$ rpki-client -vvf rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/3gyPQrygWy9Vgea8y0wUpuZxthk.mft File: 3gyPQrygWy9Vgea8y0wUpuZxthk.mft (raw, json) Hash identifier: N7N6dRL5bi6NmeJiB6zW3H/YgixwY6cZ4v4tEbVnSb0= Subject key identifier: EF:AD:FA:8F:BC:8C:EC:87:D5:31:8E:64:D7:3E:EC:91:1B:76:EB:20 Authority key identifier: DE:0C:8F:42:BC:A0:5B:2F:55:81:E6:BC:CB:4C:14:A6:E6:71:B6:19 Certificate issuer: /CN=A9187386/serialNumber=DE0C8F42BCA05B2F5581E6BCCB4C14A6E671B619 Certificate serial: 10A7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3gyPQrygWy9Vgea8y0wUpuZxthk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/3gyPQrygWy9Vgea8y0wUpuZxthk.mft Manifest number: 1098 Signing time: Mon 20 Oct 2025 17:49:40 +0000 Manifest this update: Mon 20 Oct 2025 17:49:39 +0000 Manifest next update: Mon 27 Oct 2025 17:49:39 +0000 Files and hashes: 1: 3gyPQrygWy9Vgea8y0wUpuZxthk.crl (hash: KoQuTbeke8Wt2tpqH8aKO7ZMOyJOSmvM3IGqbGmqysI=) 2: E366C4B83B2611E9906E7B81C4F9AE02.roa (hash: xEIKhjUewdtyeU71/5L7KmwiUHlZvuapGiPz1UBOmLU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/3gyPQrygWy9Vgea8y0wUpuZxthk.crl rsync://rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/3gyPQrygWy9Vgea8y0wUpuZxthk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3gyPQrygWy9Vgea8y0wUpuZxthk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 17:04:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4263 (0x10a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187386, serialNumber=DE0C8F42BCA05B2F5581E6BCCB4C14A6E671B619 Validity Not Before: Oct 20 17:49:39 2025 GMT Not After : Oct 27 17:49:39 2025 GMT Subject: CN=68f67633-35f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e7:9a:db:dc:27:0f:06:5f:2e:85:a0:70:bc: 29:26:63:f6:f6:39:da:e3:da:2c:97:03:e9:02:86: 66:f0:e7:ad:e7:9d:6c:a1:a0:bf:a2:69:28:ab:4c: b1:2f:fa:f3:91:22:e0:84:3a:81:09:47:75:86:20: d6:65:0e:9c:d7:8b:77:4a:97:d3:04:97:18:cc:82: cc:d3:ed:fa:62:ca:4c:19:a7:64:ca:79:d6:2d:15: f4:ad:37:96:59:5d:5b:5a:5d:f3:82:c1:f2:6f:f2: 7f:ef:cc:b1:9c:96:9d:3b:d5:ff:b0:a4:fc:4f:54: eb:9a:88:cd:57:0e:f2:61:59:35:10:8b:f5:7c:ff: 87:67:77:3c:53:ed:19:0d:b5:84:81:85:f2:4a:15: ee:5c:68:0e:89:a8:af:55:a6:c0:c6:bf:bb:eb:bc: 6f:24:77:3e:7b:19:81:97:b0:a9:b1:4f:ae:23:43: af:5e:12:b7:02:92:fb:f2:56:91:0b:24:2a:01:65: 32:21:de:41:64:4c:a2:6d:da:bc:81:f6:40:c6:66: 59:8b:e9:6a:b9:51:76:26:28:d4:de:6f:48:7e:96: 4b:6b:f0:a7:5f:e5:64:ed:12:73:c8:3f:9c:91:65: 09:d6:59:5b:44:a2:03:23:f4:49:0c:02:de:b7:50: d8:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:AD:FA:8F:BC:8C:EC:87:D5:31:8E:64:D7:3E:EC:91:1B:76:EB:20 X509v3 Authority Key Identifier: