$ rpki-client -vvf rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/3ETtNb69CygywHT8LEaqsM1oL94.mft File: 3ETtNb69CygywHT8LEaqsM1oL94.mft (raw, json) Hash identifier: 7rmsW63hQawNG5IaJPLfLXOj4P4XNcvMRe17F6k0tFQ= Subject key identifier: 23:FF:77:CA:75:FF:9F:09:4D:45:5B:29:E2:8C:CC:09:FF:48:B1:E7 Authority key identifier: DC:44:ED:35:BE:BD:0B:28:32:C0:74:FC:2C:46:AA:B0:CD:68:2F:DE Certificate issuer: /CN=A9143B09/serialNumber=DC44ED35BEBD0B2832C074FC2C46AAB0CD682FDE Certificate serial: 10D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3ETtNb69CygywHT8LEaqsM1oL94.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/3ETtNb69CygywHT8LEaqsM1oL94.mft Manifest number: 19AB Signing time: Sat 18 Oct 2025 17:52:23 +0000 Manifest this update: Sat 18 Oct 2025 17:52:23 +0000 Manifest next update: Sat 25 Oct 2025 17:52:23 +0000 Files and hashes: 1: 3ETtNb69CygywHT8LEaqsM1oL94.crl (hash: ls7V5Y2upBXBYhZf2x+0k7M1B+RnzvllqTtWg+k115U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/3ETtNb69CygywHT8LEaqsM1oL94.crl rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/3ETtNb69CygywHT8LEaqsM1oL94.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3ETtNb69CygywHT8LEaqsM1oL94.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:52:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4304 (0x10d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143B09, serialNumber=DC44ED35BEBD0B2832C074FC2C46AAB0CD682FDE Validity Not Before: Oct 18 17:52:23 2025 GMT Not After : Oct 25 17:52:23 2025 GMT Subject: CN=68f3d3d7-7c66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:14:1b:3b:5f:8f:8f:fb:ef:98:22:3d:d8:88: 03:57:4d:de:f2:b8:3f:86:68:ab:a5:0d:9d:38:7a: c3:94:35:bf:28:5a:5d:de:01:66:ec:64:4e:f0:e7: df:a5:89:f4:6f:7e:10:cb:9b:f3:09:1a:c8:b2:bc: 71:76:b9:c5:f0:ad:90:01:ff:94:7c:56:cc:2d:79: a6:22:53:af:73:9e:1f:b1:5d:9d:75:67:28:23:65: 68:b2:51:70:ce:b3:46:80:f3:fa:83:0a:bf:8e:68: f3:1e:a9:1c:51:94:53:ac:15:94:14:c7:cf:fd:86: 45:23:8d:4b:6d:22:4a:30:95:e9:4d:36:e8:f6:bb: 89:69:6c:9d:7a:b3:03:f3:13:be:47:6e:93:76:57: 13:ef:61:c4:ed:e5:04:a9:7a:79:6f:f8:5f:e0:e6: d5:05:32:ff:f7:34:bf:54:a7:2b:24:0a:c8:8b:61: 1b:32:2b:44:d7:3b:5b:4e:e0:45:64:9a:2a:e6:fb: 70:02:94:7c:b6:44:33:83:76:01:78:48:68:99:84: 18:8a:07:c9:17:50:76:f7:09:4a:e7:15:b0:ea:6c: 50:91:cc:d1:07:b2:51:9f:13:0f:8a:42:d4:8f:69: 46:6c:57:92:50:ab:2b:cb:5a:d3:df:5f:58:f3:bd: 9e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:FF:77:CA:75:FF:9F:09:4D:45:5B:29:E2:8C:CC:09:FF:48:B1:E7 X509v3 Authority Key Identifier: keyid:DC:44:ED:35:BE:BD:0B:28:32:C0:74:FC:2C:46:AA:B0:CD:68:2F:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/3ETtNb69CygywHT8LEaqsM1oL94.