$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.mft File: 3VM9EaneKrkYCFCDvoLVFDTfRUA.mft (raw, json) Hash identifier: XEaNKhIe+wwO1xqQ7WG6rdJpI5B61mUbbdIoX0OIW9A= Subject key identifier: 45:A9:DA:9B:66:A7:19:DD:F2:F6:48:57:8F:C4:BD:52:6F:21:30:3B Authority key identifier: DD:53:3D:11:A9:DE:2A:B9:18:08:50:83:BE:82:D5:14:34:DF:45:40 Certificate issuer: /CN=A91C8EB6/serialNumber=DD533D11A9DE2AB918085083BE82D51434DF4540 Certificate serial: 160E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3VM9EaneKrkYCFCDvoLVFDTfRUA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.mft Manifest number: 1606 Signing time: Sat 18 Oct 2025 17:11:02 +0000 Manifest this update: Sat 18 Oct 2025 17:11:02 +0000 Manifest next update: Sat 25 Oct 2025 17:11:02 +0000 Files and hashes: 1: 3VM9EaneKrkYCFCDvoLVFDTfRUA.crl (hash: Z0f+eeKx5i5PWlmPHChG9hBPaK/EiONWsmRREPIJNzk=) 2: 116B4B06282011E8BBA2F625C4F9AE02.roa (hash: Xq7aDp/RYbNUbH8lamtxHtlBICT7QgYLuIupGmw4yJo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.crl rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3VM9EaneKrkYCFCDvoLVFDTfRUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:11:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5646 (0x160e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8EB6, serialNumber=DD533D11A9DE2AB918085083BE82D51434DF4540 Validity Not Before: Oct 18 17:11:02 2025 GMT Not After : Oct 25 17:11:02 2025 GMT Subject: CN=68f3ca26-baf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5b:22:b4:a5:b2:46:d6:5e:eb:17:68:76:0a: d5:3d:d8:30:76:a6:79:28:b5:75:47:67:4c:4d:dc: b0:75:7a:11:3d:94:43:6c:16:38:74:b9:08:5f:a9: 02:7a:6d:fe:c6:fd:e2:be:2d:29:b1:cf:17:be:a9: 51:b0:94:48:b0:62:1b:1f:23:2a:e9:06:4b:8e:f1: a6:d0:7f:cd:eb:a9:58:95:a1:4c:19:1c:0d:52:d0: c0:94:8f:40:a1:63:f0:63:cf:91:19:88:68:8f:b6: a8:0d:8c:aa:6a:b1:9c:b1:76:fc:2b:66:87:7d:51: 79:6f:b3:dd:d7:1f:07:8d:b0:a3:12:49:1b:a4:2a: 6c:f1:12:69:b3:4c:18:f7:5c:69:34:4e:53:b9:4b: 7d:c3:86:5c:fa:68:ca:2c:f7:07:b4:1e:79:f1:bf: f1:8c:16:f9:e9:e1:15:fb:16:c8:28:c5:a9:21:77: 7f:c9:71:48:81:b5:ef:0f:3d:19:31:9e:f9:7e:55: 99:dd:08:71:5c:54:96:dc:31:ce:5b:78:7e:e4:5d: cf:e4:ce:e7:d8:bc:9d:d6:27:71:3a:95:df:b2:52: d2:80:ee:6c:69:d6:f9:f8:8a:29:1f:72:35:4c:2b: b6:65:1c:d6:79:75:4c:0f:67:2b:52:6e:0a:58:f8: 57:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:A9:DA:9B:66:A7:19:DD:F2:F6:48:57:8F:C4:BD:52:6F:21:30:3B X509v3 Authority Key Identifier: