$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA736/5A6D8B5C732711F0B152646FC4F9AE02/pa-pCJC_kpGBwDHwuO2xlOPhaeM.mft File: pa-pCJC_kpGBwDHwuO2xlOPhaeM.mft (raw, json) Hash identifier: RYPOg82h3V1yb0mYJZq36JslI9xFLzt6ghlW6Nq6RoA= Subject key identifier: DB:64:A7:D8:69:51:83:1C:BA:D3:E7:2A:5A:48:D1:11:70:DD:BE:5F Authority key identifier: A5:AF:A9:08:90:BF:92:91:81:C0:31:F0:B8:ED:B1:94:E3:E1:69:E3 Certificate issuer: /CN=A91DA736/serialNumber=A5AFA90890BF929181C031F0B8EDB194E3E169E3 Certificate serial: 30 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pa-pCJC_kpGBwDHwuO2xlOPhaeM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA736/5A6D8B5C732711F0B152646FC4F9AE02/pa-pCJC_kpGBwDHwuO2xlOPhaeM.mft Manifest number: 2F Signing time: Wed 05 Nov 2025 07:50:01 +0000 Manifest this update: Wed 05 Nov 2025 07:50:01 +0000 Manifest next update: Wed 12 Nov 2025 07:50:01 +0000 Files and hashes: 1: pa-pCJC_kpGBwDHwuO2xlOPhaeM.crl (hash: tBhVSN1nglc4XYPgH7TXXgy5uoZuOH2OFNkT2higrZw=) 2: 065E09BC732F11F09E8D4450C4F9AE02.roa (hash: fRjTeZ6sOZhL7w9XnHnzng0sCHnh1L73Q9iqK1QuMso=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA736/5A6D8B5C732711F0B152646FC4F9AE02/pa-pCJC_kpGBwDHwuO2xlOPhaeM.crl rsync://rpki.apnic.net/member_repository/A91DA736/5A6D8B5C732711F0B152646FC4F9AE02/pa-pCJC_kpGBwDHwuO2xlOPhaeM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pa-pCJC_kpGBwDHwuO2xlOPhaeM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:50:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48 (0x30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA736, serialNumber=A5AFA90890BF929181C031F0B8EDB194E3E169E3 Validity Not Before: Nov 5 07:50:01 2025 GMT Not After : Nov 12 07:50:01 2025 GMT Subject: CN=690b01a9-9ad3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:63:f8:0f:53:ed:8a:0f:9c:a4:c6:06:de:95: 1e:b0:57:49:7b:f2:bd:dc:a5:f3:fa:b4:c2:02:22: f7:9e:b0:45:fd:57:51:32:be:92:a8:c5:3a:68:e0: 45:ae:07:e6:d5:39:0c:ff:74:8e:83:37:ef:56:a0: 72:ed:13:85:7b:be:41:17:a7:90:ac:00:d0:23:38: 1f:57:e6:e1:9c:97:c0:42:5d:af:92:d0:09:ea:ab: e2:75:c5:34:18:6f:59:9e:7d:62:1f:d9:d3:8f:04: 01:a1:af:99:5b:26:bd:07:f0:a8:67:a1:91:a6:a3: 28:3f:51:5e:dc:f4:8a:4a:7a:26:1f:ab:55:92:4f: 33:ed:63:2e:40:2b:31:1e:50:29:4a:75:b7:46:21: db:12:3f:c4:c1:e7:11:ad:4c:5e:6f:35:e8:56:5c: 76:8c:01:40:e4:2d:cb:46:9d:3f:8f:23:bd:90:7f: c8:5f:cd:c6:7c:e4:87:f2:af:a6:3e:b1:ce:77:2c: 56:3d:02:98:99:4f:62:dc:83:e0:43:2a:0b:ca:f1: b1:aa:91:71:e2:d3:d5:5a:e6:cb:d8:26:23:84:53: ee:0f:78:99:c3:fe:d5:f0:d3:8d:81:f7:44:68:4e: ea:38:42:6b:2c:e3:ce:24:a3:19:75:6e:5e:eb:8e: dd:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:64:A7:D8:69:51:83:1C:BA:D3:E7:2A:5A:48:D1:11:70:DD:BE:5F X509v3 Authority Key Identifier: