$ rpki-client -vvf rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.mft File: 3cXbOB_x7MpblaKFFHktzbpJGCs.mft (raw, json) Hash identifier: QzbSHP8jW/cT3Od6Ks7RoZfUFGTEO6ijqDAtCZI9cqw= Subject key identifier: 4A:D6:A7:FA:63:86:7D:59:DF:67:02:F4:65:69:E4:B4:3D:C4:94:7B Authority key identifier: DD:C5:DB:38:1F:F1:EC:CA:5B:95:A2:85:14:79:2D:CD:BA:49:18:2B Certificate issuer: /CN=A917D778/serialNumber=DDC5DB381FF1ECCA5B95A28514792DCDBA49182B Certificate serial: C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3cXbOB_x7MpblaKFFHktzbpJGCs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.mft Manifest number: C1 Signing time: Sun 19 Oct 2025 09:06:41 +0000 Manifest this update: Sun 19 Oct 2025 09:06:41 +0000 Manifest next update: Sun 26 Oct 2025 09:06:41 +0000 Files and hashes: 1: 3cXbOB_x7MpblaKFFHktzbpJGCs.crl (hash: b8knKgoU1MFQorcCb7w4Fd3DyTSmmIP9pImMIRaZA+Q=) 2: 0DEDF8C290E511EFBB48661DC4F9AE02.roa (hash: ymXlk9RJfi9V2KzOznS96G8RXYI7jJ6rpj+phG/GZks=) 3: 7DA8E78890E711EF8262A053C4F9AE02.roa (hash: SX03ccnLTHDWWqP2dXM+ZAcRiPmXaj3vkOlikMISxno=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.crl rsync://rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3cXbOB_x7MpblaKFFHktzbpJGCs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:06:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 200 (0xc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D778, serialNumber=DDC5DB381FF1ECCA5B95A28514792DCDBA49182B Validity Not Before: Oct 19 09:06:41 2025 GMT Not After : Oct 26 09:06:41 2025 GMT Subject: CN=68f4aa21-fad6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:68:dc:91:aa:c9:25:5b:ef:b7:f5:00:8e:40: 48:28:ad:57:9c:0d:d9:f5:9c:86:b9:e2:39:19:dd: 18:91:7d:f9:f7:f9:d7:33:8e:e1:ea:8d:1f:68:4b: 8c:f1:76:ac:75:57:c8:3a:00:2b:a6:46:ce:36:5a: f6:ef:2e:0e:38:08:23:36:fb:d7:d6:93:80:a3:b3: 81:9f:86:bb:13:0c:ee:88:9b:54:6a:c9:f4:46:ff: 22:39:e8:36:a8:a0:7e:0e:1a:24:62:84:5b:2a:05: 6a:0f:be:a4:a2:53:57:16:68:78:4d:c6:c8:53:f5: 30:a7:09:2d:a6:9d:81:74:da:a2:2d:95:4d:8f:9b: f6:0d:63:b1:f9:6a:4f:92:e3:53:16:08:27:cf:2d: df:43:1f:bd:3c:61:2f:cd:8b:b7:cb:60:2b:a9:d6: bb:89:b5:b3:87:83:52:30:33:10:48:e0:29:72:23: ae:23:8c:3e:27:4a:18:a2:2a:32:7b:b9:59:df:91: 6c:52:89:f7:f1:52:b2:88:cb:13:e9:2e:bc:e7:88: ab:f2:83:66:2e:69:5f:f5:57:c3:ae:01:59:87:76: 69:5b:6e:15:b4:c1:67:8f:71:1d:13:a0:d8:8a:de: 8c:f0:66:65:89:77:62:d4:36:6c:c4:f1:31:32:6d: cc:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:D6:A7:FA:63:86:7D:59:DF:67:02:F4:65:69:E4:B4:3D:C4:94:7B X509v3 Authority Key Identifier: keyid:DD:C5:DB:38:1F:F1:EC:CA:5B:95:A2:85:14:79:2D:CD:BA:49:18:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3cXbOB_x7MpblaKFFHktzbpJGCs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:48:b0:45:9d:cd:6e:b1:a7:c7:50:e1:4e:42:ec:90:ac:5c: 1c:95:35:27:e0:df:e8:c5:74:c9:3b:23:17:d2:ec:00:98:44: 8e:a0:59:9d:8d:a5:1e:8c:f5:f9:a4:62:d2:c6:24:2f:c0:21: b4:1a:ad:0a:23:02:78:43:ae:86:1c:96:d4:55:4f:8b:18:03: 50:e4:3d:b1:b2:60:9b:7b:52:25:53:af:6b:8a:8e:70:66:d7: 8e:0a:54:6f:de:58:5a:03:c1:52:74:18:f4:32:2e:07:e2:5d: 0f:ff:65:62:9a:17:93:50:2d:33:95:a2:ad:5d:d7:7f:b2:b9: a8:d9:14:12:d6:7a:a2:f2:d3:71:5b:78:ee:4d:ca:4c:5f:c8: bf:e0:01:6f:a4:c5:f1:88:9f:04:56:97:8e:d8:1f:36:a8:2c: f2:c3:74:e4:cf:37:97:a8:b0:af:69:34:93:52:2d:8d:d3:a9: 10:27:f2:ac:49:4a:0f:60:45:fd:aa:c2:f2:a2:7f:e6:80:ce: cd:2b:c1:c3:d4:78:f6:5b:b4:2a:39:1a:86:12:c8:a0:91:70: f5:32:b1:60:a2:c5:5f:7e:8f:dc:d6:e4:b3:71:4f:a1:bc:76: 9a:f2:68:4f:e9:d1:7f:d6:eb:54:e4:7b:95:2c:29:2f:08:0d: 32:59:64:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q3NzgxMTAvBgNVBAUTKEREQzVEQjM4MUZGMUVDQ0E1Qjk1QTI4NTE0NzkyRENE QkE0OTE4MkIwHhcNMjUxMDE5MDkwNjQxWhcNMjUxMDI2MDkwNjQxWjAYMRYwFAYD VQQDEw02OGY0YWEyMS1mYWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkWjckarJJVvvt/UAjkBIKK1XnA3Z9ZyGueI5Gd0YkX359/nXM47h6o0faEuM 8XasdVfIOgArpkbONlr27y4OOAgjNvvX1pOAo7OBn4a7EwzuiJtUasn0Rv8iOeg2 qKB+DhokYoRbKgVqD76kolNXFmh4TcbIU/Uwpwktpp2BdNqiLZVNj5v2DWOx+WpP kuNTFggnzy3fQx+9PGEvzYu3y2Arqda7ibWzh4NSMDMQSOApciOuI4w+J0oYoioy e7lZ35FsUon38VKyiMsT6S6854ir8oNmLmlf9VfDrgFZh3ZpW24VtMFnj3EdE6DY it6M8GZliXdi1DZsxPExMm3MuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFErWp/pj hn1Z32cC9GVp5LQ9xJR7MB8GA1UdIwQYMBaAFN3F2zgf8ezKW5WihRR5Lc26SRgr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDc3OC81QjhEODY2ODkw RTIxMUVGOTc2MTJBNDZDNEY5QUUwMi8zY1hiT0JfeDdNcGJsYUtGRkhrdHpicEpH Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNjWGJPQl94N01wYmxhS0ZGSGt0emJwSkdDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDc3OC81QjhEODY2ODkwRTIxMUVGOTc2MTJBNDZDNEY5QUUwMi8zY1hiT0JfeDdN cGJsYUtGRkhrdHpicEpHQ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASSLBFnc1usafHUOFOQuyQrFwclTUn4N/oxXTJOyMX0uwAmESOoFmd jaUejPX5pGLSxiQvwCG0Gq0KIwJ4Q66GHJbUVU+LGANQ5D2xsmCbe1IlU69rio5w ZteOClRv3lhaA8FSdBj0Mi4H4l0P/2VimheTUC0zlaKtXdd/srmo2RQS1nqi8tNx W3juTcpMX8i/4AFvpMXxiJ8EVpeO2B82qCzyw3TkzzeXqLCvaTSTUi2N06kQJ/Ks SUoPYEX9qsLyon/mgM7NK8HD1Hj2W7QqORqGEsigkXD1MrFgosVffo/c1uSzcU+h vHaa8mhP6dF/1utU5HuVLCkvCA0yWWRl -----END CERTIFICATE-----Generated at Tue Oct 21 00:09:31 2025 by rpki-client