$ rpki-client -vvf rpki.apnic.net/member_repository/A916CDAC/78D593188F3911F08632A039C4F9AE02/3fyp0DSUWlkkEWE31ih38M5Svxs.mft File: 3fyp0DSUWlkkEWE31ih38M5Svxs.mft (raw, json) Hash identifier: 7Dv9KBjnwN1foAWoJaHr98MkdZuqhufkmG/bUlq5eh8= Subject key identifier: 4E:C0:5C:D8:E7:8D:35:0E:37:08:67:0F:B8:05:AB:C4:D0:B2:FC:50 Authority key identifier: DD:FC:A9:D0:34:94:5A:59:24:11:61:37:D6:28:77:F0:CE:52:BF:1B Certificate issuer: /CN=A916CDAC/serialNumber=DDFCA9D034945A5924116137D62877F0CE52BF1B Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3fyp0DSUWlkkEWE31ih38M5Svxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CDAC/78D593188F3911F08632A039C4F9AE02/3fyp0DSUWlkkEWE31ih38M5Svxs.mft Manifest number: 1D Signing time: Sun 19 Oct 2025 11:28:34 +0000 Manifest this update: Sun 19 Oct 2025 11:28:34 +0000 Manifest next update: Sun 26 Oct 2025 11:28:34 +0000 Files and hashes: 1: 3fyp0DSUWlkkEWE31ih38M5Svxs.crl (hash: Ui6anBZPrfb6s5wZGu4Bc9U//EQu6ITfd9ur4JTXiIM=) 2: 7AA2F5228F4411F0830D0B1EC4F9AE02.roa (hash: vQDu9wcINkcPzWdSO/DWuCCS5k2RLBjzO/0TA4C/YFM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CDAC/78D593188F3911F08632A039C4F9AE02/3fyp0DSUWlkkEWE31ih38M5Svxs.crl rsync://rpki.apnic.net/member_repository/A916CDAC/78D593188F3911F08632A039C4F9AE02/3fyp0DSUWlkkEWE31ih38M5Svxs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3fyp0DSUWlkkEWE31ih38M5Svxs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:28:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CDAC, serialNumber=DDFCA9D034945A5924116137D62877F0CE52BF1B Validity Not Before: Oct 19 11:28:34 2025 GMT Not After : Oct 26 11:28:34 2025 GMT Subject: CN=68f4cb62-6ef9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a0:aa:29:d6:57:09:11:40:05:5a:1f:b7:27: ed:2f:8e:ae:dd:6c:91:b5:e0:ab:83:04:8b:66:0a: dd:6e:aa:89:d5:2b:25:26:34:f8:17:fe:56:2f:65: 5c:2a:43:59:e8:7c:c4:fa:26:8f:07:09:aa:33:f7: 61:fb:ed:71:3c:86:71:e1:8b:9c:06:c9:07:21:73: ed:1c:ec:06:d7:2b:42:9a:94:3c:97:dd:aa:25:95: 5f:21:98:2a:d3:95:3e:1f:2d:b1:f4:95:19:1f:7c: 54:7b:46:03:b4:dc:3a:ce:7b:2a:d8:cb:e1:0c:04: 99:b5:5d:e7:1c:d4:2c:df:bc:c7:ae:c4:9e:90:3a: df:a6:df:59:57:6e:69:5f:07:2e:2f:f1:71:b7:e1: 98:98:63:0b:84:56:2c:14:a6:bc:8e:a5:5b:49:9c: dc:09:9c:9b:24:af:23:11:3f:d5:7a:c1:b6:cf:2f: c1:0d:ca:6c:e6:01:0c:5b:71:ab:57:58:09:89:3a: b6:6f:a3:2b:06:89:13:1e:47:34:53:34:d4:9c:1d: ad:f3:bc:e5:8d:ad:49:b9:5a:7f:57:83:cf:9f:dd: 12:b6:64:5f:04:fa:a8:f6:46:4d:81:4c:6a:0b:06: b2:28:6e:3b:b2:ae:f5:a1:e1:ad:ce:af:32:c4:04: 58:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:C0:5C:D8:E7:8D:35:0E:37:08:67:0F:B8:05:AB:C4:D0:B2:FC:50 X509v3 Authority Key Identifier: