$ rpki-client -vvf rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.mft File: 3dU_UiXtL42o0J56rZgsgLbOrag.mft (raw, json) Hash identifier: Jd8lSA1bZ2Wrg5MwmFP7jqzKnxoQQpWOF+jgqfTNF18= Subject key identifier: 53:CB:01:B5:7C:75:10:8D:5F:EF:ED:36:67:C1:42:E5:FD:7B:AF:BB Authority key identifier: DD:D5:3F:52:25:ED:2F:8D:A8:D0:9E:7A:AD:98:2C:80:B6:CE:AD:A8 Certificate issuer: /CN=A91658EF/serialNumber=DDD53F5225ED2F8DA8D09E7AAD982C80B6CEADA8 Certificate serial: 07DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dU_UiXtL42o0J56rZgsgLbOrag.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.mft Manifest number: 2C62 Signing time: Sat 18 Oct 2025 17:14:12 +0000 Manifest this update: Sat 18 Oct 2025 17:14:12 +0000 Manifest next update: Sat 25 Oct 2025 17:14:12 +0000 Files and hashes: 1: 3dU_UiXtL42o0J56rZgsgLbOrag.crl (hash: Hwi2WQcUqjvAG7gMMKTLOuuxGBt1V20jx+BLvSrPyp4=) 2: A20F3364D9CD11EF93ACA765C4F9AE02.roa (hash: GlYsHzeq/9zAsgZDgmAiaFOhydbYqGstJVX7MNbtJFs=) 3: CD0ACC3AD9CE11EFA393BC6AC4F9AE02.roa (hash: zPBNAdtnIGt+ra2FI390H36UQCaUhQl2E2/fPAphoFM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.crl rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dU_UiXtL42o0J56rZgsgLbOrag.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:14:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2011 (0x7db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91658EF, serialNumber=DDD53F5225ED2F8DA8D09E7AAD982C80B6CEADA8 Validity Not Before: Oct 18 17:14:12 2025 GMT Not After : Oct 25 17:14:12 2025 GMT Subject: CN=68f3cae4-13e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:97:ee:2c:e0:a5:8c:ee:0a:3e:e1:cc:b3:52: 7d:62:da:35:aa:e9:e1:87:b9:9b:32:22:56:f3:c0: eb:8f:d5:92:c5:6c:c7:3f:1a:16:d8:a4:4c:a1:b3: 5c:7b:00:d8:5c:88:f6:7c:b1:93:9b:f4:c5:8a:a4: da:fa:aa:61:42:ab:4d:1f:03:78:e1:78:19:21:07: bb:fd:1b:f2:2f:5e:80:b1:13:18:c7:5d:63:b0:a5: d7:79:14:53:df:86:2f:5c:c5:ea:05:dd:85:6b:bc: 0c:f7:28:ee:50:14:e2:8e:bb:c2:27:6a:f1:a8:43: ce:fb:b4:e6:97:ea:d1:9c:78:a5:7c:bd:b7:92:ef: 27:8d:39:e5:d3:db:4b:b6:4a:1e:e3:ab:00:78:4e: 73:28:0f:62:45:f4:cd:60:be:d6:d9:0d:16:89:07: c6:37:01:3d:31:2f:2f:30:e2:af:23:d5:b6:00:ad: 0c:bf:50:b8:63:65:24:a7:5a:65:66:05:88:d6:65: 08:f9:d6:b6:19:22:66:e4:dd:aa:a4:75:43:26:08: c0:3c:2a:b6:f6:11:db:a9:4f:b8:e5:e7:c0:aa:bd: 1e:48:4d:6c:a5:6f:73:3f:21:02:48:9a:f0:44:98: 91:46:cb:88:68:77:7e:78:19:91:be:09:f4:b1:59: e3:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:CB:01:B5:7C:75:10:8D:5F:EF:ED:36:67:C1:42:E5:FD:7B:AF:BB X509v3 Authority Key Identifier: keyid:DD:D5:3F:52:25:ED:2F:8D:A8:D0:9E:7A:AD:98:2C:80:B6:CE:AD:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dU_UiXtL42o0J56rZgsgLbOrag.