$ rpki-client -vvf rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.mft File: mdb3fuCkNuVIfpjO5VK2S17GWxM.mft (raw, json) Hash identifier: XuvtBCaVoW08d20eEMPHgiwmi5Q19/wK8ENn04tQEtY= Subject key identifier: 3A:A7:55:C0:C5:05:75:73:B7:C2:DE:56:B9:D5:9A:EC:08:91:A1:29 Authority key identifier: 99:D6:F7:7E:E0:A4:36:E5:48:7E:98:CE:E5:52:B6:4B:5E:C6:5B:13 Certificate issuer: /CN=A912A799/serialNumber=99D6F77EE0A436E5487E98CEE552B64B5EC65B13 Certificate serial: 34CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mdb3fuCkNuVIfpjO5VK2S17GWxM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.mft Manifest number: 34CB Signing time: Mon 20 Oct 2025 15:18:31 +0000 Manifest this update: Mon 20 Oct 2025 15:18:30 +0000 Manifest next update: Mon 27 Oct 2025 15:18:30 +0000 Files and hashes: 1: mdb3fuCkNuVIfpjO5VK2S17GWxM.crl (hash: P29VJAAbkGsKcwvGzLblaZdBA7p71SANwMzP/RZOW+Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.crl rsync://rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mdb3fuCkNuVIfpjO5VK2S17GWxM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 15:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13516 (0x34cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A799, serialNumber=99D6F77EE0A436E5487E98CEE552B64B5EC65B13 Validity Not Before: Oct 20 15:18:30 2025 GMT Not After : Oct 27 15:18:30 2025 GMT Subject: CN=68f652c6-b99e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2d:eb:75:07:ea:ec:0a:c3:c4:cb:9b:b4:a5: c2:89:9c:08:89:7b:40:b5:c0:e7:12:20:c8:90:a8: 08:e0:f5:d3:45:dd:77:6d:94:52:8f:05:a7:b2:ad: f9:a5:98:ef:e6:e5:f9:9f:77:fe:d8:bd:e3:00:9f: eb:2a:a9:68:ec:47:80:10:83:b5:45:5c:82:32:88: 65:67:ba:f3:b8:96:60:b8:65:12:16:fe:73:6e:22: 05:30:64:2d:03:fe:49:04:af:74:f3:5c:be:39:8d: 99:c7:7c:69:0a:3f:f4:1e:34:a6:fe:b0:fc:e8:aa: 80:f8:1e:3a:71:2a:01:ed:71:fc:56:72:47:23:52: 2c:50:6b:31:64:78:83:58:34:0e:2d:dc:a1:d6:ec: 29:95:0a:9d:fb:94:41:5e:62:d8:85:b1:8d:46:10: 6b:2d:67:7e:b2:b1:4a:c2:13:34:3e:e2:d4:5a:9b: 3b:7e:c2:1f:ea:e7:a4:6c:78:73:bf:cd:cd:ac:16: 61:81:0d:81:ab:fd:e0:ff:37:8a:de:59:91:6e:38: d4:55:a2:24:19:8e:2f:68:11:a0:08:82:94:16:63: 60:2b:ba:9f:4c:3f:93:5f:7e:33:f7:c6:93:34:b2: 62:50:48:36:bb:91:7a:50:e4:5f:7d:3c:d5:28:99: 53:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:A7:55:C0:C5:05:75:73:B7:C2:DE:56:B9:D5:9A:EC:08:91:A1:29 X509v3 Authority Key Identifier: keyid:99:D6:F7:7E:E0:A4:36:E5:48:7E:98:CE:E5:52:B6:4B:5E:C6:5B:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mdb3fuCkNuVIfpjO5VK2S17GWxM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:25:63:c0:79:01:c5:98:08:58:c8:d6:c2:20:68:cb:73:10: a0:50:a3:cf:ac:60:1b:a4:ed:cc:04:be:9d:0a:32:41:18:20: 7c:ea:9b:28:d1:d8:5b:3a:40:e4:42:79:11:9a:40:59:7a:87: 57:a2:55:3a:6c:12:3c:b8:44:7a:f3:ae:99:7c:c2:e0:89:1f: ab:34:37:d4:6e:46:1f:ff:5d:28:b0:4b:4b:3b:0a:4a:d2:af: 20:a9:be:4d:91:1b:44:7f:e8:9c:90:a9:41:a2:96:68:5e:0e: 25:74:6e:53:d9:b8:a4:80:44:78:2c:c1:f2:13:6a:78:ba:1d: a5:f1:61:bb:43:41:28:d5:53:8c:aa:47:05:dd:28:fe:0b:d7: e2:92:ec:65:3b:aa:b3:43:7c:39:31:68:c3:e6:9d:1e:f6:14: f6:a9:a5:b9:51:a2:d8:8e:02:9c:af:87:23:ab:59:ab:94:8e: 9d:19:fc:ac:e2:13:02:5a:4f:f8:74:17:58:9e:37:73:2f:06: 83:26:c8:8e:b7:fa:1b:54:96:0b:12:4f:1f:5d:0a:21:eb:ec: 9d:b6:ea:50:a5:5b:e6:fd:36:ac:a3:8a:df:3c:73:fc:e4:89: 19:bf:ba:c6:fa:c4:18:60:9d:8e:e0:a2:68:8a:55:77:bd:1d: e1:92:c0:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE3OTkxMTAvBgNVBAUTKDk5RDZGNzdFRTBBNDM2RTU0ODdFOThDRUU1NTJCNjRC NUVDNjVCMTMwHhcNMjUxMDIwMTUxODMwWhcNMjUxMDI3MTUxODMwWjAYMRYwFAYD VQQDEw02OGY2NTJjNi1iOTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwC3rdQfq7ArDxMubtKXCiZwIiXtAtcDnEiDIkKgI4PXTRd13bZRSjwWnsq35 pZjv5uX5n3f+2L3jAJ/rKqlo7EeAEIO1RVyCMohlZ7rzuJZguGUSFv5zbiIFMGQt A/5JBK9081y+OY2Zx3xpCj/0HjSm/rD86KqA+B46cSoB7XH8VnJHI1IsUGsxZHiD WDQOLdyh1uwplQqd+5RBXmLYhbGNRhBrLWd+srFKwhM0PuLUWps7fsIf6uekbHhz v83NrBZhgQ2Bq/3g/zeK3lmRbjjUVaIkGY4vaBGgCIKUFmNgK7qfTD+TX34z98aT NLJiUEg2u5F6UORffTzVKJlTewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDqnVcDF BXVzt8LeVrnVmuwIkaEpMB8GA1UdIwQYMBaAFJnW937gpDblSH6YzuVStktexlsT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTc5OS8wREE5RjAyRTFE QTYxMUUyQjgyQjIzOUQwOEIwMkNEMi9tZGIzZnVDa051VklmcGpPNVZLMlMxN0dX eE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21kYjNmdUNrTnVWSWZwak81VksyUzE3R1d4TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTc5OS8wREE5RjAyRTFEQTYxMUUyQjgyQjIzOUQwOEIwMkNEMi9tZGIzZnVDa051 VklmcGpPNVZLMlMxN0dXeE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+JWPAeQHFmAhYyNbCIGjLcxCgUKPPrGAbpO3MBL6dCjJBGCB86pso 0dhbOkDkQnkRmkBZeodXolU6bBI8uER6866ZfMLgiR+rNDfUbkYf/10osEtLOwpK 0q8gqb5NkRtEf+ickKlBopZoXg4ldG5T2bikgER4LMHyE2p4uh2l8WG7Q0Eo1VOM qkcF3Sj+C9fikuxlO6qzQ3w5MWjD5p0e9hT2qaW5UaLYjgKcr4cjq1mrlI6dGfys 4hMCWk/4dBdYnjdzLwaDJsiOt/obVJYLEk8fXQoh6+ydtupQpVvm/Taso4rfPHP8 5IkZv7rG+sQYYJ2O4KJoilV3vR3hksAt -----END CERTIFICATE-----Generated at Mon Oct 20 17:54:53 2025 by rpki-client