$ rpki-client -vvf rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.mft File: 3Fys5yJTQlYHBjKHYfkTyTZJius.mft (raw, json) Hash identifier: vt5jhuobir+mpycGq98GCbxpBZ/YoXYFYpN+nIz/znc= Subject key identifier: BA:1B:8F:9A:4C:C6:BB:91:12:63:A3:5D:54:F0:A1:72:1E:9B:F9:F3 Authority key identifier: DC:5C:AC:E7:22:53:42:56:07:06:32:87:61:F9:13:C9:36:49:8A:EB Certificate issuer: /CN=A91317CB/serialNumber=DC5CACE7225342560706328761F913C936498AEB Certificate serial: 155E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Fys5yJTQlYHBjKHYfkTyTZJius.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.mft Manifest number: 1556 Signing time: Sat 18 Oct 2025 17:13:52 +0000 Manifest this update: Sat 18 Oct 2025 17:13:52 +0000 Manifest next update: Sat 25 Oct 2025 17:13:52 +0000 Files and hashes: 1: 3Fys5yJTQlYHBjKHYfkTyTZJius.crl (hash: ClLESUSXjtPdt/Lhk9ns/gSNOswRsc6WFOJzPV7v3Lw=) 2: CBA65F7C4AB411E887FB7E29C4F9AE02.roa (hash: ZrtNu0pCM+YSuzrUqWxCD6BDNZGKsa/yqsobccT0UqY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.crl rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Fys5yJTQlYHBjKHYfkTyTZJius.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:13:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5470 (0x155e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91317CB, serialNumber=DC5CACE7225342560706328761F913C936498AEB Validity Not Before: Oct 18 17:13:52 2025 GMT Not After : Oct 25 17:13:52 2025 GMT Subject: CN=68f3cad0-3a96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:5f:54:a4:01:17:12:b1:0a:9e:e0:80:3d:1d: a3:22:79:6c:c6:e1:aa:b8:52:9f:9f:18:9c:2e:eb: 2f:69:b4:81:03:1b:c5:16:c5:60:3b:3b:15:4e:4c: 7b:1b:b3:00:47:6f:42:aa:98:c5:38:c7:ce:30:9f: 2e:70:12:47:17:5d:b0:10:96:c0:1e:6b:d8:d1:8c: 90:38:73:e3:34:75:cc:ca:35:63:6b:c8:98:8b:8e: 6a:32:61:93:73:83:1f:a7:76:09:d9:4f:4f:cb:37: 17:a3:89:94:43:b8:54:4d:13:44:4d:95:6b:02:29: 9e:ac:a3:72:9f:95:1b:c1:d9:78:a5:7f:15:f9:50: 0e:d1:28:95:77:31:36:86:5f:44:75:4f:88:88:5b: c9:31:df:c5:54:47:76:23:f6:c8:e7:5b:e3:49:e6: 9b:89:10:90:1c:e9:16:c9:3c:33:76:47:81:cc:a0: 41:b0:8c:71:4a:c4:e8:64:cb:75:42:52:92:f9:09: 3d:30:74:23:b9:7a:47:6a:82:34:18:05:32:50:fe: 62:66:a6:db:e8:8a:a2:31:08:08:63:fa:29:d8:3a: b7:b4:6f:f6:ba:7a:9d:49:c1:4e:5c:f1:ae:ad:45: 7b:54:66:94:1c:4d:1d:88:2b:27:ad:11:6b:df:8d: 54:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:1B:8F:9A:4C:C6:BB:91:12:63:A3:5D:54:F0:A1:72:1E:9B:F9:F3 X509v3 Authority Key Identifier: keyid:DC:5C:AC:E7:22:53:42:56:07:06:32:87:61:F9:13:C9:36:49:8A:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Fys5yJTQlYHBjKHYfkTyTZJius.