$ rpki-client -vvf rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.mft File: 3-Ss3KCmIkNlS9IJNoIFeOktJSQ.mft (raw, json) Hash identifier: sGrS7N58dBK69TkTBTggdHTF/IbXxDoDjy7tqfke3BA= Subject key identifier: E8:7C:01:49:20:81:C2:94:6C:EE:85:03:9B:48:41:82:C0:80:B1:E2 Authority key identifier: DF:E4:AC:DC:A0:A6:22:43:65:4B:D2:09:36:82:05:78:E9:2D:25:24 Certificate issuer: /CN=A91B31CB/serialNumber=DFE4ACDCA0A62243654BD20936820578E92D2524 Certificate serial: C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.mft Manifest number: C0 Signing time: Sun 19 Oct 2025 09:00:53 +0000 Manifest this update: Sun 19 Oct 2025 09:00:52 +0000 Manifest next update: Sun 26 Oct 2025 09:00:52 +0000 Files and hashes: 1: 3-Ss3KCmIkNlS9IJNoIFeOktJSQ.crl (hash: uXXFsaJapnITSdgDspfILY5L+NGYVgJBlPaAVScXPI0=) 2: 67030B7889F111EFB3186A7BC4F9AE02.roa (hash: jpoA3nOwURms9S72GBWIhr5w5HiTb8jNg/HLvSF6ab8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.crl rsync://rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 194 (0xc2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B31CB, serialNumber=DFE4ACDCA0A62243654BD20936820578E92D2524 Validity Not Before: Oct 19 09:00:52 2025 GMT Not After : Oct 26 09:00:52 2025 GMT Subject: CN=68f4a8c4-e7f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d1:6b:be:40:2d:86:20:5b:aa:17:6f:9c:da: 19:2e:89:cb:07:79:8e:3c:d5:8e:21:35:b4:30:59: 1f:66:5f:94:8f:c2:0e:88:7c:b7:18:d7:8b:d6:3a: 7e:7f:6f:f3:5c:db:c5:da:6e:68:4d:93:e1:5b:9a: 71:e7:9c:98:dd:a1:db:6d:1f:e6:b4:53:3a:a1:20: c6:44:39:36:8c:8f:76:3f:9d:ec:c7:3f:1b:19:12: 62:32:33:7e:da:90:bc:a9:5d:b9:78:51:ec:a3:03: 5a:5d:eb:8e:97:c0:c8:57:db:18:9a:e6:d1:1d:f0: b3:c2:ae:2c:af:48:d8:4d:a3:67:b1:1e:86:95:b6: cf:23:a8:49:ee:86:63:e7:30:1b:43:73:ab:26:f8: c8:a4:95:c9:8b:5e:ab:80:4b:06:2b:3a:b2:99:b7: 33:de:82:75:db:85:00:46:ce:83:02:65:c8:ad:4d: 3c:1e:37:b8:1f:dd:6c:dc:9e:aa:03:1f:04:05:74: cc:21:4e:ab:e0:ca:2b:4a:99:84:31:2b:ab:ce:ce: 4f:bc:f9:af:36:a6:bb:30:f3:23:a6:b5:d9:6f:c1: e5:44:86:75:5c:43:fb:f4:b2:31:4d:a9:54:67:7b: 79:68:d6:ca:e5:b3:7e:46:d2:ce:09:b0:f9:03:22: 9d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:7C:01:49:20:81:C2:94:6C:EE:85:03:9B:48:41:82:C0:80:B1:E2 X509v3 Authority Key Identifier: keyid:DF:E4:AC:DC:A0:A6:22:43:65:4B:D2:09:36:82:05:78:E9:2D:25:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:fe:e1:3d:c8:76:66:03:d0:40:dd:b6:5f:27:d4:6f:26:ee: 