$ rpki-client -vvf rpki.apnic.net/member_repository/A91B569E/2525C7C84D2511EDA6DDD22EC4F9AE02/3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.mft File: 3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.mft (raw, json) Hash identifier: WHD1dOO/gJHEA5PvX1H87Xxr/NqdDgEo2hK8J2EBKsM= Subject key identifier: 00:DA:2D:8D:7B:21:76:12:F0:D8:A3:6E:D3:EA:60:9F:8D:86:6B:5C Authority key identifier: DC:B8:39:31:9F:D5:2E:AD:9F:CB:97:78:29:84:FD:1F:D4:49:2C:17 Certificate issuer: /CN=A91B569E/serialNumber=DCB839319FD52EAD9FCB97782984FD1FD4492C17 Certificate serial: 0246 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B569E/2525C7C84D2511EDA6DDD22EC4F9AE02/3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.mft Manifest number: 023E Signing time: Sun 19 Oct 2025 04:06:25 +0000 Manifest this update: Sun 19 Oct 2025 04:06:24 +0000 Manifest next update: Sun 26 Oct 2025 04:06:24 +0000 Files and hashes: 1: 3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.crl (hash: jMrouuuU8vHV0N/gYD6Hj+XxvOuHLq1w1ZtlZ/yF1hc=) 2: 0CDAA8EEE86611EFA5152A24C4F9AE02.roa (hash: lUMcuws+kkSP+r54F6XS/v0f47726g1ZKxyTfmh7RHY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B569E/2525C7C84D2511EDA6DDD22EC4F9AE02/3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.crl rsync://rpki.apnic.net/member_repository/A91B569E/2525C7C84D2511EDA6DDD22EC4F9AE02/3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:06:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 582 (0x246) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B569E, serialNumber=DCB839319FD52EAD9FCB97782984FD1FD4492C17 Validity Not Before: Oct 19 04:06:24 2025 GMT Not After : Oct 26 04:06:24 2025 GMT Subject: CN=68f463c0-3893 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:e7:3b:bf:81:3c:bb:2e:ca:22:bd:a5:86:e3: 08:72:8d:7d:b1:bf:19:3f:83:9b:e0:9e:be:d3:36: 8f:58:d9:8c:49:f9:2f:01:d5:64:69:95:cf:14:77: b3:41:34:3a:93:63:a8:c4:d7:08:79:89:31:b4:27: ef:91:3a:9b:28:5c:43:bd:36:f2:50:01:57:b3:fc: ad:b8:26:24:2c:bc:6d:44:94:a1:f7:b7:0f:dd:9d: 73:c2:46:5f:2d:b4:c5:16:f4:9f:f5:52:79:3b:17: 5a:43:bf:1c:f3:cc:c6:2f:d5:76:f9:8a:46:16:ff: 62:5f:60:e7:c2:3b:b3:b2:1c:c8:c2:87:1b:1b:52: 67:1f:ee:05:cc:10:3d:cc:ac:66:60:86:57:25:1b: 6b:34:d1:6d:44:2f:0b:f2:6b:96:37:14:25:8e:3d: 3b:ce:68:c7:7c:e6:d8:95:06:82:8f:be:3d:9a:a1: 8d:dc:06:34:bf:6b:fc:aa:f4:98:64:8b:3b:57:1f: c6:ba:e3:32:e2:39:c6:f0:aa:7d:27:b0:53:9f:7f: 5d:8f:a4:96:21:24:b8:79:a2:9b:22:37:f8:74:00: 03:96:00:ab:7c:db:f6:76:d5:ae:8f:e8:94:07:5a: 61:b5:24:c2:db:1b:0c:f7:82:43:f3:8f:23:14:68: 4d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:DA:2D:8D:7B:21:76:12:F0:D8:A3:6E:D3:EA:60:9F:8D:86:6B:5C X509v3 Authority Key