$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.mft File: PVlGAD7uVIrZXXlssYi3UcV82sg.mft (raw, json) Hash identifier: Qsin7gUfQ4yomz/wmRCogA9wqvoFdIZWmOfjAP5PKp0= Subject key identifier: 51:2D:E7:69:BE:26:B0:3A:07:C5:71:7F:DD:DE:6E:AE:48:AD:55:FA Authority key identifier: 3D:59:46:00:3E:EE:54:8A:D9:5D:79:6C:B1:88:B7:51:C5:7C:DA:C8 Certificate issuer: /CN=A91F9E0A/serialNumber=3D5946003EEE548AD95D796CB188B751C57CDAC8 Certificate serial: 0100 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVlGAD7uVIrZXXlssYi3UcV82sg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.mft Manifest number: FA Signing time: Sun 19 Oct 2025 08:14:41 +0000 Manifest this update: Sun 19 Oct 2025 08:14:41 +0000 Manifest next update: Sun 26 Oct 2025 08:14:41 +0000 Files and hashes: 1: PVlGAD7uVIrZXXlssYi3UcV82sg.crl (hash: 1i0tABxnUvLmh+31m9Jf4Q+V2T6u0YN6uz6Oh67nd2k=) 2: D0CDFEEA406E11EFA085272AC4F9AE02.roa (hash: aewA7Recxf1QEkAlzyh8eNS8lnCo6hOfpjo3yvsUTtM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.crl rsync://rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVlGAD7uVIrZXXlssYi3UcV82sg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:14:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 256 (0x100) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9E0A, serialNumber=3D5946003EEE548AD95D796CB188B751C57CDAC8 Validity Not Before: Oct 19 08:14:41 2025 GMT Not After : Oct 26 08:14:41 2025 GMT Subject: CN=68f49df1-584c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:8d:29:bd:4c:61:01:39:79:44:22:ce:ab:48: 07:dd:7f:22:32:c7:23:9b:9c:a5:5b:f2:a1:38:29: a3:5d:3c:f8:2f:0e:55:29:f6:1e:3c:00:c9:91:35: 25:89:7e:7c:84:2a:8a:6d:49:92:a4:57:97:7c:81: 3c:40:dd:16:4e:3e:be:c4:3d:4d:c3:1a:4e:cd:10: a0:44:25:c3:77:4d:17:7d:0c:85:52:e7:a6:27:8d: 66:ce:09:81:f9:df:fd:ce:84:b8:e7:ee:d7:8c:48: 80:d8:54:aa:7d:b4:86:71:72:a7:82:4e:92:d4:23: 16:fb:5a:dc:fe:f0:e6:bb:43:e5:cf:3d:ec:d1:aa: 3c:11:93:bf:62:f9:c7:89:d8:18:36:34:d0:1f:ef: 67:56:27:1d:f2:ef:ea:a4:47:92:8b:a6:0b:42:96: 33:28:2c:12:82:45:7b:8c:f4:3e:32:f8:f2:ce:b5: d4:e2:a4:a5:1a:b7:f7:c4:9d:a8:47:17:a7:a2:05: b4:4a:b2:83:ac:60:10:e9:44:cc:14:4b:b7:f4:ad: 95:19:81:16:01:2a:8e:88:6d:d6:30:d7:09:65:7e: 63:ba:3b:b1:ba:75:a6:c1:e8:5b:c3:c5:95:16:b9: 83:3b:05:57:5b:a2:9a:4e:3a:23:4f:33:cd:9d:33: bf:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:2D:E7:69:BE:26:B0:3A:07:C5:71:7F:DD:DE:6E:AE:48:AD:55:FA X509v3 Authority Key Identifier: keyid:3D:59:46:00:3E:EE:54:8A:D9:5D:79:6C:B1:88:B7:51:C5:7C:DA:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVlGAD7uVIrZXXlssYi3UcV82sg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:9e:a1:55:8f:de:73:70:8e:9c:c3:53:d5:bf:0d:5e:f9:22: f9:33:ba:7d:47:2e:06:58:87:9f:7e:60:6d:33:e0:94:85:61: 5d:15:d9:74:e1:0a:de:63:90:63:c2:6e:d3:3d:a3:14:94:36: 6d:ac:3e:d9:8e:83:f4:87:97:05:a3:64:59:22:88:3c:0a:2f: c1:0c:bb:cd:63:74:35:8e:d3:1b:c8:b8:5f:8c:92:2c:ea:18: 1f:f0:e0:1e:3d:9c:e8:e6:07:f3:53:ac:05:b3:d3:b7:b5:b0: e0:3c:42:43:9f:69:62:0f:41:93:54:7e:7d:56:aa:76:56:44: 9f:ef:a3:b1:ca:ab:93:ac:c3:ed:76:03:ee:87:ba:99:b7:d4: 5c:67:0b:47:b7:d2:62:8c:ba:64:2e:13:63:ab:83:a5:26:19: 7c:8a:5b:56:1c:97:21:38:0b:50:94:76:49:fd:1c:e7:d8:f1: 8f:1e:e0:ef:6f:d8:12:9f:e0:95:ba:c0:04:ea:fa:87:d2:79: b2:b6:aa:02:26:b1:05:4b:cb:a8:87:b2:82:c6:c7:b3:6e:87: e3:92:3f:e7:39:3c:13:84:4c:c9:fb:37:39:bb:ae:71:ab:f6: a9:3c:29:2b:6a:7f:ea:66:98:93:f3:79:d9:86:40:42:73:3d: 46:05:d7:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlFMEExMTAvBgNVBAUTKDNENTk0NjAwM0VFRTU0OEFEOTVENzk2Q0IxODhCNzUx QzU3Q0RBQzgwHhcNMjUxMDE5MDgxNDQxWhcNMjUxMDI2MDgxNDQxWjAYMRYwFAYD VQQDEw02OGY0OWRmMS01ODRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2I0pvUxhATl5RCLOq0gH3X8iMscjm5ylW/KhOCmjXTz4Lw5VKfYePADJkTUl iX58hCqKbUmSpFeXfIE8QN0WTj6+xD1NwxpOzRCgRCXDd00XfQyFUuemJ41mzgmB +d/9zoS45+7XjEiA2FSqfbSGcXKngk6S1CMW+1rc/vDmu0Plzz3s0ao8EZO/YvnH idgYNjTQH+9nVicd8u/qpEeSi6YLQpYzKCwSgkV7jPQ+MvjyzrXU4qSlGrf3xJ2o RxenogW0SrKDrGAQ6UTMFEu39K2VGYEWASqOiG3WMNcJZX5jujuxunWmwehbw8WV FrmDOwVXW6KaTjojTzPNnTO/uQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFEt52m+ JrA6B8Vxf93ebq5IrVX6MB8GA1UdIwQYMBaAFD1ZRgA+7lSK2V15bLGIt1HFfNrI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUUwQS8wQkQ5ODVFODNF NjkxMUVGQTJDRTY3NkFDNEY5QUUwMi9QVmxHQUQ3dVZJclpYWGxzc1lpM1VjVjgy c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BWbEdBRDd1VklyWlhYbHNzWWkzVWNWODJzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUUwQS8wQkQ5ODVFODNFNjkxMUVGQTJDRTY3NkFDNEY5QUUwMi9QVmxHQUQ3dVZJ clpYWGxzc1lpM1VjVjgyc2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBknqFVj95zcI6cw1PVvw1e+SL5M7p9Ry4GWIeffmBtM+CUhWFdFdl0 4QreY5Bjwm7TPaMUlDZtrD7ZjoP0h5cFo2RZIog8Ci/BDLvNY3Q1jtMbyLhfjJIs 6hgf8OAePZzo5gfzU6wFs9O3tbDgPEJDn2liD0GTVH59Vqp2VkSf76OxyquTrMPt dgPuh7qZt9RcZwtHt9JijLpkLhNjq4OlJhl8iltWHJchOAtQlHZJ/Rzn2PGPHuDv b9gSn+CVusAE6vqH0nmytqoCJrEFS8uoh7KCxsezbofjkj/nOTwThEzJ+zc5u65x q/apPCkran/qZpiT83nZhkBCcz1GBdfV -----END CERTIFICATE-----Generated at Mon Oct 20 16:42:42 2025 by rpki-client