:f4:7b:af:2d:b0:6e:f9: 65:12:b8:69:e0:8c:c8:21:7f:2a:08:c0:1c:56:a4: 6c:72:c5:b8:40:24:b5:44:12:93:d2:e7:5f:84:c5: fe:39:1f:1a:92:73:7c:70:4a:fb:13:de:5e:cc:7d: c8:ba:a1:80:e9:36:43:e2:ea:7b:f7:96:25:0c:50: 9c:96:66:69:0f:fd:78:5d:80:ad:a8:5e:e6:73:6d: 86:02:b9:c6:b1:b5:0f:37:16:f3:49:0f:be:43:74: 12:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:7F:EA:64:2A:1C:34:E0:62:50:66:67:83:93:27:A2:26:28:AD:54 X509v3 Authority Key Identifier: keyid:3D:F1:BB:F7:8E:4A:4E:75:44:19:A8:48:C9:FD:0C:CB:D2:E6:A4:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfG7945KTnVEGahIyf0My9LmpFg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:2f:f8:28:07:1c:f0:bf:43:dc:ff:1e:ea:18:69:a3:11:b4: 15:4b:7f:dc:33:21:f0:a1:53:32:98:d3:43:4a:64:84:62:b2: 69:e2:28:c2:b1:69:c0:98:df:1a:98:e2:b4:03:f5:1b:af:58: c0:c6:4a:dd:d7:aa:7e:89:90:8f:65:04:e5:a1:c8:7c:df:d6: 13:66:e7:18:38:4c:90:16:b2:00:0c:b3:e3:15:64:73:70:3e: 24:c6:0e:5e:72:5e:52:cc:d8:b6:b5:c5:52:7b:be:46:a9:50: d7:65:00:8d:3f:6c:09:85:0f:a2:b8:d3:c4:36:83:b9:4e:37: f2:91:1c:8d:0d:7f:77:d3:d1:76:1e:0e:c9:b5:58:7f:07:e9: 3b:b2:40:06:b3:4e:1b:16:68:66:cc:2d:f0:ee:5d:30:9a:8b: b2:df:dc:1b:2f:0b:71:66:ab:a7:ce:26:cc:15:96:05:e9:cb: a8:a5:9d:52:dc:2e:8c:76:d7:5a:66:35:3e:a8:73:b8:b2:f6: 17:cc:1d:31:1d:8a:0b:74:d1:bb:9d:44:4a:8d:88:3e:60:39: 60:c3:87:d0:6c:35:90:99:03:19:18:06:a3:4b:03:21:46:09: 46:1a:dc:e5:2a:c2:df:e8:53:97:6e:75:e5:06:d5:0b:2c:3c: 40:37:07:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzEwNTIxMTAvBgNVBAUTKDNERjFCQkY3OEU0QTRFNzU0NDE5QTg0OEM5RkQwQ0NC RDJFNkE0NTgwHhcNMjUxMDE5MDQyNzIzWhcNMjUxMDI2MDQyNzIzWjAYMRYwFAYD VQQDEw02OGY0NjhhYy0zNjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6N0aaOGRNMauVX3jDnd1va3mpIFjC4vAZIrH7y45ed/IRm4WRodbreXuvnT3 ++sZFxzEtsY+T4p8Q1aixeVYqokA/mkQomyTmXHGVySn75PUso+fk7bQTbsHVuB+ pWHoe1QUSDhtFxzqtVdVVlcojKrUXC29CphrfBuUM+VzLdm6+OZaWO1Dt1jOMFJK b72wRfpah+2SSCwtHYZizPR7ry2wbvllErhp4IzIIX8qCMAcVqRscsW4QCS1RBKT 0udfhMX+OR8aknN8cEr7E95ezH3IuqGA6TZD4up795YlDFCclmZpD/14XYCtqF7m c22GArnGsbUPNxbzSQ++Q3QSoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD1/6mQq HDTgYlBmZ4OTJ6ImKK1UMB8GA1UdIwQYMBaAFD3xu/eOSk51RBmoSMn9DMvS5qRY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTA1Mi84MDZGQjI3Njc3 MjYxMUVEODZEMDk2ODBDNEY5QUUwMi9QZkc3OTQ1S1RuVkVHYWhJeWYwTXk5TG1w RmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BmRzc5NDVLVG5WRUdhaEl5ZjBNeTlMbXBGZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTA1Mi84MDZGQjI3Njc3MjYxMUVEODZEMDk2ODBDNEY5QUUwMi9QZkc3OTQ1S1Ru VkVHYWhJeWYwTXk5TG1wRmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADL/goBxzwv0Pc/x7qGGmjEbQVS3/cMyHwoVMymNNDSmSEYrJp4ijC sWnAmN8amOK0A/Ubr1jAxkrd16p+iZCPZQTloch839YTZucYOEyQFrIADLPjFWRz cD4kxg5ecl5SzNi2tcVSe75GqVDXZQCNP2wJhQ+iuNPENoO5TjfykRyNDX9309F2 Hg7JtVh/B+k7skAGs04bFmhmzC3w7l0wmouy39wbLwtxZqunzibMFZYF6cuopZ1S 3C6MdtdaZjU+qHO4svYXzB0xHYoLdNG7nURKjYg+YDlgw4fQbDWQmQMZGAajSwMh RglGGtzlKsLf6FOXbnXlBtULLDxANwcm -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:38 2025 by rpki-client