$ rpki-client -vvf rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.mft File: 3MvMmJOAkJntArcXgYQ2VBazHhw.mft (raw, json) Hash identifier: fFurX+H6CUdLXFGqpRTlz0oJqdACJepiB1n8iLqFms0= Subject key identifier: 9F:C9:BE:39:75:EC:CD:1B:66:C5:A7:F4:A3:8A:D4:DC:8F:16:BC:31 Authority key identifier: DC:CB:CC:98:93:80:90:99:ED:02:B7:17:81:84:36:54:16:B3:1E:1C Certificate issuer: /CN=A913AE91/serialNumber=DCCBCC9893809099ED02B7178184365416B31E1C Certificate serial: 03D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MvMmJOAkJntArcXgYQ2VBazHhw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.mft Manifest number: 03CE Signing time: Sun 19 Oct 2025 02:36:38 +0000 Manifest this update: Sun 19 Oct 2025 02:36:38 +0000 Manifest next update: Sun 26 Oct 2025 02:36:38 +0000 Files and hashes: 1: 3MvMmJOAkJntArcXgYQ2VBazHhw.crl (hash: 6kyyUQF5zSwss5cetYMHweIR2lJTQ6N6/LS+XcgmpLQ=) 2: 23F9CE72A41911ECBDBED829C4F9AE02.roa (hash: vZ/WaADoEuy2hBBHTZfwXR0fuTeB5hZjwEti8AL2NUM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.crl rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MvMmJOAkJntArcXgYQ2VBazHhw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:36:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 979 (0x3d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913AE91, serialNumber=DCCBCC9893809099ED02B7178184365416B31E1C Validity Not Before: Oct 19 02:36:38 2025 GMT Not After : Oct 26 02:36:38 2025 GMT Subject: CN=68f44eb6-5df8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:bc:18:89:c9:10:3e:28:e5:1f:47:94:08:1e: e6:ef:e8:de:b9:e5:80:40:01:29:32:87:09:f8:31: cb:15:bb:24:10:e3:88:d4:31:80:92:12:3b:85:5d: 7c:c8:5b:15:cd:7c:86:b4:00:71:2e:a3:3f:94:63: 8f:30:b7:39:8b:b1:33:a3:0a:15:e5:1f:79:08:bf: f2:df:68:e1:e7:4c:bf:12:71:5c:af:b4:fc:d1:ff: 98:59:2d:13:f9:45:a8:68:48:69:15:4c:40:79:f6: d7:31:dc:f8:7e:6a:1c:05:ff:5e:1d:4b:3c:56:3d: e9:f9:24:3b:5e:a4:29:90:52:c8:a5:c8:22:a6:81: 8d:c2:fe:e5:d5:09:e5:b4:f1:1f:9f:c0:c9:87:c0: 84:ea:63:bc:02:60:1a:8c:20:95:fc:30:ba:47:21: f8:79:6f:0e:1a:50:ba:38:85:30:35:4f:9a:e0:f9: d1:d9:79:4b:49:a2:e3:7e:71:c2:40:37:79:16:e6: 92:8e:0c:de:9e:74:3e:94:7c:47:f9:55:e8:05:1b: 72:37:90:70:22:53:fd:ff:24:7e:84:0b:50:66:4e: 8d:a8:50:82:cc:68:9f:f5:8b:cd:d6:6b:75:2a:51: 98:cc:e3:f2:fa:38:20:b7:a9:d1:bf:e3:9a:86:00: b4:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:C9:BE:39:75:EC:CD:1B:66:C5:A7:F4:A3:8A:D4:DC:8F:16:BC:31 X509v3 Authority Key Identifier: keyid:DC:CB:CC:98:93:80:90:99:ED:02:B7:17:81:84:36:54:16:B3:1E:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MvMmJOAkJntArcXgYQ2VBazHhw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:10:a2:e6:a2:97:d9:7d:5d:0c:5c:90:6e:87:7c:de:9b:14: fb:50:11:35:af:f3:ce:77:f1:a7:47:4d:69:f0:5e:1a:6c:3d: f6:f6:dd:18:74:2d:e3:8a:60:c0:34:89:e6:78:c0:3c:8a:ec: eb:f5:f9:d2:3d:4a:58:19:00:bc:38:c5:f3:9c:1d:1b:1c:fa: d6:38:f7:00:f5:23:64:11:79:52:55:43:ad:4b:93:d4:88:fd: 39:b1:7f:55:ba:5a:77:98:e4:7e:b5:9d:78:8b:1b:db:cc:7a: 40:ee:00:ee:8a:d4:d4:51:60:a1:45:16:49:61:87:c8:17:70: 76:61:5d:58:ce:31:6b:af:c5:c7:f3:bb:35:66:d8:d6:40:05: fd:ba:5d:bf:22:e8:e7:0e:94:3e:9f:4a:05:f1:31:ef:71:a5: 83:d9:15:cb:db:3e:12:02:b5:b5:69:8f:f5:06:c3:9e:11:b8: 80:3f:98:f8:4a:9e:b4:2f:4d:61:2a:e5:5a:8e:d6:b3:39:ce: e5:38:fd:e2:b0:65:cb:dc:c8:08:c6:fc:26:16:32:5e:da:cd: 56:ee:93:88:18:ae:ea:70:86:01:d6:09:fe:cf:cb:d7:62:30: 0e:04:9d:6e:dd:0f:9e:1b:89:5e:7a:a6:5b:94:bc:dc:e0:0b: 25:56:82:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0FFOTExMTAvBgNVBAUTKERDQ0JDQzk4OTM4MDkwOTlFRDAyQjcxNzgxODQzNjU0 MTZCMzFFMUMwHhcNMjUxMDE5MDIzNjM4WhcNMjUxMDI2MDIzNjM4WjAYMRYwFAYD VQQDEw02OGY0NGViNi01ZGY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3bwYickQPijlH0eUCB7m7+jeueWAQAEpMocJ+DHLFbskEOOI1DGAkhI7hV18 yFsVzXyGtABxLqM/lGOPMLc5i7EzowoV5R95CL/y32jh50y/EnFcr7T80f+YWS0T +UWoaEhpFUxAefbXMdz4fmocBf9eHUs8Vj3p+SQ7XqQpkFLIpcgipoGNwv7l1Qnl tPEfn8DJh8CE6mO8AmAajCCV/DC6RyH4eW8OGlC6OIUwNU+a4PnR2XlLSaLjfnHC QDd5FuaSjgzennQ+lHxH+VXoBRtyN5BwIlP9/yR+hAtQZk6NqFCCzGif9YvN1mt1 KlGYzOPy+jggt6nRv+OahgC06wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ/Jvjl1 7M0bZsWn9KOK1NyPFrwxMB8GA1UdIwQYMBaAFNzLzJiTgJCZ7QK3F4GENlQWsx4c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUU5MS8yRTkyMTYzNkE0 MTUxMUVDQkU5MDBBN0JDNEY5QUUwMi8zTXZNbUpPQWtKbnRBcmNYZ1lRMlZCYXpI aHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNNdk1tSk9Ba0pudEFyY1hnWVEyVkJhekhody5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QUU5MS8yRTkyMTYzNkE0MTUxMUVDQkU5MDBBN0JDNEY5QUUwMi8zTXZNbUpPQWtK bnRBcmNYZ1lRMlZCYXpIaHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyEKLmopfZfV0MXJBuh3zemxT7UBE1r/POd/GnR01p8F4abD329t0Y dC3jimDANInmeMA8iuzr9fnSPUpYGQC8OMXznB0bHPrWOPcA9SNkEXlSVUOtS5PU iP05sX9Vulp3mOR+tZ14ixvbzHpA7gDuitTUUWChRRZJYYfIF3B2YV1YzjFrr8XH 87s1ZtjWQAX9ul2/IujnDpQ+n0oF8THvcaWD2RXL2z4SArW1aY/1BsOeEbiAP5j4 Sp60L01hKuVajtazOc7lOP3isGXL3MgIxvwmFjJe2s1W7pOIGK7qcIYB1gn+z8vX YjAOBJ1u3Q+eG4leeqZblLzc4AslVoJa -----END CERTIFICATE-----Generated at Mon Oct 20 08:48:46 2025 by rpki-client