$ rpki-client -vvf rpki.apnic.net/member_repository/A91A840E/DA10FF6662EE11E3AAD99F835911EA32/f3UA8ZRiBwd03Is7S5avThubtUU.mft File: f3UA8ZRiBwd03Is7S5avThubtUU.mft (raw, json) Hash identifier: bYe3idLIfPDRn5+rO4gtBdGcu4M0ygfp9/RvLdMNbzw= Subject key identifier: 80:B5:47:E8:1B:6C:56:51:3C:DE:86:1C:CF:95:72:1D:A2:E5:42:17 Authority key identifier: 7F:75:00:F1:94:62:07:07:74:DC:8B:3B:4B:96:AF:4E:1B:9B:B5:45 Certificate issuer: /CN=A91A840E/serialNumber=7F7500F19462070774DC8B3B4B96AF4E1B9BB545 Certificate serial: 2E54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f3UA8ZRiBwd03Is7S5avThubtUU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A840E/DA10FF6662EE11E3AAD99F835911EA32/f3UA8ZRiBwd03Is7S5avThubtUU.mft Manifest number: 2E54 Signing time: Sat 18 Oct 2025 15:40:44 +0000 Manifest this update: Sat 18 Oct 2025 15:40:43 +0000 Manifest next update: Sat 25 Oct 2025 15:40:43 +0000 Files and hashes: 1: f3UA8ZRiBwd03Is7S5avThubtUU.crl (hash: DqB7rHCXdeGj8dZw+ehyZcXY4RU4UADJyIKp+PxrIb0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A840E/DA10FF6662EE11E3AAD99F835911EA32/f3UA8ZRiBwd03Is7S5avThubtUU.crl rsync://rpki.apnic.net/member_repository/A91A840E/DA10FF6662EE11E3AAD99F835911EA32/f3UA8ZRiBwd03Is7S5avThubtUU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f3UA8ZRiBwd03Is7S5avThubtUU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 15:40:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11860 (0x2e54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A840E, serialNumber=7F7500F19462070774DC8B3B4B96AF4E1B9BB545 Validity Not Before: Oct 18 15:40:43 2025 GMT Not After : Oct 25 15:40:43 2025 GMT Subject: CN=68f3b4fb-8cab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:13:56:79:89:b2:0b:05:60:42:2c:0b:76:f9: 3e:5d:7b:0c:7e:dc:78:39:4f:fd:b7:0b:32:86:66: 4f:59:07:12:9d:02:2b:56:dd:06:4a:13:66:fd:57: 0a:3f:52:bd:77:e0:f9:12:ee:83:ea:72:28:e9:69: 32:0e:59:29:8b:0d:25:99:67:df:84:d4:eb:e4:1c: bd:99:74:cf:dd:5f:85:a8:0b:12:6c:a5:ef:1d:98: 9c:17:a9:10:24:65:69:9f:5f:bd:cf:d6:1d:01:3e: 2a:c6:53:88:c2:5b:a8:9e:ae:de:2d:c0:f6:df:b4: cf:fa:95:f2:71:5c:24:16:18:02:f1:6d:0e:7d:bc: 59:6a:dc:54:55:c3:a8:f6:ee:b6:c8:98:50:a7:34: cc:e4:ae:08:07:a6:2d:65:08:7c:a5:d9:44:44:a0: f3:4a:fc:44:d5:81:70:de:e3:b0:2a:1f:ea:bc:10: 9b:aa:82:aa:7e:77:0a:b4:b6:2f:fa:c5:7e:04:49: 8c:d0:05:8b:75:6c:81:4b:bc:e5:35:8b:31:10:e2: 56:b9:5a:3c:30:b2:cf:f3:4a:d7:27:d7:63:5b:9a: 0f:47:93:05:1b:4c:76:e5:04:1f:a0:35:cd:a7:b1: 87:78:e1:31:94:48:e3:07:46:73:eb:ce:d8:bf:0a: 7b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:B5:47:E8:1B:6C:56:51:3C:DE:86:1C:CF:95:72:1D:A2:E5:42:17 X509v3 Authority Key Identifier: