$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft File: pcmHAk0KjqwJZAn9mewy7JBHC6M.mft (raw, json) Hash identifier: ubzfiMEVpVJjpAJ+AryGDoG+Fhy5GD6RHlw+xF7SR10= Subject key identifier: 8A:04:72:F3:A7:7E:C0:7C:52:CB:EA:E2:1D:D7:23:95:BB:41:79:6F Authority key identifier: A5:C9:87:02:4D:0A:8E:AC:09:64:09:FD:99:EC:32:EC:90:47:0B:A3 Certificate issuer: /CN=A91E4B86/serialNumber=A5C987024D0A8EAC096409FD99EC32EC90470BA3 Certificate serial: 83 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pcmHAk0KjqwJZAn9mewy7JBHC6M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft Manifest number: 80 Signing time: Mon 03 Nov 2025 06:42:47 +0000 Manifest this update: Mon 03 Nov 2025 06:42:46 +0000 Manifest next update: Mon 10 Nov 2025 06:42:46 +0000 Files and hashes: 1: pcmHAk0KjqwJZAn9mewy7JBHC6M.crl (hash: DzaEF5s0Vc1uvB9WKrS8EurTAGQnf+tvf8L5iObKUGw=) 2: 4C51E1D4F7E511EF9A28D363C4F9AE02.roa (hash: EWVCVV5zCZB19LClSuWFTWXQU193NPHqHKJqFm4wMOE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.crl rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pcmHAk0KjqwJZAn9mewy7JBHC6M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:42:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 131 (0x83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4B86, serialNumber=A5C987024D0A8EAC096409FD99EC32EC90470BA3 Validity Not Before: Nov 3 06:42:46 2025 GMT Not After : Nov 10 06:42:46 2025 GMT Subject: CN=69084ee7-cef7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e2:99:f0:51:a8:36:34:76:7d:cd:f1:b7:8b: af:07:b5:16:f6:4b:62:0c:3b:a3:dc:d2:aa:a1:30: 2b:e9:eb:7e:ed:f0:bb:13:55:94:d6:e8:b4:af:62: bf:24:22:d0:b2:5d:1a:bd:8f:68:c0:2e:65:4e:42: cc:cd:1f:55:c3:2a:ab:19:74:5f:60:8d:6f:75:10: 68:d8:36:ae:96:31:e8:96:d7:85:08:e5:83:18:9a: 01:49:0b:b1:ff:ae:22:db:cd:ae:70:a9:79:2e:1d: 41:06:2f:19:ae:b1:96:2a:c0:ff:5b:72:ff:40:44: 75:e7:43:3f:0c:7d:be:0f:03:4f:d2:1e:40:79:02: 35:2d:0f:82:19:7f:10:43:eb:a2:67:6a:0d:1a:43: 69:9d:98:2b:f0:38:0a:82:63:4c:95:31:2c:12:f9: e6:27:c1:e5:0e:37:3b:9a:d5:e6:fd:9a:33:e6:e8: e5:08:28:ca:1f:7a:3c:5b:35:9a:87:86:7c:5b:d0: 5c:52:f0:ab:1a:0d:45:db:09:e3:03:d4:be:6e:44: 6c:54:e8:8e:00:21:81:df:ed:32:0b:75:2e:c1:6e: eb:db:df:67:c9:11:3b:26:78:3c:45:76:d9:b1:18: 80:9c:37:7a:ea:15:6c:8f:67:b0:02:3b:d6:0d:e9: ed:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:04:72:F3:A7:7E:C0:7C:52:CB:EA:E2:1D:D7:23:95:BB:41:79:6F X509v3 Authority Key Identifier: