$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft File: PfG7945KTnVEGahIyf0My9LmpFg.mft (raw, json) Hash identifier: u4kTvjIFDAbRWEltzO8T9pGyjQLzebPrxhoYu7zKKSo= Subject key identifier: 8D:78:E1:AA:55:36:09:DC:46:D5:E7:E7:72:61:83:FD:A1:E8:2B:73 Authority key identifier: 3D:F1:BB:F7:8E:4A:4E:75:44:19:A8:48:C9:FD:0C:CB:D2:E6:A4:58 Certificate issuer: /CN=A91C1052/serialNumber=3DF1BBF78E4A4E754419A848C9FD0CCBD2E6A458 Certificate serial: 0227 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfG7945KTnVEGahIyf0My9LmpFg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft Manifest number: 0220 Signing time: Mon 03 Nov 2025 02:05:18 +0000 Manifest this update: Mon 03 Nov 2025 02:05:18 +0000 Manifest next update: Mon 10 Nov 2025 02:05:18 +0000 Files and hashes: 1: PfG7945KTnVEGahIyf0My9LmpFg.crl (hash: 3VVQ9EYe8cE2RPsQijk2VUdTpUNqBCPzs3AxFzk6PzA=) 2: 74A3C1988E8311ED903ADA1CC4F9AE02.roa (hash: tRn5pXPKK2uEloHBe0GH9yfzRyq3HlL5LYvlAIQdS38=) 3: D6E2AAC0772911ED95084884C4F9AE02.roa (hash: dJsLSVlZN9Pxyi6rXrFH13Jbq2ezDlbcKNiOzrGi8Nw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.crl rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfG7945KTnVEGahIyf0My9LmpFg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:05:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 551 (0x227) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1052, serialNumber=3DF1BBF78E4A4E754419A848C9FD0CCBD2E6A458 Validity Not Before: Nov 3 02:05:18 2025 GMT Not After : Nov 10 02:05:18 2025 GMT Subject: CN=69080dde-bf5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:56:d5:a0:18:c6:52:58:f4:7b:cd:c3:d8:f3: c2:8f:0e:bf:57:e7:c4:b5:ed:48:1e:1d:6c:35:8f: a3:29:72:9e:7c:65:7b:a8:ee:19:65:9f:8b:d5:f6: 2b:bc:95:da:83:4f:1e:96:7d:ee:49:5a:d4:f0:5e: 85:96:45:e6:38:86:eb:a6:8a:96:71:a2:e1:8b:58: 7c:75:6b:2b:bd:33:d2:3b:d3:d5:61:a8:ae:9b:dc: 74:fa:99:7b:45:d1:c1:65:7c:1b:fd:99:e4:bf:8e: 46:76:c6:eb:4c:ad:fd:9e:5f:22:a4:9d:56:96:45: 40:e8:7f:90:34:56:1d:3f:db:16:34:44:5b:d1:1e: bc:59:86:47:e9:b5:2e:39:5a:34:e5:2f:5d:f1:5a: 0d:91:9d:34:69:ae:e2:1c:87:a0:02:27:cd:6c:65: eb:87:02:18:1c:29:dc:3d:39:75:f3:dc:7a:78:7b: d8:0f:7c:90:b0:e5:05:08:91:39:9b:d7:8d:38:af: 14:8d:0b:51:7c:a0:2a:5a:b8:88:53:aa:d6:a1:26: b7:31:b2:53:c8:e9:76:55:ff:97:c6:36:1b:8f:d6: 5e:cf:91:4b:d0:7b:21:0f:57:63:de:47:d3:6b:63: 2c:6e:f2:cc:ab:28:ac:2e:a9:57:b0:da:75:55:d2: 86:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:78:E1:AA:55:36:09:DC:46:D5:E7:E7:72:61:83:FD:A1:E8:2B:73 X509v3 Authority Key Identifier: