$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA58E/908DB4C88C6811F0BCEEB171C4F9AE02/P3JyYLCUlEIN1npzBNggXUL_P_E.mft File: P3JyYLCUlEIN1npzBNggXUL_P_E.mft (raw, json) Hash identifier: E/584iG5nbKErWyJ8kYP8dQfTm2syp4x+MYQYcIBo3I= Subject key identifier: 69:F1:29:55:5C:99:C3:FD:FC:41:DE:6C:50:97:4D:D9:0F:3B:2F:21 Authority key identifier: 3F:72:72:60:B0:94:94:42:0D:D6:7A:73:04:D8:20:5D:42:FF:3F:F1 Certificate issuer: /CN=A91CA58E/serialNumber=3F727260B09494420DD67A7304D8205D42FF3FF1 Certificate serial: 17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3JyYLCUlEIN1npzBNggXUL_P_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA58E/908DB4C88C6811F0BCEEB171C4F9AE02/P3JyYLCUlEIN1npzBNggXUL_P_E.mft Manifest number: 16 Signing time: Sun 19 Oct 2025 11:25:41 +0000 Manifest this update: Sun 19 Oct 2025 11:25:40 +0000 Manifest next update: Sun 26 Oct 2025 11:25:40 +0000 Files and hashes: 1: P3JyYLCUlEIN1npzBNggXUL_P_E.crl (hash: 8OdWQDuQYZQAqOB74vv3bNbiV3/DETnZixe9QrFDGP0=) 2: 3DC1FF148C6911F08611A235C4F9AE02.roa (hash: fLngag0jvcUXsL/3ScrJd5vhIuo9JacsTzQUqtZ8EUg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA58E/908DB4C88C6811F0BCEEB171C4F9AE02/P3JyYLCUlEIN1npzBNggXUL_P_E.crl rsync://rpki.apnic.net/member_repository/A91CA58E/908DB4C88C6811F0BCEEB171C4F9AE02/P3JyYLCUlEIN1npzBNggXUL_P_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3JyYLCUlEIN1npzBNggXUL_P_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:25:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA58E, serialNumber=3F727260B09494420DD67A7304D8205D42FF3FF1 Validity Not Before: Oct 19 11:25:40 2025 GMT Not After : Oct 26 11:25:40 2025 GMT Subject: CN=68f4cab5-196f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:4d:71:2a:55:83:ca:1c:99:14:44:2b:2a:e7: 89:a7:a6:ae:0f:98:78:c2:62:d1:e1:f5:d9:8e:e2: 59:e8:ca:74:c7:a6:1f:bb:d9:9a:54:08:da:6e:41: 0f:2e:9b:e9:78:c7:93:4e:eb:19:f4:14:dd:92:a1: d4:88:31:96:fb:4a:e1:35:45:b1:17:c6:fb:96:68: a5:b2:3b:e2:8c:ec:8d:f8:f2:a2:81:77:ee:0e:48: 02:91:39:bd:cd:e8:13:57:cd:6d:4c:5e:2a:17:34: 52:c9:43:9a:a8:7d:f0:da:4b:62:43:c2:27:72:8c: d3:c3:8b:31:04:ba:7b:68:6a:80:0c:98:c0:bf:9c: 84:3c:56:a3:a9:4d:e0:d1:98:c9:a1:35:77:38:6a: f0:e7:c9:0a:0d:1f:81:f6:04:fa:88:73:32:39:d8: 0a:10:91:bf:ab:06:5d:de:63:29:a0:43:81:c5:89: 4d:1b:46:66:b4:16:79:0e:24:77:21:41:dc:fa:6b: df:08:dd:99:e0:c0:28:3a:95:70:68:f6:08:af:97: c1:0f:d2:8d:eb:3c:ee:51:56:14:4d:f8:f5:28:20: 5f:54:f7:96:3e:54:28:08:f9:a1:bc:ef:d3:67:82: 91:24:6f:20:04:a7:b7:2c:2a:81:9f:84:d6:c3:6d: 60:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:F1:29:55:5C:99:C3:FD:FC:41:DE:6C:50:97:4D:D9:0F:3B:2F:21 X509v3 Authority Key Identifier: keyid:3F:72:72:60:B0:94:94:42:0D:D6:7A:73:04:D8:20:5D:42:FF:3F:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA58E/908DB4C88C6811F0BCEEB171C4F9AE02/P3JyYLCUlEIN1npzBNggXUL_P_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3JyYLCUlEIN1npzBNggXUL_P_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA58E/908DB4C88C6811F0BCEEB171C4F9AE02/P3JyYLCUlEIN1npzBNggXUL_P_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:ab:ed:8a:e1:e6:e3:30:49:ca:e1:49:3d:5b:b6:25:5d:88: 94:58:85:9e:22:b6:aa:6c:bc:24:13:44:1c:af:db:86:38:1d: 53:ef:e3:f9:d4:e2:51:64:6f:a9:55:e7:cb:a3:db:24:0b:7d: f2:78:68:79:78:a1:df:79:31:7a:25:a9:24:ee:5d:d5:a0:96: 97:fe:fd:61:17:66:26:01:fe:df:c9:0b:b8:9e:9c:a1:35:94: 0d:96:fd:1a:11:6a:77:07:9a:2c:3a:3e:64:bc:1f:62:ca:3c: 7d:fe:99:8f:14:af:0c:b9:00:21:02:50:86:91:dd:be:ce:81: e2:51:af:9b:21:eb:a2:c3:ee:b5:f3:13:94:81:6b:d6:78:39: d3:d4:52:65:57:e5:a2:60:81:b5:50:db:f1:74:2f:5d:e6:c9: 71:90:9e:51:5c:c9:a1:a0:08:d9:14:a6:e1:35:23:b1:1d:80: ce:d1:fa:e7:c9:ec:58:6c:f8:3f:ae:80:f8:34:19:28:46:90: d0:f0:05:5e:d0:5a:a1:21:b1:54:45:85:75:7a:be:58:82:48: 5e:e4:3e:90:76:9c:2a:30:55:0b:33:e7:c8:a8:d5:2f:bf:60: 69:49:6c:27:1a:f0:4d:06:4a:5f:5a:da:c5:38:b8:25:fe:64: f2:5d:31:5f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QTU4RTExMC8GA1UEBRMoM0Y3MjcyNjBCMDk0OTQ0MjBERDY3QTczMDREODIwNUQ0 MkZGM0ZGMTAeFw0yNTEwMTkxMTI1NDBaFw0yNTEwMjYxMTI1NDBaMBgxFjAUBgNV BAMTDTY4ZjRjYWI1LTE5NmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUTXEqVYPKHJkURCsq54mnpq4PmHjCYtHh9dmO4lnoynTHph+72ZpUCNpuQQ8u m+l4x5NO6xn0FN2SodSIMZb7SuE1RbEXxvuWaKWyO+KM7I348qKBd+4OSAKROb3N 6BNXzW1MXioXNFLJQ5qoffDaS2JDwidyjNPDizEEuntoaoAMmMC/nIQ8VqOpTeDR mMmhNXc4avDnyQoNH4H2BPqIczI52AoQkb+rBl3eYymgQ4HFiU0bRma0FnkOJHch Qdz6a98I3ZngwCg6lXBo9givl8EP0o3rPO5RVhRN+PUoIF9U95Y+VCgI+aG879Nn gpEkbyAEp7csKoGfhNbDbWBfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUafEpVVyZ w/38Qd5sUJdN2Q87LyEwHwYDVR0jBBgwFoAUP3JyYLCUlEIN1npzBNggXUL/P/Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNBNThFLzkwOERCNEM4OEM2 ODExRjBCQ0VFQjE3MUM0RjlBRTAyL1AzSnlZTENVbEVJTjFucHpCTmdnWFVMX1Bf RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUDNKeVlMQ1VsRUlOMW5wekJOZ2dYVUxfUF9FLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNB NThFLzkwOERCNEM4OEM2ODExRjBCQ0VFQjE3MUM0RjlBRTAyL1AzSnlZTENVbEVJ TjFucHpCTmdnWFVMX1BfRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHir7Yrh5uMwScrhST1btiVdiJRYhZ4itqpsvCQTRByv24Y4HVPv4/nU 4lFkb6lV58uj2yQLffJ4aHl4od95MXolqSTuXdWglpf+/WEXZiYB/t/JC7ienKE1 lA2W/RoRancHmiw6PmS8H2LKPH3+mY8Urwy5ACECUIaR3b7OgeJRr5sh66LD7rXz E5SBa9Z4OdPUUmVX5aJggbVQ2/F0L13myXGQnlFcyaGgCNkUpuE1I7EdgM7R+ufJ 7Fhs+D+ugPg0GShGkNDwBV7QWqEhsVRFhXV6vliCSF7kPpB2nCowVQsz58io1S+/ YGlJbCca8E0GSl9a2sU4uCX+ZPJdMV8= -----END CERTIFICATE-----Generated at Mon Oct 20 13:01:52 2025 by rpki-client