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:70:8e:8a:24:b2:04:bc:b5:86:6e:91:62:2a:e0:45:93:0b: 60:5e:c8:c9:de:0d:42:99:67:56:ee:15:3a:e7:0b:6c:42:bf: 14:a1:fc:da:94:5a:68:62:d7:5a:ae:1a:67:52:d4:00:a8:50: 39:92:92:56:9b:3c:af:1c:39:13:78:c0:f5:0c:6c:67:7b:34: c6:ff:8e:85:4d:f2:6b:04:63:4c:b0:fe:2c:4b:00:e1:da:0f: e7:0c:e1:d1:6d:cd:35:ad:ff:3d:ab:e8:7c:ae:d3:a9:f2:85: 40:f5:8d:a7:5a:ea:d3:0a:8c:3b:6e:4e:37:96:44:8b:a5:fc: 7a:3a:e4:6f:23:48:3b:42:a2:0f:b0:17:b8:cd:e8:0b:78:e5: d0:ae:e1:e2:a8:75:6a:b7:c1:6e:c3:39:f5:58:1f:9f:f1:b0: 0d:99:9f:4e:35:01:22:9b:03:4c:87:4b:69:bb:ea:60:42:ff: 61:40:57:ea:90:fc:3c:40:dc:cb:22:bf:9f:b9:ea:d4:28:37: 81:d5:63:8d:32:05:f3:ed:65:13:3d:48:78:8b:c0:92:36:85: 28:ec:6c:da:05:67:4d:e7:d5:f0:03:fe:e5:11:a8:1a:40:af: 87:fa:74:d5:4c:4a:57:35:e8:b5:79:59:b8:90:93:3a:79:04: ee:27:ec:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU4RUYxMTAvBgNVBAUTKERERDUzRjUyMjVFRDJGOERBOEQwOUU3QUFEOTgyQzgw QjZDRUFEQTgwHhcNMjUxMDE4MTcxNDEyWhcNMjUxMDI1MTcxNDEyWjAYMRYwFAYD VQQDEw02OGYzY2FlNC0xM2U2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApJfuLOCljO4KPuHMs1J9Yto1qunhh7mbMiJW88Drj9WSxWzHPxoW2KRMobNc ewDYXIj2fLGTm/TFiqTa+qphQqtNHwN44XgZIQe7/RvyL16AsRMYx11jsKXXeRRT 34YvXMXqBd2Fa7wM9yjuUBTijrvCJ2rxqEPO+7Tml+rRnHilfL23ku8njTnl09tL tkoe46sAeE5zKA9iRfTNYL7W2Q0WiQfGNwE9MS8vMOKvI9W2AK0Mv1C4Y2Ukp1pl ZgWI1mUI+da2GSJm5N2qpHVDJgjAPCq29hHbqU+45efAqr0eSE1spW9zPyECSJrw RJiRRsuIaHd+eBmRvgn0sVnjfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFPLAbV8 dRCNX+/tNmfBQuX9e6+7MB8GA1UdIwQYMBaAFN3VP1Il7S+NqNCeeq2YLIC2zq2o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NThFRi9EMjQzMzc5NjRB RUMxMUU4ODQxN0YzNEFDNEY5QUUwMi8zZFVfVWlYdEw0Mm8wSjU2clpnc2dMYk9y YWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNkVV9VaVh0TDQybzBKNTZyWmdzZ0xiT3JhZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NThFRi9EMjQzMzc5NjRBRUMxMUU4ODQxN0YzNEFDNEY5QUUwMi8zZFVfVWlYdEw0 Mm8wSjU2clpnc2dMYk9yYWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIcI6KJLIEvLWGbpFiKuBFkwtgXsjJ3g1CmWdW7hU65wtsQr8Uofza lFpoYtdarhpnUtQAqFA5kpJWmzyvHDkTeMD1DGxnezTG/46FTfJrBGNMsP4sSwDh 2g/nDOHRbc01rf89q+h8rtOp8oVA9Y2nWurTCow7bk43lkSLpfx6OuRvI0g7QqIP sBe4zegLeOXQruHiqHVqt8Fuwzn1WB+f8bANmZ9ONQEimwNMh0tpu+pgQv9hQFfq kPw8QNzLIr+fuerUKDeB1WONMgXz7WUTPUh4i8CSNoUo7GzaBWdN59XwA/7lEaga QK+H+nTVTEpXNei1eVm4kJM6eQTuJ+w6 -----END CERTIFICATE-----Generated at Mon Oct 20 05:47:09 2025 by rpki-client