$ rpki-client -vvf rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.mft File: 3WHCKpWyjv3jeDEqdZ-sr-5AbBg.mft (raw, json) Hash identifier: TVBEnk4+2jUHJweYJSImt+1qF97oNiPJu3Sv1OpV0Ek= Subject key identifier: EF:D9:1A:3A:1F:FF:AF:CA:94:52:68:5B:5B:53:1D:74:37:75:C3:99 Authority key identifier: DD:61:C2:2A:95:B2:8E:FD:E3:78:31:2A:75:9F:AC:AF:EE:40:6C:18 Certificate issuer: /CN=A912918B/serialNumber=DD61C22A95B28EFDE378312A759FACAFEE406C18 Certificate serial: 0853 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.mft Manifest number: 083A Signing time: Sat 18 Oct 2025 22:01:37 +0000 Manifest this update: Sat 18 Oct 2025 22:01:36 +0000 Manifest next update: Sat 25 Oct 2025 22:01:36 +0000 Files and hashes: 1: 3WHCKpWyjv3jeDEqdZ-sr-5AbBg.crl (hash: VvoK0Tl9dC+LClM4Q51Pz2ElMAGqeaMvZW3TV64w6kY=) 2: E54ED53A8D7311F0B0F9AE62C4F9AE02.roa (hash: TsqETkD2u8/g/tvy6c4rcdVrAda/jhvYOMUCzR3OzIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.crl rsync://rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2131 (0x853) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912918B, serialNumber=DD61C22A95B28EFDE378312A759FACAFEE406C18 Validity Not Before: Oct 18 22:01:36 2025 GMT Not After : Oct 25 22:01:36 2025 GMT Subject: CN=68f40e41-4109 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:2e:59:05:81:8b:f0:c3:6f:77:af:ba:6e:ee: cd:a4:dc:d5:ec:cb:98:19:71:16:1a:67:10:1e:4c: cb:a0:db:a5:51:e6:53:72:6c:54:d8:20:d7:8b:59: 22:29:18:70:d4:58:b0:f9:f9:30:29:04:a8:4f:fe: 3c:d1:c4:f4:39:f6:70:bc:30:55:49:bf:4d:6b:7d: 28:f5:8d:33:8e:d3:6f:4b:f6:3e:35:cd:24:68:a8: 83:a4:9e:4c:0d:8e:1f:e0:c4:76:aa:47:1b:a2:db: 14:c0:2f:af:77:b1:3d:e4:6e:85:5c:cf:94:cb:69: 0e:b5:93:a6:4c:a0:f8:eb:83:98:1f:34:6e:03:46: 42:1c:b4:16:3a:71:cb:b0:e1:2b:2f:af:ca:c0:0c: 84:ab:6a:cb:81:e6:9d:0b:18:b1:95:14:81:e7:d9: 67:0b:c3:d1:99:87:5a:40:8e:20:ea:d4:8e:0b:52: 13:56:ce:b8:45:ae:b9:e3:e4:dc:62:ab:a6:36:79: 77:db:f6:21:de:08:a6:8e:69:84:f5:51:a9:df:cd: a5:2e:7e:bf:53:6a:19:c0:6a:ca:5e:3b:31:18:eb: ef:7f:61:be:be:a0:d3:a6:d7:df:ff:85:d9:b5:29: 92:88:e9:09:20:af:0f:40:95:b4:19:8c:05:7c:f8: 10:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:D9:1A:3A:1F:FF:AF:CA:94:52:68:5B:5B:53:1D:74:37:75:C3:99 X509v3 Authority Key Identifier: keyid:DD:61:C2:2A:95:B2:8E:FD:E3:78:31:2A:75:9F:AC:AF:EE:40:6C:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:e5:bf:09:c1:c8:9a:0e:5d:82:07:74:25:9b:b7:f9:de:cf: ea:50:62:32:43:f6:94:89:06:5c:46:f4:78:82:c8:b8:50:44: 3f:b0:50:de:36:11:a8:fe:08:40:1e:90:56:22:c9:00:9c:06: af:ec:17:44:3d:a1:43:80:5a:9a:23:de:56:c8:3b:f6:9c:04: f5:bb:59:38:60:32:cb:30:98:10:96:7f:b7:01:30:71:75:2f: ce:43:12:43:c4:51:69:89:77:39:d2:22:ac:d4:d3:2e:a4:78: 17:79:f2:75:9a:03:9a:fc:cc:5b:f8:b4:58:b9:84:2a:ae:d2: 14:fa:ae:43:d0:28:05:96:fe:41:ef:f8:6a:65:c6:4a:71:6d: ee:e3:a6:6c:9d:8c:78:53:42:f9:da:50:9d:0d:08:66:c0:d7: f2:24:63:13:cf:68:87:99:01:bc:c3:91:38:2e:44:cc:87:56: 8d:3c:59:12:ab:4d:b1:d9:5b:3c:80:51:85:90:15:19:8a:be: 35:2f:b5:81:ca:5c:34:0d:23:bd:dd:d6:c5:64:2e:98:15:4d: 61:d7:bd:d5:35:3c:d6:0a:39:7b:63:5d:a2:fa:f2:3f:ae:12: 82:3d:0a:7f:e3:af:a7:77:b3:9c:21:a7:90:25:a4:d7:38:81: cd:ec:59:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjkxOEIxMTAvBgNVBAUTKERENjFDMjJBOTVCMjhFRkRFMzc4MzEyQTc1OUZBQ0FG RUU0MDZDMTgwHhcNMjUxMDE4MjIwMTM2WhcNMjUxMDI1MjIwMTM2WjAYMRYwFAYD VQQDEw02OGY0MGU0MS00MTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzy5ZBYGL8MNvd6+6bu7NpNzV7MuYGXEWGmcQHkzLoNulUeZTcmxU2CDXi1ki KRhw1Fiw+fkwKQSoT/480cT0OfZwvDBVSb9Na30o9Y0zjtNvS/Y+Nc0kaKiDpJ5M DY4f4MR2qkcbotsUwC+vd7E95G6FXM+Uy2kOtZOmTKD464OYHzRuA0ZCHLQWOnHL sOErL6/KwAyEq2rLgeadCxixlRSB59lnC8PRmYdaQI4g6tSOC1ITVs64Ra654+Tc YqumNnl32/Yh3gimjmmE9VGp382lLn6/U2oZwGrKXjsxGOvvf2G+vqDTptff/4XZ tSmSiOkJIK8PQJW0GYwFfPgQswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO/ZGjof /6/KlFJoW1tTHXQ3dcOZMB8GA1UdIwQYMBaAFN1hwiqVso7943gxKnWfrK/uQGwY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTE4Qi83RTBDRUVGQUVF QjUxMUVBQUE0RkFEMzJDNEY5QUUwMi8zV0hDS3BXeWp2M2plREVxZFotc3ItNUFi QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNXSENLcFd5anYzamVERXFkWi1zci01QWJCZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTE4Qi83RTBDRUVGQUVFQjUxMUVBQUE0RkFEMzJDNEY5QUUwMi8zV0hDS3BXeWp2 M2plREVxZFotc3ItNUFiQmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAA5b8JwciaDl2CB3Qlm7f53s/qUGIyQ/aUiQZcRvR4gsi4UEQ/sFDe NhGo/ghAHpBWIskAnAav7BdEPaFDgFqaI95WyDv2nAT1u1k4YDLLMJgQln+3ATBx dS/OQxJDxFFpiXc50iKs1NMupHgXefJ1mgOa/Mxb+LRYuYQqrtIU+q5D0CgFlv5B 7/hqZcZKcW3u46ZsnYx4U0L52lCdDQhmwNfyJGMTz2iHmQG8w5E4LkTMh1aNPFkS q02x2Vs8gFGFkBUZir41L7WBylw0DSO93dbFZC6YFU1h173VNTzWCjl7Y12i+vI/ rhKCPQp/46+nd7OcIaeQJaTXOIHN7FkB -----END CERTIFICATE-----Generated at Mon Oct 20 09:35:34 2025 by rpki-client