$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.mft File: 3XyND0ePm-ar9znAT1tb5NyfYfg.mft (raw, json) Hash identifier: 1zGdv0PIQ5yBbRJQ7weWo/Tkb3cb6FKj/8xu+zyqeJk= Subject key identifier: 7C:38:E8:6F:DF:4D:47:E3:2C:1A:26:6F:B1:63:44:5F:F3:5B:01:41 Authority key identifier: DD:7C:8D:0F:47:8F:9B:E6:AB:F7:39:C0:4F:5B:5B:E4:DC:9F:61:F8 Certificate issuer: /CN=A91B1E55/serialNumber=DD7C8D0F478F9BE6ABF739C04F5B5BE4DC9F61F8 Certificate serial: CA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3XyND0ePm-ar9znAT1tb5NyfYfg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.mft Manifest number: C8 Signing time: Sun 19 Oct 2025 08:50:47 +0000 Manifest this update: Sun 19 Oct 2025 08:50:46 +0000 Manifest next update: Sun 26 Oct 2025 08:50:46 +0000 Files and hashes: 1: 3XyND0ePm-ar9znAT1tb5NyfYfg.crl (hash: ZYfGHvaVwNCXezSif6Vs/R/foLOhKmXgSHxd1Y3TwIs=) 2: EAF1E48478FA11EF9043060AC4F9AE02.roa (hash: Y94sd9E5GlcMt+lxymyuqjd3AEApdFlcMVQYEZaGYA0=) 3: EA810E6278FA11EF9043060AC4F9AE02.roa (hash: jUEy/iUbesTw/bKzIqKbuM3aQtOsfpKNSiK5hvDoL0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.crl rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3XyND0ePm-ar9znAT1tb5NyfYfg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:50:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 202 (0xca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1E55, serialNumber=DD7C8D0F478F9BE6ABF739C04F5B5BE4DC9F61F8 Validity Not Before: Oct 19 08:50:46 2025 GMT Not After : Oct 26 08:50:46 2025 GMT Subject: CN=68f4a666-ac5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:39:ad:26:ef:a4:69:c6:24:ae:7d:f9:f1:b0: ff:c6:78:44:4f:ca:33:00:7e:3b:0f:96:d9:28:45: 22:5c:12:87:4a:b7:f2:48:f5:49:b9:af:23:69:62: 70:69:cc:23:31:34:b4:ce:54:8b:ca:d1:fa:52:59: 51:0e:50:2d:d4:bc:7c:36:62:ed:ce:bc:91:49:29: 4b:29:9f:04:c5:0b:5b:41:51:dd:02:06:3b:60:2c: d4:31:d9:29:ae:09:8b:7f:19:05:f1:0b:29:cb:96: e9:19:08:35:f6:ca:79:9f:2a:a1:1e:68:c2:95:a7: 30:2c:ef:fb:43:67:73:25:c2:e8:c0:82:fd:86:fa: 0e:ac:aa:33:34:cc:c5:4f:24:ed:a9:d9:30:02:1a: e4:42:d1:a8:49:1e:1f:7f:27:10:f4:57:6c:90:7a: 8a:d6:a7:7b:35:65:8a:3e:55:6c:3a:01:bb:41:83: f8:23:b0:d3:c6:e4:42:76:eb:47:15:6c:d9:a6:49: 6a:d0:90:31:32:88:2a:a5:5b:13:39:5b:e9:bd:39: 50:c9:a5:23:19:81:7b:58:b6:7c:04:f2:3b:af:9d: 05:2f:8c:d7:ef:7f:55:7b:b3:ce:7c:42:84:58:1e: cf:c8:6e:0b:17:56:c3:3d:90:82:a7:3a:82:46:1a: 00:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:38:E8:6F:DF:4D:47:E3:2C:1A:26:6F:B1:63:44:5F:F3:5B:01:41 X509v3 Authority Key Identifier: keyid:DD:7C:8D:0F:47:8F:9B:E6:AB:F7:39:C0:4F:5B:5B:E4:DC:9F:61:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3XyND0ePm-ar9znAT1tb5NyfYfg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:12:07:a2:7c:7d:b6:20:c0:2b:e2:84:14:fd:b1:5b:8e:c4: 97:4f:85:0b:df:d1:f2:e1:13:16:d5:c6:28:7a:dc:21:bb:69: 68:ee:1d:eb:74:d1:22:b1:79:3a:9e:97:9a:16:0f:08:9d:6d: 92:9e:f8:41:3e:c0:0b:d9:74:59:96:17:77:6b:03:ee:a4:c6: 9b:32:75:fa:52:84:9d:9b:05:af:1d:06:6a:ee:01:46:56:be: 37:2c:f0:b4:a1:18:4a:6e:b6:9d:92:c9:61:a2:aa:43:6b:a4: 96:51:b2:24:9a:5d:12:74:d9:ec:a9:e6:67:81:f8:0d:9a:ad: 67:08:06:94:1f:e9:ee:4d:f3:e0:02:81:06:a9:ae:65:a7:eb: 55:d3:30:0e:96:9b:97:28:8f:d0:13:a5:62:56:ae:18:da:cf: 98:c7:6a:4a:80:21:c2:ec:65:41:84:2a:ad:13:71:58:87:ae: d0:38:2a:56:4d:05:41:16:52:27:66:dd:f7:17:52:7c:45:56: a5:04:7e:b7:f4:83:eb:87:80:66:3a:1a:ea:ff:09:e8:48:16: fd:29:f0:0f:43:90:b4:dc:eb:b2:01:84:38:b9:48:9b:20:41: b0:fa:a1:78:00:53:b2:65:6f:b0:7c:98:2e:03:6c:92:bd:6e: ac:f5:17:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFFNTUxMTAvBgNVBAUTKEREN0M4RDBGNDc4RjlCRTZBQkY3MzlDMDRGNUI1QkU0 REM5RjYxRjgwHhcNMjUxMDE5MDg1MDQ2WhcNMjUxMDI2MDg1MDQ2WjAYMRYwFAYD VQQDEw02OGY0YTY2Ni1hYzVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvzmtJu+kacYkrn358bD/xnhET8ozAH47D5bZKEUiXBKHSrfySPVJua8jaWJw acwjMTS0zlSLytH6UllRDlAt1Lx8NmLtzryRSSlLKZ8ExQtbQVHdAgY7YCzUMdkp rgmLfxkF8Qspy5bpGQg19sp5nyqhHmjClacwLO/7Q2dzJcLowIL9hvoOrKozNMzF TyTtqdkwAhrkQtGoSR4ffycQ9FdskHqK1qd7NWWKPlVsOgG7QYP4I7DTxuRCdutH FWzZpklq0JAxMogqpVsTOVvpvTlQyaUjGYF7WLZ8BPI7r50FL4zX739Ve7POfEKE WB7PyG4LF1bDPZCCpzqCRhoA7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHw46G/f TUfjLBomb7FjRF/zWwFBMB8GA1UdIwQYMBaAFN18jQ9Hj5vmq/c5wE9bW+Tcn2H4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUU1NS80QzA5ODYyRTc4 RkExMUVGQTQ0RkU1ODZDNEY5QUUwMi8zWHlORDBlUG0tYXI5em5BVDF0YjVOeWZZ ZmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzNYeU5EMGVQbS1hcjl6bkFUMXRiNU55ZllmZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUU1NS80QzA5ODYyRTc4RkExMUVGQTQ0RkU1ODZDNEY5QUUwMi8zWHlORDBlUG0t YXI5em5BVDF0YjVOeWZZZmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCEgeifH22IMAr4oQU/bFbjsSXT4UL39Hy4RMW1cYoetwhu2lo7h3r dNEisXk6npeaFg8InW2SnvhBPsAL2XRZlhd3awPupMabMnX6UoSdmwWvHQZq7gFG Vr43LPC0oRhKbradkslhoqpDa6SWUbIkml0SdNnsqeZngfgNmq1nCAaUH+nuTfPg AoEGqa5lp+tV0zAOlpuXKI/QE6ViVq4Y2s+Yx2pKgCHC7GVBhCqtE3FYh67QOCpW TQVBFlInZt33F1J8RValBH639IPrh4BmOhrq/wnoSBb9KfAPQ5C03OuyAYQ4uUib IEGw+qF4AFOyZW+wfJguA2ySvW6s9RfT -----END CERTIFICATE-----Generated at Tue Oct 21 02:25:42 2025 by rpki-client