$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft File: 3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft (raw, json) Hash identifier: H+UHWtzWucSLB10BNR2g5v60Kroq6dGQaAkAUwV52zY= Subject key identifier: C6:9B:48:75:4B:D6:21:2E:81:E9:9A:62:6A:1A:17:31:03:60:13:C3 Authority key identifier: DC:04:AF:19:8C:97:F2:58:2F:15:AD:DE:EE:7C:68:26:11:CA:DA:51 Certificate issuer: /CN=A91D1691/serialNumber=DC04AF198C97F2582F15ADDEEE7C682611CADA51 Certificate serial: 18DD Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3ASvGYyX8lgvFa3e7nxoJhHK2lE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft Manifest number: 18D6 Signing time: Sat 18 Oct 2025 16:02:43 +0000 Manifest this update: Sat 18 Oct 2025 16:02:42 +0000 Manifest next update: Sat 25 Oct 2025 16:02:42 +0000 Files and hashes: 1: 3ASvGYyX8lgvFa3e7nxoJhHK2lE.crl (hash: s3hokMqqgKRoGatIdpcLyeaBVRy+hQy2zs8JuxzQKqw=) 2: AEA7C9C0818911EA81577016C4F9AE02.roa (hash: iFM56WrKeXwdoA2Uh6qPu0ZtIRkJDq6/ES1KC7jnXoA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.crl rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3ASvGYyX8lgvFa3e7nxoJhHK2lE.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:02:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6365 (0x18dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1691, serialNumber=DC04AF198C97F2582F15ADDEEE7C682611CADA51 Validity Not Before: Oct 18 16:02:42 2025 GMT Not After : Oct 25 16:02:42 2025 GMT Subject: CN=68f3ba22-4a5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:59:34:44:4e:7a:ac:ed:44:ed:45:6c:a3:8e: 5b:ee:48:cc:53:e0:ad:e7:ab:04:9f:0e:7d:bc:43: 2e:bb:01:ab:c2:4b:8f:fd:7a:db:79:6a:ed:a4:bb: d6:29:7e:d2:80:8a:a9:2f:04:95:01:e3:c1:93:56: f2:4f:3f:6d:79:8d:66:d0:c3:57:f5:b1:84:71:11: 3e:c9:7b:3b:a1:3b:a3:26:a2:71:5d:11:c5:c8:45: dd:01:a2:97:fa:ce:e1:6f:bc:38:b7:41:f9:22:9d: c3:ea:fd:86:5a:10:8f:2d:3e:0d:12:12:db:64:9f: 70:ef:b2:30:35:c0:2f:66:73:d1:4b:45:ae:1d:de: f2:b4:d1:fd:98:36:af:9a:c6:91:44:c9:b7:e4:1d: ee:b4:0d:89:2d:6e:95:0a:85:21:6f:e1:d1:bd:77: a4:bc:1d:67:a8:84:d0:20:64:13:a4:72:d7:2a:8d: 37:84:42:6e:ac:fc:1d:cf:e3:ce:7d:eb:b4:71:15: e4:4e:f3:89:53:ea:95:56:de:f4:ba:83:20:72:cf: a8:87:c0:dd:14:60:a0:81:ab:31:54:f7:69:a1:89: ef:d5:14:93:ac:55:ab:78:89:42:3d:c8:43:9b:78: 74:63:56:f6:02:0a:8f:42:dd:95:00:8c:e7:b4:74: f9:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:9B:48:75:4B:D6:21:2E:81:E9:9A:62:6A:1A:17:31:03:60:13:C3 X509v3 Authority Key Identifier: