$ rpki-client -vvf rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.mft File: d2KqgncCDQu1x1mX3l99ilFC3xQ.mft (raw, json) Hash identifier: xFUIAJf7AVNsYMGDujkvuhp1RKJ4e8U120ysRKl0NHI= Subject key identifier: EA:FC:8D:32:58:83:19:FD:A2:74:04:5A:15:45:91:55:D3:CC:10:B6 Authority key identifier: 77:62:AA:82:77:02:0D:0B:B5:C7:59:97:DE:5F:7D:8A:51:42:DF:14 Certificate issuer: /CN=A911FAC3/serialNumber=7762AA8277020D0BB5C75997DE5F7D8A5142DF14 Certificate serial: 13F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d2KqgncCDQu1x1mX3l99ilFC3xQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.mft Manifest number: 13D4 Signing time: Sat 18 Oct 2025 17:26:25 +0000 Manifest this update: Sat 18 Oct 2025 17:26:25 +0000 Manifest next update: Sat 25 Oct 2025 17:26:25 +0000 Files and hashes: 1: d2KqgncCDQu1x1mX3l99ilFC3xQ.crl (hash: JPrwsMutO8OK276jNFrVYDHSkpAVnAueqxzaNmHZQyQ=) 2: 337C9CE4314C11F0845D2C39C4F9AE02.roa (hash: 3xfhrQz5XfecI25n9SPWe9dh+MA3sbDb74Wk4gI1r2I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.crl rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d2KqgncCDQu1x1mX3l99ilFC3xQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:26:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5107 (0x13f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FAC3, serialNumber=7762AA8277020D0BB5C75997DE5F7D8A5142DF14 Validity Not Before: Oct 18 17:26:25 2025 GMT Not After : Oct 25 17:26:25 2025 GMT Subject: CN=68f3cdc1-2ca6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:5e:e2:d1:0b:c0:20:fd:6e:18:9d:66:d4:e2: 75:00:2f:bb:a5:15:3d:32:57:5d:c4:dd:92:2a:87: aa:d3:82:bd:e6:24:23:7d:3a:2f:41:68:64:67:8e: 20:64:3d:c5:a5:b6:1d:3e:18:8e:a8:e6:a6:3f:21: 58:e6:7c:bb:44:eb:a4:e0:45:b1:5e:31:2a:f5:09: db:5f:af:ca:e1:38:53:ad:8d:b9:19:7a:93:6f:6d: 5a:17:6a:c3:f2:5d:75:5b:a1:22:f0:ce:b4:b2:22: 21:29:de:8f:a4:59:a0:07:23:19:59:b5:f1:93:42: 83:7f:ff:b0:de:9e:b9:71:88:c8:c7:86:b7:43:c8: 9c:79:6f:03:91:0b:47:33:86:ac:2e:c1:3a:cb:66: 3e:f7:42:09:25:4c:83:fd:4f:07:04:3b:70:a7:d0: 48:2e:04:2f:dd:bc:9b:93:db:0a:30:c5:2c:e5:a7: a0:55:6d:4a:3a:83:2b:f2:be:cd:32:7d:54:ed:a8: 6d:9d:9d:b0:91:e6:ab:7e:6a:d5:21:b2:3e:d8:66: dd:23:3a:d2:13:fb:43:75:dc:aa:cc:11:55:77:08: 20:27:d5:ad:eb:0d:3c:f1:bc:d5:e4:90:d4:1b:5b: 4d:a2:4a:62:e3:89:bc:e3:4a:8c:32:8e:f5:aa:d2: 29:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:FC:8D:32:58:83:19:FD:A2:74:04:5A:15:45:91:55:D3:CC:10:B6 X509v3 Authority Key Identifier: keyid:77:62:AA:82:77:02:0D:0B:B5:C7:59:97:DE:5F:7D:8A:51:42:DF:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d2KqgncCDQu1x1mX3l99ilFC3xQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:4d:13:ea:20:c0:58:2d:a7:53:c6:e7:bd:39:a5:5e:84:7c: d7:3b:90:23:d9:8d:de:64:2c:55:2a:3b:8a:ad:25:a0:b7:98: 3c:d2:1a:5a:b5:d8:33:57:60:d2:16:c3:0d:48:02:31:a5:1f: 76:12:df:39:bc:38:6a:8e:96:85:4e:7e:f2:f9:30:fa:5c:a7: df:2b:2e:6d:ab:4f:c7:f7:1e:ca:8f:60:5d:a1:7e:bd:2d:2d: e0:b7:cb:0e:0a:68:83:dc:9a:a2:6e:49:13:9c:f4:23:08:2c: 44:f0:c8:bf:f8:89:8f:65:89:c3:8a:48:2a:6d:39:63:1f:62: 65:58:ec:5b:b3:d5:fb:50:35:d0:15:a2:63:d4:57:44:a9:a8: 1c:c5:38:82:e4:6d:ac:39:c1:ae:09:4a:38:d7:42:fc:ff:73: 6e:1b:09:bd:f8:40:3a:77:3e:19:64:af:00:2b:65:31:ac:5b: 06:c4:40:3d:fa:8b:e8:8e:02:44:60:3c:0a:40:da:5c:57:c4: 1b:68:04:7c:39:b2:58:be:5b:d5:db:d1:85:7d:bc:0c:a6:7a: b1:f9:19:b4:83:41:1b:96:b5:40:b6:94:45:1e:5d:46:fd:85: ee:3c:24:ff:80:1e:2f:61:7a:e9:ae:b1:90:fb:5e:80:3a:5f: fb:aa:62:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE/MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZBQzMxMTAvBgNVBAUTKDc3NjJBQTgyNzcwMjBEMEJCNUM3NTk5N0RFNUY3RDhB NTE0MkRGMTQwHhcNMjUxMDE4MTcyNjI1WhcNMjUxMDI1MTcyNjI1WjAYMRYwFAYD VQQDEw02OGYzY2RjMS0yY2E2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA017i0QvAIP1uGJ1m1OJ1AC+7pRU9MlddxN2SKoeq04K95iQjfTovQWhkZ44g ZD3FpbYdPhiOqOamPyFY5ny7ROuk4EWxXjEq9QnbX6/K4ThTrY25GXqTb21aF2rD 8l11W6Ei8M60siIhKd6PpFmgByMZWbXxk0KDf/+w3p65cYjIx4a3Q8iceW8DkQtH M4asLsE6y2Y+90IJJUyD/U8HBDtwp9BILgQv3bybk9sKMMUs5aegVW1KOoMr8r7N Mn1U7ahtnZ2wkearfmrVIbI+2GbdIzrSE/tDddyqzBFVdwggJ9Wt6w088bzV5JDU G1tNokpi44m840qMMo71qtIppwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOr8jTJY gxn9onQEWhVFkVXTzBC2MB8GA1UdIwQYMBaAFHdiqoJ3Ag0LtcdZl95ffYpRQt8U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkFDMy83Qjg2OEMwODlE RjUxMUU4OTU3QUI0MTZDNEY5QUUwMi9kMktxZ25jQ0RRdTF4MW1YM2w5OWlsRkMz eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QyS3FnbmNDRFF1MXgxbVgzbDk5aWxGQzN4US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkFDMy83Qjg2OEMwODlERjUxMUU4OTU3QUI0MTZDNEY5QUUwMi9kMktxZ25jQ0RR dTF4MW1YM2w5OWlsRkMzeFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhTRPqIMBYLadTxue9OaVehHzXO5Aj2Y3eZCxVKjuKrSWgt5g80hpa tdgzV2DSFsMNSAIxpR92Et85vDhqjpaFTn7y+TD6XKffKy5tq0/H9x7Kj2BdoX69 LS3gt8sOCmiD3JqibkkTnPQjCCxE8Mi/+ImPZYnDikgqbTljH2JlWOxbs9X7UDXQ FaJj1FdEqagcxTiC5G2sOcGuCUo410L8/3NuGwm9+EA6dz4ZZK8AK2UxrFsGxEA9 +ovojgJEYDwKQNpcV8QbaAR8ObJYvlvV29GFfbwMpnqx+Rm0g0EblrVAtpRFHl1G /YXuPCT/gB4vYXrprrGQ+16AOl/7qmKP -----END CERTIFICATE-----Generated at Mon Oct 20 12:45:01 2025 by rpki-client