$ rpki-client -vvf rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft File: 3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft (raw, json) Hash identifier: lIXhX0LW/sjE4UyLQKmLJpoRG35S3WYBOqCCI/2s5Uk= Subject key identifier: 02:3C:1E:2A:51:84:6C:15:19:A1:58:F8:98:7B:78:AA:3B:B4:05:55 Authority key identifier: DF:2F:8A:75:F3:E9:27:5E:0D:4F:10:FC:6A:31:99:97:91:1B:E5:B5 Certificate issuer: /CN=A919A016/serialNumber=DF2F8A75F3E9275E0D4F10FC6A319997911BE5B5 Certificate serial: 0B6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft Manifest number: 0B5E Signing time: Sat 18 Oct 2025 20:01:42 +0000 Manifest this update: Sat 18 Oct 2025 20:01:42 +0000 Manifest next update: Sat 25 Oct 2025 20:01:42 +0000 Files and hashes: 1: 3y-KdfPpJ14NTxD8ajGZl5Eb5bU.crl (hash: s4BSRSA4jOBC23anX/n1Thti7s3TGlm2SGeQcvnmIws=) 2: 26010A0605EF11F09181F913C4F9AE02.roa (hash: e8DrNgU6wclV+/cuRuh0FDYWi/CeredwOHLzSK+l0vc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.crl rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2924 (0xb6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A016, serialNumber=DF2F8A75F3E9275E0D4F10FC6A319997911BE5B5 Validity Not Before: Oct 18 20:01:42 2025 GMT Not After : Oct 25 20:01:42 2025 GMT Subject: CN=68f3f226-a926 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e6:5a:99:fd:17:9d:6d:26:96:c7:88:c4:0c: 72:3f:f1:fc:f8:f0:a9:ff:3b:59:dc:46:d5:ad:2f: 26:f6:39:a6:64:19:bf:00:e8:82:db:de:14:4f:72: 10:5a:39:e8:31:b2:db:9c:86:90:51:b0:f8:35:7b: aa:89:8a:f9:c1:ff:52:ca:76:82:9d:fe:7a:e5:e0: ad:b6:4c:fb:3d:f1:23:c9:04:3b:56:df:30:70:c5: 23:66:c3:83:df:ba:e5:52:d2:86:2a:14:16:06:da: f5:94:d8:b6:7e:74:14:75:93:34:51:02:43:81:19: 92:21:17:11:bf:38:fb:fc:0f:c9:fd:8a:0a:a5:fa: 0b:4c:aa:c3:44:6c:b3:a1:62:9f:f1:b8:a8:51:cf: fa:f4:aa:7d:e2:f0:9a:fa:4b:dc:85:0f:be:0b:bc: 24:5e:77:dc:65:e5:1b:4f:17:b9:f5:76:f0:5b:22: 07:11:2f:ba:ff:ec:66:32:31:68:71:69:25:c0:90: 24:b6:46:18:6e:3d:e0:fe:41:05:e2:28:13:07:48: 2b:a3:ef:4f:80:3c:50:17:c6:df:b7:75:b4:e5:64: f1:11:80:35:3f:df:12:5a:84:72:e2:9c:33:02:dc: 3d:19:de:47:60:25:48:f9:d0:bc:09:1f:68:a0:cb: 2e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:3C:1E:2A:51:84:6C:15:19:A1:58:F8:98:7B:78:AA:3B:B4:05:55 X509v3 Authority Key Identifier: keyid:DF:2F:8A:75:F3:E9:27:5E:0D:4F:10:FC:6A:31:99:97:91:1B:E5:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:09:0b:63:8d:f2:b5:bc:c3:43:75:0f:85:60:8b:c4:b9:45: 