$ rpki-client -vvf rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.mft File: PurfFFrim0gkCj-6OvvZSajxU10.mft (raw, json) Hash identifier: XNyWomF3csROsIYexgHm1TM8BRmM22BMsJvEWcMTA0U= Subject key identifier: A5:38:D5:B2:84:FE:F9:11:45:70:25:D3:31:1B:A4:E1:C7:19:E0:55 Authority key identifier: 3E:EA:DF:14:5A:E2:9B:48:24:0A:3F:BA:3A:FB:D9:49:A8:F1:53:5D Certificate issuer: /CN=A91F823E/serialNumber=3EEADF145AE29B48240A3FBA3AFBD949A8F1535D Certificate serial: 0351 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PurfFFrim0gkCj-6OvvZSajxU10.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.mft Manifest number: 034D Signing time: Sun 19 Oct 2025 03:02:51 +0000 Manifest this update: Sun 19 Oct 2025 03:02:50 +0000 Manifest next update: Sun 26 Oct 2025 03:02:50 +0000 Files and hashes: 1: PurfFFrim0gkCj-6OvvZSajxU10.crl (hash: ZmEhay79a0bAY2ZzkydOa/DhdVaN6KvDgcprZcTkE/s=) 2: B3481ED4D5B611ECA61EEC28C4F9AE02.roa (hash: 7bYPkVMZrrnunuEV97KsBcLOn5jOLNiIR6VQXBJQwkA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.crl rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PurfFFrim0gkCj-6OvvZSajxU10.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:02:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 849 (0x351) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F823E, serialNumber=3EEADF145AE29B48240A3FBA3AFBD949A8F1535D Validity Not Before: Oct 19 03:02:50 2025 GMT Not After : Oct 26 03:02:50 2025 GMT Subject: CN=68f454da-4877 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:26:97:40:17:ae:b4:c8:fd:f6:ce:5d:8b:48: 92:51:e1:2f:15:41:4f:47:da:a8:cd:4f:ac:65:83: 13:10:dd:fd:79:9b:19:43:27:48:a8:1c:74:a5:45: 96:92:c3:3b:68:18:e2:82:e0:8c:b3:67:84:68:b0: ea:a1:57:fb:6f:0d:a9:f5:b5:82:fb:ba:f1:b0:0e: 00:3c:a3:c4:fe:b5:9a:83:5f:4c:9a:46:16:cd:76: 15:0b:77:c5:f2:30:09:2a:74:0c:ca:78:2b:c8:d5: 01:e4:23:cd:03:b6:5b:ea:9b:3e:da:3c:e2:82:f3: 28:0b:95:9a:05:21:36:fc:53:91:9b:dc:3e:fe:e8: 54:98:55:49:2a:27:2f:77:1d:e8:b3:df:b8:89:f0: bf:1a:0b:2d:c4:05:12:09:69:6d:0a:7d:57:f2:9d: 77:75:4f:56:9c:83:b4:ae:42:51:c4:4b:f5:84:0f: fc:66:96:ad:6b:64:b6:e8:c9:b4:62:51:ab:9d:68: 19:b7:f8:c4:ef:b8:7b:7e:70:44:6b:69:e4:21:9d: 05:b7:69:66:a7:16:5a:68:34:26:53:36:d2:ab:6b: d0:df:30:51:6c:d4:77:5e:6d:ec:90:ee:99:4d:05: aa:d5:82:8e:69:b3:7e:df:ec:82:69:f9:39:2e:9c: 1d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:38:D5:B2:84:FE:F9:11:45:70:25:D3:31:1B:A4:E1:C7:19:E0:55 X509v3 Authority Key Identifier: keyid:3E:EA:DF:14:5A:E2:9B:48:24:0A:3F:BA:3A:FB:D9:49:A8:F1:53:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PurfFFrim0gkCj-6OvvZSajxU10.