$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.mft File: PinOb2p9uUttCRM7c_7VLd7hLas.mft (raw, json) Hash identifier: wRZzGi4hggk8q+I5an5cuV3v3UxLJu7axKQ4wYG2y5s= Subject key identifier: B2:84:B2:00:98:A8:77:D0:95:B1:3A:7B:06:7C:87:36:CC:B5:C8:A1 Authority key identifier: 3E:29:CE:6F:6A:7D:B9:4B:6D:09:13:3B:73:FE:D5:2D:DE:E1:2D:AB Certificate issuer: /CN=A91CF285/serialNumber=3E29CE6F6A7DB94B6D09133B73FED52DDEE12DAB Certificate serial: 10D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PinOb2p9uUttCRM7c_7VLd7hLas.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.mft Manifest number: 10C0 Signing time: Mon 20 Oct 2025 17:46:42 +0000 Manifest this update: Mon 20 Oct 2025 17:46:42 +0000 Manifest next update: Mon 27 Oct 2025 17:46:42 +0000 Files and hashes: 1: PinOb2p9uUttCRM7c_7VLd7hLas.crl (hash: pfLkWeFoVHOWdBCh3xkINQdViEOhAoEqIohF+csQQlw=) 2: 073BC4F4ED3B11EDB5A01A46C4F9AE02.roa (hash: zHchOODRMXh4YPNN1A7mCb7XiL/ujTp4cFUjm4qxBCU=) 3: DC83478EEB0311ED875DD72EC4F9AE02.roa (hash: ZDjZETXLZ7zFreIAvqJ7UMCHnkhV8V9TxpsSD145ZBI=) 4: AB731B004B2A11EFAAFCC92CC4F9AE02.roa (hash: 1iubQBpsLSvGnn+Mx1GBJRtm0BcqUW85CF15NJsmWt0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.crl rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PinOb2p9uUttCRM7c_7VLd7hLas.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 17:46:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4307 (0x10d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF285, serialNumber=3E29CE6F6A7DB94B6D09133B73FED52DDEE12DAB Validity Not Before: Oct 20 17:46:42 2025 GMT Not After : Oct 27 17:46:42 2025 GMT Subject: CN=68f67582-4cc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:91:25:66:d5:6c:bb:f0:96:9e:e1:60:d0:08: 05:fc:e6:97:5f:9e:bb:bf:b6:b1:5a:fe:13:ab:89: b3:92:15:b8:2c:03:54:06:28:9f:7c:4e:ee:fe:62: 6a:96:ec:06:d8:3c:02:f0:8b:57:50:c5:8e:cf:da: 90:04:fb:c5:a9:71:be:68:6c:09:35:e8:4f:dd:29: 09:5b:2e:de:3a:33:b7:66:bd:88:eb:84:97:8f:0d: c1:18:22:9b:28:36:63:d8:95:c6:64:db:96:68:97: 33:81:c9:60:e9:84:3b:d9:21:ab:40:40:ab:db:19: a0:b3:90:68:11:39:fb:b4:89:e8:ec:ea:d7:8f:b5: 37:7c:aa:d0:7a:62:8e:5d:1c:26:b9:84:48:4d:9f: 62:2e:b3:e5:bb:19:c4:f7:28:02:37:6e:72:48:d1: 41:7a:3f:64:a3:1c:5b:df:2d:36:24:42:fd:e5:6d: aa:68:f9:17:5f:43:8a:4e:a0:51:9d:cf:b6:23:fa: 6c:cc:09:b2:18:a6:20:3f:f6:1b:4b:b1:0d:ba:ac: 58:5c:60:a4:73:1e:0d:63:51:11:5c:f8:f8:b3:06: 34:10:a3:a7:28:94:b7:ab:cf:d3:41:f5:fc:e8:88: 58:73:b7:56:22:a3:03:e0:1f:aa:7e:b7:9b:37:62: 91:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:84:B2:00:98:A8:77:D0:95:B1:3A:7B:06:7C:87:36:CC:B5:C8:A1 X509v3 Authority Key Identifier: keyid:3E:29:CE:6F:6A:7D:B9:4B:6D:09:13:3B:73:FE:D5:2D:DE:E1:2D:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PinOb2p9uUttCRM7c_7VLd7hLas.