$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft File: 4C3EOvit-NHbLnTkpsKO-WFVvxU.mft (raw, json) Hash identifier: +nuS3tkZWZq9ICCpPJESztR+l5b6xvIzMHLe0gwlNbE= Subject key identifier: 3F:EF:5D:86:9F:A7:DF:42:4D:45:59:9C:78:8F:1C:C6:76:49:0C:5E Authority key identifier: E0:2D:C4:3A:F8:AD:F8:D1:DB:2E:74:E4:A6:C2:8E:F9:61:55:BF:15 Certificate issuer: /CN=A91AD8CB/serialNumber=E02DC43AF8ADF8D1DB2E74E4A6C28EF96155BF15 Certificate serial: 34E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft Manifest number: 34DF Signing time: Sat 18 Oct 2025 14:37:36 +0000 Manifest this update: Sat 18 Oct 2025 14:37:35 +0000 Manifest next update: Sat 25 Oct 2025 14:37:35 +0000 Files and hashes: 1: 4C3EOvit-NHbLnTkpsKO-WFVvxU.crl (hash: cdLaWQcLUnZrQLNY4bMbiDEgaSQNU1/zirJyBLK0gTA=) 2: 7E50DB58DE1E11EF96BAF829C4F9AE02.roa (hash: WAqkzYiOMG3eVsSlxconspeITWeLsHW6M6BKW5GBoNA=) 3: 1733DE66945D11F09E173B0CC4F9AE02.roa (hash: 7XJqHJEnhdUplCJ4iz+cv5gM2kcVkpUwLnhh4FUX6U8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.crl rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 14:37:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13544 (0x34e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD8CB, serialNumber=E02DC43AF8ADF8D1DB2E74E4A6C28EF96155BF15 Validity Not Before: Oct 18 14:37:35 2025 GMT Not After : Oct 25 14:37:35 2025 GMT Subject: CN=68f3a630-6ebf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f2:33:76:07:98:0f:f6:16:f9:11:7b:52:39: fc:0f:f3:98:c1:3a:b4:8c:2a:4d:64:97:fa:7b:04: e6:6b:80:b6:89:4e:72:1d:9a:6a:ed:33:8a:3b:7c: 64:29:32:a4:da:03:96:42:7f:b5:eb:69:83:9f:0b: ad:44:c3:c3:7d:93:47:01:e7:73:69:15:6a:0d:74: 6c:4d:a9:fe:50:84:ec:37:4a:96:9c:89:ec:c9:d7: 23:a9:92:95:0b:35:17:56:bc:d1:6d:00:61:53:ac: 39:70:21:48:90:e6:2e:14:e9:2a:94:76:d9:74:12: ca:06:4c:a3:85:03:71:01:91:78:40:00:eb:74:c5: fa:65:d9:b8:60:4b:3f:5d:dd:34:0e:9b:a4:c9:f0: 57:a3:4d:55:e9:82:ce:15:4d:d8:68:30:03:ca:91: 24:d2:53:b1:9d:fe:9b:f9:7c:6e:4a:7a:e5:a2:5e: 0f:87:c5:17:a7:96:ed:fe:aa:ab:e7:20:20:ec:19: df:8c:9a:18:21:c5:97:34:af:ca:1c:93:bd:d1:51: be:4b:6d:f8:73:0b:9c:4a:39:d1:4c:f0:a7:16:de: ea:14:79:8e:26:c0:46:1c:3c:bc:9b:8e:b4:ec:f0: 7a:31:d4:f9:ce:b3:87:0c:5d:d2:40:92:10:1c:8c: 52:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:EF:5D:86:9F:A7:DF:42:4D:45:59:9C:78:8F:1C:C6:76:49:0C:5E X509v3 Authority Key Identifier: keyid:E0:2D:C4:3A:F8:AD:F8:D1:DB:2E:74:E4:A6:C2:8E:F9:61:55:BF:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e0:ef:e8:69:8b:63:34:0e:93:ac:52:db:3d:77:a5:88:fa:69: 95:25:3c:69:b1:38:72:88:db:a2:62:cc:4b:62:b4:91:c7:62: 02:5c:6c:19:a3:21:e0:98:0d:75:3a:4d:a7:10:12:73:60:43: c3:7c:47:45:cc:7c:57:bc:0d:8b:ac:00:35:ac:d6:a3:23:b1: ac:5b:40:7c:98:e4:ec:2d:b0:da:0c:13:bb:ea:db:d7:79:a2: b4:2c:e1:1c:31:47:19:ef:ae:c9:2a:7c:2a:42:67:d9:2e:ef: 5b:86:ef:f2:14:37:0e:33:6c:b3:98:41:4e:7b:e5:ef:17:bb: d6:e5:b0:37:67:e5:e4:39:36:8e:8e:b4:7c:12:36:92:e4:cc: 36:c0:65:33:dd:c3:c0:14:30:ce:04:d8:5b:45:b2:7a:8a:70: 2b:25:51:e4:b3:fc:78:09:8e:c0:fc:46:56:da:9d:9d:65:86: 29:c2:53:85:97:b4:ad:07:42:0e:b4:21:4c:b8:58:ae:eb:fb: 90:4b:70:e7:fa:b2:aa:c0:ab:64:8d:56:e6:21:27:37:3d:cc: d6:43:31:69:93:57:84:8c:ae:1e:b5:74:30:c4:2c:70:39:b8: fd:52:3d:99:64:04:31:d4:35:35:45:56:36:26:5c:23:37:d7: 4e:cd:41:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQ4Q0IxMTAvBgNVBAUTKEUwMkRDNDNBRjhBREY4RDFEQjJFNzRFNEE2QzI4RUY5 NjE1NUJGMTUwHhcNMjUxMDE4MTQzNzM1WhcNMjUxMDI1MTQzNzM1WjAYMRYwFAYD VQQDEw02OGYzYTYzMC02ZWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy/IzdgeYD/YW+RF7Ujn8D/OYwTq0jCpNZJf6ewTma4C2iU5yHZpq7TOKO3xk KTKk2gOWQn+162mDnwutRMPDfZNHAedzaRVqDXRsTan+UITsN0qWnInsydcjqZKV CzUXVrzRbQBhU6w5cCFIkOYuFOkqlHbZdBLKBkyjhQNxAZF4QADrdMX6Zdm4YEs/ Xd00DpukyfBXo01V6YLOFU3YaDADypEk0lOxnf6b+XxuSnrlol4Ph8UXp5bt/qqr 5yAg7BnfjJoYIcWXNK/KHJO90VG+S234cwucSjnRTPCnFt7qFHmOJsBGHDy8m460 7PB6MdT5zrOHDF3SQJIQHIxS+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD/vXYaf p99CTUVZnHiPHMZ2SQxeMB8GA1UdIwQYMBaAFOAtxDr4rfjR2y505KbCjvlhVb8V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDhDQi8zMjhFRDE1NDFE OEIxMUUyOTA0OUJDRTUwOEIwMkNEMi80QzNFT3ZpdC1OSGJMblRrcHNLTy1XRlZ2 eFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRDM0VPdml0LU5IYkxuVGtwc0tPLVdGVnZ4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDhDQi8zMjhFRDE1NDFEOEIxMUUyOTA0OUJDRTUwOEIwMkNEMi80QzNFT3ZpdC1O SGJMblRrcHNLTy1XRlZ2eFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDg7+hpi2M0DpOsUts9d6WI+mmVJTxpsThyiNuiYsxLYrSRx2ICXGwZ oyHgmA11Ok2nEBJzYEPDfEdFzHxXvA2LrAA1rNajI7GsW0B8mOTsLbDaDBO76tvX eaK0LOEcMUcZ767JKnwqQmfZLu9bhu/yFDcOM2yzmEFOe+XvF7vW5bA3Z+XkOTaO jrR8EjaS5Mw2wGUz3cPAFDDOBNhbRbJ6inArJVHks/x4CY7A/EZW2p2dZYYpwlOF l7StB0IOtCFMuFiu6/uQS3Dn+rKqwKtkjVbmISc3PczWQzFpk1eEjK4etXQwxCxw Obj9Uj2ZZAQx1DU1RVY2JlwjN9dOzUG6 -----END CERTIFICATE-----Generated at Mon Oct 20 14:46:32 2025 by rpki-client