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:ee:a0:48:f3:17:66:7d:a8:16:4c:b5:28:30:f8:21:7b:dd: 68:8b:74:2d:7c:83:80:ce:73:12:03:5b:58:65:a7:05:8d:8a: 58:5c:23:e9:10:3f:07:e4:b4:66:1d:65:b9:0d:6e:87:a2:33: ce:58:99:cf:fa:92:d0:3a:4d:b1:ed:e4:81:e6:ed:4f:45:f4: df:aa:bd:e2:86:03:7f:b2:05:21:aa:45:11:b0:0e:17:a6:1e: ba:53:2c:af:ce:d8:10:f0:4b:0f:80:c6:f1:f4:79:ee:1c:32: c2:ea:48:ee:7d:d3:48:5c:da:80:dc:5e:af:4c:b0:9b:e0:ba: ca:f5:c9:e3:23:d3:e4:1b:0d:14:f7:cd:f9:96:7c:20:2f:66: 7a:28:4f:3d:aa:db:fa:73:62:54:c5:0b:d7:2e:8e:7d:72:97: 3a:7a:85:40:63:ac:7e:01:07:76:be:89:2c:f9:ae:8b:84:00: eb:fc:f0:0a:6b:8a:ea:2d:69:08:8e:8f:5b:82:e6:29:7a:64: e4:1c:e0:5e:ae:f8:1d:88:eb:1e:21:d3:eb:2e:16:fe:67:ff: f3:af:a4:c7:20:d6:cd:0c:c1:ac:25:f5:f7:52:14:8a:56:69: 33:00:ce:f0:2f:50:a5:f2:74:22:c7:8e:32:70:44:5d:4a:d2: 2e:92:1d:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE3Q0IxMTAvBgNVBAUTKERDNUNBQ0U3MjI1MzQyNTYwNzA2MzI4NzYxRjkxM0M5 MzY0OThBRUIwHhcNMjUxMDE4MTcxMzUyWhcNMjUxMDI1MTcxMzUyWjAYMRYwFAYD VQQDEw02OGYzY2FkMC0zYTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnV9UpAEXErEKnuCAPR2jInlsxuGquFKfnxicLusvabSBAxvFFsVgOzsVTkx7 G7MAR29CqpjFOMfOMJ8ucBJHF12wEJbAHmvY0YyQOHPjNHXMyjVja8iYi45qMmGT c4Mfp3YJ2U9PyzcXo4mUQ7hUTRNETZVrAimerKNyn5Ubwdl4pX8V+VAO0SiVdzE2 hl9EdU+IiFvJMd/FVEd2I/bI51vjSeabiRCQHOkWyTwzdkeBzKBBsIxxSsToZMt1 QlKS+Qk9MHQjuXpHaoI0GAUyUP5iZqbb6IqiMQgIY/op2Dq3tG/2unqdScFOXPGu rUV7VGaUHE0diCsnrRFr341U8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLobj5pM xruREmOjXVTwoXIem/nzMB8GA1UdIwQYMBaAFNxcrOciU0JWBwYyh2H5E8k2SYrr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTdDQi9DQjczRjc4NjRB QjMxMUU4QUQ0RDFFMjhDNEY5QUUwMi8zRnlzNXlKVFFsWUhCaktIWWZrVHlUWkpp dXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNGeXM1eUpUUWxZSEJqS0hZZmtUeVRaSml1cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTdDQi9DQjczRjc4NjRBQjMxMUU4QUQ0RDFFMjhDNEY5QUUwMi8zRnlzNXlKVFFs WUhCaktIWWZrVHlUWkppdXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA97qBI8xdmfagWTLUoMPghe91oi3QtfIOAznMSA1tYZacFjYpYXCPp ED8H5LRmHWW5DW6HojPOWJnP+pLQOk2x7eSB5u1PRfTfqr3ihgN/sgUhqkURsA4X ph66UyyvztgQ8EsPgMbx9HnuHDLC6kjufdNIXNqA3F6vTLCb4LrK9cnjI9PkGw0U 9835lnwgL2Z6KE89qtv6c2JUxQvXLo59cpc6eoVAY6x+AQd2voks+a6LhADr/PAK a4rqLWkIjo9bguYpemTkHOBervgdiOseIdPrLhb+Z//zr6THINbNDMGsJfX3UhSK VmkzAM7wL1Cl8nQix44ycERdStIukh1P -----END CERTIFICATE-----Generated at Mon Oct 20 07:55:17 2025 by rpki-client