keyid:A5:AF:A9:08:90:BF:92:91:81:C0:31:F0:B8:ED:B1:94:E3:E1:69:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA736/5A6D8B5C732711F0B152646FC4F9AE02/pa-pCJC_kpGBwDHwuO2xlOPhaeM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pa-pCJC_kpGBwDHwuO2xlOPhaeM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA736/5A6D8B5C732711F0B152646FC4F9AE02/pa-pCJC_kpGBwDHwuO2xlOPhaeM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:82:1b:25:2e:62:68:73:a7:bf:19:b9:41:ab:95:de:14:1a: e8:c8:1c:cf:6a:24:81:8f:45:9c:28:34:49:47:9a:b2:eb:a4: aa:52:30:f8:11:8f:ff:a1:d4:38:48:cb:fd:7a:10:ed:58:3e: 93:b9:84:89:71:41:f1:8b:81:dd:76:7d:d8:68:78:f1:b2:53: 0b:ed:a7:33:12:73:0d:06:0c:86:ba:54:45:54:8f:92:f9:99: 94:9e:2b:25:fe:4a:68:e2:9a:14:3d:65:89:7d:19:9e:59:31: 6a:12:5d:3c:b1:e8:2b:23:a1:b5:39:1f:86:07:de:d3:35:f1: 26:f5:ea:1f:c6:2c:be:e5:60:eb:43:b8:37:09:47:36:59:61: b5:92:7f:11:ce:7c:dc:e8:17:60:be:57:93:70:ac:98:7e:16: aa:b4:bb:ef:09:db:41:61:60:af:3b:f5:61:9e:c6:60:e6:aa: 2f:f0:73:39:75:7b:62:7e:d7:f4:2a:d9:2a:75:c1:20:6c:3b: 57:67:93:08:21:e5:98:f7:98:86:e4:0e:fd:74:53:fa:dd:f9: af:c3:ed:cd:bb:5f:e2:05:6f:c3:8f:63:9f:6f:82:b6:ad:8c: 5d:37:d7:95:30:22:10:01:c1:6e:7e:49:f9:71:f4:e5:f7:86: ab:20:5b:0e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE QTczNjExMC8GA1UEBRMoQTVBRkE5MDg5MEJGOTI5MTgxQzAzMUYwQjhFREIxOTRF M0UxNjlFMzAeFw0yNTExMDUwNzUwMDFaFw0yNTExMTIwNzUwMDFaMBgxFjAUBgNV BAMTDTY5MGIwMWE5LTlhZDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHY/gPU+2KD5ykxgbelR6wV0l78r3cpfP6tMICIveesEX9V1EyvpKoxTpo4EWu B+bVOQz/dI6DN+9WoHLtE4V7vkEXp5CsANAjOB9X5uGcl8BCXa+S0Anqq+J1xTQY b1mefWIf2dOPBAGhr5lbJr0H8KhnoZGmoyg/UV7c9IpKeiYfq1WSTzPtYy5AKzEe UClKdbdGIdsSP8TB5xGtTF5vNehWXHaMAUDkLctGnT+PI72Qf8hfzcZ85Ifyr6Y+ sc53LFY9ApiZT2Lcg+BDKgvK8bGqkXHi09Va5svYJiOEU+4PeJnD/tXw042B90Ro Tuo4Qmss484koxl1bl7rjt3xAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU22Sn2GlR gxy60+cqWkjREXDdvl8wHwYDVR0jBBgwFoAUpa+pCJC/kpGBwDHwuO2xlOPhaeMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURBNzM2LzVBNkQ4QjVDNzMy NzExRjBCMTUyNjQ2RkM0RjlBRTAyL3BhLXBDSkNfa3BHQndESHd1TzJ4bE9QaGFl TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcGEtcENKQ19rcEdCd0RId3VPMnhsT1BoYWVNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURB NzM2LzVBNkQ4QjVDNzMyNzExRjBCMTUyNjQ2RkM0RjlBRTAyL3BhLXBDSkNfa3BH QndESHd1TzJ4bE9QaGFlTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABiCGyUuYmhzp78ZuUGrld4UGujIHM9qJIGPRZwoNElHmrLrpKpSMPgR j/+h1DhIy/16EO1YPpO5hIlxQfGLgd12fdhoePGyUwvtpzMScw0GDIa6VEVUj5L5 mZSeKyX+SmjimhQ9ZYl9GZ5ZMWoSXTyx6CsjobU5H4YH3tM18Sb16h/GLL7lYOtD uDcJRzZZYbWSfxHOfNzoF2C+V5NwrJh+Fqq0u+8J20FhYK879WGexmDmqi/wczl1 e2J+1/Qq2Sp1wSBsO1dnkwgh5Zj3mIbkDv10U/rd+a/D7c27X+IFb8OPY59vgrat jF0315UwIhABwW5+Sflx9OX3hqsgWw4= -----END CERTIFICATE-----Generated at Wed Nov 5 21:03:46 2025 by rpki-client