$ rpki-client -vvf rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.mft File: 3CH4ZzeyOX3SsmCej7QGhuPI92E.mft (raw, json) Hash identifier: skqMyZ0Hu6Nd7m5aEOu5HqV1CqxPmHoD5xc+RKixzK0= Subject key identifier: BD:47:35:32:21:00:52:45:FA:EF:73:83:A2:9C:E8:D9:D9:58:CC:C5 Authority key identifier: DC:21:F8:67:37:B2:39:7D:D2:B2:60:9E:8F:B4:06:86:E3:C8:F7:61 Certificate issuer: /CN=A91C799C/serialNumber=DC21F86737B2397DD2B2609E8FB40686E3C8F761 Certificate serial: 07C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CH4ZzeyOX3SsmCej7QGhuPI92E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.mft Manifest number: 07C2 Signing time: Sat 18 Oct 2025 22:32:28 +0000 Manifest this update: Sat 18 Oct 2025 22:32:27 +0000 Manifest next update: Sat 25 Oct 2025 22:32:27 +0000 Files and hashes: 1: 3CH4ZzeyOX3SsmCej7QGhuPI92E.crl (hash: VqO0t7RxiZZqKwr6vC+QPvqZWxDYYiuNUcfKXjcwolY=) 2: 9F5F0EC6135911EBBC97C718C4F9AE02.roa (hash: SiUJ7SYlbA21+yPfD2uZbgHjH4MPfQViyjJFRbUxFiY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.crl rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CH4ZzeyOX3SsmCej7QGhuPI92E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:32:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1991 (0x7c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C799C, serialNumber=DC21F86737B2397DD2B2609E8FB40686E3C8F761 Validity Not Before: Oct 18 22:32:27 2025 GMT Not After : Oct 25 22:32:27 2025 GMT Subject: CN=68f4157c-0409 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:be:1b:bc:5f:ae:95:e5:d4:52:f2:fe:78:04: 34:b1:4d:0d:3a:e2:53:3e:85:9b:67:48:df:10:20: 86:e6:88:dd:b9:50:a3:c3:fc:c1:d7:9c:47:1d:cc: f8:ee:d1:06:cd:fd:78:c3:e5:34:68:97:84:44:4a: 1d:2f:45:2b:6e:0b:1d:19:95:7a:2e:de:06:5e:ad: 86:21:a4:8f:88:7c:5c:dc:89:c5:a0:05:e0:05:dc: c5:27:8b:dd:8f:76:f1:21:21:12:d1:ac:9e:79:33: 78:e0:65:2a:8d:eb:40:09:43:ac:6f:f6:36:f4:89: 77:71:89:78:c1:4e:71:e0:62:c5:36:6b:e4:e6:c1: f6:a2:cb:c8:8e:32:66:89:4e:76:e0:d9:68:be:2f: d6:f2:c1:de:80:53:6a:c6:d9:a6:a9:1f:66:79:b7: 8d:eb:8b:18:40:28:6b:2b:4c:01:fd:c3:37:cd:7e: 74:12:47:22:d8:4f:ef:30:93:03:73:64:96:e4:45: ae:c2:4c:d5:40:23:92:d2:0e:07:d5:3c:b9:e9:42: be:ae:82:22:b2:5e:86:db:7a:8c:9f:5f:a6:00:bc: df:61:cd:e7:bc:77:7c:b7:b3:c8:1c:9d:a6:e4:cd: 69:77:3f:9c:c8:83:df:d2:08:37:1b:dc:26:54:e0: 01:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:47:35:32:21:00:52:45:FA:EF:73:83:A2:9C:E8:D9:D9:58:CC:C5 X509v3 Authority Key Identifier: keyid:DC:21:F8:67:37:B2:39:7D:D2:B2:60:9E:8F:B4:06:86:E3:C8:F7:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CH4ZzeyOX3SsmCej7QGhuPI92E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:5f:39:82:4d:79:d8:5e:ee:f8:60:bc:46:4c:12:f2:17:9e: c7:b8:f2:4e:12:e4:a7:50:5c:ca:c1:8d:32:3d:66:f0:80:06: 4b:df:eb:2f:a3:e7:4b:b8:d9:1d:32:aa:86:54:ae:27:81:74: bb:a5:ea:3d:f2:69:1f:e1:13:88:17:e3:67:d7:7c:bc:71:95: de:39:80:6a:b7:d2:01:97:ea:f0:df:f6:54:bc:22:10:4b:60: e7:9b:23:c6:2f:63:47:d6:f2:33:eb:cf:57:e3:45:2e:f4:38: 59:d4:25:56:1a:14:01:65:c6:4c:b5:15:fa:96:f4:19:1b:bd: f7:81:3e:ac:5a:4f:2e:b8:4e:18:8e:fa:6c:a6:ec:58:8d:57: 7f:c8:a7:98:d9:88:33:76:cd:2a:e7:a8:88:e4:81:56:51:99: aa:cd:a0:45:c9:2d:98:cc:62:87:57:4b:4c:be:64:62:22:c7: 0f:6a:bf:0b:90:31:cc:d6:51:4c:af:ff:c7:dc:00:68:fb:42: ba:ca:8b:c8:57:05:3a:43:9e:a2:a1:56:9d:c9:fb:cd:c0:38: ee:ad:86:50:00:7f:1c:17:3b:2a:29:7c:c7:60:f8:72:7c:c8: 27:b1:dd:cc:cf:ab:cd:e1:fd:bd:92:69:cc:fc:65:6a:30:86: 6a:25:98:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc5OUMxMTAvBgNVBAUTKERDMjFGODY3MzdCMjM5N0REMkIyNjA5RThGQjQwNjg2 RTNDOEY3NjEwHhcNMjUxMDE4MjIzMjI3WhcNMjUxMDI1MjIzMjI3WjAYMRYwFAYD VQQDEw02OGY0MTU3Yy0wNDA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvL4bvF+uleXUUvL+eAQ0sU0NOuJTPoWbZ0jfECCG5ojduVCjw/zB15xHHcz4 7tEGzf14w+U0aJeEREodL0UrbgsdGZV6Lt4GXq2GIaSPiHxc3InFoAXgBdzFJ4vd j3bxISES0ayeeTN44GUqjetACUOsb/Y29Il3cYl4wU5x4GLFNmvk5sH2osvIjjJm iU524Nlovi/W8sHegFNqxtmmqR9mebeN64sYQChrK0wB/cM3zX50Ekci2E/vMJMD c2SW5EWuwkzVQCOS0g4H1Ty56UK+roIisl6G23qMn1+mALzfYc3nvHd8t7PIHJ2m 5M1pdz+cyIPf0gg3G9wmVOAB7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL1HNTIh AFJF+u9zg6Kc6NnZWMzFMB8GA1UdIwQYMBaAFNwh+Gc3sjl90rJgno+0BobjyPdh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzk5Qy9BMkRGQjMzNjEz NTcxMUVCOEQxM0IyMTVDNEY5QUUwMi8zQ0g0WnpleU9YM1NzbUNlajdRR2h1UEk5 MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNDSDRaemV5T1gzU3NtQ2VqN1FHaHVQSTkyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Nzk5Qy9BMkRGQjMzNjEzNTcxMUVCOEQxM0IyMTVDNEY5QUUwMi8zQ0g0WnpleU9Y M1NzbUNlajdRR2h1UEk5MkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmXzmCTXnYXu74YLxGTBLyF57HuPJOEuSnUFzKwY0yPWbwgAZL3+sv o+dLuNkdMqqGVK4ngXS7peo98mkf4ROIF+Nn13y8cZXeOYBqt9IBl+rw3/ZUvCIQ S2DnmyPGL2NH1vIz689X40Uu9DhZ1CVWGhQBZcZMtRX6lvQZG733gT6sWk8uuE4Y jvpspuxYjVd/yKeY2Ygzds0q56iI5IFWUZmqzaBFyS2YzGKHV0tMvmRiIscPar8L kDHM1lFMr//H3ABo+0K6yovIVwU6Q56ioVadyfvNwDjurYZQAH8cFzsqKXzHYPhy fMgnsd3Mz6vN4f29kmnM/GVqMIZqJZhQ -----END CERTIFICATE-----Generated at Mon Oct 20 17:55:18 2025 by rpki-client