$ rpki-client -vvf rpki.apnic.net/member_repository/A917A2E5/B0B28FA68C9711F0A009D572C4F9AE02/m3GXbfcKU0c1AkN1KyIJIeANL6E.mft File: m3GXbfcKU0c1AkN1KyIJIeANL6E.mft (raw, json) Hash identifier: cs5O3hs4+I09rnMaC/lvpOhpe5dO8HNenRxhCtD1i5A= Subject key identifier: C7:C1:8F:E8:07:65:D3:37:21:D8:31:04:4D:34:FF:26:C4:E9:AE:35 Authority key identifier: 9B:71:97:6D:F7:0A:53:47:35:02:43:75:2B:22:09:21:E0:0D:2F:A1 Certificate issuer: /CN=A917A2E5/serialNumber=9B71976DF70A5347350243752B220921E00D2FA1 Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m3GXbfcKU0c1AkN1KyIJIeANL6E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A2E5/B0B28FA68C9711F0A009D572C4F9AE02/m3GXbfcKU0c1AkN1KyIJIeANL6E.mft Manifest number: 16 Signing time: Sun 19 Oct 2025 11:26:30 +0000 Manifest this update: Sun 19 Oct 2025 11:26:29 +0000 Manifest next update: Sun 26 Oct 2025 11:26:29 +0000 Files and hashes: 1: m3GXbfcKU0c1AkN1KyIJIeANL6E.crl (hash: w4oWNvWisOXY4FuRX69Tq/iBOLXLfwykIV533GJ2gWs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A2E5/B0B28FA68C9711F0A009D572C4F9AE02/m3GXbfcKU0c1AkN1KyIJIeANL6E.crl rsync://rpki.apnic.net/member_repository/A917A2E5/B0B28FA68C9711F0A009D572C4F9AE02/m3GXbfcKU0c1AkN1KyIJIeANL6E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m3GXbfcKU0c1AkN1KyIJIeANL6E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:26:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A2E5, serialNumber=9B71976DF70A5347350243752B220921E00D2FA1 Validity Not Before: Oct 19 11:26:29 2025 GMT Not After : Oct 26 11:26:29 2025 GMT Subject: CN=68f4cae5-681d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:25:c1:18:fc:93:32:83:fd:5b:53:33:35:61: 1f:4d:a2:2a:b9:da:7e:bc:66:74:52:8c:78:ba:ca: 6c:e2:73:83:a5:b1:d3:a1:44:de:92:c7:d7:d7:4a: 07:43:e5:58:e3:14:8a:5d:60:ac:8d:6c:89:d9:4d: 20:e9:5f:44:a2:65:b8:a3:35:52:3e:f9:f5:d6:75: d6:f7:0a:f0:89:72:9a:ac:14:61:3e:a8:d5:5a:ac: 54:55:31:46:e7:b8:2d:5a:f3:97:7b:ac:b6:db:71: e1:41:16:e6:af:3e:73:a2:40:1d:d9:cc:78:45:a6: 05:1f:95:0b:b4:5a:c5:40:ca:5e:7a:5f:2e:17:85: d4:59:d2:c6:92:e2:9d:82:3a:cd:65:e2:b8:c4:97: fd:00:c3:0f:f9:e1:28:5e:88:3c:cf:0f:d6:58:04: bd:82:70:62:3e:ea:7b:39:b9:ea:79:b9:b2:45:12: 2e:07:2f:24:d9:7e:7f:c5:1b:50:21:25:35:73:97: 2d:0e:91:6a:43:e0:a6:bf:74:4e:dd:a0:20:c6:8b: 9b:f7:bf:06:12:ca:09:1e:20:67:7d:e1:dc:fc:62: 60:c7:1c:dc:66:be:86:fa:32:b1:99:ed:85:e8:01: 8e:c4:57:35:59:b6:cb:ed:99:c6:3e:41:87:d0:d0: f5:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:C1:8F:E8:07:65:D3:37:21:D8:31:04:4D:34:FF:26:C4:E9:AE:35 X509v3 Authority Key Identifier: keyid:9B:71:97:6D:F7:0A:53:47:35:02:43:75:2B:22:09:21:E0:0D:2F:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A2E5/B0B28FA68C9711F0A009D572C4F9AE02/m3GXbfcKU0c1AkN1KyIJIeANL6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m3GXbfcKU0c1AkN1KyIJIeANL6E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A2E5/B0B28FA68C9711F0A009D572C4F9AE02/m3GXbfcKU0c1AkN1KyIJIeANL6E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:e1:6b:cc:a3:35:cc:4b:8c:35:4b:be:43:ee:63:e6:db:f7: 46:f8:3e:ec:3d:eb:0d:bf:15:fd:2f:ae:51:75:ff:39:75:19: 27:84:03:48:49:53:43:36:c7:24:f5:09:55:08:c6:f2:ec:e5: b9:1a:4d:fa:4a:7b:51:b5:a9:67:59:2c:c7:2f:e3:50:1d:79: 53:7f:7b:70:a8:03:45:a3:c5:36:04:c4:3c:57:7d:7c:63:b2: f5:34:de:98:da:f7:a0:f9:1f:46:ed:a6:ab:c2:45:a0:d0:ac: b4:a9:c4:29:8a:33:0a:62:2a:51:5b:84:a5:ef:4e:c5:7b:28: 38:7a:04:ae:ba:19:22:3d:70:b2:ce:d5:dc:aa:a1:ea:42:1f: 40:05:78:17:0f:93:28:08:23:0a:cf:08:fa:ba:4c:3b:1f:a1: 74:75:c9:cf:fa:81:8c:03:d0:e8:dd:a5:4b:04:af:1e:9f:85: 9e:5c:a1:9c:6b:0d:ea:81:93:dc:25:be:d7:63:40:0d:5f:2c: d2:6d:4b:43:67:8d:f5:7d:bf:58:41:3a:1c:18:6e:a9:93:88: 96:01:aa:4a:ed:82:ac:1e:f8:7f:d9:70:fb:86:21:b9:8a:5e: c0:e0:be:1b:ef:cf:a6:68:85:1f:8f:ee:70:ad:c9:c5:57:db: 24:88:22:7c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QTJFNTExMC8GA1UEBRMoOUI3MTk3NkRGNzBBNTM0NzM1MDI0Mzc1MkIyMjA5MjFF MDBEMkZBMTAeFw0yNTEwMTkxMTI2MjlaFw0yNTEwMjYxMTI2MjlaMBgxFjAUBgNV BAMTDTY4ZjRjYWU1LTY4MWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHJcEY/JMyg/1bUzM1YR9Noiq52n68ZnRSjHi6ymzic4OlsdOhRN6Sx9fXSgdD 5VjjFIpdYKyNbInZTSDpX0SiZbijNVI++fXWddb3CvCJcpqsFGE+qNVarFRVMUbn uC1a85d7rLbbceFBFuavPnOiQB3ZzHhFpgUflQu0WsVAyl56Xy4XhdRZ0saS4p2C Os1l4rjEl/0Aww/54SheiDzPD9ZYBL2CcGI+6ns5uep5ubJFEi4HLyTZfn/FG1Ah JTVzly0OkWpD4Ka/dE7doCDGi5v3vwYSygkeIGd94dz8YmDHHNxmvob6MrGZ7YXo AY7EVzVZtsvtmcY+QYfQ0PWJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUx8GP6Adl 0zch2DEETTT/JsTprjUwHwYDVR0jBBgwFoAUm3GXbfcKU0c1AkN1KyIJIeANL6Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdBMkU1L0IwQjI4RkE2OEM5 NzExRjBBMDA5RDU3MkM0RjlBRTAyL20zR1hiZmNLVTBjMUFrTjFLeUlKSWVBTkw2 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbTNHWGJmY0tVMGMxQWtOMUt5SUpJZUFOTDZFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdB MkU1L0IwQjI4RkE2OEM5NzExRjBBMDA5RDU3MkM0RjlBRTAyL20zR1hiZmNLVTBj MUFrTjFLeUlKSWVBTkw2RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH3ha8yjNcxLjDVLvkPuY+bb90b4Puw96w2/Ff0vrlF1/zl1GSeEA0hJ U0M2xyT1CVUIxvLs5bkaTfpKe1G1qWdZLMcv41AdeVN/e3CoA0WjxTYExDxXfXxj svU03pja96D5H0btpqvCRaDQrLSpxCmKMwpiKlFbhKXvTsV7KDh6BK66GSI9cLLO 1dyqoepCH0AFeBcPkygIIwrPCPq6TDsfoXR1yc/6gYwD0OjdpUsErx6fhZ5coZxr DeqBk9wlvtdjQA1fLNJtS0NnjfV9v1hBOhwYbqmTiJYBqkrtgqwe+H/ZcPuGIbmK XsDgvhvvz6ZohR+P7nCtycVX2ySIInw= -----END CERTIFICATE-----Generated at Mon Oct 20 10:10:29 2025 by rpki-client