$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA736/5A6D8B5C732711F0B152646FC4F9AE02/pa-pCJC_kpGBwDHwuO2xlOPhaeM.mft File: pa-pCJC_kpGBwDHwuO2xlOPhaeM.mft (raw, json) Hash identifier: vBdG5y1ooCIh2KVYcsGPgU7q4/VHGTcdgr5z1q0Yg4U= Subject key identifier: 5F:33:7B:5B:46:55:59:83:16:64:C2:1E:FC:47:6F:FD:44:F8:2A:A3 Authority key identifier: A5:AF:A9:08:90:BF:92:91:81:C0:31:F0:B8:ED:B1:94:E3:E1:69:E3 Certificate issuer: /CN=A91DA736/serialNumber=A5AFA90890BF929181C031F0B8EDB194E3E169E3 Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pa-pCJC_kpGBwDHwuO2xlOPhaeM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA736/5A6D8B5C732711F0B152646FC4F9AE02/pa-pCJC_kpGBwDHwuO2xlOPhaeM.mft Manifest number: 27 Signing time: Sun 19 Oct 2025 11:15:52 +0000 Manifest this update: Sun 19 Oct 2025 11:15:52 +0000 Manifest next update: Sun 26 Oct 2025 11:15:52 +0000 Files and hashes: 1: pa-pCJC_kpGBwDHwuO2xlOPhaeM.crl (hash: P7RofaxIps8EnAAa4rnxSiW1IpA4vI/TgvJSNYlnXSg=) 2: 065E09BC732F11F09E8D4450C4F9AE02.roa (hash: fRjTeZ6sOZhL7w9XnHnzng0sCHnh1L73Q9iqK1QuMso=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA736/5A6D8B5C732711F0B152646FC4F9AE02/pa-pCJC_kpGBwDHwuO2xlOPhaeM.crl rsync://rpki.apnic.net/member_repository/A91DA736/5A6D8B5C732711F0B152646FC4F9AE02/pa-pCJC_kpGBwDHwuO2xlOPhaeM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pa-pCJC_kpGBwDHwuO2xlOPhaeM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:15:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA736, serialNumber=A5AFA90890BF929181C031F0B8EDB194E3E169E3 Validity Not Before: Oct 19 11:15:52 2025 GMT Not After : Oct 26 11:15:52 2025 GMT Subject: CN=68f4c868-beb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1c:44:2a:8c:2c:28:29:97:27:c2:ef:4b:cd: ca:6f:d2:e4:ae:ec:22:81:39:f5:34:c6:48:ca:a3: b8:bc:63:e3:96:cf:b7:44:c1:98:6c:d2:10:f3:9e: 6c:a2:8a:1e:bb:80:f2:56:88:b9:0b:1a:c6:45:4b: d4:b7:7b:46:ef:36:20:96:77:9f:66:d4:81:20:be: c0:31:31:f1:63:54:dc:11:3a:9e:96:ad:f1:80:ba: 62:fd:24:b1:93:eb:fd:4b:64:62:9a:34:36:43:45: 9a:fc:10:f2:ce:50:03:76:11:be:bf:c1:45:6d:df: f8:9a:96:76:40:fd:8c:7f:ce:44:d9:d7:23:b6:cd: 3d:ac:de:93:7b:fe:2d:f2:df:11:2d:fe:26:9a:2c: 81:0f:79:83:95:e2:5d:cc:1d:ae:63:98:c1:c5:04: 00:24:c8:c0:cf:47:f4:2e:37:ac:2f:ec:83:93:c1: 68:f5:84:9e:62:57:01:f6:fb:6e:e5:b3:ae:1a:40: 0e:3b:f2:4c:d5:c9:6a:aa:43:06:2d:ba:ef:db:f0: 34:f9:28:65:2d:76:5f:da:15:92:ca:eb:34:9a:fa: ea:94:b7:65:f5:00:42:b2:b1:a2:6b:89:d8:ed:e6: aa:4d:07:8c:c1:ad:64:ca:77:c6:8e:d8:e6:8b:8e: 04:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:33:7B:5B:46:55:59:83:16:64:C2:1E:FC:47:6F:FD:44:F8:2A:A3 X509v3 Authority Key Identifier: keyid:A5:AF:A9:08:90:BF:92:91:81:C0:31:F0:B8:ED:B1:94:E3:E1:69:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA736/5A6D8B5C732711F0B152646FC4F9AE02/pa-pCJC_kpGBwDHwuO2xlOPhaeM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pa-pCJC_kpGBwDHwuO2xlOPhaeM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA736/5A6D8B5C732711F0B152646FC4F9AE02/pa-pCJC_kpGBwDHwuO2xlOPhaeM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:8b:54:10:b0:54:88:26:86:82:b9:d1:4f:7e:1b:53:0b:89: c3:18:76:6f:86:e4:4d:85:a3:7e:03:35:21:10:25:b7:91:c2: 8c:1d:76:a7:a9:a8:71:b7:79:9d:a8:7d:70:4d:b2:41:c5:cc: 2e:be:43:e2:fd:c5:60:49:2d:75:54:4c:a9:26:18:3c:3f:a9: a8:ae:97:82:9a:ff:03:0c:8a:c4:be:b3:9d:19:b6:21:38:73: fc:b2:3a:d5:c3:36:60:5d:23:97:8c:37:a7:30:3c:72:1b:a2: af:e5:d2:74:c1:74:88:7d:b2:98:a9:db:c8:b5:ca:63:bf:b1: ca:78:a3:64:e2:67:07:f0:b6:d0:b4:33:72:05:37:49:21:f1: 77:64:c3:57:46:86:73:4e:3f:2a:88:54:9b:4d:13:dd:d8:e8: 76:8e:13:fa:7b:a2:09:a0:00:87:c1:84:6a:20:89:35:1f:c3: f0:dc:62:bb:6a:5a:d7:b6:30:fb:dd:ff:73:d6:58:8c:ab:53: d2:e7:63:be:13:75:91:5a:2a:92:9e:ff:81:83:c7:74:f9:30: 64:8a:9a:f1:e2:99:6b:71:0e:56:0a:31:09:d3:ce:b4:02:47: a6:42:54:4f:69:95:cd:84:47:c6:5e:2a:b3:a9:eb:96:74:ee: f0:b8:84:af -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE QTczNjExMC8GA1UEBRMoQTVBRkE5MDg5MEJGOTI5MTgxQzAzMUYwQjhFREIxOTRF M0UxNjlFMzAeFw0yNTEwMTkxMTE1NTJaFw0yNTEwMjYxMTE1NTJaMBgxFjAUBgNV BAMTDTY4ZjRjODY4LWJlYjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHHEQqjCwoKZcnwu9Lzcpv0uSu7CKBOfU0xkjKo7i8Y+OWz7dEwZhs0hDznmyi ih67gPJWiLkLGsZFS9S3e0bvNiCWd59m1IEgvsAxMfFjVNwROp6WrfGAumL9JLGT 6/1LZGKaNDZDRZr8EPLOUAN2Eb6/wUVt3/ialnZA/Yx/zkTZ1yO2zT2s3pN7/i3y 3xEt/iaaLIEPeYOV4l3MHa5jmMHFBAAkyMDPR/QuN6wv7IOTwWj1hJ5iVwH2+27l s64aQA478kzVyWqqQwYtuu/b8DT5KGUtdl/aFZLK6zSa+uqUt2X1AEKysaJridjt 5qpNB4zBrWTKd8aO2OaLjgRzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUXzN7W0ZV WYMWZMIe/Edv/UT4KqMwHwYDVR0jBBgwFoAUpa+pCJC/kpGBwDHwuO2xlOPhaeMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURBNzM2LzVBNkQ4QjVDNzMy NzExRjBCMTUyNjQ2RkM0RjlBRTAyL3BhLXBDSkNfa3BHQndESHd1TzJ4bE9QaGFl TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcGEtcENKQ19rcEdCd0RId3VPMnhsT1BoYWVNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURB NzM2LzVBNkQ4QjVDNzMyNzExRjBCMTUyNjQ2RkM0RjlBRTAyL3BhLXBDSkNfa3BH QndESHd1TzJ4bE9QaGFlTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADmLVBCwVIgmhoK50U9+G1MLicMYdm+G5E2Fo34DNSEQJbeRwowddqep qHG3eZ2ofXBNskHFzC6+Q+L9xWBJLXVUTKkmGDw/qaiul4Ka/wMMisS+s50ZtiE4 c/yyOtXDNmBdI5eMN6cwPHIboq/l0nTBdIh9spip28i1ymO/scp4o2TiZwfwttC0 M3IFN0kh8Xdkw1dGhnNOPyqIVJtNE93Y6HaOE/p7ogmgAIfBhGogiTUfw/DcYrtq Wte2MPvd/3PWWIyrU9LnY74TdZFaKpKe/4GDx3T5MGSKmvHimWtxDlYKMQnTzrQC R6ZCVE9plc2ER8ZeKrOp65Z07vC4hK8= -----END CERTIFICATE-----Generated at Tue Oct 21 00:04:10 2025 by rpki-client