keyid:DD:FC:A9:D0:34:94:5A:59:24:11:61:37:D6:28:77:F0:CE:52:BF:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CDAC/78D593188F3911F08632A039C4F9AE02/3fyp0DSUWlkkEWE31ih38M5Svxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3fyp0DSUWlkkEWE31ih38M5Svxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CDAC/78D593188F3911F08632A039C4F9AE02/3fyp0DSUWlkkEWE31ih38M5Svxs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:5c:9e:7c:79:51:f3:0a:45:fb:4d:b1:1a:a7:a0:f2:a3:03: 47:2b:9d:61:0a:65:da:04:81:ec:9a:21:24:3d:c7:ec:e6:38: c2:ef:d9:be:2a:2f:b6:e2:e4:52:0a:0d:a4:34:be:03:a2:c1: b8:d6:fe:fb:a7:a9:a5:03:60:46:52:4a:5b:81:8a:9d:1d:3a: d6:10:1d:d9:04:57:79:77:03:5d:24:db:9a:97:19:b8:17:c7: 57:9d:fb:c6:e0:ca:c7:73:21:b2:8f:c1:a4:15:75:01:7d:fd: 87:25:41:52:6e:4f:01:46:02:1d:80:db:06:e7:a5:2a:9c:fa: 13:33:2a:2c:db:bb:7b:a6:d2:2b:be:4f:e6:0c:8d:8b:e0:e2: 38:d9:63:0f:02:bc:17:d2:a0:8e:dd:38:b4:e4:2b:17:71:7c: 5e:25:ef:66:32:71:40:0d:9d:34:56:a7:ea:6d:9a:e0:82:c4: 1d:7e:af:db:65:23:ae:cc:a4:77:95:13:f9:91:c7:b8:53:76: 36:84:f3:17:6d:3e:d8:81:94:cf:65:37:1c:66:1c:2c:5f:e2: 28:0a:c5:e8:8d:1f:e7:59:28:ce:42:5d:e2:f4:07:4c:e4:d8: 6e:8e:85:9f:54:43:17:6f:02:dd:5d:6b:dd:ca:e9:da:91:e8: 79:18:b5:a5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 Q0RBQzExMC8GA1UEBRMoRERGQ0E5RDAzNDk0NUE1OTI0MTE2MTM3RDYyODc3RjBD RTUyQkYxQjAeFw0yNTEwMTkxMTI4MzRaFw0yNTEwMjYxMTI4MzRaMBgxFjAUBgNV BAMTDTY4ZjRjYjYyLTZlZjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFoKop1lcJEUAFWh+3J+0vjq7dbJG14KuDBItmCt1uqonVKyUmNPgX/lYvZVwq Q1nofMT6Jo8HCaoz92H77XE8hnHhi5wGyQchc+0c7AbXK0KalDyX3aollV8hmCrT lT4fLbH0lRkffFR7RgO03DrOeyrYy+EMBJm1Xecc1CzfvMeuxJ6QOt+m31lXbmlf By4v8XG34ZiYYwuEViwUpryOpVtJnNwJnJskryMRP9V6wbbPL8ENymzmAQxbcatX WAmJOrZvoysGiRMeRzRTNNScHa3zvOWNrUm5Wn9Xg8+f3RK2ZF8E+qj2Rk2BTGoL BrIobjuyrvWh4a3OrzLEBFjJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTsBc2OeN NQ43CGcPuAWrxNCy/FAwHwYDVR0jBBgwFoAU3fyp0DSUWlkkEWE31ih38M5Svxsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZDREFDLzc4RDU5MzE4OEYz OTExRjA4NjMyQTAzOUM0RjlBRTAyLzNmeXAwRFNVV2xra0VXRTMxaWgzOE01U3Z4 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvM2Z5cDBEU1VXbGtrRVdFMzFpaDM4TTVTdnhzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZD REFDLzc4RDU5MzE4OEYzOTExRjA4NjMyQTAzOUM0RjlBRTAyLzNmeXAwRFNVV2xr a0VXRTMxaWgzOE01U3Z4cy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC9cnnx5UfMKRftNsRqnoPKjA0crnWEKZdoEgeyaISQ9x+zmOMLv2b4q L7bi5FIKDaQ0vgOiwbjW/vunqaUDYEZSSluBip0dOtYQHdkEV3l3A10k25qXGbgX x1ed+8bgysdzIbKPwaQVdQF9/YclQVJuTwFGAh2A2wbnpSqc+hMzKizbu3um0iu+ T+YMjYvg4jjZYw8CvBfSoI7dOLTkKxdxfF4l72YycUANnTRWp+ptmuCCxB1+r9tl I67MpHeVE/mRx7hTdjaE8xdtPtiBlM9lNxxmHCxf4igKxeiNH+dZKM5CXeL0B0zk 2G6OhZ9UQxdvAt1da93K6dqR6HkYtaU= -----END CERTIFICATE-----Generated at Mon Oct 20 16:09:25 2025 by rpki-client