$ rpki-client -vvf rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.mft File: 3JAYFdyRlzyvoZqLV2-GjphBPjk.mft (raw, json) Hash identifier: Ln74rpf/9cJIkXXGFqClqeogGoMlavMnhz1P/aC6jCg= Subject key identifier: 5B:32:59:F7:05:E4:63:6B:90:4E:BB:B9:8D:5B:75:98:FD:DD:C0:5B Authority key identifier: DC:90:18:15:DC:91:97:3C:AF:A1:9A:8B:57:6F:86:8E:98:41:3E:39 Certificate issuer: /CN=A91168B5/serialNumber=DC901815DC91973CAFA19A8B576F868E98413E39 Certificate serial: 1C17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3JAYFdyRlzyvoZqLV2-GjphBPjk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.mft Manifest number: 1C17 Signing time: Sat 18 Oct 2025 16:31:38 +0000 Manifest this update: Sat 18 Oct 2025 16:31:37 +0000 Manifest next update: Sat 25 Oct 2025 16:31:37 +0000 Files and hashes: 1: 3JAYFdyRlzyvoZqLV2-GjphBPjk.crl (hash: EgSpl6fEf+UicYLnkUGG/mNqbqRnOlXQPeKwErU5ZPs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.crl rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3JAYFdyRlzyvoZqLV2-GjphBPjk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:31:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7191 (0x1c17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91168B5, serialNumber=DC901815DC91973CAFA19A8B576F868E98413E39 Validity Not Before: Oct 18 16:31:37 2025 GMT Not After : Oct 25 16:31:37 2025 GMT Subject: CN=68f3c0ea-62ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b9:b7:3c:e6:08:0d:16:98:fd:08:19:de:0a: de:38:8c:1e:f3:c0:9d:c2:a0:0e:ff:df:f8:ad:96: 63:42:89:21:a9:5b:63:ac:bd:a2:6f:c5:5a:e9:cd: b6:52:7d:23:8f:2d:15:47:81:a7:eb:65:fe:7b:a1: 0a:50:c9:be:66:e2:b5:b7:51:7f:e3:5d:15:c6:72: 0e:84:8b:88:1e:5e:8f:19:b7:18:0b:8b:49:64:d9: b3:01:0f:70:55:b2:0c:2f:41:40:75:42:23:c5:a2: bc:47:db:87:84:95:6c:38:08:cd:bb:08:ac:c4:0d: f8:a0:3e:fe:26:b7:46:25:b0:60:8b:89:34:4b:20: b1:9d:34:37:fa:aa:4e:98:c3:71:a6:d5:1d:47:af: 2c:e8:40:6f:e0:ab:23:df:f3:8b:0d:8f:e3:af:86: 8a:f4:b0:23:a3:53:e3:3b:ee:86:aa:ba:75:f5:8e: e3:cc:a6:14:21:31:3e:9c:de:05:58:cf:c9:0e:91: 4b:93:13:00:78:c8:14:e0:60:0e:60:5e:40:aa:6c: ae:02:0e:8d:85:32:ef:69:82:7c:9a:40:b7:dd:13: 11:c6:90:e2:49:f9:da:24:fc:53:df:d9:00:b7:4c: 70:40:c1:4e:a9:74:0c:48:c5:d7:55:72:53:ac:d0: 64:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:32:59:F7:05:E4:63:6B:90:4E:BB:B9:8D:5B:75:98:FD:DD:C0:5B X509v3 Authority Key Identifier: keyid:DC:90:18:15:DC:91:97:3C:AF:A1:9A:8B:57:6F:86:8E:98:41:3E:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3JAYFdyRlzyvoZqLV2-GjphBPjk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:40:f2:f8:01:d8:84:ca:87:00:86:6a:8a:ab:56:b2:ee:33: bb:37:20:24:0c:76:1b:70:bd:8a:68:54:0d:6d:ef:a3:43:44: e3:b9:8f:e2:2f:a6:26:53:0e:ec:be:08:bb:62:0b:28:8b:1f: 0e:60:a8:25:56:22:76:63:ec:fa:12:35:59:bb:94:61:4a:95: db:ee:ba:67:99:f1:25:b1:56:d5:6c:9e:b0:f5:5e:a2:18:69: 2b:25:85:0d:6d:00:ea:9f:c4:b8:8c:62:f6:fb:38:1c:26:b7: 55:76:bd:c1:dd:0d:25:3e:12:89:3a:f3:26:fe:b9:62:3f:aa: 09:e4:78:93:30:ee:84:97:3d:68:95:41:49:89:34:b4:53:fe: 7b:c7:c8:8a:da:37:3b:2c:d7:2a:f6:97:d3:58:7a:29:eb:5b: 83:e3:4f:c4:ac:38:95:8b:18:d8:20:47:92:ae:29:22:b1:37: ef:98:57:cf:2e:87:fb:e9:b8:95:6f:13:c8:ec:9d:27:55:1f: 32:83:50:6b:3d:92:ee:7b:86:06:72:13:92:38:cf:41:04:df: 80:83:4c:9b:82:f3:d2:ad:c8:a7:40:64:24:ff:0c:6e:e5:9b: 4c:67:da:ab:5e:14:4f:36:9f:34:b8:bb:67:00:0f:d2:5d:b1: 10:ca:b3:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHBcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY4QjUxMTAvBgNVBAUTKERDOTAxODE1REM5MTk3M0NBRkExOUE4QjU3NkY4NjhF OTg0MTNFMzkwHhcNMjUxMDE4MTYzMTM3WhcNMjUxMDI1MTYzMTM3WjAYMRYwFAYD VQQDEw02OGYzYzBlYS02MmJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtrm3POYIDRaY/QgZ3greOIwe88CdwqAO/9/4rZZjQokhqVtjrL2ib8Va6c22 Un0jjy0VR4Gn62X+e6EKUMm+ZuK1t1F/410VxnIOhIuIHl6PGbcYC4tJZNmzAQ9w VbIML0FAdUIjxaK8R9uHhJVsOAjNuwisxA34oD7+JrdGJbBgi4k0SyCxnTQ3+qpO mMNxptUdR68s6EBv4Ksj3/OLDY/jr4aK9LAjo1PjO+6Gqrp19Y7jzKYUITE+nN4F WM/JDpFLkxMAeMgU4GAOYF5AqmyuAg6NhTLvaYJ8mkC33RMRxpDiSfnaJPxT39kA t0xwQMFOqXQMSMXXVXJTrNBkawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFsyWfcF 5GNrkE67uY1bdZj93cBbMB8GA1UdIwQYMBaAFNyQGBXckZc8r6Gai1dvho6YQT45 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjhCNS8zMkM2NTY4Q0Y2 RTAxMUU2OTJBMjBCODdDNEY5QUUwMi8zSkFZRmR5Umx6eXZvWnFMVjItR2pwaEJQ amsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNKQVlGZHlSbHp5dm9acUxWMi1HanBoQlBqay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjhCNS8zMkM2NTY4Q0Y2RTAxMUU2OTJBMjBCODdDNEY5QUUwMi8zSkFZRmR5Umx6 eXZvWnFMVjItR2pwaEJQamsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNQPL4AdiEyocAhmqKq1ay7jO7NyAkDHYbcL2KaFQNbe+jQ0TjuY/i L6YmUw7svgi7Ygsoix8OYKglViJ2Y+z6EjVZu5RhSpXb7rpnmfElsVbVbJ6w9V6i GGkrJYUNbQDqn8S4jGL2+zgcJrdVdr3B3Q0lPhKJOvMm/rliP6oJ5HiTMO6Elz1o lUFJiTS0U/57x8iK2jc7LNcq9pfTWHop61uD40/ErDiVixjYIEeSrikisTfvmFfP Lof76biVbxPI7J0nVR8yg1BrPZLue4YGchOSOM9BBN+Ag0ybgvPSrcinQGQk/wxu 5ZtMZ9qrXhRPNp80uLtnAA/SXbEQyrOC -----END CERTIFICATE-----Generated at Mon Oct 20 13:44:46 2025 by rpki-client