29:a0:9c:c5:4d:60:6b:eb:7a:12:98:f3:00:ea:11:51:59:fb: ca:3e:fe:35:62:67:44:1e:7e:ad:0f:18:fb:e1:ed:b7:77:0e: 68:68:c5:1f:fa:19:2e:42:7a:1d:fd:bd:0f:4a:00:ad:82:e9: 8f:aa:a6:1f:60:89:35:62:79:23:8e:70:47:c6:13:79:ed:9e: a3:db:4f:c7:e6:b9:c7:3e:63:c2:d9:0d:94:df:4a:21:8c:d8: ae:83:d4:60:15:12:3a:0f:e0:96:8c:82:44:34:2f:26:37:15: ce:da:b8:cd:ac:c4:fb:60:d3:c7:a0:58:74:a8:ad:6a:d9:08: 31:4d:81:ed:a7:c5:ed:a3:38:53:f0:14:fd:a7:59:d7:2d:5d: 3b:80:8a:32:4c:1d:95:68:fe:7d:07:69:be:fd:29:a1:a8:e0: 06:c5:8b:c6:11:22:5d:9c:65:f2:b4:ae:70:5d:91:58:1c:ef: 4d:62:f6:b8:da:87:2e:cf:5b:08:ac:1a:7a:34:61:ba:d1:ed: db:5c:32:b6:f4:35:9c:aa:ab:2a:f5:72:58:a1:73:43:48:f6: bb:f6:4c:f9:d3:ac:65:e1:9a:6d:19:13:c5:a2:d5:2d:d8:bc: 21:71:12:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUEwMTYxMTAvBgNVBAUTKERGMkY4QTc1RjNFOTI3NUUwRDRGMTBGQzZBMzE5OTk3 OTExQkU1QjUwHhcNMjUxMDE4MjAwMTQyWhcNMjUxMDI1MjAwMTQyWjAYMRYwFAYD VQQDEw02OGYzZjIyNi1hOTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAouZamf0XnW0mlseIxAxyP/H8+PCp/ztZ3EbVrS8m9jmmZBm/AOiC294UT3IQ WjnoMbLbnIaQUbD4NXuqiYr5wf9SynaCnf565eCttkz7PfEjyQQ7Vt8wcMUjZsOD 37rlUtKGKhQWBtr1lNi2fnQUdZM0UQJDgRmSIRcRvzj7/A/J/YoKpfoLTKrDRGyz oWKf8bioUc/69Kp94vCa+kvchQ++C7wkXnfcZeUbTxe59XbwWyIHES+6/+xmMjFo cWklwJAktkYYbj3g/kEF4igTB0gro+9PgDxQF8bft3W05WTxEYA1P98SWoRy4pwz Atw9Gd5HYCVI+dC8CR9ooMsuHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAI8HipR hGwVGaFY+Jh7eKo7tAVVMB8GA1UdIwQYMBaAFN8vinXz6SdeDU8Q/GoxmZeRG+W1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTAxNi9DMDY3NzIyNjQx NzExMUVBQUFEMjZBNkNDNEY5QUUwMi8zeS1LZGZQcEoxNE5UeEQ4YWpHWmw1RWI1 YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzN5LUtkZlBwSjE0TlR4RDhhakdabDVFYjViVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTAxNi9DMDY3NzIyNjQxNzExMUVBQUFEMjZBNkNDNEY5QUUwMi8zeS1LZGZQcEox NE5UeEQ4YWpHWmw1RWI1YlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4CQtjjfK1vMNDdQ+FYIvEuUUpoJzFTWBr63oSmPMA6hFRWfvKPv41 YmdEHn6tDxj74e23dw5oaMUf+hkuQnod/b0PSgCtgumPqqYfYIk1YnkjjnBHxhN5 7Z6j20/H5rnHPmPC2Q2U30ohjNiug9RgFRI6D+CWjIJENC8mNxXO2rjNrMT7YNPH oFh0qK1q2QgxTYHtp8XtozhT8BT9p1nXLV07gIoyTB2VaP59B2m+/SmhqOAGxYvG ESJdnGXytK5wXZFYHO9NYva42ocuz1sIrBp6NGG60e3bXDK29DWcqqsq9XJYoXND SPa79kz506xl4ZptGRPFotUt2LwhcRIp -----END CERTIFICATE-----Generated at Mon Oct 20 04:49:12 2025 by rpki-client