$ rpki-client -vvf rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft File: 3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft (raw, json) Hash identifier: caRxpHM2iDMmx+ueRjCxsw7oeJyKn26C1BWmGaNjMoE= Subject key identifier: 90:57:BF:2B:E7:AC:EC:52:F1:2F:A2:DE:A1:10:0E:A0:AD:AC:91:F5 Authority key identifier: DC:21:B9:02:9E:AC:07:90:87:8F:AC:A7:CA:81:3B:4B:3A:ED:C9:0E Certificate issuer: /CN=A9116351/serialNumber=DC21B9029EAC0790878FACA7CA813B4B3AEDC90E Certificate serial: 01AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft Manifest number: 01A9 Signing time: Sun 19 Oct 2025 05:45:35 +0000 Manifest this update: Sun 19 Oct 2025 05:45:34 +0000 Manifest next update: Sun 26 Oct 2025 05:45:34 +0000 Files and hashes: 1: 3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.crl (hash: R3vNKoyWrmyS5j/HcEgrtng2ey6JB/kU43n8IUhTH4Q=) 2: 602678F8252A11EEA290E91FC4F9AE02.roa (hash: 9qj5nS2jHu6HnjeglTS9hUbn0VPzT6niooBC/rePBvA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.crl rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:45:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 429 (0x1ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116351, serialNumber=DC21B9029EAC0790878FACA7CA813B4B3AEDC90E Validity Not Before: Oct 19 05:45:34 2025 GMT Not After : Oct 26 05:45:34 2025 GMT Subject: CN=68f47aff-83de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:28:4f:4d:83:3a:93:f6:80:33:4d:67:82:07: 08:e1:ee:ad:9c:6e:13:db:2b:f4:6c:1c:b2:13:b5: 65:c5:b3:a3:6d:1d:eb:f0:28:f4:78:ed:f7:28:0e: 0c:d5:b6:77:ac:cd:1c:30:17:a2:53:e0:02:a1:4a: 68:d1:a4:39:da:0b:83:c2:1f:eb:f7:fe:07:62:7b: 30:4c:92:86:56:81:7e:f8:74:55:c5:0a:e1:bb:44: 97:a2:99:c7:2f:6c:ab:36:02:44:71:b6:8e:3b:cc: ca:36:c0:85:33:16:0a:54:42:a0:2b:8d:fb:d8:45: ba:20:e2:40:a7:01:de:8a:d7:d2:07:b3:90:f8:bd: ba:43:89:f4:cd:7e:93:80:c1:f4:56:1b:74:69:57: 9c:b2:34:ac:ac:07:2f:50:a6:95:e3:d9:4d:ee:8f: 2e:be:dc:6d:fa:10:64:dd:1e:3e:e3:a2:8a:cf:04: 20:89:ba:67:8f:fb:a0:bb:be:dc:d5:d0:ba:0d:36: 7f:69:29:6e:57:a4:17:42:bd:7b:a9:51:ca:c9:ca: b5:93:e5:1a:2d:66:cc:42:e6:39:17:15:40:4c:5e: b0:56:21:3c:a2:b3:03:74:ca:2f:b6:d1:2e:13:99: a2:e4:ea:51:05:d5:49:0a:22:2c:ee:af:df:68:da: 5a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:57:BF:2B:E7:AC:EC:52:F1:2F:A2:DE:A1:10:0E:A0:AD:AC:91:F5 X509v3 Authority Key Identifier: keyid:DC:21:B9:02:9E:AC:07:90:87:8F:AC:A7:CA:81:3B:4B:3A:ED:C9:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:67:70:41:23:2e:85:d1:50:48:48:1e:2b:b8:f2:24:b9:bb: ae:e0:ee:dc:19:12:7c:7e:3f:5b:c0:e3:fd:fc:92:6f:92:ec: 6a:8e:f8:d2:8e:41:2a:f5:19:f2:42:87:4b:dc:51:71:55:c6: 29:cd:07:a6:55:c7:6b:c9:09:3b:4b:49:1a:c7:34:c9:95:7d: 09:29:aa:e0:81:63:c2:98:72:c8:74:3f:27:03:c3:41:7f:7a: f2:75:12:59:48:d7:ab:c5:d1:83:db:39:c5:a9:d9:97:0a:df: 8b:6b:1f:d6:3f:24:fd:95:44:4a:c3:5d:00:f6:5d:0a:08:01: 7b:9e:41:3b:86:17:0c:2a:0b:ba:80:9a:ef:3e:8d:c9:b1:dd: 49:1c:f8:a8:8c:0d:8b:09:ae:f7:8f:2b:b6:26:75:eb:5b:f4: b4:40:64:57:2a:fa:fc:5a:ce:a0:67:01:ec:3a:51:0d:59:c8: 77:9a:cd:9f:a2:3f:ca:7d:e1:90:4f:c2:f8:1b:3a:11:05:a7: 07:ab:7f:f3:81:c9:b4:bb:d3:b5:3c:e4:c9:51:50:06:0c:fe: 6b:2d:ea:c8:74:52:1e:7b:f5:32:ff:b4:9c:61:a5:73:03:29: 7b:e1:37:7a:2f:dd:0f:4f:57:6d:9d:62:ab:df:3a:aa:47:d4: bd:e9:66:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTYzNTExMTAvBgNVBAUTKERDMjFCOTAyOUVBQzA3OTA4NzhGQUNBN0NBODEzQjRC M0FFREM5MEUwHhcNMjUxMDE5MDU0NTM0WhcNMjUxMDI2MDU0NTM0WjAYMRYwFAYD VQQDEw02OGY0N2FmZi04M2RlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwChPTYM6k/aAM01nggcI4e6tnG4T2yv0bByyE7VlxbOjbR3r8Cj0eO33KA4M 1bZ3rM0cMBeiU+ACoUpo0aQ52guDwh/r9/4HYnswTJKGVoF++HRVxQrhu0SXopnH L2yrNgJEcbaOO8zKNsCFMxYKVEKgK4372EW6IOJApwHeitfSB7OQ+L26Q4n0zX6T gMH0Vht0aVecsjSsrAcvUKaV49lN7o8uvtxt+hBk3R4+46KKzwQgibpnj/ugu77c 1dC6DTZ/aSluV6QXQr17qVHKycq1k+UaLWbMQuY5FxVATF6wViE8orMDdMovttEu E5mi5OpRBdVJCiIs7q/faNpaywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJBXvyvn rOxS8S+i3qEQDqCtrJH1MB8GA1UdIwQYMBaAFNwhuQKerAeQh4+sp8qBO0s67ckO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjM1MS9DOEE4RDk3NjI1 MjkxMUVFOTM5RkMzMUVDNEY5QUUwMi8zQ0c1QXA2c0I1Q0hqNnlueW9FN1N6cnR5 UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNDRzVBcDZzQjVDSGo2eW55b0U3U3pydHlRNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjM1MS9DOEE4RDk3NjI1MjkxMUVFOTM5RkMzMUVDNEY5QUUwMi8zQ0c1QXA2c0I1 Q0hqNnlueW9FN1N6cnR5UTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMZ3BBIy6F0VBISB4ruPIkubuu4O7cGRJ8fj9bwOP9/JJvkuxqjvjS jkEq9RnyQodL3FFxVcYpzQemVcdryQk7S0kaxzTJlX0JKarggWPCmHLIdD8nA8NB f3rydRJZSNerxdGD2znFqdmXCt+Lax/WPyT9lURKw10A9l0KCAF7nkE7hhcMKgu6 gJrvPo3Jsd1JHPiojA2LCa73jyu2JnXrW/S0QGRXKvr8Ws6gZwHsOlENWch3ms2f oj/KfeGQT8L4GzoRBacHq3/zgcm0u9O1POTJUVAGDP5rLerIdFIee/Uy/7ScYaVz Ayl74Td6L90PT1dtnWKr3zqqR9S96Wbw -----END CERTIFICATE-----Generated at Mon Oct 20 14:41:43 2025 by rpki-client