$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.mft File: 3vCat-atSADQZ9cCq_MCJincVuA.mft (raw, json) Hash identifier: 6MVCCKC4ayfj+olpBawbzDdhR3e9YUCtf3/Ptr7dj7g= Subject key identifier: B8:83:D8:FD:8C:00:65:47:82:2F:D2:7B:36:3A:E6:E4:A4:12:D0:7D Authority key identifier: DE:F0:9A:B7:E6:AD:48:00:D0:67:D7:02:AB:F3:02:26:29:DC:56:E0 Certificate issuer: /CN=A91B7B32/serialNumber=DEF09AB7E6AD4800D067D702ABF3022629DC56E0 Certificate serial: 0189 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vCat-atSADQZ9cCq_MCJincVuA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.mft Manifest number: 0187 Signing time: Sun 19 Oct 2025 06:08:11 +0000 Manifest this update: Sun 19 Oct 2025 06:08:11 +0000 Manifest next update: Sun 26 Oct 2025 06:08:11 +0000 Files and hashes: 1: 3vCat-atSADQZ9cCq_MCJincVuA.crl (hash: koZ3g5AhthbE+zmRlDytxO+PdOo8+g2Sh1sVQHQLyE4=) 2: 2B7210D251F211EEA079D567C4F9AE02.roa (hash: 62+q+uvhfjJ30zAscNkGLPxXNqqCO9Ks9yOvU1E/mYM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.crl rsync://rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vCat-atSADQZ9cCq_MCJincVuA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:08:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 393 (0x189) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7B32, serialNumber=DEF09AB7E6AD4800D067D702ABF3022629DC56E0 Validity Not Before: Oct 19 06:08:11 2025 GMT Not After : Oct 26 06:08:11 2025 GMT Subject: CN=68f4804b-cf16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:67:3f:90:f7:85:10:d0:fa:48:3d:a2:02:1e: a1:6c:69:c0:ea:28:02:d2:6a:b5:4b:3f:99:59:c8: 3e:5c:a5:90:86:ac:e7:b9:a9:f9:47:0b:35:83:13: 57:0c:0a:83:0f:b5:3e:55:a0:64:73:fa:98:2c:22: b5:f6:8c:f6:25:96:6c:8f:be:f9:6c:ab:c8:24:2f: b2:80:ba:fb:9a:6a:53:26:67:98:21:89:f2:79:c2: 34:2e:5b:57:e2:83:95:54:e8:7b:3c:37:8e:95:78: 19:11:a5:29:d8:76:50:98:ae:72:8d:0c:49:67:99: d5:2a:3f:b2:56:b4:4c:89:ef:2f:a6:66:48:6c:71: 22:6e:f9:35:c4:07:91:ca:0a:0d:8f:2e:d9:5a:38: 8a:31:19:1d:44:de:1f:5a:ee:bc:b4:8d:85:52:8b: bf:1b:a3:08:6d:0c:a8:99:a4:a5:f5:34:25:8c:77: a9:52:69:b1:ec:f2:53:77:6a:58:62:32:91:d1:aa: 7a:74:d0:18:06:b7:20:32:2e:04:93:51:a7:85:c2: d9:37:53:05:1e:24:2a:52:02:49:ce:d9:40:c1:de: 42:ab:4b:ca:f9:7b:06:44:56:9e:f0:6d:3d:d1:8e: 05:6e:f5:74:5e:a7:43:41:87:b5:8b:4a:fc:ab:60: 5f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:83:D8:FD:8C:00:65:47:82:2F:D2:7B:36:3A:E6:E4:A4:12:D0:7D X509v3 Authority Key Identifier: keyid:DE:F0:9A:B7:E6:AD:48:00:D0:67:D7:02:AB:F3:02:26:29:DC:56:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vCat-atSADQZ9cCq_MCJincVuA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:45:c3:27:6f:21:f2:3d:9f:50:20:22:6d:56:0a:c6:f7:7d: ec:d9:c1:70:cc:49:a3:1b:76:88:d2:10:4c:73:f9:a6:37:d4: 84:1e:30:3a:57:2e:a7:ea:5f:7b:a3:f5:2b:b9:1e:42:f7:31: af:52:7d:0b:08:b4:31:ec:f0:a0:dc:f8:09:ea:02:7d:13:5c: 84:08:a6:ef:27:22:ce:50:c6:ef:60:8a:f3:cd:05:2d:4d:e2: fb:4f:8e:6c:53:29:5d:d6:f1:6e:02:e3:db:aa:a1:81:68:f3: 03:b6:5a:63:fe:10:ac:78:f7:ca:12:ff:8a:12:35:78:0c:9d: 8d:16:04:c0:8a:7a:f4:e8:ae:e5:12:d7:4f:64:ce:5c:95:b9: 86:ba:ab:76:76:67:5d:9e:99:b1:c2:ad:5a:03:14:41:49:63: d1:42:1b:df:76:30:ff:49:38:4b:89:79:57:16:98:73:ec:f1: dc:f6:a8:ce:79:3f:2f:a0:a7:47:b8:3d:b7:4c:28:88:9b:ae: 49:42:87:99:89:85:71:5e:9e:6d:b6:20:1f:77:ec:c5:e7:bf: d5:43:f0:16:02:82:ae:14:ce:fa:c6:0c:0f:31:d7:c3:49:d1: fd:92:b9:10:be:19:b0:e4:10:71:f3:5f:46:c0:ec:80:b5:84: 48:82:e3:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdCMzIxMTAvBgNVBAUTKERFRjA5QUI3RTZBRDQ4MDBEMDY3RDcwMkFCRjMwMjI2 MjlEQzU2RTAwHhcNMjUxMDE5MDYwODExWhcNMjUxMDI2MDYwODExWjAYMRYwFAYD VQQDEw02OGY0ODA0Yi1jZjE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmmc/kPeFEND6SD2iAh6hbGnA6igC0mq1Sz+ZWcg+XKWQhqznuan5Rws1gxNX DAqDD7U+VaBkc/qYLCK19oz2JZZsj775bKvIJC+ygLr7mmpTJmeYIYnyecI0LltX 4oOVVOh7PDeOlXgZEaUp2HZQmK5yjQxJZ5nVKj+yVrRMie8vpmZIbHEibvk1xAeR ygoNjy7ZWjiKMRkdRN4fWu68tI2FUou/G6MIbQyomaSl9TQljHepUmmx7PJTd2pY YjKR0ap6dNAYBrcgMi4Ek1GnhcLZN1MFHiQqUgJJztlAwd5Cq0vK+XsGRFae8G09 0Y4FbvV0XqdDQYe1i0r8q2Bf+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLiD2P2M AGVHgi/SezY65uSkEtB9MB8GA1UdIwQYMBaAFN7wmrfmrUgA0GfXAqvzAiYp3Fbg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0IzMi9BQzM2QjM2ODUx RjExMUVFQTdEQzI2NjZDNEY5QUUwMi8zdkNhdC1hdFNBRFFaOWNDcV9NQ0ppbmNW dUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzN2Q2F0LWF0U0FEUVo5Y0NxX01DSmluY1Z1QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0IzMi9BQzM2QjM2ODUxRjExMUVFQTdEQzI2NjZDNEY5QUUwMi8zdkNhdC1hdFNB RFFaOWNDcV9NQ0ppbmNWdUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBERcMnbyHyPZ9QICJtVgrG933s2cFwzEmjG3aI0hBMc/mmN9SEHjA6 Vy6n6l97o/UruR5C9zGvUn0LCLQx7PCg3PgJ6gJ9E1yECKbvJyLOUMbvYIrzzQUt TeL7T45sUyld1vFuAuPbqqGBaPMDtlpj/hCsePfKEv+KEjV4DJ2NFgTAinr06K7l EtdPZM5clbmGuqt2dmddnpmxwq1aAxRBSWPRQhvfdjD/SThLiXlXFphz7PHc9qjO eT8voKdHuD23TCiIm65JQoeZiYVxXp5ttiAfd+zF57/VQ/AWAoKuFM76xgwPMdfD SdH9krkQvhmw5BBx819GwOyAtYRIguMs -----END CERTIFICATE-----Generated at Mon Oct 20 07:14:38 2025 by rpki-client