keyid:DE:0C:8F:42:BC:A0:5B:2F:55:81:E6:BC:CB:4C:14:A6:E6:71:B6:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/3gyPQrygWy9Vgea8y0wUpuZxthk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3gyPQrygWy9Vgea8y0wUpuZxthk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/3gyPQrygWy9Vgea8y0wUpuZxthk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:99:78:d3:bf:69:bf:75:72:7c:5a:24:05:1e:21:f0:cb:02: ca:33:24:f0:4d:47:92:9f:c4:fd:3e:d9:70:33:d4:c3:94:44: 6a:ef:75:d0:04:82:f4:ae:e5:b9:82:b6:7c:ea:f6:9a:ac:c9: c9:b0:12:e6:9e:9e:77:b5:ac:ea:bc:27:50:58:01:e8:8a:f7: 5e:49:67:93:91:b6:09:aa:3c:de:5a:ce:35:15:2d:d5:e7:06: bd:d2:cb:86:47:7d:f2:eb:6e:ba:cb:27:92:3f:e0:6b:87:8c: 0b:23:fd:20:cd:f6:9e:5b:8e:54:e6:e0:13:3f:16:0c:d0:20: ff:a3:7e:25:79:9f:8a:d7:46:f1:01:e5:95:e3:f6:7a:69:e6: 55:be:c7:17:9d:97:26:7d:3d:05:df:1f:38:2b:4e:ff:38:bd: 8e:e8:ac:6b:7b:8a:5e:6b:ca:7f:ca:bf:2b:30:fd:2c:c6:c9: 9f:7e:c5:2c:42:b4:cb:dc:b5:f8:2d:f8:67:ba:f1:00:60:c7: 7a:1f:1e:46:f1:3a:85:3c:a1:5e:3a:54:14:29:c4:15:6e:fb: ce:eb:7d:fa:45:fa:5c:fd:e9:2a:ce:c5:f2:dc:5c:a3:14:75: 0d:e9:5b:57:86:d3:26:49:17:87:18:76:f7:d1:c4:a3:98:3e: 6d:52:07:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODczODYxMTAvBgNVBAUTKERFMEM4RjQyQkNBMDVCMkY1NTgxRTZCQ0NCNEMxNEE2 RTY3MUI2MTkwHhcNMjUxMDIwMTc0OTM5WhcNMjUxMDI3MTc0OTM5WjAYMRYwFAYD VQQDEw02OGY2NzYzMy0zNWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv+ea29wnDwZfLoWgcLwpJmP29jna49oslwPpAoZm8Oet551soaC/omkoq0yx L/rzkSLghDqBCUd1hiDWZQ6c14t3SpfTBJcYzILM0+36YspMGadkynnWLRX0rTeW WV1bWl3zgsHyb/J/78yxnJadO9X/sKT8T1TrmojNVw7yYVk1EIv1fP+HZ3c8U+0Z DbWEgYXyShXuXGgOiaivVabAxr+767xvJHc+exmBl7CpsU+uI0OvXhK3ApL78laR CyQqAWUyId5BZEyibdq8gfZAxmZZi+lquVF2JijU3m9IfpZLa/CnX+Vk7RJzyD+c kWUJ1llbRKIDI/RJDALet1DYnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO+t+o+8 jOyH1TGOZNc+7JEbdusgMB8GA1UdIwQYMBaAFN4Mj0K8oFsvVYHmvMtMFKbmcbYZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzM4Ni80OUNENkEzQzNC MjYxMUU5QjIwRDI2ODFDNEY5QUUwMi8zZ3lQUXJ5Z1d5OVZnZWE4eTB3VXB1Wnh0 aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzNneVBRcnlnV3k5VmdlYTh5MHdVcHVaeHRoay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzM4Ni80OUNENkEzQzNCMjYxMUU5QjIwRDI2ODFDNEY5QUUwMi8zZ3lQUXJ5Z1d5 OVZnZWE4eTB3VXB1Wnh0aGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDNmXjTv2m/dXJ8WiQFHiHwywLKMyTwTUeSn8T9PtlwM9TDlERq73XQ BIL0ruW5grZ86vaarMnJsBLmnp53tazqvCdQWAHoivdeSWeTkbYJqjzeWs41FS3V 5wa90suGR33y6266yyeSP+Brh4wLI/0gzfaeW45U5uATPxYM0CD/o34leZ+K10bx AeWV4/Z6aeZVvscXnZcmfT0F3x84K07/OL2O6Kxre4pea8p/yr8rMP0sxsmffsUs QrTL3LX4LfhnuvEAYMd6Hx5G8TqFPKFeOlQUKcQVbvvO6336Rfpc/ekqzsXy3Fyj FHUN6VtXhtMmSReHGHb30cSjmD5tUge9 -----END CERTIFICATE-----Generated at Mon Oct 20 21:46:25 2025 by rpki-client