$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft File: L3f37TT2am_GcID7m2G7JnkvhaE.mft (raw, json) Hash identifier: MzYF+NP2FjLGDN9Md40MhGXVO1g08LqUXDm9gB52T4A= Subject key identifier: 71:EC:3E:89:35:F0:F9:DD:08:55:9F:16:65:5F:18:8E:DF:3C:CD:BB Authority key identifier: 2F:77:F7:ED:34:F6:6A:6F:C6:70:80:FB:9B:61:BB:26:79:2F:85:A1 Certificate issuer: /CN=A91A5C90/serialNumber=2F77F7ED34F66A6FC67080FB9B61BB26792F85A1 Certificate serial: 04D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3f37TT2am_GcID7m2G7JnkvhaE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft Manifest number: 04D1 Signing time: Sun 19 Oct 2025 01:36:40 +0000 Manifest this update: Sun 19 Oct 2025 01:36:39 +0000 Manifest next update: Sun 26 Oct 2025 01:36:39 +0000 Files and hashes: 1: L3f37TT2am_GcID7m2G7JnkvhaE.crl (hash: 27UjiaHuCOPMOb8PNtijBpXPMRUp10yMhL8TGGc9r9A=) 2: CDA06D9C3D2A11EC8ECCEB1FC4F9AE02.roa (hash: cJIs31sqlgOhonhzClBxUM9SmxEaq46WFcZovXHGcPw=) 3: CE319EDE3D2A11EC8ECCEB1FC4F9AE02.roa (hash: Mum2g6Ft9eC1OvjjJ0nqhQo1XRrbGEG1M1RHx+Vnh0c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.crl rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3f37TT2am_GcID7m2G7JnkvhaE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:36:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1241 (0x4d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5C90, serialNumber=2F77F7ED34F66A6FC67080FB9B61BB26792F85A1 Validity Not Before: Oct 19 01:36:39 2025 GMT Not After : Oct 26 01:36:39 2025 GMT Subject: CN=68f440a8-e024 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e2:d1:39:5d:a6:c6:e3:3b:74:a2:0c:a6:44: 6c:99:1f:2e:6f:1d:f5:69:ac:09:45:56:d3:b2:66: 90:b0:38:27:61:30:d4:ce:aa:d3:87:b5:75:d0:f7: a0:e9:a2:1b:1f:cc:a7:38:1f:38:88:b6:e9:96:98: 84:2c:77:ec:b0:02:b9:6b:d1:31:5f:d1:94:83:89: 42:0d:1d:a9:d6:4f:21:e0:12:af:01:89:b2:4e:20: 25:fe:63:82:68:89:06:91:3c:18:38:62:16:fe:cb: 2d:3b:17:7e:0d:de:b9:61:b6:b1:bc:d2:1c:01:b2: 0a:06:c3:36:c4:44:9f:03:3f:7a:67:1c:d6:c8:ae: 81:26:98:42:5c:5c:25:79:23:33:e9:c1:17:1c:9a: 48:e8:f2:d2:03:d1:5b:1a:e2:0c:c6:1b:15:c1:e0: ac:6a:6a:0c:80:db:14:18:4a:9f:85:c9:72:43:c1: 4a:ec:6b:1d:65:da:56:dd:24:6e:24:ef:88:be:8f: 14:68:99:4c:e4:15:60:ae:3f:d0:4f:9a:f0:4b:c0: 9a:e2:90:09:29:59:7d:98:ff:0d:0e:22:c5:6e:f3: 45:b6:a5:c3:af:5e:a9:ff:d4:ca:76:a3:6a:cf:d9: 89:67:5a:a7:02:ed:bc:c6:93:40:27:f1:ba:78:06: 09:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:EC:3E:89:35:F0:F9:DD:08:55:9F:16:65:5F:18:8E:DF:3C:CD:BB X509v3 Authority Key Identifier: keyid:2F:77:F7:ED:34:F6:6A:6F:C6:70:80:FB:9B:61:BB:26:79:2F:85:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3f37TT2am_GcID7m2G7JnkvhaE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:53:ff:ab:78:d8:14:52:fe:e5:c8:22:73:ea:4f:7b:99:45: ac:4e:7f:5a:9c:2c:81:24:a4:ad:af:e0:cf:81:99:c6:50:68: 27:0c:c1:e1:b5:e4:dd:16:a0:31:17:f2:b1:20:14:cc:f1:54: 9a:fc:6a:79:a8:e7:01:06:89:07:bd:de:86:45:4e:52:83:09: 81:73:01:30:ee:9d:a8:3b:d4:c4:2a:14:59:22:30:a1:c1:bc: 3e:a1:59:7f:d7:62:4a:8b:87:5f:c3:ff:64:7d:ba:fd:3c:12: 5a:e3:3c:1a:70:f8:26:73:27:77:bc:f4:f9:b3:c3:8f:0f:3b: 00:14:fc:63:df:5c:5e:eb:d0:d8:da:86:c8:38:b0:1a:d1:3e: 89:cd:cd:2e:71:32:65:d7:de:f4:90:6a:25:6e:21:bf:85:24: a7:c3:8b:4a:46:e9:22:3c:bc:86:a2:62:9d:cb:de:b7:a3:64: 97:b2:42:26:30:d5:87:d3:f2:cd:af:7e:a7:23:a4:ec:83:9b: 2d:64:58:a6:08:91:cb:45:ee:54:f9:48:52:12:7f:30:de:5c: f6:9a:9a:67:38:60:98:bf:7f:a9:38:fc:d0:0e:da:c0:41:e2: 48:a3:48:da:de:f9:6b:6f:69:23:ad:f2:6b:18:6f:38:55:f3: da:81:0c:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVDOTAxMTAvBgNVBAUTKDJGNzdGN0VEMzRGNjZBNkZDNjcwODBGQjlCNjFCQjI2 NzkyRjg1QTEwHhcNMjUxMDE5MDEzNjM5WhcNMjUxMDI2MDEzNjM5WjAYMRYwFAYD VQQDEw02OGY0NDBhOC1lMDI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1OLROV2mxuM7dKIMpkRsmR8ubx31aawJRVbTsmaQsDgnYTDUzqrTh7V10Peg 6aIbH8ynOB84iLbplpiELHfssAK5a9ExX9GUg4lCDR2p1k8h4BKvAYmyTiAl/mOC aIkGkTwYOGIW/sstOxd+Dd65YbaxvNIcAbIKBsM2xESfAz96ZxzWyK6BJphCXFwl eSMz6cEXHJpI6PLSA9FbGuIMxhsVweCsamoMgNsUGEqfhclyQ8FK7GsdZdpW3SRu JO+Ivo8UaJlM5BVgrj/QT5rwS8Ca4pAJKVl9mP8NDiLFbvNFtqXDr16p/9TKdqNq z9mJZ1qnAu28xpNAJ/G6eAYJFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHHsPok1 8PndCFWfFmVfGI7fPM27MB8GA1UdIwQYMBaAFC939+009mpvxnCA+5thuyZ5L4Wh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUM5MC80MkUxRkQyQTNE MjkxMUVDQjBCQ0QyMUZDNEY5QUUwMi9MM2YzN1RUMmFtX0djSUQ3bTJHN0pua3Zo YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wzZjM3VFQyYW1fR2NJRDdtMkc3Sm5rdmhhRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUM5MC80MkUxRkQyQTNEMjkxMUVDQjBCQ0QyMUZDNEY5QUUwMi9MM2YzN1RUMmFt X0djSUQ3bTJHN0pua3ZoYUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEU/+reNgUUv7lyCJz6k97mUWsTn9anCyBJKStr+DPgZnGUGgnDMHh teTdFqAxF/KxIBTM8VSa/Gp5qOcBBokHvd6GRU5SgwmBcwEw7p2oO9TEKhRZIjCh wbw+oVl/12JKi4dfw/9kfbr9PBJa4zwacPgmcyd3vPT5s8OPDzsAFPxj31xe69DY 2obIOLAa0T6Jzc0ucTJl1970kGolbiG/hSSnw4tKRukiPLyGomKdy963o2SXskIm MNWH0/LNr36nI6Tsg5stZFimCJHLRe5U+UhSEn8w3lz2mppnOGCYv3+pOPzQDtrA QeJIo0ja3vlrb2kjrfJrGG84VfPagQyW -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:34 2025 by rpki-client