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:87:26:0d:c4:6f:20:0b:16:f4:cb:ae:80:02:b2:b3:27:7d: 38:c3:83:04:f3:9f:31:ff:38:4b:0f:90:eb:9e:be:ef:3c:48: 92:bb:9b:4f:cc:de:8b:a2:a9:3f:b9:07:88:4f:83:8d:5e:6f: ce:d6:0a:86:3b:4c:30:60:33:92:75:0e:16:a5:95:fa:26:8b: 0e:c7:fa:bd:26:ac:f4:f6:2a:bb:c5:cb:96:bd:7b:54:50:41: 54:f8:9d:f8:f8:a3:50:28:2a:92:8e:c9:72:b6:9f:92:70:f2: e2:1d:fd:33:28:b6:31:d9:17:52:bb:e5:51:92:78:08:58:21: d8:64:94:18:04:b8:78:a0:ad:c0:51:db:34:47:1f:bc:d4:af: 73:ec:62:1e:d0:ec:94:17:80:aa:5a:1a:7f:ce:00:5a:34:32: 65:1a:4e:7f:ea:d8:85:11:d1:58:67:71:f1:fe:c6:2a:48:37: 01:7f:8b:4e:50:20:f1:b1:6f:68:61:3e:4b:70:e1:5c:b7:c2: 3f:97:a2:3c:31:51:f7:a8:9a:31:e7:98:8c:df:72:f7:eb:bc: 9e:a4:66:59:32:c9:70:b5:83:5f:8a:12:06:3c:8c:03:33:85: 5d:65:77:af:00:43:35:07:98:27:62:9e:b5:a8:48:0d:ed:d8: f5:0d:11:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgyM0UxMTAvBgNVBAUTKDNFRUFERjE0NUFFMjlCNDgyNDBBM0ZCQTNBRkJEOTQ5 QThGMTUzNUQwHhcNMjUxMDE5MDMwMjUwWhcNMjUxMDI2MDMwMjUwWjAYMRYwFAYD VQQDEw02OGY0NTRkYS00ODc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0yaXQBeutMj99s5di0iSUeEvFUFPR9qozU+sZYMTEN39eZsZQydIqBx0pUWW ksM7aBjiguCMs2eEaLDqoVf7bw2p9bWC+7rxsA4APKPE/rWag19MmkYWzXYVC3fF 8jAJKnQMyngryNUB5CPNA7Zb6ps+2jzigvMoC5WaBSE2/FORm9w+/uhUmFVJKicv dx3os9+4ifC/GgstxAUSCWltCn1X8p13dU9WnIO0rkJRxEv1hA/8Zpata2S26Mm0 YlGrnWgZt/jE77h7fnBEa2nkIZ0Ft2lmpxZaaDQmUzbSq2vQ3zBRbNR3Xm3skO6Z TQWq1YKOabN+3+yCafk5LpwdqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKU41bKE /vkRRXAl0zEbpOHHGeBVMB8GA1UdIwQYMBaAFD7q3xRa4ptIJAo/ujr72Umo8VNd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODIzRS83RDY5QTgzQ0Q1 QjExMUVDOTM1MUU2MjBDNEY5QUUwMi9QdXJmRkZyaW0wZ2tDai02T3Z2WlNhanhV MTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1B1cmZGRnJpbTBna0NqLTZPdnZaU2FqeFUxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODIzRS83RDY5QTgzQ0Q1QjExMUVDOTM1MUU2MjBDNEY5QUUwMi9QdXJmRkZyaW0w Z2tDai02T3Z2WlNhanhVMTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAohyYNxG8gCxb0y66AArKzJ304w4ME858x/zhLD5Drnr7vPEiSu5tP zN6Loqk/uQeIT4ONXm/O1gqGO0wwYDOSdQ4WpZX6JosOx/q9Jqz09iq7xcuWvXtU UEFU+J34+KNQKCqSjslytp+ScPLiHf0zKLYx2RdSu+VRkngIWCHYZJQYBLh4oK3A Uds0Rx+81K9z7GIe0OyUF4CqWhp/zgBaNDJlGk5/6tiFEdFYZ3Hx/sYqSDcBf4tO UCDxsW9oYT5LcOFct8I/l6I8MVH3qJox55iM33L367yepGZZMslwtYNfihIGPIwD M4VdZXevAEM1B5gnYp61qEgN7dj1DRHn -----END CERTIFICATE-----Generated at Tue Oct 21 02:25:13 2025 by rpki-client