$ rpki-client -vvf rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.mft File: _3X-k_hGLLdjrVYZkrA9Fj0W7V8.mft (raw, json) Hash identifier: 58EcBiEfeK/Km+eEOjZ+sb79J75wRz/ANpyJaNYvTw4= Subject key identifier: E1:95:DE:D1:60:45:75:B4:99:43:E4:92:BA:12:0D:F8:47:BF:E2:1D Authority key identifier: FF:75:FE:93:F8:46:2C:B7:63:AD:56:19:92:B0:3D:16:3D:16:ED:5F Certificate issuer: /CN=A911B11E/serialNumber=FF75FE93F8462CB763AD561992B03D163D16ED5F Certificate serial: 0543 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.mft Manifest number: 053D Signing time: Sun 19 Oct 2025 01:12:56 +0000 Manifest this update: Sun 19 Oct 2025 01:12:56 +0000 Manifest next update: Sun 26 Oct 2025 01:12:56 +0000 Files and hashes: 1: _3X-k_hGLLdjrVYZkrA9Fj0W7V8.crl (hash: 6bF4GSmISJjY+Cx5cstJTqpm+1GSq3K3Wb/R7Z5DVdQ=) 2: 22DA1C02131B11EC83377D59C4F9AE02.roa (hash: Xe+ld1uOyTTINEu5qOXliS5+W9Wqwt4es/Y7VM8UtHc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.crl rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:12:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1347 (0x543) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B11E, serialNumber=FF75FE93F8462CB763AD561992B03D163D16ED5F Validity Not Before: Oct 19 01:12:56 2025 GMT Not After : Oct 26 01:12:56 2025 GMT Subject: CN=68f43b18-4d92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:33:ac:56:f8:b8:3e:ce:f1:10:b5:5d:c8:df: 9d:81:e4:d1:aa:87:63:80:67:df:34:40:4c:b8:35: 99:fa:d3:5b:a3:12:27:dd:6e:86:91:4d:88:e3:a5: 0a:fa:65:1f:a6:f2:99:49:76:90:ae:34:8b:d5:e2: f0:25:8d:76:2c:6b:bc:6d:77:1f:fe:d5:54:7a:fe: f0:95:b9:11:9f:7f:a5:f6:5e:61:cd:c3:08:38:37: 42:c0:bb:da:b1:13:1a:dc:f7:a8:d1:d8:b6:7a:71: 13:e5:3f:cf:59:7e:9b:8b:71:60:63:64:0f:f0:75: 48:d3:c0:ca:1c:7f:6e:ed:1e:be:84:f8:cf:96:92: 9b:cf:ca:70:25:b0:ef:63:74:46:a9:a8:0c:db:97: 7f:8a:ee:50:f1:b2:24:58:0c:b5:ec:3a:cf:cc:4b: 62:3a:ed:20:fe:73:96:e4:05:5c:08:82:76:6a:d6: 83:2e:7e:62:81:b9:38:6d:6f:0d:23:c8:0b:6f:64: dd:62:85:00:32:a0:76:ef:7e:2a:1d:f8:3c:0c:53: 76:9d:da:16:f1:fd:d7:5d:55:8d:bd:94:19:da:a0: 72:14:3a:07:e9:29:69:0c:cc:82:89:6f:fe:4b:ec: 53:9d:93:b0:dc:4b:0c:32:d2:14:ba:89:cf:d0:91: 90:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:95:DE:D1:60:45:75:B4:99:43:E4:92:BA:12:0D:F8:47:BF:E2:1D X509v3 Authority Key Identifier: keyid:FF:75:FE:93:F8:46:2C:B7:63:AD:56:19:92:B0:3D:16:3D:16:ED:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:71:df:7d:bb:2a:99:6d:57:4c:ef:6e:5c:60:d4:12:25:47: f0:9a:db:ea:f7:cf:d4:83:94:b8:28:81:50:21:de:dc:be:b8: 2f:58:a1:04:cc:c5:cf:8e:29:b0:10:c9:0c:6e:3d:c4:fd:60: 0c:a2:0a:e9:f5:3f:ff:38:5f:4f:ab:8d:95:97:b0:21:4c:f0: 13:a0:3a:92:8a:53:97:09:a5:69:1e:cc:ed:88:e3:7a:df:ea: 89:73:32:bf:bb:d8:1e:1d:74:d4:b9:49:ad:d1:4e:a6:c4:6d: e6:bf:18:19:a4:c3:3d:d1:ce:ff:28:63:2b:d0:a3:dc:3c:90: b1:2a:e4:aa:ce:e4:cc:12:39:4b:02:18:3e:36:e4:cb:6f:cd: 68:9d:29:76:98:1d:bd:31:b2:8f:b1:85:56:de:0b:e4:22:0a: c2:13:4b:fc:a5:59:28:fc:ba:86:4a:d9:98:ee:c8:cb:c4:d6: c4:36:d9:be:1f:12:07:c8:93:e9:42:80:b3:20:00:94:02:3b: 0a:e3:d2:92:b5:f7:66:f4:84:72:13:3a:18:b7:35:cb:49:36: 77:15:be:c4:7b:99:a2:8a:0e:25:ea:f6:32:3a:cd:fe:e2:0a: e0:7b:3e:bb:2d:34:d6:81:df:1f:41:0d:74:0d:a4:23:87:67: e3:64:4d:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUIxMUUxMTAvBgNVBAUTKEZGNzVGRTkzRjg0NjJDQjc2M0FENTYxOTkyQjAzRDE2 M0QxNkVENUYwHhcNMjUxMDE5MDExMjU2WhcNMjUxMDI2MDExMjU2WjAYMRYwFAYD VQQDEw02OGY0M2IxOC00ZDkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7zOsVvi4Ps7xELVdyN+dgeTRqodjgGffNEBMuDWZ+tNboxIn3W6GkU2I46UK +mUfpvKZSXaQrjSL1eLwJY12LGu8bXcf/tVUev7wlbkRn3+l9l5hzcMIODdCwLva sRMa3Peo0di2enET5T/PWX6bi3FgY2QP8HVI08DKHH9u7R6+hPjPlpKbz8pwJbDv Y3RGqagM25d/iu5Q8bIkWAy17DrPzEtiOu0g/nOW5AVcCIJ2ataDLn5igbk4bW8N I8gLb2TdYoUAMqB2734qHfg8DFN2ndoW8f3XXVWNvZQZ2qByFDoH6SlpDMyCiW/+ S+xTnZOw3EsMMtIUuonP0JGQlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOGV3tFg RXW0mUPkkroSDfhHv+IdMB8GA1UdIwQYMBaAFP91/pP4Riy3Y61WGZKwPRY9Fu1f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjExRS8wNkFGMUZCMjEz MTgxMUVDQTE3MzQzNTZDNEY5QUUwMi9fM1gta19oR0xMZGpyVllaa3JBOUZqMFc3 VjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18zWC1rX2hHTExkanJWWVprckE5RmowVzdWOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjExRS8wNkFGMUZCMjEzMTgxMUVDQTE3MzQzNTZDNEY5QUUwMi9fM1gta19oR0xM ZGpyVllaa3JBOUZqMFc3VjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALcd99uyqZbVdM725cYNQSJUfwmtvq98/Ug5S4KIFQId7cvrgvWKEE zMXPjimwEMkMbj3E/WAMogrp9T//OF9Pq42Vl7AhTPAToDqSilOXCaVpHsztiON6 3+qJczK/u9geHXTUuUmt0U6mxG3mvxgZpMM90c7/KGMr0KPcPJCxKuSqzuTMEjlL Ahg+NuTLb81onSl2mB29MbKPsYVW3gvkIgrCE0v8pVko/LqGStmY7sjLxNbENtm+ HxIHyJPpQoCzIACUAjsK49KStfdm9IRyEzoYtzXLSTZ3Fb7Ee5miig4l6vYyOs3+ 4grgez67LTTWgd8fQQ10DaQjh2fjZE28 -----END CERTIFICATE-----Generated at Mon Oct 20 16:12:46 2025 by rpki-client