$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.mft File: PinOb2p9uUttCRM7c_7VLd7hLas.mft (raw, json) Hash identifier: bvJKHDQHpZgyu7yKCaX32vwsx83ofqeQ/+BnXBhr5OY= Subject key identifier: CD:B6:48:21:23:63:0E:B5:18:A0:3F:F4:46:52:65:50:07:A0:FE:34 Authority key identifier: 3E:29:CE:6F:6A:7D:B9:4B:6D:09:13:3B:73:FE:D5:2D:DE:E1:2D:AB Certificate issuer: /CN=A91CF285/serialNumber=3E29CE6F6A7DB94B6D09133B73FED52DDEE12DAB Certificate serial: 10DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PinOb2p9uUttCRM7c_7VLd7hLas.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.mft Manifest number: 10C8 Signing time: Tue 04 Nov 2025 17:24:15 +0000 Manifest this update: Tue 04 Nov 2025 17:24:14 +0000 Manifest next update: Tue 11 Nov 2025 17:24:14 +0000 Files and hashes: 1: PinOb2p9uUttCRM7c_7VLd7hLas.crl (hash: g2yIIyNmUZiwfNC4ryu1MBmkkx3CpeT5NTZCShrSXxI=) 2: 073BC4F4ED3B11EDB5A01A46C4F9AE02.roa (hash: zHchOODRMXh4YPNN1A7mCb7XiL/ujTp4cFUjm4qxBCU=) 3: DC83478EEB0311ED875DD72EC4F9AE02.roa (hash: ZDjZETXLZ7zFreIAvqJ7UMCHnkhV8V9TxpsSD145ZBI=) 4: AB731B004B2A11EFAAFCC92CC4F9AE02.roa (hash: 1iubQBpsLSvGnn+Mx1GBJRtm0BcqUW85CF15NJsmWt0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.crl rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PinOb2p9uUttCRM7c_7VLd7hLas.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4315 (0x10db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF285, serialNumber=3E29CE6F6A7DB94B6D09133B73FED52DDEE12DAB Validity Not Before: Nov 4 17:24:14 2025 GMT Not After : Nov 11 17:24:14 2025 GMT Subject: CN=690a36bf-bd56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:96:99:46:35:63:c7:0e:49:8b:93:75:35:1c: f8:26:23:2d:11:0d:07:46:ac:5c:06:6f:e1:d7:38: fe:a4:b4:53:7b:0f:02:79:8a:b6:de:c3:32:9b:80: 66:f8:54:0b:cd:1a:ee:7a:b9:d1:b1:27:ce:b4:e2: 79:36:f5:f2:2a:dc:f1:45:77:d4:48:ee:f5:74:0a: 91:e1:21:b7:ba:71:ea:ef:35:ce:e0:4d:3d:c8:54: c4:f0:75:84:2c:d7:6d:69:48:36:87:9c:eb:73:94: 2b:b2:57:ee:37:c0:0a:59:fc:82:de:b0:d8:7f:99: 75:0e:e2:74:b4:0c:10:37:ec:00:cc:d3:23:fc:e9: 98:9d:fa:37:c1:a4:c0:67:48:46:76:f4:6c:3a:43: 4a:43:b7:33:6d:c1:e6:5f:fd:56:12:61:08:24:b9: 3b:5a:bc:f0:75:d1:78:3c:13:87:95:e6:16:e6:e1: 8e:e1:28:66:22:2c:20:54:b3:8f:09:c5:09:43:36: 21:69:0c:5e:90:0e:77:f4:21:4d:d2:36:fa:41:38: 70:14:89:91:ec:60:61:0c:9d:e9:32:ee:c1:68:25: 4d:4d:a5:7e:73:d2:51:d3:08:7e:21:c0:f4:15:c6: e5:15:09:1b:d9:6b:a3:7f:92:f8:ad:19:dd:51:31: 84:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:B6:48:21:23:63:0E:B5:18:A0:3F:F4:46:52:65:50:07:A0:FE:34 X509v3 Authority Key Identifier: keyid:3E:29:CE:6F:6A:7D:B9:4B:6D:09:13:3B:73:FE:D5:2D:DE:E1:2D:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PinOb2p9uUttCRM7c_7VLd7hLas.