keyid:A5:C9:87:02:4D:0A:8E:AC:09:64:09:FD:99:EC:32:EC:90:47:0B:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pcmHAk0KjqwJZAn9mewy7JBHC6M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:55:62:1a:3d:d3:46:49:7c:c6:97:d8:0f:d9:e9:d3:40:ee: 88:9f:7e:0b:b2:80:f9:a4:59:49:f9:6e:95:e3:bc:36:43:bb: f0:7a:72:00:80:21:1a:51:4b:b3:51:34:96:ae:99:c6:b5:12: be:8f:2b:00:c2:97:37:0e:14:6d:4b:06:96:a3:d3:b2:f3:b9: 61:e2:6d:29:ae:9d:10:ff:93:73:e6:cc:7d:1f:d8:6a:ea:36: b8:58:5a:fa:bb:69:7e:ab:c9:df:db:e0:d4:25:ab:e0:b0:79: cb:7b:b6:87:b1:64:30:01:1d:62:de:39:43:a6:97:85:10:8a: 1d:45:06:54:fa:57:94:fe:34:1d:4e:d5:61:6c:13:65:68:46: e1:e4:85:ac:1b:46:d6:30:4a:27:a6:cf:03:ef:6b:a9:36:fb: b0:40:e1:46:37:87:89:9f:68:05:5b:00:d4:69:ae:8e:ca:9e: 6f:5e:54:14:79:42:7e:8a:de:b8:ae:b7:a4:92:10:f4:db:95: 54:01:b2:99:85:e3:34:d4:38:9d:a9:4b:c7:7e:83:dd:56:72: b8:75:9a:c4:a3:26:b1:35:09:3c:d6:0d:46:66:28:49:a2:1d: 8f:a9:03:d2:4b:56:7d:b9:21:75:cf:68:e1:3e:a0:50:89:96: c7:7b:5a:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRCODYxMTAvBgNVBAUTKEE1Qzk4NzAyNEQwQThFQUMwOTY0MDlGRDk5RUMzMkVD OTA0NzBCQTMwHhcNMjUxMTAzMDY0MjQ2WhcNMjUxMTEwMDY0MjQ2WjAYMRYwFAYD VQQDEw02OTA4NGVlNy1jZWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtOKZ8FGoNjR2fc3xt4uvB7UW9ktiDDuj3NKqoTAr6et+7fC7E1WU1ui0r2K/ JCLQsl0avY9owC5lTkLMzR9VwyqrGXRfYI1vdRBo2DauljHolteFCOWDGJoBSQux /64i282ucKl5Lh1BBi8ZrrGWKsD/W3L/QER150M/DH2+DwNP0h5AeQI1LQ+CGX8Q Q+uiZ2oNGkNpnZgr8DgKgmNMlTEsEvnmJ8HlDjc7mtXm/Zoz5ujlCCjKH3o8WzWa h4Z8W9BcUvCrGg1F2wnjA9S+bkRsVOiOACGB3+0yC3UuwW7r299nyRE7Jng8RXbZ sRiAnDd66hVsj2ewAjvWDentXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIoEcvOn fsB8Usvq4h3XI5W7QXlvMB8GA1UdIwQYMBaAFKXJhwJNCo6sCWQJ/ZnsMuyQRwuj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEI4Ni84OTMzMTQ4QUY3 RTMxMUVGOEFEQThBNDFDNEY5QUUwMi9wY21IQWswS2pxd0paQW45bWV3eTdKQkhD Nk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3BjbUhBazBLanF3SlpBbjltZXd5N0pCSEM2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEI4Ni84OTMzMTQ4QUY3RTMxMUVGOEFEQThBNDFDNEY5QUUwMi9wY21IQWswS2px d0paQW45bWV3eTdKQkhDNk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARVWIaPdNGSXzGl9gP2enTQO6In34LsoD5pFlJ+W6V47w2Q7vwenIA gCEaUUuzUTSWrpnGtRK+jysAwpc3DhRtSwaWo9Oy87lh4m0prp0Q/5Nz5sx9H9hq 6ja4WFr6u2l+q8nf2+DUJavgsHnLe7aHsWQwAR1i3jlDppeFEIodRQZU+leU/jQd TtVhbBNlaEbh5IWsG0bWMEonps8D72upNvuwQOFGN4eJn2gFWwDUaa6Oyp5vXlQU eUJ+it64rrekkhD025VUAbKZheM01DidqUvHfoPdVnK4dZrEoyaxNQk81g1GZihJ oh2PqQPSS1Z9uSF1z2jhPqBQiZbHe1pm -----END CERTIFICATE-----Generated at Tue Nov 4 23:13:15 2025 by rpki-client