$ rpki-client -vvf rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.mft File: 3LMOz3ihM3XuUlJ4-c_TD3xYqos.mft (raw, json) Hash identifier: lipIt5qB51gtvLmgAflTjbOd6fnPFs8ar+Zs5vLmtBw= Subject key identifier: 5F:80:8D:47:5F:01:6B:EA:26:BF:D7:C1:BC:8A:8D:6D:7B:85:28:7E Authority key identifier: DC:B3:0E:CF:78:A1:33:75:EE:52:52:78:F9:CF:D3:0F:7C:58:AA:8B Certificate issuer: /CN=A9182762/serialNumber=DCB30ECF78A13375EE525278F9CFD30F7C58AA8B Certificate serial: 2FBD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3LMOz3ihM3XuUlJ4-c_TD3xYqos.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.mft Manifest number: 2F90 Signing time: Sat 18 Oct 2025 15:39:29 +0000 Manifest this update: Sat 18 Oct 2025 15:39:28 +0000 Manifest next update: Sat 25 Oct 2025 15:39:28 +0000 Files and hashes: 1: 3LMOz3ihM3XuUlJ4-c_TD3xYqos.crl (hash: S/hC0S65yV0WZkbn0KkBbfmowhZfUZHDyRvglif6FYQ=) 2: 4ECD37E0B13D11E59299870AC4F9AE02.roa (hash: zwQt0U0MX29MPa93PKs9TYXFxS+49eXVEwZ6lR+uSHo=) 3: 502355A2B13D11E59299870AC4F9AE02.roa (hash: odNG2CTuocV+iFzm6p+rsTOH7z1wG0je4WOLqIbugr8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.crl rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3LMOz3ihM3XuUlJ4-c_TD3xYqos.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 15:39:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12221 (0x2fbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182762, serialNumber=DCB30ECF78A13375EE525278F9CFD30F7C58AA8B Validity Not Before: Oct 18 15:39:28 2025 GMT Not After : Oct 25 15:39:28 2025 GMT Subject: CN=68f3b4b0-5758 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e0:04:b9:62:56:e5:63:82:ae:16:38:53:cb: d0:88:2e:b4:cc:d5:50:55:91:32:79:81:45:42:f9: 05:eb:3a:2a:1c:80:34:ae:e5:a7:07:80:e2:06:7a: 35:a6:2a:7f:0b:24:c3:88:33:8f:30:b7:76:b7:d1: 36:84:6a:7e:82:a9:f9:1b:76:65:c8:e9:18:33:61: 5d:1a:e1:ee:6d:b9:c5:79:16:66:2e:7f:c7:91:77: 99:0d:ac:de:72:6a:34:0d:50:d6:ac:b9:ce:8f:b8: d5:95:b3:88:58:0e:bd:1e:64:62:f7:95:13:47:7d: 13:7e:14:47:10:5e:23:8a:26:03:83:3e:58:30:57: 03:d2:2e:fe:5f:c7:eb:b5:12:99:f0:b3:a6:69:88: 43:7f:33:67:c3:82:a2:17:ff:50:5a:36:c7:ce:af: 21:2a:d5:3c:8d:c2:41:c2:82:75:8a:eb:a1:af:ba: 66:2f:bc:09:41:ca:05:cf:0f:25:a8:e7:e1:96:38: 7f:51:cc:a2:6d:6a:92:ee:42:30:e9:fd:34:6f:f2: 2a:4e:b0:67:7b:fc:a9:ef:e6:a1:20:7d:96:34:bb: 91:f4:71:d3:33:2f:35:14:23:0a:9e:6c:8b:4e:a7: 6b:81:e1:a1:a9:81:af:9a:a7:b0:e4:8f:70:73:a4: 06:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:80:8D:47:5F:01:6B:EA:26:BF:D7:C1:BC:8A:8D:6D:7B:85:28:7E X509v3 Authority Key Identifier: keyid:DC:B3:0E:CF:78:A1:33:75:EE:52:52:78:F9:CF:D3:0F:7C:58:AA:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3LMOz3ihM3XuUlJ4-c_TD3xYqos.