$ rpki-client -vvf rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.mft File: 2y3U_v83CRJX9gGdUKI5MOxG4fs.mft (raw, json) Hash identifier: Ht5KTWqTP+fD0/3bEul9r8RiNzRLOU+y/vqaHEKjY/g= Subject key identifier: 72:19:4D:02:E8:67:B6:48:78:D2:68:70:3F:DE:72:66:04:9C:F6:C8 Authority key identifier: DB:2D:D4:FE:FF:37:09:12:57:F6:01:9D:50:A2:39:30:EC:46:E1:FB Certificate issuer: /CN=A917F116/serialNumber=DB2DD4FEFF37091257F6019D50A23930EC46E1FB Certificate serial: 4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2y3U_v83CRJX9gGdUKI5MOxG4fs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.mft Manifest number: 3C Signing time: Sun 19 Oct 2025 11:14:26 +0000 Manifest this update: Sun 19 Oct 2025 11:14:25 +0000 Manifest next update: Sun 26 Oct 2025 11:14:25 +0000 Files and hashes: 1: 2y3U_v83CRJX9gGdUKI5MOxG4fs.crl (hash: X4/lUGw7YO9qEhN9BhGP+pBmRX0yrQvpsMvqRA+n8LU=) 2: 3E9B5E9C791511F09DD1364EC4F9AE02.roa (hash: Ut0wAe6zBRN5XqjP4QwqBdmfAff9ffXm1MBpJVMD0gQ=) 3: 029780A8791D11F08A28C96CC4F9AE02.roa (hash: cIhq6sJcStnFPRCzrluGkX+gdeeTmy7R7VUY7+k19nE=) 4: 1210E96E791511F08360054EC4F9AE02.roa (hash: Slh+hzXA8uH1uVgGQIbNtZEbJ8WLbIvNdBfP8qTwAu8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.crl rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2y3U_v83CRJX9gGdUKI5MOxG4fs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:14:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F116, serialNumber=DB2DD4FEFF37091257F6019D50A23930EC46E1FB Validity Not Before: Oct 19 11:14:25 2025 GMT Not After : Oct 26 11:14:25 2025 GMT Subject: CN=68f4c811-176f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:99:2b:a1:5a:34:e8:f0:1b:81:16:54:99:18: 9f:7e:75:a3:3a:58:db:e6:13:45:1e:46:58:36:42: 5a:7e:3c:78:9b:c4:c3:e7:d0:12:03:f4:f9:da:08: 57:7c:34:b9:a4:63:a5:a5:d2:a9:74:6a:3a:66:39: a8:6c:c7:05:d1:4f:c7:b4:47:57:87:f4:ff:9f:68: 92:25:e9:65:00:ae:b8:5a:10:1b:ce:5e:f5:cc:a9: a6:55:c7:6a:9b:ce:86:0b:c8:88:da:56:2f:bc:17: 09:b7:a4:1f:bf:32:84:cb:11:1e:59:ed:87:01:16: c7:03:ae:11:e4:37:c4:e3:19:c1:5c:d3:9e:80:ce: 27:a1:d8:ad:23:b9:82:f3:07:0e:69:5c:67:3a:15: 00:83:2e:55:38:d0:96:43:9d:9c:17:3f:74:d7:ec: 13:0e:d7:be:1c:5f:ba:37:11:e9:39:2b:ba:7e:01: b8:40:98:69:03:23:ea:51:01:1b:9b:5b:02:d7:69: cf:ef:19:ca:29:8a:7c:da:e3:67:61:c0:87:ab:4c: 18:4a:ec:f0:da:d2:dd:e0:ad:9f:ff:bb:4c:be:14: 13:df:39:80:bc:ca:4e:55:5f:91:3d:8d:94:d0:bf: 5a:8c:42:65:89:bf:67:35:b7:b5:32:75:e6:53:62: b7:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:19:4D:02:E8:67:B6:48:78:D2:68:70:3F:DE:72:66:04:9C:F6:C8 X509v3 Authority Key Identifier: keyid:DB:2D:D4:FE:FF:37:09:12:57:F6:01:9D:50:A2:39:30:EC:46:E1:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2y3U_v83CRJX9gGdUKI5MOxG4fs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:da:4f:b9:d4:af:1a:0f:a9:7a:8d:8a:d1:d9:77:47:07:70: 33:5d:92:2d:34:8a:c0:f6:51:7c:17:1b:88:11:de:e6:cc:44: d0:e8:79:b8:37:6f:1c:ea:2c:81:c6:f8:f9:22:0a:e2:aa:05: 05:fc:7b:40:07:c2:09:4b:92:68:6b:52:2d:a5:55:db:9c:a9: c8:4c:33:85:1f:d3:2b:20:7c:70:e3:9a:5c:58:0a:d4:dd:c9: 76:d0:34:55:f0:75:03:fd:c0:18:71:33:1a:d8:ea:5d:10:94: 5a:37:82:05:f2:19:52:73:09:bc:ef:ae:02:54:75:15:85:43: e6:43:c0:72:06:a4:02:7a:dd:3f:a1:8a:35:f1:0c:ec:9e:e7: 75:76:31:62:7d:62:f4:c3:d8:a7:8c:8e:76:63:0c:a7:58:5e: 35:9d:c9:ca:a1:bd:1a:43:a7:83:f3:ba:03:76:f0:2e:d0:1a: d4:5a:b4:85:a1:fa:fa:f2:8c:3e:58:50:3a:13:aa:cd:c3:48: b6:a1:55:59:1c:8d:2d:9d:7c:c8:1c:83:a6:3d:ee:a3:cb:9a: 76:d3:f8:ae:8e:1f:1a:c2:93:44:64:b9:1a:97:d9:1f:41:60: 3a:5d:95:62:d4:39:91:d0:cc:3d:3e:52:5a:c6:ea:d7:ef:4c: 3c:00:08:26 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RjExNjExMC8GA1UEBRMoREIyREQ0RkVGRjM3MDkxMjU3RjYwMTlENTBBMjM5MzBF QzQ2RTFGQjAeFw0yNTEwMTkxMTE0MjVaFw0yNTEwMjYxMTE0MjVaMBgxFjAUBgNV BAMTDTY4ZjRjODExLTE3NmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBmSuhWjTo8BuBFlSZGJ9+daM6WNvmE0UeRlg2Qlp+PHibxMPn0BID9PnaCFd8 NLmkY6Wl0ql0ajpmOahsxwXRT8e0R1eH9P+faJIl6WUArrhaEBvOXvXMqaZVx2qb zoYLyIjaVi+8Fwm3pB+/MoTLER5Z7YcBFscDrhHkN8TjGcFc056Azieh2K0juYLz Bw5pXGc6FQCDLlU40JZDnZwXP3TX7BMO174cX7o3Eek5K7p+AbhAmGkDI+pRARub WwLXac/vGcopinza42dhwIerTBhK7PDa0t3grZ//u0y+FBPfOYC8yk5VX5E9jZTQ v1qMQmWJv2c1t7UydeZTYrerAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUchlNAuhn tkh40mhwP95yZgSc9sgwHwYDVR0jBBgwFoAU2y3U/v83CRJX9gGdUKI5MOxG4fsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdGMTE2LzhCQ0ZGRjA2NkVE RTExRjA5MUUwMkEyMUM0RjlBRTAyLzJ5M1VfdjgzQ1JKWDlnR2RVS0k1TU94RzRm cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMnkzVV92ODNDUkpYOWdHZFVLSTVNT3hHNGZzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdG MTE2LzhCQ0ZGRjA2NkVERTExRjA5MUUwMkEyMUM0RjlBRTAyLzJ5M1VfdjgzQ1JK WDlnR2RVS0k1TU94RzRmcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJHaT7nUrxoPqXqNitHZd0cHcDNdki00isD2UXwXG4gR3ubMRNDoebg3 bxzqLIHG+PkiCuKqBQX8e0AHwglLkmhrUi2lVducqchMM4Uf0ysgfHDjmlxYCtTd yXbQNFXwdQP9wBhxMxrY6l0QlFo3ggXyGVJzCbzvrgJUdRWFQ+ZDwHIGpAJ63T+h ijXxDOye53V2MWJ9YvTD2KeMjnZjDKdYXjWdycqhvRpDp4PzugN28C7QGtRatIWh +vryjD5YUDoTqs3DSLahVVkcjS2dfMgcg6Y97qPLmnbT+K6OHxrCk0RkuRqX2R9B YDpdlWLUOZHQzD0+UlrG6tfvTDwACCY= -----END CERTIFICATE-----Generated at Sun Oct 19 23:33:13 2025 by rpki-client