$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.mft File: 3rVjn1hHxw3g_ES-eEJBGPiiBsY.mft (raw, json) Hash identifier: o7RxtxRIfXEL2vpfdU4+8afSc0p1Ouq6DWKp3QAoYJs= Subject key identifier: 25:33:31:58:7D:38:12:E4:BD:B3:CD:3A:12:7A:75:58:BD:16:E1:B0 Authority key identifier: DE:B5:63:9F:58:47:C7:0D:E0:FC:44:BE:78:42:41:18:F8:A2:06:C6 Certificate issuer: /CN=A91CDFFB/serialNumber=DEB5639F5847C70DE0FC44BE78424118F8A206C6 Certificate serial: 0872 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3rVjn1hHxw3g_ES-eEJBGPiiBsY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.mft Manifest number: 0868 Signing time: Sat 18 Oct 2025 21:47:26 +0000 Manifest this update: Sat 18 Oct 2025 21:47:25 +0000 Manifest next update: Sat 25 Oct 2025 21:47:25 +0000 Files and hashes: 1: 3rVjn1hHxw3g_ES-eEJBGPiiBsY.crl (hash: z/nw7ZjX9T7RmQC/1YlE0f9JlpjOPHWLvZewmf50MH4=) 2: CA42E5689FA411EBBC1FFB40C4F9AE02.roa (hash: OCh4LN68aJpc0ulStGzgAqznGnm3sYyEz+fd1t6nYl4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.crl rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3rVjn1hHxw3g_ES-eEJBGPiiBsY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:47:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2162 (0x872) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDFFB, serialNumber=DEB5639F5847C70DE0FC44BE78424118F8A206C6 Validity Not Before: Oct 18 21:47:25 2025 GMT Not After : Oct 25 21:47:25 2025 GMT Subject: CN=68f40aed-fc02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f4:8e:c7:0d:57:29:ef:a7:e9:84:c4:b6:a9: 85:cf:09:cf:75:19:85:21:45:13:e0:98:f6:0e:57: 06:8b:e6:35:79:8e:5e:de:13:f8:bb:36:2f:fe:9a: ee:ad:c1:7d:43:e5:27:ae:6d:41:5c:53:16:6b:6f: 02:1d:88:ed:0f:79:41:f4:ed:20:43:73:0d:4b:30: c7:de:b1:08:3c:f9:97:0f:f0:b6:f3:a1:38:01:14: 1e:69:ef:be:41:ec:c2:e8:a0:b0:55:91:84:93:e0: 58:6a:98:4c:1c:74:46:34:7f:34:31:87:91:18:25: d8:27:79:3a:97:21:4a:22:ef:a4:9b:f7:5e:2c:82: df:4e:9f:f7:4b:4c:61:30:7d:01:cb:38:11:36:54: 3d:61:56:49:08:c0:46:0b:f5:03:a6:27:5e:5e:e8: 12:4b:65:4d:6a:33:72:81:76:a7:77:54:49:ce:2c: a0:6a:1f:90:e7:85:3d:3f:03:70:5c:fc:f1:63:aa: 8c:c8:af:e8:b8:dc:d1:e3:77:a5:d2:fb:3c:49:8a: af:cd:42:88:04:52:7b:bc:67:4c:d3:60:a7:dc:6e: 1f:36:cb:7d:5a:57:07:4b:ff:de:f3:f7:65:b7:35: e2:be:5f:2a:6f:73:93:d9:41:69:35:f7:06:e7:16: be:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:33:31:58:7D:38:12:E4:BD:B3:CD:3A:12:7A:75:58:BD:16:E1:B0 X509v3 Authority Key Identifier: keyid:DE:B5:63:9F:58:47:C7:0D:E0:FC:44:BE:78:42:41:18:F8:A2:06:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3rVjn1hHxw3g_ES-eEJBGPiiBsY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:10:3f:4b:01:d3:10:a2:b8:c6:dd:ff:d9:96:ff:9c:a0:25: 2f:e5:de:fd:de:35:78:ed:95:7c:53:ee:e1:1d:55:30:a3:51: 06:ad:1c:a4:8c:c8:5b:2b:ba:6d:05:91:f9:be:47:6e:a6:f1: 35:f3:c6:f8:36:60:f5:79:ed:31:6e:ff:ce:76:dd:48:a5:77: 47:be:35:58:a6:6f:9e:bb:62:9d:ea:47:5c:1f:19:16:9b:f9: ec:b7:14:8f:da:2a:e8:4d:c8:6d:8f:4d:9f:72:9e:87:07:4b: 49:b1:97:66:aa:41:08:97:ac:20:0c:78:52:85:c8:ab:6f:ba: 02:7e:45:c4:41:e2:a3:f0:03:a8:22:94:39:14:d8:e0:85:e2: e0:70:82:8f:ed:56:df:7b:cf:6d:44:bf:b4:92:93:bc:00:c9: 65:95:fc:47:4a:97:dd:22:38:a1:77:01:3c:38:f4:f3:29:3a: 9e:d7:b6:53:a2:d9:23:ef:5b:76:8a:79:b8:38:08:a5:e6:04: f4:88:81:55:bb:2c:30:a9:e9:67:07:ba:01:8e:26:85:95:c6: 80:35:b9:53:f4:5f:23:68:c5:31:44:03:5f:ed:aa:2f:0b:11: 68:96:2d:79:94:3d:64:f7:b2:49:45:e2:2a:23:4e:a0:10:e8: 7f:3b:b6:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RGRkIxMTAvBgNVBAUTKERFQjU2MzlGNTg0N0M3MERFMEZDNDRCRTc4NDI0MTE4 RjhBMjA2QzYwHhcNMjUxMDE4MjE0NzI1WhcNMjUxMDI1MjE0NzI1WjAYMRYwFAYD VQQDEw02OGY0MGFlZC1mYzAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2vSOxw1XKe+n6YTEtqmFzwnPdRmFIUUT4Jj2DlcGi+Y1eY5e3hP4uzYv/pru rcF9Q+Unrm1BXFMWa28CHYjtD3lB9O0gQ3MNSzDH3rEIPPmXD/C286E4ARQeae++ QezC6KCwVZGEk+BYaphMHHRGNH80MYeRGCXYJ3k6lyFKIu+km/deLILfTp/3S0xh MH0ByzgRNlQ9YVZJCMBGC/UDpideXugSS2VNajNygXand1RJziygah+Q54U9PwNw XPzxY6qMyK/ouNzR43el0vs8SYqvzUKIBFJ7vGdM02Cn3G4fNst9WlcHS//e8/dl tzXivl8qb3OT2UFpNfcG5xa+DwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCUzMVh9 OBLkvbPNOhJ6dVi9FuGwMB8GA1UdIwQYMBaAFN61Y59YR8cN4PxEvnhCQRj4ogbG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREZGQi8yN0U1MDZFNkQ0 RUYxMUVBOUE2MTcyNEFDNEY5QUUwMi8zclZqbjFoSHh3M2dfRVMtZUVKQkdQaWlC c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNyVmpuMWhIeHczZ19FUy1lRUpCR1BpaUJzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REZGQi8yN0U1MDZFNkQ0RUYxMUVBOUE2MTcyNEFDNEY5QUUwMi8zclZqbjFoSHh3 M2dfRVMtZUVKQkdQaWlCc1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcED9LAdMQorjG3f/Zlv+coCUv5d793jV47ZV8U+7hHVUwo1EGrRyk jMhbK7ptBZH5vkdupvE188b4NmD1ee0xbv/Odt1IpXdHvjVYpm+eu2Kd6kdcHxkW m/nstxSP2iroTchtj02fcp6HB0tJsZdmqkEIl6wgDHhShcirb7oCfkXEQeKj8AOo IpQ5FNjgheLgcIKP7Vbfe89tRL+0kpO8AMlllfxHSpfdIjihdwE8OPTzKTqe17ZT otkj71t2inm4OAil5gT0iIFVuywwqelnB7oBjiaFlcaANblT9F8jaMUxRANf7aov CxFoli15lD1k97JJReIqI06gEOh/O7Yw -----END CERTIFICATE-----Generated at Mon Oct 20 01:46:08 2025 by rpki-client