Identifier: keyid:DC:B8:39:31:9F:D5:2E:AD:9F:CB:97:78:29:84:FD:1F:D4:49:2C:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B569E/2525C7C84D2511EDA6DDD22EC4F9AE02/3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B569E/2525C7C84D2511EDA6DDD22EC4F9AE02/3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:dc:50:06:49:98:1b:89:bc:b4:44:80:4a:15:24:1d:d5:92: cf:37:d2:aa:77:b8:af:d7:6b:5f:1f:05:eb:71:ea:b2:3c:49: e1:b0:3c:74:26:a7:98:8b:7e:d6:21:45:43:9b:56:99:3e:68: 62:44:6a:39:c5:12:2c:2b:01:f2:f1:32:38:6e:7e:89:01:83: 62:af:84:c8:d0:7e:72:7f:34:d1:45:ad:17:c4:ef:22:f4:b1: 30:67:15:14:e4:0f:fc:a5:5c:be:b5:e9:58:ec:1c:35:24:f8: bf:11:65:61:b5:5c:06:cd:d2:c0:87:43:75:b6:e9:df:5c:0c: cf:7f:72:02:d6:b0:c8:a1:fc:20:49:e2:4c:d2:0d:e6:9d:56: 60:c2:2d:53:1a:84:a4:4a:e6:58:b3:ae:45:02:c2:43:a4:59: b2:32:51:ce:0b:97:9a:07:8f:71:dc:eb:ac:c8:e4:c5:b0:8c: 8f:2e:09:6a:c5:99:b7:08:b1:44:46:33:44:23:88:03:59:5f: 96:a3:ba:26:b2:b7:68:49:90:66:4b:5a:04:96:2a:bc:33:66: 95:6e:c6:18:48:67:a9:49:dd:72:aa:29:1b:4e:f4:f8:73:3a: 22:66:ee:04:b3:1e:9d:77:57:fc:42:c5:a8:3b:66:dd:dc:24: 04:0a:3a:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU2OUUxMTAvBgNVBAUTKERDQjgzOTMxOUZENTJFQUQ5RkNCOTc3ODI5ODRGRDFG RDQ0OTJDMTcwHhcNMjUxMDE5MDQwNjI0WhcNMjUxMDI2MDQwNjI0WjAYMRYwFAYD VQQDEw02OGY0NjNjMC0zODkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6+c7v4E8uy7KIr2lhuMIco19sb8ZP4Ob4J6+0zaPWNmMSfkvAdVkaZXPFHez QTQ6k2OoxNcIeYkxtCfvkTqbKFxDvTbyUAFXs/ytuCYkLLxtRJSh97cP3Z1zwkZf LbTFFvSf9VJ5OxdaQ78c88zGL9V2+YpGFv9iX2DnwjuzshzIwocbG1JnH+4FzBA9 zKxmYIZXJRtrNNFtRC8L8muWNxQljj07zmjHfObYlQaCj749mqGN3AY0v2v8qvSY ZIs7Vx/GuuMy4jnG8Kp9J7BTn39dj6SWISS4eaKbIjf4dAADlgCrfNv2dtWuj+iU B1phtSTC2xsM94JD848jFGhNNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFADaLY17 IXYS8NijbtPqYJ+NhmtcMB8GA1UdIwQYMBaAFNy4OTGf1S6tn8uXeCmE/R/USSwX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTY5RS8yNTI1QzdDODRE MjUxMUVEQTZEREQyMkVDNEY5QUUwMi8zTGc1TVpfVkxxMmZ5NWQ0S1lUOUg5UkpM QmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNMZzVNWl9WTHEyZnk1ZDRLWVQ5SDlSSkxCYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTY5RS8yNTI1QzdDODREMjUxMUVEQTZEREQyMkVDNEY5QUUwMi8zTGc1TVpfVkxx MmZ5NWQ0S1lUOUg5UkpMQmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCp3FAGSZgbiby0RIBKFSQd1ZLPN9Kqd7iv12tfHwXrceqyPEnhsDx0 JqeYi37WIUVDm1aZPmhiRGo5xRIsKwHy8TI4bn6JAYNir4TI0H5yfzTRRa0XxO8i 9LEwZxUU5A/8pVy+telY7Bw1JPi/EWVhtVwGzdLAh0N1tunfXAzPf3IC1rDIofwg SeJM0g3mnVZgwi1TGoSkSuZYs65FAsJDpFmyMlHOC5eaB49x3OusyOTFsIyPLglq xZm3CLFERjNEI4gDWV+Wo7omsrdoSZBmS1oEliq8M2aVbsYYSGepSd1yqikbTvT4 czoiZu4Esx6dd1f8QsWoO2bd3CQECjrg -----END CERTIFICATE-----Generated at Mon Oct 20 04:32:56 2025 by rpki-client