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption db:a0:ae:d1:f1:1e:28:a5:02:88:69:b0:45:d4:0b:39:9b:48: 8a:61:b4:d7:7b:53:c5:71:81:6f:cc:10:1c:ce:f4:80:b6:d4: b5:16:e7:0d:57:84:87:d4:c7:c9:73:4d:f6:fd:6f:52:33:6d: 40:0e:f3:f0:b0:b9:13:cf:4d:74:12:cc:de:f7:0f:de:f6:1a: 47:13:b6:76:18:30:7b:9c:9e:2a:e8:8c:57:13:0f:33:0d:ca: 2b:79:e2:59:d2:ef:47:33:af:74:64:c5:a7:b9:d6:08:70:95: 21:ea:7a:13:33:ba:2a:96:7b:2e:8c:2a:16:fc:bd:d5:37:e7: 27:62:83:02:9f:75:e6:18:88:b7:df:b6:9b:21:1b:d3:93:49: 1e:ab:b7:ad:f8:d6:a2:2b:a4:ff:c6:cf:84:a8:d9:9d:61:37: 33:8d:bf:fc:5b:54:25:41:ed:1c:c6:c7:75:41:bc:d0:65:2e: c2:3e:c2:47:3a:e9:33:eb:16:15:19:5b:5b:a6:49:5e:27:5b: aa:69:cd:2f:e8:8b:64:2e:b6:39:38:4e:b1:a9:51:48:6f:1f: 77:0f:c0:8c:79:b7:4e:96:59:74:4f:59:85:b4:59:ab:56:b9: 37:c2:82:bc:73:41:1d:c2:e4:ae:ae:01:30:95:98:00:d9:70: 41:75:a8:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICENMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0YyODUxMTAvBgNVBAUTKDNFMjlDRTZGNkE3REI5NEI2RDA5MTMzQjczRkVENTJE REVFMTJEQUIwHhcNMjUxMDIwMTc0NjQyWhcNMjUxMDI3MTc0NjQyWjAYMRYwFAYD VQQDEw02OGY2NzU4Mi00Y2M4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwZElZtVsu/CWnuFg0AgF/OaXX567v7axWv4Tq4mzkhW4LANUBiiffE7u/mJq luwG2DwC8ItXUMWOz9qQBPvFqXG+aGwJNehP3SkJWy7eOjO3Zr2I64SXjw3BGCKb KDZj2JXGZNuWaJczgclg6YQ72SGrQECr2xmgs5BoETn7tIno7OrXj7U3fKrQemKO XRwmuYRITZ9iLrPluxnE9ygCN25ySNFBej9koxxb3y02JEL95W2qaPkXX0OKTqBR nc+2I/pszAmyGKYgP/YbS7ENuqxYXGCkcx4NY1ERXPj4swY0EKOnKJS3q8/TQfX8 6IhYc7dWIqMD4B+qfrebN2KRRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLKEsgCY qHfQlbE6ewZ8hzbMtcihMB8GA1UdIwQYMBaAFD4pzm9qfblLbQkTO3P+1S3e4S2r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjI4NS9GRDY0RjBCODM0 MEMxMUU5OTY2QzVBNzZDNEY5QUUwMi9QaW5PYjJwOXVVdHRDUk03Y183VkxkN2hM YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Bpbk9iMnA5dVV0dENSTTdjXzdWTGQ3aExhcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjI4NS9GRDY0RjBCODM0MEMxMUU5OTY2QzVBNzZDNEY5QUUwMi9QaW5PYjJwOXVV dHRDUk03Y183VkxkN2hMYXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDboK7R8R4opQKIabBF1As5m0iKYbTXe1PFcYFvzBAczvSAttS1FucN V4SH1MfJc032/W9SM21ADvPwsLkTz010Esze9w/e9hpHE7Z2GDB7nJ4q6IxXEw8z DcoreeJZ0u9HM690ZMWnudYIcJUh6noTM7oqlnsujCoW/L3VN+cnYoMCn3XmGIi3 37abIRvTk0keq7et+NaiK6T/xs+EqNmdYTczjb/8W1QlQe0cxsd1QbzQZS7CPsJH Oukz6xYVGVtbpkleJ1uqac0v6ItkLrY5OE6xqVFIbx93D8CMebdOlll0T1mFtFmr Vrk3woK8c0EdwuSurgEwlZgA2XBBdagb -----END CERTIFICATE-----Generated at Tue Oct 21 03:56:55 2025 by rpki-client