keyid:DC:04:AF:19:8C:97:F2:58:2F:15:AD:DE:EE:7C:68:26:11:CA:DA:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3ASvGYyX8lgvFa3e7nxoJhHK2lE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:81:21:59:e5:d9:3f:9f:46:f9:1a:d8:93:d9:d9:f7:a1:20: aa:39:0c:9b:44:f1:79:cf:76:c6:0d:f4:b0:07:7b:e7:cf:27: 7c:aa:60:de:a2:75:58:d8:6d:1d:cf:21:28:82:cf:90:94:b9: 11:42:96:48:a5:61:68:84:39:f5:f8:4c:96:d6:6f:c3:b5:c4: d9:5d:15:de:23:75:11:da:ab:1f:6f:9d:75:66:69:26:38:71: c2:7a:23:f8:9a:2f:bd:d7:46:05:2b:60:0e:4e:88:e1:cc:d0: 0e:08:13:f4:45:57:f6:8c:54:96:b7:f5:d8:73:b7:b6:99:79: 71:38:b2:11:0f:c2:f9:ea:20:7d:94:8b:be:b6:d9:f3:5c:7f: b4:d5:8c:72:1c:e1:66:0a:e3:64:1f:77:dc:17:79:43:c3:f1: 93:90:74:1a:42:e9:d8:de:b3:4c:f0:25:63:f4:b2:2b:b4:b6: 44:ef:48:97:96:a0:a3:ee:4c:90:19:fd:e7:c0:51:dd:dd:af: 12:b9:7d:8a:4d:94:9e:db:79:f3:7e:d3:07:64:0d:00:46:ef: be:6c:db:2d:cf:fd:38:ac:15:7c:b1:94:c1:4f:43:f4:e0:37: 9c:a7:f4:8b:b8:44:ef:38:9c:a0:3f:d4:03:a7:02:05:8e:75: 6c:c0:ce:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE2OTExMTAvBgNVBAUTKERDMDRBRjE5OEM5N0YyNTgyRjE1QURERUVFN0M2ODI2 MTFDQURBNTEwHhcNMjUxMDE4MTYwMjQyWhcNMjUxMDI1MTYwMjQyWjAYMRYwFAYD VQQDEw02OGYzYmEyMi00YTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuFk0RE56rO1E7UVso45b7kjMU+Ct56sEnw59vEMuuwGrwkuP/XrbeWrtpLvW KX7SgIqpLwSVAePBk1byTz9teY1m0MNX9bGEcRE+yXs7oTujJqJxXRHFyEXdAaKX +s7hb7w4t0H5Ip3D6v2GWhCPLT4NEhLbZJ9w77IwNcAvZnPRS0WuHd7ytNH9mDav msaRRMm35B3utA2JLW6VCoUhb+HRvXekvB1nqITQIGQTpHLXKo03hEJurPwdz+PO feu0cRXkTvOJU+qVVt70uoMgcs+oh8DdFGCggasxVPdpoYnv1RSTrFWreIlCPchD m3h0Y1b2AgqPQt2VAIzntHT5VwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMabSHVL 1iEugemaYmoaFzEDYBPDMB8GA1UdIwQYMBaAFNwErxmMl/JYLxWt3u58aCYRytpR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTY5MS81MEM2OTI5MjlE MjQxMUU3ODYxQTIyNkJDNEY5QUUwMi8zQVN2R1l5WDhsZ3ZGYTNlN254b0poSEsy bEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzNBU3ZHWXlYOGxndkZhM2U3bnhvSmhISzJsRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTY5MS81MEM2OTI5MjlEMjQxMUU3ODYxQTIyNkJDNEY5QUUwMi8zQVN2R1l5WDhs Z3ZGYTNlN254b0poSEsybEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7gSFZ5dk/n0b5GtiT2dn3oSCqOQybRPF5z3bGDfSwB3vnzyd8qmDe onVY2G0dzyEogs+QlLkRQpZIpWFohDn1+EyW1m/DtcTZXRXeI3UR2qsfb511Zmkm OHHCeiP4mi+910YFK2AOTojhzNAOCBP0RVf2jFSWt/XYc7e2mXlxOLIRD8L56iB9 lIu+ttnzXH+01YxyHOFmCuNkH3fcF3lDw/GTkHQaQunY3rNM8CVj9LIrtLZE70iX lqCj7kyQGf3nwFHd3a8SuX2KTZSe23nzftMHZA0ARu++bNstz/04rBV8sZTBT0P0 4Decp/SLuETvOJygP9QDpwIFjnVswM7C -----END CERTIFICATE-----Generated at Mon Oct 20 14:46:32 2025 by rpki-client