$ rpki-client -vvf rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft File: 3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft (raw, json) Hash identifier: ejq+lReso6xSVooTvwHVUUJkkWK9K7JxGI8oO2XuOdo= Subject key identifier: CD:5F:3C:84:0F:A4:9B:68:52:E5:77:D1:43:87:39:F5:E7:8A:81:62 Authority key identifier: DC:AD:64:47:05:CF:18:C2:7D:7F:C2:01:73:85:D2:3E:E7:20:39:55 Certificate issuer: /CN=A9133A27/serialNumber=DCAD644705CF18C27D7FC2017385D23EE7203955 Certificate serial: 011F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K1kRwXPGMJ9f8IBc4XSPucgOVU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft Manifest number: 011D Signing time: Sun 19 Oct 2025 07:37:43 +0000 Manifest this update: Sun 19 Oct 2025 07:37:42 +0000 Manifest next update: Sun 26 Oct 2025 07:37:42 +0000 Files and hashes: 1: 3K1kRwXPGMJ9f8IBc4XSPucgOVU.crl (hash: E7/48wh9+bq6nkls5ISyShVHoRNpTIBtR8nvxORDrfU=) 2: 90195128FAC411EEB1CDF882C4F9AE02.roa (hash: zKqmtZ3hPlN9AWLx9aGbTTOZenzY439Vd/KzhKuSP5I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.crl rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K1kRwXPGMJ9f8IBc4XSPucgOVU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:37:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 287 (0x11f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133A27, serialNumber=DCAD644705CF18C27D7FC2017385D23EE7203955 Validity Not Before: Oct 19 07:37:42 2025 GMT Not After : Oct 26 07:37:42 2025 GMT Subject: CN=68f49546-fbd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:0e:25:87:02:6a:68:9c:48:6e:07:4d:54:e4: 85:97:64:98:33:e3:dd:d1:72:86:94:bd:a6:b2:40: 01:7e:95:ee:dd:35:68:a7:e4:ad:fd:21:1f:64:11: a3:a1:0a:43:48:36:a8:5b:74:29:04:b5:ca:47:75: 72:c0:f3:7d:0d:55:c7:c4:5c:95:9c:c5:7a:b5:98: e9:10:35:74:1c:69:1b:75:1f:d1:32:f4:dd:eb:a4: 96:61:95:c2:74:de:13:21:9c:32:6c:d6:d7:57:46: 42:cc:a3:8c:00:0e:11:65:47:14:ca:ae:4b:b6:1b: 4f:11:10:6d:87:e9:a3:58:80:3c:9f:78:00:bb:5d: 96:4d:11:86:8b:85:57:91:7a:95:a7:41:b6:6f:6d: a7:f8:98:5a:9d:3a:43:84:73:43:e3:ee:d2:08:36: 1c:84:08:47:22:cd:af:d9:41:c9:97:93:61:e4:bd: 7b:b4:4c:c8:83:f0:e6:41:0f:e8:04:17:a4:bf:3b: 19:66:b0:61:a6:5f:6b:b5:c5:57:17:bd:45:0a:81: 34:47:24:15:45:14:67:2b:5a:3c:ee:09:f2:72:1a: 4e:a2:47:80:68:1f:7b:9c:f4:55:86:18:11:32:f9: 3a:67:50:76:ea:f3:7c:b4:8e:82:10:45:0e:d6:e1: 23:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:5F:3C:84:0F:A4:9B:68:52:E5:77:D1:43:87:39:F5:E7:8A:81:62 X509v3 Authority Key Identifier: