$ rpki-client -vvf rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.mft File: 3fikyb7AEE4WzOMhqWWpLGYURTA.mft (raw, json) Hash identifier: 4FXmVjPdoz0NtoiNz/TB/21JmHQMkw25SMr5/5aAw20= Subject key identifier: AD:B7:0F:A0:E5:F8:D0:C3:B2:33:8B:FA:D8:8F:EE:45:7F:CF:60:8A Authority key identifier: DD:F8:A4:C9:BE:C0:10:4E:16:CC:E3:21:A9:65:A9:2C:66:14:45:30 Certificate issuer: /CN=A915518E/serialNumber=DDF8A4C9BEC0104E16CCE321A965A92C66144530 Certificate serial: 0E52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fikyb7AEE4WzOMhqWWpLGYURTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.mft Manifest number: 0E47 Signing time: Sat 18 Oct 2025 18:25:49 +0000 Manifest this update: Sat 18 Oct 2025 18:25:48 +0000 Manifest next update: Sat 25 Oct 2025 18:25:48 +0000 Files and hashes: 1: 3fikyb7AEE4WzOMhqWWpLGYURTA.crl (hash: 1eJLHmsqEHLT1bFbRjbvp5k/nGnkOH8Mjxvh8TLDdU0=) 2: 215FAD42B98611E9A053044FC4F9AE02.roa (hash: IvtzH6gyubUymkg5oBnMrp7NOgM18ej68eMn0LMb6vE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.crl rsync://rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fikyb7AEE4WzOMhqWWpLGYURTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:25:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3666 (0xe52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915518E, serialNumber=DDF8A4C9BEC0104E16CCE321A965A92C66144530 Validity Not Before: Oct 18 18:25:48 2025 GMT Not After : Oct 25 18:25:48 2025 GMT Subject: CN=68f3dbad-7606 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:52:1b:3e:2e:0c:83:d1:ef:97:cb:64:6f:38: 55:ff:32:0b:76:84:46:bc:dd:44:cf:36:f9:5f:ef: 7f:4c:16:5d:3e:2e:b0:88:1b:b3:0e:02:42:de:d0: cb:1b:42:78:03:af:ac:de:a6:c9:78:34:6e:d1:8c: 2a:8e:aa:5f:b3:b5:c1:e2:2c:01:90:2b:25:d7:f2: bd:fc:41:37:0f:0e:cd:ae:a8:39:be:cd:3a:bf:2e: 4c:bc:24:b5:a8:fa:58:02:23:22:7a:99:8e:d2:6c: 92:37:f7:e3:b0:ec:16:ea:a7:af:ef:4b:16:dc:cf: b9:3c:b7:53:2d:3d:e6:75:a5:67:c3:6f:6a:f1:4b: 81:52:04:6e:2e:2b:a1:34:6d:44:8b:58:ec:98:dd: 52:17:84:4d:13:33:24:33:eb:70:6a:a2:ba:79:4f: 71:e8:ea:6d:83:5b:3f:43:a2:04:2d:2c:70:92:0c: 8e:2b:ee:33:de:4c:c5:28:97:a0:73:d8:97:97:ee: 76:c5:59:49:46:fd:16:20:77:4e:50:8a:14:6f:da: a5:13:02:9d:d2:58:41:1d:06:2f:fd:c4:ff:4e:e6: b8:4a:35:ac:ec:bf:8c:75:96:7c:03:95:9d:a4:cb: 2e:6a:0f:08:5b:6c:f1:f7:ef:bf:41:e4:26:df:e3: 83:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:B7:0F:A0:E5:F8:D0:C3:B2:33:8B:FA:D8:8F:EE:45:7F:CF:60:8A X509v3 Authority Key Identifier: