$ rpki-client -vvf rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/3FejmXtffOj7ybTZiz1F1jMHcRg.mft File: 3FejmXtffOj7ybTZiz1F1jMHcRg.mft (raw, json) Hash identifier: ImPnfI9fArMsi2F/oVxgEVheipgfjh+gM6SWBqS+VQc= Subject key identifier: A7:5B:E6:6F:66:F8:5C:14:1B:08:2B:97:E2:2E:7A:FF:4E:03:8D:D8 Authority key identifier: DC:57:A3:99:7B:5F:7C:E8:FB:C9:B4:D9:8B:3D:45:D6:33:07:71:18 Certificate issuer: /CN=A917CABB/serialNumber=DC57A3997B5F7CE8FBC9B4D98B3D45D633077118 Certificate serial: 0C63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FejmXtffOj7ybTZiz1F1jMHcRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/3FejmXtffOj7ybTZiz1F1jMHcRg.mft Manifest number: 0C5B Signing time: Sat 18 Oct 2025 19:21:36 +0000 Manifest this update: Sat 18 Oct 2025 19:21:36 +0000 Manifest next update: Sat 25 Oct 2025 19:21:36 +0000 Files and hashes: 1: 3FejmXtffOj7ybTZiz1F1jMHcRg.crl (hash: ayvN86AyhOlExn8cEsAHsZ0mAwnPSKEcexYWGUx0Ruc=) 2: 17BA5658D1FA11EDA0A31C2FC4F9AE02.roa (hash: 1qzItKWorYUUOmMK79qcFmJ05vCRXkNln617yx1hDtI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/3FejmXtffOj7ybTZiz1F1jMHcRg.crl rsync://rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/3FejmXtffOj7ybTZiz1F1jMHcRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FejmXtffOj7ybTZiz1F1jMHcRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:21:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3171 (0xc63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917CABB, serialNumber=DC57A3997B5F7CE8FBC9B4D98B3D45D633077118 Validity Not Before: Oct 18 19:21:36 2025 GMT Not After : Oct 25 19:21:36 2025 GMT Subject: CN=68f3e8c0-b2b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:8d:32:7b:48:e7:92:d7:6c:17:08:a6:a6:b0: 3a:a5:d2:d3:d0:7f:57:a8:cf:3e:39:e5:c3:53:9c: 45:d0:69:2c:18:68:e1:b5:86:bc:5d:2d:0a:4c:24: 8b:59:98:55:f0:72:53:33:2c:09:d6:41:29:01:35: 4e:39:42:b9:e4:2c:80:82:f7:28:f7:75:5b:23:e7: 56:d3:09:5b:00:ac:cc:41:9d:21:7c:45:72:75:d5: 3c:d3:a7:26:89:48:51:d6:9c:ec:ec:aa:a0:50:ce: 53:75:64:f2:d7:e5:7c:85:af:ec:a1:e9:6f:0f:cc: 41:27:d6:9d:08:69:ca:c6:8d:94:90:92:1a:09:da: 87:13:48:62:e7:09:a0:a2:24:29:88:92:c7:8f:bf: 52:23:e6:6a:4c:10:86:11:75:98:85:97:18:19:c2: eb:ee:e6:0c:f8:5e:1c:8e:47:07:4e:86:bd:3c:f9: f7:f2:80:1c:02:3d:c5:7b:11:a6:96:fb:be:3b:fb: 06:5c:f1:2a:e0:48:19:34:39:fa:45:2c:c9:e2:4c: 02:c4:9d:c8:ef:9b:29:13:fb:64:20:25:f1:df:40: e8:b2:37:51:4d:0c:ea:ef:ed:b5:e6:dc:5d:25:8b: 05:06:af:ef:f1:66:93:4a:5e:5c:8e:02:38:94:9d: b8:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:5B:E6:6F:66:F8:5C:14:1B:08:2B:97:E2:2E:7A:FF:4E:03:8D:D8 X509v3 Authority Key Identifier: keyid:DC:57:A3:99:7B:5F:7C:E8:FB:C9:B4:D9:8B:3D:45:D6:33:07:71:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/3FejmXtffOj7ybTZiz1F1jMHcRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FejmXtffOj7ybTZiz1F1jMHcRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/3FejmXtffOj7ybTZiz1F1jMHcRg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:bf:8b:69:71:32:cf:c1:2f:8b:09:69:6d:94:27:90:ec:bf: 10:2b:a3:b6:b4:27:09:15:88:45:e0:c7:0c:91:a1:00:da:ed: f7:82:7a:d9:66:9f:bf:b1:de:65:82:fb:03:c9:86:6e:07:68: 13:3e:10:ac:4d:9f:fd:8d:fa:4b:65:b4:5e:c6:f2:33:e5:74: ab:83:92:37:f1:7b:e6:a5:2e:a5:32:15:f2:d8:0d:a9:91:76: 56:20:65:2b:35:75:9b:9a:66:c0:39:06:5b:d2:2c:cf:3d:bb: c4:e7:6d:81:6e:08:70:d9:6b:dc:12:97:5f:8a:06:ae:bc:bb: 2d:46:05:45:2a:85:3a:c2:57:05:a7:d0:1a:a7:0e:20:fc:d1: c6:c1:04:6e:a8:c6:9f:f1:f0:1e:b8:6b:b6:f8:8a:87:4b:5a: 03:87:ae:1b:de:31:21:1d:a3:42:6c:90:fb:84:dd:d5:60:f0: bf:33:b6:cf:b6:a9:2d:da:f7:39:6d:a5:29:bd:dc:fc:01:35: 9e:ba:27:bf:73:50:0e:46:55:51:7f:2c:4f:f2:47:89:20:9a: 41:4f:59:97:0e:40:11:4e:0c:3d:11:ee:5c:77:d7:7b:d8:f6: a3:97:72:1c:6f:ab:a9:ef:c8:f3:43:55:09:6e:9c:68:77:df: f6:f6:ed:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0NBQkIxMTAvBgNVBAUTKERDNTdBMzk5N0I1RjdDRThGQkM5QjREOThCM0Q0NUQ2 MzMwNzcxMTgwHhcNMjUxMDE4MTkyMTM2WhcNMjUxMDI1MTkyMTM2WjAYMRYwFAYD VQQDEw02OGYzZThjMC1iMmIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzY0ye0jnktdsFwimprA6pdLT0H9XqM8+OeXDU5xF0GksGGjhtYa8XS0KTCSL WZhV8HJTMywJ1kEpATVOOUK55CyAgvco93VbI+dW0wlbAKzMQZ0hfEVyddU806cm iUhR1pzs7KqgUM5TdWTy1+V8ha/soelvD8xBJ9adCGnKxo2UkJIaCdqHE0hi5wmg oiQpiJLHj79SI+ZqTBCGEXWYhZcYGcLr7uYM+F4cjkcHToa9PPn38oAcAj3FexGm lvu+O/sGXPEq4EgZNDn6RSzJ4kwCxJ3I75spE/tkICXx30DosjdRTQzq7+215txd JYsFBq/v8WaTSl5cjgI4lJ24pwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKdb5m9m +FwUGwgrl+Iuev9OA43YMB8GA1UdIwQYMBaAFNxXo5l7X3zo+8m02Ys9RdYzB3EY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Q0FCQi8wNzY3NUYxRTBG NjkxMUVBQTlENTI2NTBDNEY5QUUwMi8zRmVqbVh0ZmZPajd5YlRaaXoxRjFqTUhj UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNGZWptWHRmZk9qN3liVFppejFGMWpNSGNSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Q0FCQi8wNzY3NUYxRTBGNjkxMUVBQTlENTI2NTBDNEY5QUUwMi8zRmVqbVh0ZmZP ajd5YlRaaXoxRjFqTUhjUmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjv4tpcTLPwS+LCWltlCeQ7L8QK6O2tCcJFYhF4McMkaEA2u33gnrZ Zp+/sd5lgvsDyYZuB2gTPhCsTZ/9jfpLZbRexvIz5XSrg5I38XvmpS6lMhXy2A2p kXZWIGUrNXWbmmbAOQZb0izPPbvE522Bbghw2WvcEpdfigauvLstRgVFKoU6wlcF p9Aapw4g/NHGwQRuqMaf8fAeuGu2+IqHS1oDh64b3jEhHaNCbJD7hN3VYPC/M7bP tqkt2vc5baUpvdz8ATWeuie/c1AORlVRfyxP8keJIJpBT1mXDkARTgw9Ee5cd9d7 2Pajl3Icb6up78jzQ1UJbpxod9/29u1j -----END CERTIFICATE-----Generated at Mon Oct 20 19:13:27 2025 by rpki-client