$ rpki-client -vvf rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.mft File: 3HxGdMlvt2fql8B49oDvV07eu78.mft (raw, json) Hash identifier: kn/P+z5wxpr4UhjoR9tYzQuECHPmVGsolSFndhp8HNk= Subject key identifier: F7:C7:BB:0D:E9:2C:CA:25:79:7F:7F:01:3A:6A:34:10:46:ED:38:43 Authority key identifier: DC:7C:46:74:C9:6F:B7:67:EA:97:C0:78:F6:80:EF:57:4E:DE:BB:BF Certificate issuer: /CN=A917CD31/serialNumber=DC7C4674C96FB767EA97C078F680EF574EDEBBBF Certificate serial: 06B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HxGdMlvt2fql8B49oDvV07eu78.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.mft Manifest number: 06AD Signing time: Sat 18 Oct 2025 23:43:20 +0000 Manifest this update: Sat 18 Oct 2025 23:43:19 +0000 Manifest next update: Sat 25 Oct 2025 23:43:19 +0000 Files and hashes: 1: 3HxGdMlvt2fql8B49oDvV07eu78.crl (hash: OhZkOQKMAHzR8n8Kiy1VS/Qx21ovk6FQXTCqqtsLuHM=) 2: A88A17FA823C11EBB35EF50FC4F9AE02.roa (hash: w4Og6ZXZfhcGLwCGrYKzyuX9/ySsrXuevHVn0ggUgdE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.crl rsync://rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HxGdMlvt2fql8B49oDvV07eu78.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:43:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1717 (0x6b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917CD31, serialNumber=DC7C4674C96FB767EA97C078F680EF574EDEBBBF Validity Not Before: Oct 18 23:43:19 2025 GMT Not After : Oct 25 23:43:19 2025 GMT Subject: CN=68f42618-5402 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:99:67:1d:08:d1:07:60:2f:73:d5:84:69:8e: 65:c6:85:85:a6:f5:27:6e:ed:ed:7a:78:f0:3a:bb: 92:a0:9a:a2:f0:f0:bc:9a:8e:b3:dc:dd:ce:06:2e: d3:f5:74:86:d4:c5:a7:23:ec:b2:a6:38:2b:7f:c5: e6:f9:d7:a3:f9:c6:94:f4:cc:d0:70:fa:20:ff:03: a0:ff:6a:25:79:82:a0:6b:0a:95:21:01:72:f8:33: 80:d0:d4:2d:f7:64:9d:23:ab:18:1c:81:a3:ce:c9: e1:09:c7:c9:8b:8c:83:8e:4c:00:1d:f4:11:f8:b4: 93:ab:32:ac:ad:9c:92:a9:3a:47:95:9d:5d:84:fb: ed:bd:75:16:2e:81:4f:85:67:ca:61:e8:21:4b:c7: 85:70:a1:c7:08:b7:9f:f0:fb:54:a7:ad:56:b5:97: e9:37:3a:4f:b1:ad:2d:02:65:90:76:e3:ad:ec:46: e0:32:b6:e5:bc:01:67:f2:fa:83:81:9b:38:5e:bc: 4c:6a:4a:0d:d2:2a:02:36:87:e1:a8:ce:13:e0:1f: 63:8b:35:c9:1e:70:fd:60:ea:b6:7e:eb:e1:11:a3: 30:91:34:04:53:5e:cc:52:c4:19:28:7a:72:f3:dd: 1f:e0:80:d0:21:3a:4c:d2:cf:c9:e3:85:11:32:17: 58:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:C7:BB:0D:E9:2C:CA:25:79:7F:7F:01:3A:6A:34:10:46:ED:38:43 X509v3 Authority Key Identifier: keyid:DC:7C:46:74:C9:6F:B7:67:EA:97:C0:78:F6:80:EF:57:4E:DE:BB:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HxGdMlvt2fql8B49oDvV07eu78.