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:08:f1:b9:6a:93:7b:df:f1:37:6c:67:7c:92:cb:3e:b6:fd: c9:b7:9f:f9:37:e2:55:b7:d4:e3:df:a3:5b:b0:ee:74:75:64: 32:f7:4f:39:c7:a7:f2:0e:0c:55:48:b7:d5:1b:7f:86:85:5e: 78:47:e0:61:16:a0:58:07:d4:d8:55:4b:ca:5f:24:35:1f:2a: 3d:73:ed:94:69:80:64:70:3a:ce:f1:4c:06:71:8a:95:fe:18: 40:d6:3f:7e:e1:2b:47:1a:4b:35:cc:d8:59:bb:0a:5e:2e:40: 36:bc:87:54:c9:ca:4c:02:6c:4c:ed:62:11:76:a4:ec:27:64: 02:b6:82:28:3b:c7:d3:35:76:78:51:56:02:5c:62:56:55:18: 23:11:7a:26:5c:8b:f6:5f:ec:3e:5e:ee:12:25:7a:d1:de:26: 31:21:3e:e4:ae:ac:a4:ce:84:0a:fe:74:d1:b4:4d:12:ca:69: 7e:cd:e4:89:75:fe:2a:5e:d3:af:bb:cc:f2:63:ce:bb:85:9d: bf:c0:a9:df:12:bd:22:92:85:90:a2:66:fd:44:48:ab:ae:a4: b4:85:22:fa:12:8d:35:0e:27:02:10:31:c3:8c:ed:ba:7f:76: ba:cc:20:33:4c:ac:6f:05:46:f9:d2:f0:38:e7:1c:39:c9:de: ea:da:4e:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICENswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0YyODUxMTAvBgNVBAUTKDNFMjlDRTZGNkE3REI5NEI2RDA5MTMzQjczRkVENTJE REVFMTJEQUIwHhcNMjUxMTA0MTcyNDE0WhcNMjUxMTExMTcyNDE0WjAYMRYwFAYD VQQDEw02OTBhMzZiZi1iZDU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+JaZRjVjxw5Ji5N1NRz4JiMtEQ0HRqxcBm/h1zj+pLRTew8CeYq23sMym4Bm +FQLzRruernRsSfOtOJ5NvXyKtzxRXfUSO71dAqR4SG3unHq7zXO4E09yFTE8HWE LNdtaUg2h5zrc5QrslfuN8AKWfyC3rDYf5l1DuJ0tAwQN+wAzNMj/OmYnfo3waTA Z0hGdvRsOkNKQ7czbcHmX/1WEmEIJLk7WrzwddF4PBOHleYW5uGO4ShmIiwgVLOP CcUJQzYhaQxekA539CFN0jb6QThwFImR7GBhDJ3pMu7BaCVNTaV+c9JR0wh+IcD0 FcblFQkb2Wujf5L4rRndUTGErQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM22SCEj Yw61GKA/9EZSZVAHoP40MB8GA1UdIwQYMBaAFD4pzm9qfblLbQkTO3P+1S3e4S2r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjI4NS9GRDY0RjBCODM0 MEMxMUU5OTY2QzVBNzZDNEY5QUUwMi9QaW5PYjJwOXVVdHRDUk03Y183VkxkN2hM YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Bpbk9iMnA5dVV0dENSTTdjXzdWTGQ3aExhcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjI4NS9GRDY0RjBCODM0MEMxMUU5OTY2QzVBNzZDNEY5QUUwMi9QaW5PYjJwOXVV dHRDUk03Y183VkxkN2hMYXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwCPG5apN73/E3bGd8kss+tv3Jt5/5N+JVt9Tj36NbsO50dWQy9085 x6fyDgxVSLfVG3+GhV54R+BhFqBYB9TYVUvKXyQ1Hyo9c+2UaYBkcDrO8UwGcYqV /hhA1j9+4StHGks1zNhZuwpeLkA2vIdUycpMAmxM7WIRdqTsJ2QCtoIoO8fTNXZ4 UVYCXGJWVRgjEXomXIv2X+w+Xu4SJXrR3iYxIT7krqykzoQK/nTRtE0Syml+zeSJ df4qXtOvu8zyY867hZ2/wKnfEr0ikoWQomb9REirrqS0hSL6Eo01DicCEDHDjO26 f3a6zCAzTKxvBUb50vA45xw5yd7q2k49 -----END CERTIFICATE-----Generated at Wed Nov 5 01:24:21 2025 by rpki-client