$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft File: PnOyvhMDe-dEOR06iZzdICuC920.mft (raw, json) Hash identifier: cfl+ks1U9lzgNiuhQFGPkU40WjmrjEpkkpzENK65uX8= Subject key identifier: F2:6C:4D:43:A1:0A:FF:BC:A4:F3:BD:A6:52:1F:AA:45:96:76:E5:CE Authority key identifier: 3E:73:B2:BE:13:03:7B:E7:44:39:1D:3A:89:9C:DD:20:2B:82:F7:6D Certificate issuer: /CN=A91E5D0C/serialNumber=3E73B2BE13037BE744391D3A899CDD202B82F76D Certificate serial: 051A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft Manifest number: 0505 Signing time: Sun 02 Nov 2025 23:40:51 +0000 Manifest this update: Sun 02 Nov 2025 23:40:50 +0000 Manifest next update: Sun 09 Nov 2025 23:40:50 +0000 Files and hashes: 1: PnOyvhMDe-dEOR06iZzdICuC920.crl (hash: Euw0cHx9VgKNYnUjuk+iYTSsvZUBrpt5g0U8YlGR6Ao=) 2: EFFA034837D111EC9337B812C4F9AE02.roa (hash: GRUpCE+gVb2TzuJuLp6/bFNygGmQWG7Yo+BJcqN3ABA=) 3: 9C581C28B07511EF9D153813C4F9AE02.roa (hash: 2ILq0YdLX+uDk2zpnZWvB9sk0e06nVHIZcSy04DKJII=) 4: FE76F7D8EC4A11EFA7845862C4F9AE02.roa (hash: JmLkpvQJH0Uq9XtysKaBXjhAS8plkz/VizJFG4sBHBE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.crl rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:40:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1306 (0x51a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D0C, serialNumber=3E73B2BE13037BE744391D3A899CDD202B82F76D Validity Not Before: Nov 2 23:40:50 2025 GMT Not After : Nov 9 23:40:50 2025 GMT Subject: CN=6907ec03-2d86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a8:55:b5:94:85:36:f4:79:5c:82:45:6e:c7: 8d:a1:89:6a:16:67:2a:70:54:8c:2d:51:1e:80:91: d2:fa:52:0e:45:84:d1:27:c2:1f:cf:eb:44:63:be: c7:77:00:d4:64:68:ef:25:e3:47:38:0d:b4:8e:d4: c0:43:c5:43:50:9a:44:31:56:c4:c3:24:a0:79:3c: 46:70:9a:1b:05:a4:0a:dc:f5:fc:27:cc:a8:df:1b: e9:45:f4:c3:c8:8b:b7:41:79:9c:c6:28:5c:98:29: f2:86:b9:d5:27:2b:7a:64:10:b1:e5:f8:1c:a6:9c: 36:6c:11:d6:29:10:57:e9:9b:31:ac:d4:75:27:24: 45:d6:73:d9:0c:f8:58:d3:1e:df:ab:ef:7f:0e:82: c0:08:47:c9:89:9c:25:cf:bd:fa:95:b5:42:d9:85: a2:8b:60:29:49:4e:4d:77:0e:f2:dc:7d:d2:42:61: fa:b6:54:ef:30:ec:eb:59:e5:a3:3e:da:d2:97:91: 45:32:3e:56:b5:42:1c:ce:21:4d:f9:c7:36:f0:da: 78:f9:83:9a:80:4a:b6:c1:41:3a:0e:b6:d5:4e:12: 7a:20:99:ac:f9:5f:55:ef:db:d7:1f:3e:0f:8f:4b: b3:ec:af:3c:f6:c6:c2:48:82:90:6c:94:5d:7e:c5: 60:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:6C:4D:43:A1:0A:FF:BC:A4:F3:BD:A6:52:1F:AA:45:96:76:E5:CE X509v3 Authority Key Identifier: keyid:3E:73:B2:BE:13:03:7B:E7:44:39:1D:3A:89:9C:DD:20:2B:82:F7:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:83:64:40:b6:6b:99:9d:c2:00:00:70:e5:e6:53:cd:0a:5e: 96:95:00:0e:2b:78:15:08:f7:f9:88:ae:cf:5d:ef:5d:72:3b: ee:43:08:4a:f8:30:4a:3a:4d:cf:39:74:fb:f5:fd:b1:0e:62: 9b:b9:8d:97:02:f3:cc:ec:3e:e2:83:51:bc:34:36:1a:2f:e3: 67:94:12:62:d5:ca:b6:47:a8:93:a4:c3:c0:47:72:ee:10:c0: 6e:de:29:93:98:10:ec:f6:42:d5:d8:b2:21:77:9c:59:bb:f1: 93:07:13:b2:df:a4:a6:76:f9:4e:d3:38:1d:f7:d0:0b:0b:5b: 5e:7c:41:53:72:5b:6e:7b:fe:f6:6c:4b:f7:38:87:f3:85:f9: 88:e6:1c:71:4c:50:6e:02:a6:0f:97:6a:ca:4c:88:69:b1:b7: fb:51:ab:e1:ca:73:14:42:cb:6e:33:9b:bf:19:69:c3:f9:4e: 51:b3:61:ff:93:f9:c9:83:32:87:b8:32:e1:8a:71:fe:6d:dd: 65:4c:4b:67:0d:8c:14:f1:50:42:ad:f7:a8:30:9e:8f:4d:4d: 61:f8:0e:ac:13:56:13:c7:54:c0:09:23:0f:8b:7d:0d:01:ff: 14:cb:a7:9e:65:06:4b:78:5d:dc:01:cf:f9:e8:ec:2c:fb:4d: 60:06:bb:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBRowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVEMEMxMTAvBgNVBAUTKDNFNzNCMkJFMTMwMzdCRTc0NDM5MUQzQTg5OUNERDIw MkI4MkY3NkQwHhcNMjUxMTAyMjM0MDUwWhcNMjUxMTA5MjM0MDUwWjAYMRYwFAYD VQQDEw02OTA3ZWMwMy0yZDg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2KhVtZSFNvR5XIJFbseNoYlqFmcqcFSMLVEegJHS+lIORYTRJ8Ifz+tEY77H dwDUZGjvJeNHOA20jtTAQ8VDUJpEMVbEwySgeTxGcJobBaQK3PX8J8yo3xvpRfTD yIu3QXmcxihcmCnyhrnVJyt6ZBCx5fgcppw2bBHWKRBX6ZsxrNR1JyRF1nPZDPhY 0x7fq+9/DoLACEfJiZwlz736lbVC2YWii2ApSU5Ndw7y3H3SQmH6tlTvMOzrWeWj PtrSl5FFMj5WtUIcziFN+cc28Np4+YOagEq2wUE6DrbVThJ6IJms+V9V79vXHz4P j0uz7K889sbCSIKQbJRdfsVgwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPJsTUOh Cv+8pPO9plIfqkWWduXOMB8GA1UdIwQYMBaAFD5zsr4TA3vnRDkdOomc3SArgvdt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUQwQy84OTFCNEVDQTMy MzYxMUVDODk4Mzg3NTZDNEY5QUUwMi9Qbk95dmhNRGUtZEVPUjA2aVp6ZElDdUM5 MjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BuT3l2aE1EZS1kRU9SMDZpWnpkSUN1QzkyMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUQwQy84OTFCNEVDQTMyMzYxMUVDODk4Mzg3NTZDNEY5QUUwMi9Qbk95dmhNRGUt ZEVPUjA2aVp6ZElDdUM5MjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgg2RAtmuZncIAAHDl5lPNCl6WlQAOK3gVCPf5iK7PXe9dcjvuQwhK +DBKOk3POXT79f2xDmKbuY2XAvPM7D7ig1G8NDYaL+NnlBJi1cq2R6iTpMPAR3Lu EMBu3imTmBDs9kLV2LIhd5xZu/GTBxOy36SmdvlO0zgd99ALC1tefEFTcltue/72 bEv3OIfzhfmI5hxxTFBuAqYPl2rKTIhpsbf7UavhynMUQstuM5u/GWnD+U5Rs2H/ k/nJgzKHuDLhinH+bd1lTEtnDYwU8VBCrfeoMJ6PTU1h+A6sE1YTx1TACSMPi30N Af8Uy6eeZQZLeF3cAc/56Ows+01gBrvS -----END CERTIFICATE-----Generated at Tue Nov 4 12:34:49 2025 by rpki-client