keyid:DD:F8:A4:C9:BE:C0:10:4E:16:CC:E3:21:A9:65:A9:2C:66:14:45:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fikyb7AEE4WzOMhqWWpLGYURTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:af:2f:ab:6d:fd:52:9a:50:20:10:e7:d1:f6:f4:0f:3c:2b: 58:85:23:bd:17:84:ad:38:5a:6d:44:fe:63:3b:3e:c7:d4:cb: b3:85:ab:47:21:58:01:5b:d3:9b:37:71:a3:a1:99:e1:df:b5: 13:2b:65:54:02:c4:d2:8e:91:4b:dc:36:ea:93:cd:62:ce:eb: 6a:b8:56:7b:19:b4:92:97:68:22:f5:f5:17:4b:17:68:81:64: 1c:da:f8:56:ba:ff:50:6d:9d:5d:d5:f6:05:49:a2:ad:f2:5d: 91:34:fb:fd:e2:a7:89:7a:c8:31:6a:08:3e:d1:ee:35:e5:98: 0e:7d:04:95:87:a7:b9:f2:70:7e:88:ff:4e:44:46:4e:f9:ae: d0:91:04:dc:7f:14:96:77:2f:be:2c:9c:73:a0:89:c6:ca:8e: 26:b7:de:85:92:84:cc:a8:f9:04:a7:04:cb:8d:be:06:03:1d: 4b:56:e4:a6:09:a6:05:29:15:fc:3c:c9:8b:ff:19:3e:bd:72: 3c:04:46:a6:c8:1c:dc:04:10:8f:e9:cc:7b:ba:ce:e1:d6:d0: 70:13:78:de:44:2d:e8:ba:45:7c:ab:12:9b:91:82:97:95:61: 52:1d:be:be:3e:3e:6d:51:8a:30:c9:34:3a:5e:55:74:2b:59: 7e:f8:ac:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDlIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTUxOEUxMTAvBgNVBAUTKERERjhBNEM5QkVDMDEwNEUxNkNDRTMyMUE5NjVBOTJD NjYxNDQ1MzAwHhcNMjUxMDE4MTgyNTQ4WhcNMjUxMDI1MTgyNTQ4WjAYMRYwFAYD VQQDEw02OGYzZGJhZC03NjA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvFIbPi4Mg9Hvl8tkbzhV/zILdoRGvN1Ezzb5X+9/TBZdPi6wiBuzDgJC3tDL G0J4A6+s3qbJeDRu0Ywqjqpfs7XB4iwBkCsl1/K9/EE3Dw7Nrqg5vs06vy5MvCS1 qPpYAiMiepmO0mySN/fjsOwW6qev70sW3M+5PLdTLT3mdaVnw29q8UuBUgRuLiuh NG1Ei1jsmN1SF4RNEzMkM+twaqK6eU9x6Optg1s/Q6IELSxwkgyOK+4z3kzFKJeg c9iXl+52xVlJRv0WIHdOUIoUb9qlEwKd0lhBHQYv/cT/Tua4SjWs7L+MdZZ8A5Wd pMsuag8IW2zx9++/QeQm3+OD7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK23D6Dl +NDDsjOL+tiP7kV/z2CKMB8GA1UdIwQYMBaAFN34pMm+wBBOFszjIallqSxmFEUw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTE4RS9BNzk2RTkwQUFF MDIxMUU5QjM3RDg5NjdDNEY5QUUwMi8zZmlreWI3QUVFNFd6T01ocVdXcExHWVVS VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNmaWt5YjdBRUU0V3pPTWhxV1dwTEdZVVJUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTE4RS9BNzk2RTkwQUFFMDIxMUU5QjM3RDg5NjdDNEY5QUUwMi8zZmlreWI3QUVF NFd6T01ocVdXcExHWVVSVEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwry+rbf1SmlAgEOfR9vQPPCtYhSO9F4StOFptRP5jOz7H1MuzhatH IVgBW9ObN3GjoZnh37UTK2VUAsTSjpFL3Dbqk81izutquFZ7GbSSl2gi9fUXSxdo gWQc2vhWuv9QbZ1d1fYFSaKt8l2RNPv94qeJesgxagg+0e415ZgOfQSVh6e58nB+ iP9OREZO+a7QkQTcfxSWdy++LJxzoInGyo4mt96FkoTMqPkEpwTLjb4GAx1LVuSm CaYFKRX8PMmL/xk+vXI8BEamyBzcBBCP6cx7us7h1tBwE3jeRC3oukV8qxKbkYKX lWFSHb6+Pj5tUYowyTQ6XlV0K1l++KwP -----END CERTIFICATE-----Generated at Mon Oct 20 12:44:04 2025 by rpki-client