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:d7:ba:45:01:13:9a:23:46:d5:6a:2f:f7:bb:bd:cf:f8:78: 7d:ef:bf:51:f0:13:d4:ee:b3:3d:6f:9b:15:45:d0:6e:82:9d: 73:56:09:7a:96:c7:6f:ee:8a:96:61:6e:ac:6c:34:3d:9c:19: c6:26:b9:fb:b2:24:90:8b:8e:c9:3a:64:a6:96:36:ac:3c:2f: b6:78:e9:79:aa:b2:e0:56:35:d1:b1:3e:b4:4e:ac:47:fd:df: e7:c3:dd:f7:63:93:b9:07:af:49:fa:0f:76:15:96:00:28:f9: ea:e5:24:e0:25:2b:cd:7b:b4:bf:40:5a:0f:3b:b6:f9:ac:03: 63:53:01:e8:65:c4:b0:7d:8c:d5:20:49:24:81:93:72:b2:ad: 68:1a:df:47:ca:60:ad:e9:5e:8d:8b:d2:c4:24:76:5f:63:3a: 35:72:c7:63:7d:34:c0:04:7f:f3:88:10:f3:11:b6:69:a6:48: df:e6:da:38:76:a4:7d:c7:c4:b5:bc:87:1c:fb:89:70:b6:6e: a9:52:33:8c:74:a3:c8:e2:06:14:b6:6c:c8:52:14:e9:29:ec: cf:69:ab:b6:b1:3e:35:a1:cf:5a:96:44:cb:62:47:55:a4:f6: ac:c4:2b:40:ee:37:a0:20:f3:dc:a5:39:07:48:23:71:d7:a2: 6c:9f:c3:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0NEMzExMTAvBgNVBAUTKERDN0M0Njc0Qzk2RkI3NjdFQTk3QzA3OEY2ODBFRjU3 NEVERUJCQkYwHhcNMjUxMDE4MjM0MzE5WhcNMjUxMDI1MjM0MzE5WjAYMRYwFAYD VQQDEw02OGY0MjYxOC01NDAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApplnHQjRB2Avc9WEaY5lxoWFpvUnbu3tenjwOruSoJqi8PC8mo6z3N3OBi7T 9XSG1MWnI+yypjgrf8Xm+dej+caU9MzQcPog/wOg/2oleYKgawqVIQFy+DOA0NQt 92SdI6sYHIGjzsnhCcfJi4yDjkwAHfQR+LSTqzKsrZySqTpHlZ1dhPvtvXUWLoFP hWfKYeghS8eFcKHHCLef8PtUp61WtZfpNzpPsa0tAmWQduOt7EbgMrblvAFn8vqD gZs4XrxMakoN0ioCNofhqM4T4B9jizXJHnD9YOq2fuvhEaMwkTQEU17MUsQZKHpy 890f4IDQITpM0s/J44URMhdY4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPfHuw3p LMoleX9/ATpqNBBG7ThDMB8GA1UdIwQYMBaAFNx8RnTJb7dn6pfAePaA71dO3ru/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Q0QzMS83NUY1N0IxMDgy M0ExMUVCOEFFMjM2MEFDNEY5QUUwMi8zSHhHZE1sdnQyZnFsOEI0OW9EdlYwN2V1 NzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNIeEdkTWx2dDJmcWw4QjQ5b0R2VjA3ZXU3OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Q0QzMS83NUY1N0IxMDgyM0ExMUVCOEFFMjM2MEFDNEY5QUUwMi8zSHhHZE1sdnQy ZnFsOEI0OW9EdlYwN2V1NzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJ17pFAROaI0bVai/3u73P+Hh9779R8BPU7rM9b5sVRdBugp1zVgl6 lsdv7oqWYW6sbDQ9nBnGJrn7siSQi47JOmSmljasPC+2eOl5qrLgVjXRsT60TqxH /d/nw933Y5O5B69J+g92FZYAKPnq5STgJSvNe7S/QFoPO7b5rANjUwHoZcSwfYzV IEkkgZNysq1oGt9HymCt6V6Ni9LEJHZfYzo1csdjfTTABH/ziBDzEbZppkjf5to4 dqR9x8S1vIcc+4lwtm6pUjOMdKPI4gYUtmzIUhTpKezPaau2sT41oc9alkTLYkdV pPasxCtA7jegIPPcpTkHSCNx16Jsn8Pd -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:36 2025 by rpki-client