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:31:dc:14:78:5a:77:09:2e:b2:6f:f8:87:5a:cc:8d:d6:3f: ac:c9:d7:f4:ab:d7:17:ff:9a:b2:6b:c9:91:b5:c2:d2:1e:55: c6:20:b3:a2:1a:e6:c0:ae:24:35:a4:52:00:71:1b:97:73:f2: ed:5d:3f:10:f5:93:cc:1a:b4:c1:98:11:44:d2:25:57:a2:1b: cb:7e:c5:8c:4f:32:3c:a7:de:1c:1b:2c:c5:4f:e6:40:e9:34: 9d:4a:de:30:74:24:3d:19:0a:2e:8c:b3:e1:76:93:8f:36:4e: 49:94:d8:5a:e1:b6:b2:ec:2a:07:5e:74:15:f0:b8:4f:73:af: ef:0d:6b:6d:00:19:42:23:e2:72:be:89:66:b3:bc:a7:d8:f6: 20:7a:63:e8:6d:cf:1a:32:0b:c9:28:df:b3:d7:6f:92:71:28: 6d:6b:02:ef:2e:4a:e0:7e:7e:ce:c5:25:97:ac:1f:d1:1e:dd: 52:e2:c6:23:a1:3f:8f:fc:f1:77:1d:9b:26:f0:70:a3:bc:39: da:85:4e:04:57:90:32:81:bc:8d:11:5b:70:0d:91:db:2b:9b: d3:0a:db:46:a7:bd:c1:c3:ef:71:b5:8e:7f:3e:6c:cd:93:c8: 8f:56:f1:f6:6c:55:f5:29:38:a1:71:bf:af:28:c7:fd:d3:6a: 53:72:c9:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICL70wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODI3NjIxMTAvBgNVBAUTKERDQjMwRUNGNzhBMTMzNzVFRTUyNTI3OEY5Q0ZEMzBG N0M1OEFBOEIwHhcNMjUxMDE4MTUzOTI4WhcNMjUxMDI1MTUzOTI4WjAYMRYwFAYD VQQDEw02OGYzYjRiMC01NzU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0eAEuWJW5WOCrhY4U8vQiC60zNVQVZEyeYFFQvkF6zoqHIA0ruWnB4DiBno1 pip/CyTDiDOPMLd2t9E2hGp+gqn5G3ZlyOkYM2FdGuHubbnFeRZmLn/HkXeZDaze cmo0DVDWrLnOj7jVlbOIWA69HmRi95UTR30TfhRHEF4jiiYDgz5YMFcD0i7+X8fr tRKZ8LOmaYhDfzNnw4KiF/9QWjbHzq8hKtU8jcJBwoJ1iuuhr7pmL7wJQcoFzw8l qOfhljh/UcyibWqS7kIw6f00b/IqTrBne/yp7+ahIH2WNLuR9HHTMy81FCMKnmyL TqdrgeGhqYGvmqew5I9wc6QGQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF+AjUdf AWvqJr/XwbyKjW17hSh+MB8GA1UdIwQYMBaAFNyzDs94oTN17lJSePnP0w98WKqL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Mjc2Mi84QUFFMEY4QzI4 MzcxMUUzQjUyQkQzM0I1OTExRUEzMi8zTE1PejNpaE0zWHVVbEo0LWNfVEQzeFlx b3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNMTU96M2loTTNYdVVsSjQtY19URDN4WXFvcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Mjc2Mi84QUFFMEY4QzI4MzcxMUUzQjUyQkQzM0I1OTExRUEzMi8zTE1PejNpaE0z WHVVbEo0LWNfVEQzeFlxb3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANMdwUeFp3CS6yb/iHWsyN1j+sydf0q9cX/5qya8mRtcLSHlXGILOi GubAriQ1pFIAcRuXc/LtXT8Q9ZPMGrTBmBFE0iVXohvLfsWMTzI8p94cGyzFT+ZA 6TSdSt4wdCQ9GQoujLPhdpOPNk5JlNha4bay7CoHXnQV8LhPc6/vDWttABlCI+Jy volms7yn2PYgemPobc8aMgvJKN+z12+ScShtawLvLkrgfn7OxSWXrB/RHt1S4sYj oT+P/PF3HZsm8HCjvDnahU4EV5AygbyNEVtwDZHbK5vTCttGp73Bw+9xtY5/PmzN k8iPVvH2bFX1KTihcb+vKMf902pTcskr -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:25 2025 by rpki-client