keyid:3D:F1:BB:F7:8E:4A:4E:75:44:19:A8:48:C9:FD:0C:CB:D2:E6:A4:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfG7945KTnVEGahIyf0My9LmpFg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:5d:82:0f:ca:fd:ee:00:c4:74:f8:e7:91:35:d2:b7:f9:7f: 2d:07:06:76:89:ab:6b:86:8b:f3:12:cc:ff:64:01:d0:fc:7d: 02:bf:b1:66:e2:f6:ef:e8:05:44:bb:97:56:0f:94:f8:16:6b: cd:83:e1:1e:1c:f8:df:fb:8d:a2:98:1f:3f:91:de:ce:a5:ca: 9c:ce:c4:ad:21:9d:47:7e:e0:73:41:d6:0e:db:fc:38:8b:0d: f9:cc:a5:b0:7f:c6:6e:b7:26:94:f9:07:ce:32:f2:4a:1b:97: 70:47:2e:4a:15:a1:82:57:84:d3:f1:32:f9:a6:cd:cc:16:fd: b7:ac:2d:a1:8c:cc:7c:08:a2:5f:69:5d:d6:80:3a:39:fe:4f: ef:c5:5d:24:d8:78:3e:82:c6:35:14:13:1c:45:e9:90:8f:57: 70:e8:34:07:e1:45:27:2e:45:50:73:c3:3c:19:63:3d:4d:18: 1e:f7:8e:9a:ef:f1:7b:fd:83:0d:e5:75:ba:29:34:71:4f:52: 0b:46:7a:af:f3:dc:04:ff:98:ce:2a:12:8d:0e:9b:5a:00:a2: 78:91:46:63:3e:81:70:0e:5a:01:40:20:2d:67:af:5a:6c:c8: 48:05:fb:50:4b:5f:12:ae:e5:86:ba:27:28:28:9f:18:6d:cc: 81:fb:7c:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzEwNTIxMTAvBgNVBAUTKDNERjFCQkY3OEU0QTRFNzU0NDE5QTg0OEM5RkQwQ0NC RDJFNkE0NTgwHhcNMjUxMTAzMDIwNTE4WhcNMjUxMTEwMDIwNTE4WjAYMRYwFAYD VQQDEw02OTA4MGRkZS1iZjVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnlbVoBjGUlj0e83D2PPCjw6/V+fEte1IHh1sNY+jKXKefGV7qO4ZZZ+L1fYr vJXag08eln3uSVrU8F6FlkXmOIbrpoqWcaLhi1h8dWsrvTPSO9PVYaium9x0+pl7 RdHBZXwb/Znkv45GdsbrTK39nl8ipJ1WlkVA6H+QNFYdP9sWNERb0R68WYZH6bUu OVo05S9d8VoNkZ00aa7iHIegAifNbGXrhwIYHCncPTl189x6eHvYD3yQsOUFCJE5 m9eNOK8UjQtRfKAqWriIU6rWoSa3MbJTyOl2Vf+XxjYbj9Zez5FL0HshD1dj3kfT a2MsbvLMqyisLqlXsNp1VdKGKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI144apV NgncRtXn53Jhg/2h6CtzMB8GA1UdIwQYMBaAFD3xu/eOSk51RBmoSMn9DMvS5qRY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTA1Mi84MDZGQjI3Njc3 MjYxMUVEODZEMDk2ODBDNEY5QUUwMi9QZkc3OTQ1S1RuVkVHYWhJeWYwTXk5TG1w RmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BmRzc5NDVLVG5WRUdhaEl5ZjBNeTlMbXBGZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTA1Mi84MDZGQjI3Njc3MjYxMUVEODZEMDk2ODBDNEY5QUUwMi9QZkc3OTQ1S1Ru VkVHYWhJeWYwTXk5TG1wRmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJXYIPyv3uAMR0+OeRNdK3+X8tBwZ2iatrhovzEsz/ZAHQ/H0Cv7Fm 4vbv6AVEu5dWD5T4FmvNg+EeHPjf+42imB8/kd7OpcqczsStIZ1HfuBzQdYO2/w4 iw35zKWwf8ZutyaU+QfOMvJKG5dwRy5KFaGCV4TT8TL5ps3MFv23rC2hjMx8CKJf aV3WgDo5/k/vxV0k2Hg+gsY1FBMcRemQj1dw6DQH4UUnLkVQc8M8GWM9TRge946a 7/F7/YMN5XW6KTRxT1ILRnqv89wE/5jOKhKNDptaAKJ4kUZjPoFwDloBQCAtZ69a bMhIBftQS18SruWGuicoKJ8YbcyB+3zC -----END CERTIFICATE-----Generated at Tue Nov 4 12:34:56 2025 by rpki-client