$ rpki-client -vvf rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.mft File: A3uPBfSQLZ2otCTDk0CGXz2smyY.mft (raw, json) Hash identifier: PaPAwXBMIcdH2cyOLCJsJ+l8Rx6NVySXiitege3wcCI= Subject key identifier: AF:9A:C4:1F:BC:CD:7A:A2:E5:2A:6A:DC:8E:9B:20:CD:7E:22:7D:B2 Authority key identifier: 03:7B:8F:05:F4:90:2D:9D:A8:B4:24:C3:93:40:86:5F:3D:AC:9B:26 Certificate issuer: /CN=A9167D07/serialNumber=037B8F05F4902D9DA8B424C39340865F3DAC9B26 Certificate serial: 1675 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3uPBfSQLZ2otCTDk0CGXz2smyY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.mft Manifest number: 165F Signing time: Sat 18 Oct 2025 17:10:25 +0000 Manifest this update: Sat 18 Oct 2025 17:10:24 +0000 Manifest next update: Sat 25 Oct 2025 17:10:24 +0000 Files and hashes: 1: A3uPBfSQLZ2otCTDk0CGXz2smyY.crl (hash: JIgOU3Dpo6FQntkVRdbQLTr8yE8RBr4tmdADCZG5g10=) 2: EFE8CDF6C8D111EE95249F25C4F9AE02.roa (hash: 8hTBYho7Wl/PAQj3XMQdwTxzLXCHLSq50BmnZke9xMc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.crl rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3uPBfSQLZ2otCTDk0CGXz2smyY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:10:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5749 (0x1675) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167D07, serialNumber=037B8F05F4902D9DA8B424C39340865F3DAC9B26 Validity Not Before: Oct 18 17:10:24 2025 GMT Not After : Oct 25 17:10:24 2025 GMT Subject: CN=68f3ca00-a7e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6f:ed:d8:06:19:c9:f5:57:81:df:fb:58:f5: 3d:cf:ba:b5:de:ff:71:86:fb:9d:e4:66:74:de:2e: d2:e2:49:41:37:02:08:ae:0c:8c:4b:82:6e:7b:7c: 90:68:f2:4b:bd:9f:ab:d5:5f:26:35:4c:0c:0a:fb: 9b:68:60:c8:0f:f9:c1:fa:97:83:ef:07:ee:9a:08: 68:8b:bc:7d:8c:99:cf:6a:c6:37:82:da:67:c7:13: 13:ea:5b:af:71:5d:55:d2:4f:99:27:63:d3:7f:7b: 3a:f9:1e:2b:ca:01:f7:57:15:07:a9:a0:9e:41:a0: 46:b2:05:40:07:96:77:ae:bd:2a:61:6f:23:a1:97: 60:30:a9:94:85:de:cf:ef:40:7e:1f:67:ec:ca:a5: 2c:4c:25:94:1b:e7:53:e8:ba:35:5f:3c:ad:e6:a1: 6d:a2:a4:0c:77:fc:3d:5a:ac:c5:f2:cf:10:6c:53: 51:22:cb:cd:76:1b:43:9d:db:45:e7:d3:93:89:eb: 08:2a:91:2b:51:81:03:a8:e8:10:bf:63:52:d8:16: bf:67:c4:aa:3b:6b:28:1c:7f:1d:ab:d5:ff:c1:2d: 9b:e5:78:3a:d8:2f:be:1b:56:86:5e:43:f1:92:66: 10:d1:a1:15:47:f0:62:6f:c5:7e:f4:15:69:99:e8: 84:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:9A:C4:1F:BC:CD:7A:A2:E5:2A:6A:DC:8E:9B:20:CD:7E:22:7D:B2 X509v3 Authority Key Identifier: keyid:03:7B:8F:05:F4:90:2D:9D:A8:B4:24:C3:93:40:86:5F:3D:AC:9B:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3uPBfSQLZ2otCTDk0CGXz2smyY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:d4:fe:a4:18:af:77:da:fb:42:d3:13:c5:31:8a:72:89:46: 0a:01:6d:7a:00:f0:62:5f:d8:15:6e:55:fb:13:dc:22:f9:ae: 1c:3a:27:e9:84:c0:43:df:ca:36:0f:a3:5d:f9:25:35:b5:eb: a0:19:a9:f9:07:56:a9:9a:ab:c9:fa:d3:88:02:d6:32:2a:f4: 86:d9:f3:4c:fb:c0:05:6b:e5:72:11:b8:bf:f9:86:d6:57:d7: 8b:11:d1:be:ef:dc:b2:d4:e8:32:67:fa:d0:4b:40:82:21:78: ea:93:cd:a9:a4:a8:49:35:0d:9f:6a:b4:6e:d5:00:ea:4b:9a: 9a:66:05:c9:38:6b:4c:13:4e:de:a6:d1:dd:7f:93:6d:e2:65: 09:d9:ec:89:92:90:a8:1d:ce:57:ce:a0:fa:e4:e2:b1:cf:0c: 92:8e:76:6a:a9:59:01:04:5f:f7:ae:32:b2:03:ee:e5:bc:c0: 5b:d4:f0:71:e3:f5:fb:3c:11:0f:87:69:a0:16:f7:7a:44:c6: d2:f4:0c:ad:5f:49:c5:a6:3c:80:7e:ce:e4:19:66:9f:34:47: a6:22:17:48:ee:87:f6:7d:dc:38:90:b1:79:4f:b1:f0:e8:2d: 93:4e:4a:a7:2e:b1:0f:c5:bc:72:18:57:f8:0f:fc:d1:67:c8: 4a:8e:fe:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFnUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdEMDcxMTAvBgNVBAUTKDAzN0I4RjA1RjQ5MDJEOURBOEI0MjRDMzkzNDA4NjVG M0RBQzlCMjYwHhcNMjUxMDE4MTcxMDI0WhcNMjUxMDI1MTcxMDI0WjAYMRYwFAYD VQQDEw02OGYzY2EwMC1hN2U0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsW/t2AYZyfVXgd/7WPU9z7q13v9xhvud5GZ03i7S4klBNwIIrgyMS4Jue3yQ aPJLvZ+r1V8mNUwMCvubaGDID/nB+peD7wfumghoi7x9jJnPasY3gtpnxxMT6luv cV1V0k+ZJ2PTf3s6+R4rygH3VxUHqaCeQaBGsgVAB5Z3rr0qYW8joZdgMKmUhd7P 70B+H2fsyqUsTCWUG+dT6Lo1Xzyt5qFtoqQMd/w9WqzF8s8QbFNRIsvNdhtDndtF 59OTiesIKpErUYEDqOgQv2NS2Ba/Z8SqO2soHH8dq9X/wS2b5Xg62C++G1aGXkPx kmYQ0aEVR/Bib8V+9BVpmeiElQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK+axB+8 zXqi5Spq3I6bIM1+In2yMB8GA1UdIwQYMBaAFAN7jwX0kC2dqLQkw5NAhl89rJsm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0QwNy9ENzRBRTI3NDFC QTkxMUU4QThGNTc4NjVDNEY5QUUwMi9BM3VQQmZTUUxaMm90Q1REazBDR1h6MnNt eVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0EzdVBCZlNRTFoyb3RDVERrMENHWHoyc215WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0QwNy9ENzRBRTI3NDFCQTkxMUU4QThGNTc4NjVDNEY5QUUwMi9BM3VQQmZTUUxa Mm90Q1REazBDR1h6MnNteVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCq1P6kGK932vtC0xPFMYpyiUYKAW16APBiX9gVblX7E9wi+a4cOifp hMBD38o2D6Nd+SU1teugGan5B1apmqvJ+tOIAtYyKvSG2fNM+8AFa+VyEbi/+YbW V9eLEdG+79yy1OgyZ/rQS0CCIXjqk82ppKhJNQ2farRu1QDqS5qaZgXJOGtME07e ptHdf5Nt4mUJ2eyJkpCoHc5XzqD65OKxzwySjnZqqVkBBF/3rjKyA+7lvMBb1PBx 4/X7PBEPh2mgFvd6RMbS9AytX0nFpjyAfs7kGWafNEemIhdI7of2fdw4kLF5T7Hw 6C2TTkqnLrEPxbxyGFf4D/zRZ8hKjv4e -----END CERTIFICATE-----Generated at Mon Oct 20 04:11:47 2025 by rpki-client