keyid:DC:AD:64:47:05:CF:18:C2:7D:7F:C2:01:73:85:D2:3E:E7:20:39:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K1kRwXPGMJ9f8IBc4XSPucgOVU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:95:6b:78:11:37:a4:f6:27:1a:21:22:3e:4c:38:d9:95:97: c8:f1:ae:1d:5a:26:d9:14:f1:1d:d4:90:a4:4f:57:87:1c:2f: d0:3a:84:73:da:78:c7:44:68:96:8f:fc:6d:13:1f:af:ec:1f: 24:35:54:97:64:91:dc:a8:9b:0e:02:fe:3e:56:bb:a6:c1:2d: dc:2e:9a:19:a8:d6:fd:44:69:d4:a0:62:79:6b:3f:57:0f:f4: 4b:72:2f:01:6f:0e:f2:b7:c5:c4:7f:49:75:2a:78:13:d6:0c: fa:c3:25:3b:e4:30:58:4f:0f:49:b2:3e:b6:14:34:55:5c:d3: 44:c6:89:a8:16:2b:ca:8d:0a:9c:88:0f:fe:76:95:22:e6:d1: c0:37:7c:68:fe:8e:53:95:34:c7:65:7e:c1:18:0d:ba:64:92: 69:bb:93:60:09:cc:ec:c2:ac:89:09:3a:57:ef:d1:74:42:c6: b3:a3:17:5b:6a:f6:7d:bb:99:0a:98:1a:08:1f:2f:30:e6:27: 8b:6c:d4:80:c7:fa:e3:e6:e1:6c:ed:52:f4:94:43:82:88:8e: 7e:51:2b:d2:9a:eb:87:c6:8b:23:b5:cc:cf:60:0d:59:6e:c6: 12:78:47:1d:ed:cf:1f:6b:ed:3d:fb:3d:00:a7:4b:78:dd:51: 13:51:75:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzNBMjcxMTAvBgNVBAUTKERDQUQ2NDQ3MDVDRjE4QzI3RDdGQzIwMTczODVEMjNF RTcyMDM5NTUwHhcNMjUxMDE5MDczNzQyWhcNMjUxMDI2MDczNzQyWjAYMRYwFAYD VQQDEw02OGY0OTU0Ni1mYmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+w4lhwJqaJxIbgdNVOSFl2SYM+Pd0XKGlL2mskABfpXu3TVop+St/SEfZBGj oQpDSDaoW3QpBLXKR3VywPN9DVXHxFyVnMV6tZjpEDV0HGkbdR/RMvTd66SWYZXC dN4TIZwybNbXV0ZCzKOMAA4RZUcUyq5LthtPERBth+mjWIA8n3gAu12WTRGGi4VX kXqVp0G2b22n+JhanTpDhHND4+7SCDYchAhHIs2v2UHJl5Nh5L17tEzIg/DmQQ/o BBekvzsZZrBhpl9rtcVXF71FCoE0RyQVRRRnK1o87gnychpOokeAaB97nPRVhhgR Mvk6Z1B26vN8tI6CEEUO1uEjjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM1fPIQP pJtoUuV30UOHOfXnioFiMB8GA1UdIwQYMBaAFNytZEcFzxjCfX/CAXOF0j7nIDlV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0EyNy9FMjY2NDZFNEY3 MDMxMUVFQTMxRjVEN0FDNEY5QUUwMi8zSzFrUndYUEdNSjlmOElCYzRYU1B1Y2dP VlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNLMWtSd1hQR01KOWY4SUJjNFhTUHVjZ09WVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz M0EyNy9FMjY2NDZFNEY3MDMxMUVFQTMxRjVEN0FDNEY5QUUwMi8zSzFrUndYUEdN SjlmOElCYzRYU1B1Y2dPVlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQlWt4ETek9icaISI+TDjZlZfI8a4dWibZFPEd1JCkT1eHHC/QOoRz 2njHRGiWj/xtEx+v7B8kNVSXZJHcqJsOAv4+VrumwS3cLpoZqNb9RGnUoGJ5az9X D/RLci8Bbw7yt8XEf0l1KngT1gz6wyU75DBYTw9Jsj62FDRVXNNExomoFivKjQqc iA/+dpUi5tHAN3xo/o5TlTTHZX7BGA26ZJJpu5NgCczswqyJCTpX79F0Qsazoxdb avZ9u5kKmBoIHy8w5ieLbNSAx/rj5uFs7VL0lEOCiI5+USvSmuuHxosjtczPYA1Z bsYSeEcd7c8fa+09+z0Ap0t43VETUXXa -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:49 2025 by rpki-client