keyid:7F:75:00:F1:94:62:07:07:74:DC:8B:3B:4B:96:AF:4E:1B:9B:B5:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A840E/DA10FF6662EE11E3AAD99F835911EA32/f3UA8ZRiBwd03Is7S5avThubtUU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f3UA8ZRiBwd03Is7S5avThubtUU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A840E/DA10FF6662EE11E3AAD99F835911EA32/f3UA8ZRiBwd03Is7S5avThubtUU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:29:ef:2e:8f:00:ef:d3:d9:49:fa:21:22:a5:b3:e1:43:78: 98:b4:e8:c0:36:1a:74:ee:61:26:b4:03:c3:a7:d1:eb:5c:05: 69:c3:5e:e3:d5:fc:74:a9:9a:67:c1:1a:3b:e0:43:13:d0:f3: c6:66:26:a2:0f:c9:f0:75:7d:10:e2:48:7b:fa:b4:d3:2f:e3: 99:54:7e:98:b6:f5:c3:2c:4c:ee:60:3b:4b:0c:7e:3b:56:5e: 57:6b:54:7c:50:d1:5f:b8:ee:e4:be:1e:ba:40:31:19:8f:5c: c6:c3:16:e4:2e:1c:f3:da:db:3b:d4:6a:d4:69:02:51:3d:d0: c6:76:54:42:5a:a7:26:74:9e:96:ec:8c:83:9e:41:c4:11:2b: c9:5c:43:0a:69:d7:e1:42:be:46:48:a0:24:67:3a:fb:bd:73: d1:77:65:e1:59:e0:19:78:06:67:4b:8a:75:23:26:b8:33:03: b4:32:33:41:bf:dd:c1:1e:75:37:67:07:13:b7:b7:7b:1d:57: ab:1e:b2:52:7b:24:bd:57:7f:94:56:54:17:ce:96:6e:2a:36: bf:83:6f:d3:1d:56:f6:7e:aa:98:39:dc:14:de:e0:80:42:e3: 80:34:f6:f6:ab:b7:3f:bb:25:ed:ce:17:c8:f8:57:4b:f8:11: 99:02:2b:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLlQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg0MEUxMTAvBgNVBAUTKDdGNzUwMEYxOTQ2MjA3MDc3NERDOEIzQjRCOTZBRjRF MUI5QkI1NDUwHhcNMjUxMDE4MTU0MDQzWhcNMjUxMDI1MTU0MDQzWjAYMRYwFAYD VQQDEw02OGYzYjRmYi04Y2FiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1BNWeYmyCwVgQiwLdvk+XXsMftx4OU/9twsyhmZPWQcSnQIrVt0GShNm/VcK P1K9d+D5Eu6D6nIo6WkyDlkpiw0lmWffhNTr5By9mXTP3V+FqAsSbKXvHZicF6kQ JGVpn1+9z9YdAT4qxlOIwluonq7eLcD237TP+pXycVwkFhgC8W0OfbxZatxUVcOo 9u62yJhQpzTM5K4IB6YtZQh8pdlERKDzSvxE1YFw3uOwKh/qvBCbqoKqfncKtLYv +sV+BEmM0AWLdWyBS7zlNYsxEOJWuVo8MLLP80rXJ9djW5oPR5MFG0x25QQfoDXN p7GHeOExlEjjB0Zz687Yvwp7NwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIC1R+gb bFZRPN6GHM+Vch2i5UIXMB8GA1UdIwQYMBaAFH91APGUYgcHdNyLO0uWr04bm7VF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODQwRS9EQTEwRkY2NjYy RUUxMUUzQUFEOTlGODM1OTExRUEzMi9mM1VBOFpSaUJ3ZDAzSXM3UzVhdlRodWJ0 VVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2YzVUE4WlJpQndkMDNJczdTNWF2VGh1YnRVVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODQwRS9EQTEwRkY2NjYyRUUxMUUzQUFEOTlGODM1OTExRUEzMi9mM1VBOFpSaUJ3 ZDAzSXM3UzVhdlRodWJ0VVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAKe8ujwDv09lJ+iEipbPhQ3iYtOjANhp07mEmtAPDp9HrXAVpw17j 1fx0qZpnwRo74EMT0PPGZiaiD8nwdX0Q4kh7+rTTL+OZVH6YtvXDLEzuYDtLDH47 Vl5Xa1R8UNFfuO7kvh66QDEZj1zGwxbkLhzz2ts71GrUaQJRPdDGdlRCWqcmdJ6W 7IyDnkHEESvJXEMKadfhQr5GSKAkZzr7vXPRd2XhWeAZeAZnS4p1Iya4MwO0MjNB v93BHnU3ZwcTt7d7HVerHrJSeyS9V3+UVlQXzpZuKja/g2/THVb2fqqYOdwU3uCA QuOANPb2q7c/uyXtzhfI+FdL+BGZAiur -----END CERTIFICATE-----Generated at Sun Oct 19 23:32:29 2025 by rpki-client