50:46:2c:2b:57:96:78:87:1e:a1:13:6c:47:40:52:84:fb:2c: a9:59:4f:20:c3:74:d2:66:07:44:a1:c2:aa:15:09:f7:bc:c4: 29:c6:1d:e3:f1:8b:b8:1d:17:4a:ed:b4:89:c4:ea:e2:11:b6: 8e:06:87:84:e9:6c:2e:a6:34:7e:9a:0c:9d:27:f1:47:08:a1: c2:b3:97:b8:37:bb:3e:ec:66:1b:c9:ec:75:b3:18:11:bd:3d: 21:60:0e:fe:e3:fc:e5:ed:80:79:8c:7e:d5:35:50:5b:09:e0: 40:eb:5d:87:0e:b8:8c:15:1e:35:89:ba:15:e9:50:8d:0c:d2: e9:24:45:4f:38:c3:cf:6f:4a:3f:19:11:42:56:2a:12:a4:9f: aa:b7:38:2d:ee:4e:86:44:c3:59:a5:8a:e6:ab:fe:1c:ba:df: c7:c1:bf:50:df:73:67:a8:23:14:1d:52:2f:bf:96:c1:e8:ad: 7b:50:c2:e9:b9:68:b6:3c:d1:0a:f3:94:82:21:24:9d:68:27: c5:10:be:ff:15:66:92:95:f1:b5:9a:74:6f:a7:c5:12:68:b8: 8d:65:0b:56:09:ac:ba:06:4f:08:29:c7:c2:eb:f3:ba:bb:86: 64:c1:9d:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjMxQ0IxMTAvBgNVBAUTKERGRTRBQ0RDQTBBNjIyNDM2NTRCRDIwOTM2ODIwNTc4 RTkyRDI1MjQwHhcNMjUxMDE5MDkwMDUyWhcNMjUxMDI2MDkwMDUyWjAYMRYwFAYD VQQDEw02OGY0YThjNC1lN2Y1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsNFrvkAthiBbqhdvnNoZLonLB3mOPNWOITW0MFkfZl+Uj8IOiHy3GNeL1jp+ f2/zXNvF2m5oTZPhW5px55yY3aHbbR/mtFM6oSDGRDk2jI92P53sxz8bGRJiMjN+ 2pC8qV25eFHsowNaXeuOl8DIV9sYmubRHfCzwq4sr0jYTaNnsR6GlbbPI6hJ7oZj 5zAbQ3OrJvjIpJXJi16rgEsGKzqymbcz3oJ124UARs6DAmXIrU08Hje4H91s3J6q Ax8EBXTMIU6r4MorSpmEMSurzs5PvPmvNqa7MPMjprXZb8HlRIZ1XEP79LIxTalU Z3t5aNbK5bN+RtLOCbD5AyKdzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOh8AUkg gcKUbO6FA5tIQYLAgLHiMB8GA1UdIwQYMBaAFN/krNygpiJDZUvSCTaCBXjpLSUk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzFDQi9GNDRDQ0Y3RTg5 RjAxMUVGQUQyNkI5N0FDNEY5QUUwMi8zLVNzM0tDbUlrTmxTOUlKTm9JRmVPa3RK U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMtU3MzS0NtSWtObFM5SUpOb0lGZU9rdEpTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzFDQi9GNDRDQ0Y3RTg5RjAxMUVGQUQyNkI5N0FDNEY5QUUwMi8zLVNzM0tDbUlr TmxTOUlKTm9JRmVPa3RKU1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDL/uE9yHZmA9BA3bZfJ9RvJu5QRiwrV5Z4hx6hE2xHQFKE+yypWU8g w3TSZgdEocKqFQn3vMQpxh3j8Yu4HRdK7bSJxOriEbaOBoeE6WwupjR+mgydJ/FH CKHCs5e4N7s+7GYbyex1sxgRvT0hYA7+4/zl7YB5jH7VNVBbCeBA612HDriMFR41 iboV6VCNDNLpJEVPOMPPb0o/GRFCVioSpJ+qtzgt7k6GRMNZpYrmq/4cut/Hwb9Q 33NnqCMUHVIvv5bB6K17UMLpuWi2PNEK85SCISSdaCfFEL7/FWaSlfG1mnRvp8US aLiNZQtWCay6Bk8IKcfC6/O6u4ZkwZ3T -----END CERTIFICATE-----Generated at Mon Oct 20 08:02:20 2025 by rpki-client