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3ETtNb69CygywHT8LEaqsM1oL94.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/3ETtNb69CygywHT8LEaqsM1oL94.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:15:0d:a8:24:16:65:ee:d4:b8:bb:41:d3:42:3e:7e:0e:6f: c9:c4:f3:73:bc:26:84:39:de:da:55:0f:8b:06:10:09:e6:2f: fc:11:0f:55:c1:b9:01:3f:19:14:00:c3:12:94:ec:a0:46:ba: a8:21:9e:df:74:2b:4b:dd:f4:e7:d5:af:93:2c:77:0e:f3:a2: 7e:d5:8b:a7:44:45:e2:83:6c:2d:ac:ad:2c:70:9d:4a:56:5c: b5:04:54:5d:c6:98:f6:06:5c:bb:85:16:a4:bf:1a:6e:55:5b: d4:f0:3a:0f:1a:33:76:db:09:65:48:58:19:7b:01:cb:68:45: 1a:c9:b9:ba:d2:e6:72:6f:e8:9d:70:c6:68:ad:c7:9b:0f:9b: 60:8c:32:d4:df:fb:93:51:cf:f1:6a:76:de:38:c8:ef:a1:4d: e7:53:d7:fc:ae:c0:d0:9e:75:06:43:4b:d5:c2:45:f3:58:c0: df:a6:7d:e1:1a:35:a9:e8:58:87:13:be:bb:56:50:29:25:d3: b8:6a:19:4b:84:ca:21:75:69:fd:1b:32:54:2f:70:36:92:ae: 2a:1c:39:48:dd:5f:86:d2:81:59:c1:3b:d7:3b:76:76:44:cf: 28:f3:0c:43:8b:67:eb:97:2e:71:a5:d4:38:56:d5:f6:43:79: 60:17:62:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICENAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNCMDkxMTAvBgNVBAUTKERDNDRFRDM1QkVCRDBCMjgzMkMwNzRGQzJDNDZBQUIw Q0Q2ODJGREUwHhcNMjUxMDE4MTc1MjIzWhcNMjUxMDI1MTc1MjIzWjAYMRYwFAYD VQQDEw02OGYzZDNkNy03YzY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvhQbO1+Pj/vvmCI92IgDV03e8rg/hmirpQ2dOHrDlDW/KFpd3gFm7GRO8Off pYn0b34Qy5vzCRrIsrxxdrnF8K2QAf+UfFbMLXmmIlOvc54fsV2ddWcoI2VoslFw zrNGgPP6gwq/jmjzHqkcUZRTrBWUFMfP/YZFI41LbSJKMJXpTTbo9ruJaWyderMD 8xO+R26TdlcT72HE7eUEqXp5b/hf4ObVBTL/9zS/VKcrJArIi2EbMitE1ztbTuBF ZJoq5vtwApR8tkQzg3YBeEhomYQYigfJF1B29wlK5xWw6mxQkczRB7JRnxMPikLU j2lGbFeSUKsry1rT319Y872e/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCP/d8p1 /58JTUVbKeKMzAn/SLHnMB8GA1UdIwQYMBaAFNxE7TW+vQsoMsB0/CxGqrDNaC/e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0IwOS8zQjM2N0JDRTMz QjcxMUU5QUQwRjU4N0FDNEY5QUUwMi8zRVR0TmI2OUN5Z3l3SFQ4TEVhcXNNMW9M OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNFVHROYjY5Q3lneXdIVDhMRWFxc00xb0w5NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0IwOS8zQjM2N0JDRTMzQjcxMUU5QUQwRjU4N0FDNEY5QUUwMi8zRVR0TmI2OUN5 Z3l3SFQ4TEVhcXNNMW9MOTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiFQ2oJBZl7tS4u0HTQj5+Dm/JxPNzvCaEOd7aVQ+LBhAJ5i/8EQ9V wbkBPxkUAMMSlOygRrqoIZ7fdCtL3fTn1a+TLHcO86J+1YunREXig2wtrK0scJ1K Vly1BFRdxpj2Bly7hRakvxpuVVvU8DoPGjN22wllSFgZewHLaEUaybm60uZyb+id cMZorcebD5tgjDLU3/uTUc/xanbeOMjvoU3nU9f8rsDQnnUGQ0vVwkXzWMDfpn3h GjWp6FiHE767VlApJdO4ahlLhMohdWn9GzJUL3A2kq4qHDlI3V+G0oFZwTvXO3Z2 RM8o8wxDi2frly5xpdQ4VtX2Q3lgF2I0 -----END CERTIFICATE-----Generated at Mon Oct 20 04:50:04 2025 by rpki-client