$ rpki-client -vvf rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.mft File: PG7AmwlfpfUTYVEIpUR8rLcasaE.mft (raw, json) Hash identifier: VIvv0ITKkuuA6F6IXxQF4Ped4eOjfNNf6AsjWP6ep58= Subject key identifier: 20:57:45:F5:D5:BF:0B:54:46:82:C4:DC:14:9B:9D:72:BA:B1:27:A8 Authority key identifier: 3C:6E:C0:9B:09:5F:A5:F5:13:61:51:08:A5:44:7C:AC:B7:1A:B1:A1 Certificate issuer: /CN=A917E4BA/serialNumber=3C6EC09B095FA5F513615108A5447CACB71AB1A1 Certificate serial: 0B0D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PG7AmwlfpfUTYVEIpUR8rLcasaE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.mft Manifest number: 0B07 Signing time: Tue 04 Nov 2025 19:27:03 +0000 Manifest this update: Tue 04 Nov 2025 19:27:02 +0000 Manifest next update: Tue 11 Nov 2025 19:27:02 +0000 Files and hashes: 1: PG7AmwlfpfUTYVEIpUR8rLcasaE.crl (hash: i/7iIf/4/JUuIRxS8RjxMKDs7K0TUIoVuJkXe0KPMfo=) 2: 66F91334ED4911ED9A90391BC4F9AE02.roa (hash: DjUQP/nHkYcgIi1MW0o7fyHbM5U6rKdni2IBdc+KG/Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.crl rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PG7AmwlfpfUTYVEIpUR8rLcasaE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:27:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2829 (0xb0d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E4BA, serialNumber=3C6EC09B095FA5F513615108A5447CACB71AB1A1 Validity Not Before: Nov 4 19:27:02 2025 GMT Not After : Nov 11 19:27:02 2025 GMT Subject: CN=690a5387-3a4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e4:e5:1c:43:0d:f2:35:b1:63:2c:7f:df:93: 53:a3:8f:c3:fb:73:08:ef:28:97:29:9b:79:51:b5: fa:d4:e3:6c:21:36:c2:b4:70:9e:ab:6c:5a:f1:9b: 95:03:c1:42:28:b9:f5:f1:cf:50:54:0d:d3:92:e7: 15:41:10:77:7c:fb:48:4d:3f:a1:f9:48:8b:33:35: 91:5b:0c:95:63:03:96:60:02:d2:b2:ad:09:81:a2: a0:36:2d:cd:d6:7a:68:7f:b8:ae:1d:97:30:5b:59: 07:72:8d:a7:d6:89:1d:ee:2a:fb:1d:19:49:1c:1a: 2b:4b:26:1e:8e:3e:db:96:d1:74:78:8c:60:77:e8: 14:34:8b:0e:85:53:73:bf:00:fb:6b:56:47:43:f0: 29:a8:e6:86:73:c8:a3:d1:a6:8f:04:ca:d6:81:7e: 6c:60:9e:f1:54:90:4b:52:04:ad:56:a7:e1:10:9c: 3c:f4:90:db:5c:fe:51:ec:da:92:4e:e9:6a:79:c7: c2:72:7f:70:f0:33:75:2f:f2:c1:99:0d:62:51:04: c1:c9:4d:1d:1a:92:7d:e8:57:ae:a9:5a:84:8c:b5: 7a:fb:56:15:c7:4f:6f:ef:9d:79:64:31:b7:12:11: f6:2a:82:f6:f1:bf:9d:98:fb:af:ed:46:78:ff:bc: c2:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:57:45:F5:D5:BF:0B:54:46:82:C4:DC:14:9B:9D:72:BA:B1:27:A8 X509v3 Authority Key Identifier: keyid:3C:6E:C0:9B:09:5F:A5:F5:13:61:51:08:A5:44:7C:AC:B7:1A:B1:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PG7AmwlfpfUTYVEIpUR8rLcasaE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:d8:23:f8:b4:0b:e1:16:3a:b1:d0:e6:bd:73:4d:01:dc:87: d9:b0:4b:ef:97:8e:d1:c8:5f:9a:36:de:3b:a7:d0:9e:f0:08: c9:01:8f:cf:94:4c:94:35:08:18:28:d4:43:9a:fd:71:e4:c0: 67:99:ab:c1:28:9a:03:65:c2:b2:7c:55:60:fe:ab:a1:df:8b: 48:96:48:63:14:57:24:74:07:b0:cd:c1:19:67:e9:16:04:51: de:29:4d:fd:79:3b:80:86:26:3e:2e:0c:51:e7:80:f5:74:13: d6:88:20:d5:8e:1f:1f:e0:e8:a2:a0:1f:91:fd:a6:9f:9d:2e: c2:c9:e2:39:f6:b7:89:e9:87:e0:af:65:75:2d:ed:7b:ae:cd: b2:5b:9a:ce:52:3a:39:b9:1d:55:0c:9e:67:db:58:ca:96:5b: 6c:fe:8a:81:c6:07:08:cd:39:5d:59:80:43:d8:42:9b:87:bc: 82:23:3e:b3:b3:d2:57:45:be:c0:37:ad:c2:00:85:c6:f9:30: 7b:22:4b:7b:ab:60:7e:e4:75:da:1e:3f:3c:4c:d6:cf:a4:9c: 23:d9:cd:e4:78:ef:10:e3:5e:ac:e1:67:a4:ec:6f:70:1a:af: b9:0a:cf:a8:77:26:43:52:3a:23:09:d4:c0:1f:1a:05:98:1f: e3:22:6a:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCw0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U0QkExMTAvBgNVBAUTKDNDNkVDMDlCMDk1RkE1RjUxMzYxNTEwOEE1NDQ3Q0FD QjcxQUIxQTEwHhcNMjUxMTA0MTkyNzAyWhcNMjUxMTExMTkyNzAyWjAYMRYwFAYD VQQDEw02OTBhNTM4Ny0zYTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwuTlHEMN8jWxYyx/35NTo4/D+3MI7yiXKZt5UbX61ONsITbCtHCeq2xa8ZuV A8FCKLn18c9QVA3TkucVQRB3fPtITT+h+UiLMzWRWwyVYwOWYALSsq0JgaKgNi3N 1npof7iuHZcwW1kHco2n1okd7ir7HRlJHBorSyYejj7bltF0eIxgd+gUNIsOhVNz vwD7a1ZHQ/ApqOaGc8ij0aaPBMrWgX5sYJ7xVJBLUgStVqfhEJw89JDbXP5R7NqS TulqecfCcn9w8DN1L/LBmQ1iUQTByU0dGpJ96FeuqVqEjLV6+1YVx09v7515ZDG3 EhH2KoL28b+dmPuv7UZ4/7zCnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCBXRfXV vwtURoLE3BSbnXK6sSeoMB8GA1UdIwQYMBaAFDxuwJsJX6X1E2FRCKVEfKy3GrGh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTRCQS9DOTUyQUM5RTUy REMxMUVBODI2MDFCMEZDNEY5QUUwMi9QRzdBbXdsZnBmVVRZVkVJcFVSOHJMY2Fz YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1BHN0Ftd2xmcGZVVFlWRUlwVVI4ckxjYXNhRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTRCQS9DOTUyQUM5RTUyREMxMUVBODI2MDFCMEZDNEY5QUUwMi9QRzdBbXdsZnBm VVRZVkVJcFVSOHJMY2FzYUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB92CP4tAvhFjqx0Oa9c00B3IfZsEvvl47RyF+aNt47p9Ce8AjJAY/P lEyUNQgYKNRDmv1x5MBnmavBKJoDZcKyfFVg/quh34tIlkhjFFckdAewzcEZZ+kW BFHeKU39eTuAhiY+LgxR54D1dBPWiCDVjh8f4OiioB+R/aafnS7CyeI59reJ6Yfg r2V1Le17rs2yW5rOUjo5uR1VDJ5n21jKllts/oqBxgcIzTldWYBD2EKbh7yCIz6z s9JXRb7AN63CAIXG+TB7Ikt7q2B+5HXaHj88TNbPpJwj2c3keO8Q416s4Wek7G9w Gq+5Cs+odyZDUjojCdTAHxoFmB/jImrl -----END CERTIFICATE-----Generated at Wed Nov 5 19:32:58 2025 by rpki-client