keyid:DD:53:3D:11:A9:DE:2A:B9:18:08:50:83:BE:82:D5:14:34:DF:45:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3VM9EaneKrkYCFCDvoLVFDTfRUA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:f4:3d:a8:fe:40:a7:4e:e8:e1:a6:5b:1b:8f:60:ca:ce:e4: a8:93:44:98:28:1d:23:a0:4f:4b:46:c2:7c:17:39:bc:aa:82: 34:90:e2:5d:96:ab:35:31:6c:3d:33:ad:ed:c2:c7:03:91:9c: 8f:42:86:7e:88:29:7e:28:6b:b4:2b:1f:e5:c3:62:94:8c:43: 4b:9b:0e:b3:a5:26:17:2c:d8:97:73:ec:8d:48:6c:ef:a1:6b: 09:ec:cd:e5:ce:82:14:9f:b3:cb:4f:d4:15:9e:11:a4:a6:cd: fe:03:53:b5:0b:33:22:07:bd:5f:4c:44:b4:7c:d2:69:71:fd: d6:cb:8c:85:6c:c9:82:41:9f:d7:44:c2:bf:ca:fb:1a:c8:a6: ec:20:5c:39:f9:0e:5b:c9:44:52:72:dc:22:d5:9d:09:fa:07: 03:9b:fa:b6:ee:a4:df:f9:25:d3:f5:55:86:38:c7:fc:e4:28: 66:2c:26:03:54:29:55:f6:40:16:9d:1b:89:6b:c1:6e:6d:76: 65:bf:8b:4a:a4:2d:b1:0a:29:c1:bb:94:4b:35:40:04:12:10: 6f:d4:9f:b4:38:06:fc:ab:29:63:98:71:0f:18:ae:8d:bb:3e: 4f:c7:b3:16:44:94:c6:fb:8c:a6:a4:cd:0e:0a:a4:01:db:1a: 1a:91:f9:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFg4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhFQjYxMTAvBgNVBAUTKERENTMzRDExQTlERTJBQjkxODA4NTA4M0JFODJENTE0 MzRERjQ1NDAwHhcNMjUxMDE4MTcxMTAyWhcNMjUxMDI1MTcxMTAyWjAYMRYwFAYD VQQDEw02OGYzY2EyNi1iYWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsVsitKWyRtZe6xdodgrVPdgwdqZ5KLV1R2dMTdywdXoRPZRDbBY4dLkIX6kC em3+xv3ivi0psc8XvqlRsJRIsGIbHyMq6QZLjvGm0H/N66lYlaFMGRwNUtDAlI9A oWPwY8+RGYhoj7aoDYyqarGcsXb8K2aHfVF5b7Pd1x8HjbCjEkkbpCps8RJps0wY 91xpNE5TuUt9w4Zc+mjKLPcHtB558b/xjBb56eEV+xbIKMWpIXd/yXFIgbXvDz0Z MZ75flWZ3QhxXFSW3DHOW3h+5F3P5M7n2Lyd1idxOpXfslLSgO5sadb5+IopH3I1 TCu2ZRzWeXVMD2crUm4KWPhXOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEWp2ptm pxnd8vZIV4/EvVJvITA7MB8GA1UdIwQYMBaAFN1TPRGp3iq5GAhQg76C1RQ030VA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEVCNi8xMDhGNTNBRTI4 MUYxMUU4QjIwMzgyMjRDNEY5QUUwMi8zVk05RWFuZUtya1lDRkNEdm9MVkZEVGZS VUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNWTTlFYW5lS3JrWUNGQ0R2b0xWRkRUZlJVQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OEVCNi8xMDhGNTNBRTI4MUYxMUU4QjIwMzgyMjRDNEY5QUUwMi8zVk05RWFuZUty a1lDRkNEdm9MVkZEVGZSVUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAo9D2o/kCnTujhplsbj2DKzuSok0SYKB0joE9LRsJ8Fzm8qoI0kOJd lqs1MWw9M63twscDkZyPQoZ+iCl+KGu0Kx/lw2KUjENLmw6zpSYXLNiXc+yNSGzv oWsJ7M3lzoIUn7PLT9QVnhGkps3+A1O1CzMiB71fTES0fNJpcf3Wy4yFbMmCQZ/X RMK/yvsayKbsIFw5+Q5byURSctwi1Z0J+gcDm/q27qTf+SXT9VWGOMf85ChmLCYD VClV9kAWnRuJa8FubXZlv4tKpC2xCinBu5RLNUAEEhBv1J+0OAb8qyljmHEPGK6N uz5Px7MWRJTG+4ympM0OCqQB2xoakfkc -----END CERTIFICATE-----Generated at Mon Oct 20 01:49:24 2025 by rpki-client