$ rpki-client -vvf rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.mft File: Di3qFP18_9DQqeo-N0N7keRUsjY.mft (raw, json) Hash identifier: ONwLwQPiK1TYnm6vF/AbIqbk4JU8rGnv+Yw6REo0GtM= Subject key identifier: E5:1C:C0:3A:11:DC:78:DB:22:93:45:04:FA:CF:7B:7A:91:B4:B2:2A Authority key identifier: 0E:2D:EA:14:FD:7C:FF:D0:D0:A9:EA:3E:37:43:7B:91:E4:54:B2:36 Certificate issuer: /CN=A91560A3/serialNumber=0E2DEA14FD7CFFD0D0A9EA3E37437B91E454B236 Certificate serial: 11C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Di3qFP18_9DQqeo-N0N7keRUsjY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.mft Manifest number: 11C1 Signing time: Sat 18 Oct 2025 17:43:06 +0000 Manifest this update: Sat 18 Oct 2025 17:43:06 +0000 Manifest next update: Sat 25 Oct 2025 17:43:06 +0000 Files and hashes: 1: Di3qFP18_9DQqeo-N0N7keRUsjY.crl (hash: ggFLUyoODol9SPh0P3XEVmXOpO2EFkfMZlGBiMgPSbM=) 2: 2245CE0A606811EB80E3D531C4F9AE02.roa (hash: PSSQDCbjfGOv5hsREHHq3AE69qVBQBbQjxmYclshFuc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.crl rsync://rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Di3qFP18_9DQqeo-N0N7keRUsjY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:43:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4551 (0x11c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91560A3, serialNumber=0E2DEA14FD7CFFD0D0A9EA3E37437B91E454B236 Validity Not Before: Oct 18 17:43:06 2025 GMT Not After : Oct 25 17:43:06 2025 GMT Subject: CN=68f3d1aa-1595 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:5c:33:a3:6b:c3:c6:a9:b2:4e:4c:d0:34:f8: 94:2d:11:c9:0f:57:a1:cb:f6:08:d4:3c:7c:18:cf: 1e:da:9e:8c:69:4f:a0:e3:7d:93:69:be:d9:50:ca: 57:e6:04:6d:cf:56:33:9f:8c:b0:86:6f:c6:82:1c: bc:5f:b9:92:8f:62:7c:1c:d4:52:19:e6:4c:2b:5f: 61:fb:b7:68:de:7f:a6:82:f7:23:3c:24:e0:76:f5: 01:9e:e8:8f:20:bd:7e:fb:c8:5a:9c:52:27:58:69: af:42:d4:e9:ee:7c:5f:dc:20:0d:bf:1b:f0:a1:5c: bd:6e:8f:f4:67:80:11:ad:73:f8:32:fa:3e:35:8b: 6d:7b:96:24:7c:17:18:70:e1:ea:e5:d0:83:67:e5: 81:7a:73:7f:7e:df:52:2b:d8:74:37:1a:d4:b9:5f: 7a:0b:6d:51:4c:ed:f8:6e:d7:e4:af:45:de:cd:4b: aa:1a:8c:9e:f2:47:cd:d9:5a:5c:21:35:b0:de:62: 07:21:3b:75:ff:09:62:1e:7f:e7:5a:51:4b:22:70: 51:db:fd:11:29:c5:54:16:7d:63:13:48:47:7f:d7: a9:43:0c:71:c9:09:d1:5a:07:44:12:fb:de:f1:99: 45:95:fb:20:f6:44:0d:5d:2b:0f:14:08:9c:74:90: 66:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:1C:C0:3A:11:DC:78:DB:22:93:45:04:FA:CF:7B:7A:91:B4:B2:2A X509v3 Authority Key Identifier: keyid:0E:2D:EA:14:FD:7C:FF:D0:D0:A9:EA:3E:37:43:7B:91:E4:54:B2:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Di3qFP18_9DQqeo-N0N7keRUsjY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:d8:fd:2b:81:06:43:a8:c1:65:74:7a:b8:28:82:56:d6:0d: 45:cf:3d:e3:d5:d3:48:fb:0a:e4:be:9b:4b:81:6b:c7:98:2a: a6:46:20:29:fe:d4:ba:1e:4d:7c:58:e2:ed:8a:1c:2d:5d:2f: 3d:2a:e2:34:f1:48:87:fb:ee:66:d1:af:81:41:19:bb:91:32: 9e:1a:85:91:23:26:3c:c7:02:e4:ab:02:15:ce:56:ab:3d:e1: fd:fb:e9:e0:0c:df:cc:79:8d:cb:19:5b:ec:cc:90:a8:6a:10: 23:de:2b:00:2c:32:02:8a:0f:fc:04:de:51:34:1c:a2:68:c8: 9d:f1:f5:04:a7:2c:68:f4:e7:6c:fc:1e:18:aa:fd:7a:fa:09: 05:91:a7:de:ae:28:b8:24:19:e8:e5:33:3a:03:7e:9b:52:56: 47:5f:31:8e:46:f0:2e:92:77:07:06:13:6d:6c:17:f3:6d:bc: 71:42:c3:73:7c:15:d2:ec:16:1e:ff:e3:08:53:9b:4c:4a:02: 09:da:79:1f:a6:86:df:a4:f2:05:3e:6a:27:6f:3c:9a:bd:24: 78:30:4a:43:ad:18:71:5c:dc:c7:d0:60:42:2c:17:8a:0b:22: c6:fa:7e:4c:6b:47:fb:51:80:e0:04:08:26:9e:fc:75:46:51: 6c:0f:a2:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYwQTMxMTAvBgNVBAUTKDBFMkRFQTE0RkQ3Q0ZGRDBEMEE5RUEzRTM3NDM3Qjkx RTQ1NEIyMzYwHhcNMjUxMDE4MTc0MzA2WhcNMjUxMDI1MTc0MzA2WjAYMRYwFAYD VQQDEw02OGYzZDFhYS0xNTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Vwzo2vDxqmyTkzQNPiULRHJD1ehy/YI1Dx8GM8e2p6MaU+g432Tab7ZUMpX 5gRtz1Yzn4ywhm/Gghy8X7mSj2J8HNRSGeZMK19h+7do3n+mgvcjPCTgdvUBnuiP IL1++8hanFInWGmvQtTp7nxf3CANvxvwoVy9bo/0Z4ARrXP4Mvo+NYtte5YkfBcY cOHq5dCDZ+WBenN/ft9SK9h0NxrUuV96C21RTO34btfkr0XezUuqGoye8kfN2Vpc ITWw3mIHITt1/wliHn/nWlFLInBR2/0RKcVUFn1jE0hHf9epQwxxyQnRWgdEEvve 8ZlFlfsg9kQNXSsPFAicdJBmiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOUcwDoR 3HjbIpNFBPrPe3qRtLIqMB8GA1UdIwQYMBaAFA4t6hT9fP/Q0KnqPjdDe5HkVLI2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjBBMy9FNERGOTZBQUZE RjgxMUU4QUQyQzEyNjJDNEY5QUUwMi9EaTNxRlAxOF85RFFxZW8tTjBON2tlUlVz alkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RpM3FGUDE4XzlEUXFlby1OME43a2VSVXNqWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjBBMy9FNERGOTZBQUZERjgxMUU4QUQyQzEyNjJDNEY5QUUwMi9EaTNxRlAxOF85 RFFxZW8tTjBON2tlUlVzalkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBP2P0rgQZDqMFldHq4KIJW1g1Fzz3j1dNI+wrkvptLgWvHmCqmRiAp /tS6Hk18WOLtihwtXS89KuI08UiH++5m0a+BQRm7kTKeGoWRIyY8xwLkqwIVzlar PeH9++ngDN/MeY3LGVvszJCoahAj3isALDICig/8BN5RNByiaMid8fUEpyxo9Ods /B4Yqv16+gkFkaferii4JBno5TM6A36bUlZHXzGORvAukncHBhNtbBfzbbxxQsNz fBXS7BYe/+MIU5tMSgIJ2nkfpobfpPIFPmonbzyavSR4MEpDrRhxXNzH0GBCLBeK CyLG+n5Ma0f7UYDgBAgmnvx1RlFsD6Lz -----END CERTIFICATE-----Generated at Mon Oct 20 10:15:44 2025 by rpki-client