$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft File: 3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft (raw, json) Hash identifier: 9wo7BFvSJHNiglNNa3BlvByXTKl1eTCvuigYo4YCDws= Subject key identifier: CB:0D:2D:9E:5C:07:D9:54:58:A1:08:C7:1C:98:E3:75:F1:2F:DE:CF Authority key identifier: DD:49:30:E3:E4:2D:FE:3B:FF:F4:81:B1:79:77:0D:1A:B1:57:5B:C3 Certificate issuer: /CN=A9186214/serialNumber=DD4930E3E42DFE3BFFF481B179770D1AB1575BC3 Certificate serial: 2A5F Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft Manifest number: 2A5F Signing time: Mon 20 Oct 2025 15:45:14 +0000 Manifest this update: Mon 20 Oct 2025 15:45:13 +0000 Manifest next update: Mon 27 Oct 2025 15:45:13 +0000 Files and hashes: 1: 3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.crl (hash: ERuOcguBR6Rury6sGr8Sx+5BghLKoclVXhgbKV2U3dY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.crl rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 15:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10847 (0x2a5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186214, serialNumber=DD4930E3E42DFE3BFFF481B179770D1AB1575BC3 Validity Not Before: Oct 20 15:45:13 2025 GMT Not After : Oct 27 15:45:13 2025 GMT Subject: CN=68f6590a-4a79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:bb:ee:9f:a8:40:c4:b6:81:3d:50:4f:7d:3c: 97:e0:22:65:d0:87:e6:df:c9:ba:bb:16:55:30:9d: d4:14:87:9f:5e:d5:0e:ba:70:69:04:57:4b:4a:60: 82:62:47:92:94:48:e0:09:dd:11:a2:3b:9d:79:df: 26:7e:da:77:52:5e:e0:8e:88:d9:ee:fb:96:3f:05: 6b:23:db:9d:d2:77:57:87:aa:4b:37:74:d7:e1:0d: d4:ef:2f:41:0a:72:da:f1:2e:24:ec:f2:07:7b:06: d7:5a:93:b3:70:18:38:3a:82:b6:c4:ac:80:a4:ee: a8:9c:d1:52:ce:04:c0:1d:31:2a:7a:08:76:3a:84: af:7d:03:d1:5b:53:97:ac:7f:f4:eb:79:da:86:38: b7:be:65:43:9c:91:4a:dc:64:c0:24:a4:46:8b:53: d3:dd:6b:45:53:1b:62:42:fc:6d:cf:5e:15:ea:67: 5a:51:91:f6:2b:75:42:80:79:2c:d5:91:1c:5a:07: 4a:55:c8:47:be:cd:ad:de:1c:44:8a:2f:7a:11:99: 42:9f:26:a9:75:20:58:92:13:30:ed:35:57:5a:23: 46:90:b5:7a:f8:c4:76:56:87:c1:23:df:40:38:8c: a2:1c:12:b3:4f:bd:3d:fc:3f:68:b3:f2:c6:01:3b: 4a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:0D:2D:9E:5C:07:D9:54:58:A1:08:C7:1C:98:E3:75:F1:2F:DE:CF X509v3 Authority Key Identifier: keyid:DD:49:30:E3:E4:2D:FE:3B:FF:F4:81:B1:79:77:0D:1A:B1:57:5B:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:86:68:f0:2c:3e:ea:6e:11:7b:6a:e7:60:bc:e8:90:f7:6f: 