$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.mft File: US3AbkHAiZokofyIXrNG5FMH80c.mft (raw, json) Hash identifier: PEACtxH4YQIaJjRooYx5Xj21PmMcE4mURme2S85lsdI= Subject key identifier: 24:B1:32:61:F7:18:07:47:13:B3:72:EC:15:D6:14:55:0D:91:55:9D Authority key identifier: 51:2D:C0:6E:41:C0:89:9A:24:A1:FC:88:5E:B3:46:E4:53:07:F3:47 Certificate issuer: /CN=A91BA4F2/serialNumber=512DC06E41C0899A24A1FC885EB346E45307F347 Certificate serial: 09A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US3AbkHAiZokofyIXrNG5FMH80c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.mft Manifest number: 099C Signing time: Sat 18 Oct 2025 21:06:14 +0000 Manifest this update: Sat 18 Oct 2025 21:06:13 +0000 Manifest next update: Sat 25 Oct 2025 21:06:13 +0000 Files and hashes: 1: US3AbkHAiZokofyIXrNG5FMH80c.crl (hash: s3o/E9VirXee5jJryRorzbwf8kUClbtimggTHrBlMDQ=) 2: 9EEA3006979411EA8C6FC25AC4F9AE02.roa (hash: Y4bw++TnnqHhnQXoIqONS+4c30WzzpJSk4du/GajLxg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.crl rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US3AbkHAiZokofyIXrNG5FMH80c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:06:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2467 (0x9a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA4F2, serialNumber=512DC06E41C0899A24A1FC885EB346E45307F347 Validity Not Before: Oct 18 21:06:13 2025 GMT Not After : Oct 25 21:06:13 2025 GMT Subject: CN=68f40146-3f19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:bb:01:91:29:e6:56:c2:6f:d3:4a:75:2a:52: bc:2c:4e:a4:17:a3:4b:fe:95:49:a9:b0:19:a7:5d: 9e:96:38:5b:44:74:76:01:7c:d3:0b:9b:b1:86:73: 2e:cb:e3:0e:ad:cd:b3:0f:39:c3:61:da:9d:20:d2: aa:40:42:e1:6a:4e:11:3e:0b:5c:41:a1:c2:24:1a: 3f:2d:68:7b:15:53:57:3b:2e:28:9e:17:0b:5a:a9: ec:d7:0f:16:44:f7:49:19:2f:f0:c4:c7:e3:8b:00: 10:ef:d0:3c:b0:96:2d:d4:a2:73:7c:a2:a4:fc:71: cb:20:7c:57:35:60:9d:63:22:9c:80:44:39:41:9b: aa:df:8b:70:fd:fc:44:b1:e7:98:23:e2:df:71:45: 29:29:a2:a0:ee:1c:7d:e4:c7:57:b3:18:53:05:21: 10:41:28:a8:29:3d:e2:37:0f:c0:0b:22:54:26:bf: 99:6f:4d:f6:9c:b1:12:1a:0b:26:d4:18:c0:46:5f: 3e:96:dc:ae:40:64:98:de:a7:3c:5f:94:93:24:2d: c1:40:6b:dc:a0:9f:64:63:56:cb:5b:5b:37:ba:f4: 5e:c9:58:7c:c8:8a:30:68:e5:8f:a9:a2:a4:82:94: 48:e6:a7:ff:a8:75:03:06:41:88:f2:c7:24:a1:9e: 7c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:B1:32:61:F7:18:07:47:13:B3:72:EC:15:D6:14:55:0D:91:55:9D X509v3 Authority Key Identifier: keyid:51:2D:C0:6E:41:C0:89:9A:24:A1:FC:88:5E:B3:46:E4:53:07:F3:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US3AbkHAiZokofyIXrNG5FMH80c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:23:0f:62:6b:9d:17:2e:ac:fb:14:89:bb:0e:7d:9a:6f:61: 0b:72:27:d6:5b:06:ab:65:e5:7e:34:d6:e6:65:de:23:b8:90: b0:da:f2:2a:e8:23:88:a6:04:14:5b:c1:24:cf:5f:77:e3:53: e0:70:17:da:93:f8:87:1b:f5:13:cc:1c:5e:30:11:11:d9:03: 58:01:12:3e:eb:9a:3c:de:f0:e2:89:dc:f3:4c:d6:41:9f:c1: 3a:26:5f:6b:f0:02:06:30:60:0e:7b:eb:3f:32:cc:60:b1:a8: e4:f3:30:5a:f8:f8:60:38:48:ba:f6:ea:e5:b9:55:f5:22:40: 9a:2b:48:88:68:64:d7:71:2c:3f:f6:7a:13:6c:21:59:c3:c0: 8b:1e:df:50:57:5b:c5:04:97:a5:11:eb:12:0f:c3:96:a9:e3: 6e:f2:21:3a:e1:06:eb:2d:9f:6f:24:50:33:5e:08:df:51:2f: c4:87:1c:3e:b8:96:19:32:26:93:ba:9b:b3:d6:60:be:40:41: bc:57:d5:cf:43:b7:75:0c:08:fc:c1:86:01:f3:82:ee:39:d0: 5a:bc:32:0e:75:d0:fc:d1:29:68:26:68:3c:19:13:09:09:87: 5b:5c:f4:6a:db:90:c5:7a:93:d9:3a:f2:c3:f1:94:12:cd:de: c4:ae:45:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkE0RjIxMTAvBgNVBAUTKDUxMkRDMDZFNDFDMDg5OUEyNEExRkM4ODVFQjM0NkU0 NTMwN0YzNDcwHhcNMjUxMDE4MjEwNjEzWhcNMjUxMDI1MjEwNjEzWjAYMRYwFAYD VQQDEw02OGY0MDE0Ni0zZjE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAprsBkSnmVsJv00p1KlK8LE6kF6NL/pVJqbAZp12eljhbRHR2AXzTC5uxhnMu y+MOrc2zDznDYdqdINKqQELhak4RPgtcQaHCJBo/LWh7FVNXOy4onhcLWqns1w8W RPdJGS/wxMfjiwAQ79A8sJYt1KJzfKKk/HHLIHxXNWCdYyKcgEQ5QZuq34tw/fxE seeYI+LfcUUpKaKg7hx95MdXsxhTBSEQQSioKT3iNw/ACyJUJr+Zb032nLESGgsm 1BjARl8+ltyuQGSY3qc8X5STJC3BQGvcoJ9kY1bLW1s3uvReyVh8yIowaOWPqaKk gpRI5qf/qHUDBkGI8sckoZ58+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCSxMmH3 GAdHE7Ny7BXWFFUNkVWdMB8GA1UdIwQYMBaAFFEtwG5BwImaJKH8iF6zRuRTB/NH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTRGMi8yQUVERUY5QTk3 OTMxMUVBQjJBRDI5NTZDNEY5QUUwMi9VUzNBYmtIQWlab2tvZnlJWHJORzVGTUg4 MGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VTM0Fia0hBaVpva29meUlYck5HNUZNSDgwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTRGMi8yQUVERUY5QTk3OTMxMUVBQjJBRDI5NTZDNEY5QUUwMi9VUzNBYmtIQWla b2tvZnlJWHJORzVGTUg4MGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrIw9ia50XLqz7FIm7Dn2ab2ELcifWWwarZeV+NNbmZd4juJCw2vIq 6COIpgQUW8Ekz19341PgcBfak/iHG/UTzBxeMBER2QNYARI+65o83vDiidzzTNZB n8E6Jl9r8AIGMGAOe+s/Msxgsajk8zBa+PhgOEi69urluVX1IkCaK0iIaGTXcSw/ 9noTbCFZw8CLHt9QV1vFBJelEesSD8OWqeNu8iE64QbrLZ9vJFAzXgjfUS/Ehxw+ uJYZMiaTupuz1mC+QEG8V9XPQ7d1DAj8wYYB84LuOdBavDIOddD80SloJmg8GRMJ CYdbXPRq25DFepPZOvLD8ZQSzd7ErkV7 -----END CERTIFICATE-----Generated at Mon Oct 20 07:08:17 2025 by rpki-client