6e:f1:55:cc:5b:4f:fb:bd:be:e3:ed:13:d0:df:48:b7:08:4f: cd:f9:14:4a:54:81:f6:dc:c4:f8:6e:0e:67:7c:15:d2:0d:d4: b0:cd:41:8d:72:ec:52:4f:ef:5e:fa:db:cb:7f:8c:92:54:f8: 36:bf:ac:f7:81:b7:31:77:19:e1:86:a5:a5:01:d4:01:1d:fb: e3:5f:81:e8:af:d4:c9:c4:eb:de:e7:b6:3e:de:16:28:38:fc: e3:06:80:7e:2c:54:45:3a:1b:62:e1:b2:5c:bb:78:34:cc:10: c0:46:dc:28:3f:e0:1f:fc:d1:39:24:79:6f:a9:38:f8:81:bb: cf:7d:0f:ca:f3:80:7c:ed:10:92:e8:04:b5:0f:80:77:a3:77: 5d:30:e5:63:56:66:a9:12:eb:17:1b:bc:4f:ce:73:15:66:ed: 5e:c4:07:40:b1:68:3c:dd:c3:f0:4a:af:6f:7d:54:6d:0e:cf: 7e:9e:6d:50:d5:ee:ca:46:68:2c:72:32:ed:9c:c6:23:42:fe: 5e:98:af:be:69:ce:54:13:ad:e4:9f:a1:83:87:93:3c:5d:49: 83:f6:6d:6d:fc:99:53:40:a4:64:63:40:a7:62:3b:71:ba:4d: 81:5a:e5:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKl8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyMTQxMTAvBgNVBAUTKERENDkzMEUzRTQyREZFM0JGRkY0ODFCMTc5NzcwRDFB QjE1NzVCQzMwHhcNMjUxMDIwMTU0NTEzWhcNMjUxMDI3MTU0NTEzWjAYMRYwFAYD VQQDEw02OGY2NTkwYS00YTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAubvun6hAxLaBPVBPfTyX4CJl0Ifm38m6uxZVMJ3UFIefXtUOunBpBFdLSmCC YkeSlEjgCd0Rojuded8mftp3Ul7gjojZ7vuWPwVrI9ud0ndXh6pLN3TX4Q3U7y9B CnLa8S4k7PIHewbXWpOzcBg4OoK2xKyApO6onNFSzgTAHTEqegh2OoSvfQPRW1OX rH/063nahji3vmVDnJFK3GTAJKRGi1PT3WtFUxtiQvxtz14V6mdaUZH2K3VCgHks 1ZEcWgdKVchHvs2t3hxEii96EZlCnyapdSBYkhMw7TVXWiNGkLV6+MR2VofBI99A OIyiHBKzT709/D9os/LGATtKKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMsNLZ5c B9lUWKEIxxyY43XxL97PMB8GA1UdIwQYMBaAFN1JMOPkLf47//SBsXl3DRqxV1vD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9ENzg1OTlCQzMz MUExMUU0QUYyQUIzN0NDNEY5QUUwMi8zVWt3NC1RdF9qdl85SUd4ZVhjTkdyRlhX OE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzNVa3c0LVF0X2p2XzlJR3hlWGNOR3JGWFc4TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjIxNC9ENzg1OTlCQzMzMUExMUU0QUYyQUIzN0NDNEY5QUUwMi8zVWt3NC1RdF9q dl85SUd4ZVhjTkdyRlhXOE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARhmjwLD7qbhF7audgvOiQ929u8VXMW0/7vb7j7RPQ30i3CE/N+RRK VIH23MT4bg5nfBXSDdSwzUGNcuxST+9e+tvLf4ySVPg2v6z3gbcxdxnhhqWlAdQB HfvjX4Hor9TJxOve57Y+3hYoOPzjBoB+LFRFOhti4bJcu3g0zBDARtwoP+Af/NE5 JHlvqTj4gbvPfQ/K84B87RCS6AS1D4B3o3ddMOVjVmapEusXG7xPznMVZu1exAdA sWg83cPwSq9vfVRtDs9+nm1Q1e7KRmgscjLtnMYjQv5emK++ac5UE63kn6GDh5M8 XUmD9m1t/JlTQKRkY0CnYjtxuk2BWuWE -----END CERTIFICATE-----Generated at Tue Oct 21 06:25:29 2025 by rpki-client