$ rpki-client -vvf rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.mft File: S3Z_4wTU8n9REYZLp0O5R5zhSns.mft (raw, json) Hash identifier: 2xJFxFk09IZQxjvERoc3nK2RhAE9sciUuVR1H659H20= Subject key identifier: 77:FE:6C:9C:4E:AA:E2:D8:60:03:AE:73:29:9B:66:BD:E6:5E:EE:92 Authority key identifier: 4B:76:7F:E3:04:D4:F2:7F:51:11:86:4B:A7:43:B9:47:9C:E1:4A:7B Certificate issuer: /CN=A91D53AC/serialNumber=4B767FE304D4F27F5111864BA743B9479CE14A7B Certificate serial: 34D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S3Z_4wTU8n9REYZLp0O5R5zhSns.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.mft Manifest number: 34D0 Signing time: Sat 18 Oct 2025 14:56:57 +0000 Manifest this update: Sat 18 Oct 2025 14:56:56 +0000 Manifest next update: Sat 25 Oct 2025 14:56:56 +0000 Files and hashes: 1: S3Z_4wTU8n9REYZLp0O5R5zhSns.crl (hash: HFO1AHEwXhdJ490Bs3sL+qaWdPLD4VzN7rNPmQxxFvw=) 2: 0C9FD154619611EEADD97F70C4F9AE02.roa (hash: 6tys2kBORt2e9LfTgwSygjIdDqVtnmqGXLJS1SjEsWs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.crl rsync://rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S3Z_4wTU8n9REYZLp0O5R5zhSns.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 14:56:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13523 (0x34d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D53AC, serialNumber=4B767FE304D4F27F5111864BA743B9479CE14A7B Validity Not Before: Oct 18 14:56:56 2025 GMT Not After : Oct 25 14:56:56 2025 GMT Subject: CN=68f3aab8-bfc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d8:3f:0e:d0:cb:90:39:20:fa:2d:a4:1e:87: 4a:d3:b0:9c:c0:1d:fe:70:96:2a:0a:fc:c8:28:12: 75:7e:f7:34:b7:34:9d:8a:c0:1d:89:e4:ff:76:6c: 0b:b8:9d:bb:6f:47:36:db:cf:41:bc:ae:32:0e:37: b8:90:9f:88:9a:99:e5:8b:6f:57:c6:de:ba:80:92: bf:8c:38:4b:3e:64:cf:dd:58:ca:bb:71:29:8e:6d: a0:8d:8d:b1:c8:b0:f7:9a:5f:54:fc:93:bd:3c:90: 63:94:29:5d:fd:9c:bd:4a:cf:89:f6:66:0f:d7:c5: 0a:1a:9f:89:83:d3:af:ca:27:7a:cf:84:4a:a5:2e: 51:d5:7b:29:55:5b:2c:45:64:0b:6a:f1:26:47:03: ed:cd:c5:fa:cd:04:13:89:98:7a:42:5c:d9:7f:01: c4:24:4e:1a:71:c5:55:95:44:9a:12:c9:c4:22:fd: ee:1e:3a:45:19:e4:27:9b:80:3d:d5:f5:58:67:87: 5a:61:32:fe:ea:31:14:6d:8d:3d:d2:47:52:0b:9a: 45:2e:32:eb:42:fa:49:fd:08:fd:9f:d5:0f:c5:63: 3c:4e:13:aa:ad:2a:6a:73:6f:6b:e7:70:ff:f7:95: 0f:e8:0d:78:ad:c1:68:6b:3a:4f:2a:04:a8:b7:fc: ac:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:FE:6C:9C:4E:AA:E2:D8:60:03:AE:73:29:9B:66:BD:E6:5E:EE:92 X509v3 Authority Key Identifier: keyid:4B:76:7F:E3:04:D4:F2:7F:51:11:86:4B:A7:43:B9:47:9C:E1:4A:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S3Z_4wTU8n9REYZLp0O5R5zhSns.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:88:8e:95:d1:97:ef:54:d2:76:c2:6a:0b:ef:fe:1e:d2:9d: e8:1c:78:6b:cb:04:47:68:69:e0:f6:f6:55:51:6d:e1:6d:7a: d8:2a:9f:02:87:84:0c:26:23:8a:c2:ec:f1:e1:14:fe:ce:70: 1a:09:e7:75:4a:47:83:ba:94:d7:a7:b5:9a:06:72:91:ed:d1: 61:ad:38:98:ac:03:96:47:63:50:27:62:3a:05:74:99:73:f0: be:23:3a:94:3d:cc:21:c5:ae:cf:a3:3c:60:d6:ac:62:5c:ab: 0d:47:70:ca:a6:6d:4d:81:1c:37:a5:59:3b:8c:67:de:06:23: 45:c1:c2:7d:7a:5b:d4:df:a8:75:83:27:a1:e1:6d:64:f0:60: 39:31:fa:5d:7e:c2:22:55:74:25:4b:d8:07:43:e3:8b:18:d9: c9:d6:38:94:ab:a2:58:8e:c3:81:53:39:08:a0:da:00:c6:01: 34:1a:c7:b5:12:a5:b6:ce:82:37:f3:db:db:4d:21:47:27:78: 2b:2a:95:8d:44:b1:cc:61:5b:53:18:14:11:40:26:4e:32:c3: 6c:8d:d3:a7:c4:0e:2e:52:78:4c:17:82:ba:16:27:da:f7:ec: e6:35:53:df:fb:e0:e6:85:ff:33:f8:4a:9f:a8:0d:f7:dc:83: 58:9d:54:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUzQUMxMTAvBgNVBAUTKDRCNzY3RkUzMDRENEYyN0Y1MTExODY0QkE3NDNCOTQ3 OUNFMTRBN0IwHhcNMjUxMDE4MTQ1NjU2WhcNMjUxMDI1MTQ1NjU2WjAYMRYwFAYD VQQDEw02OGYzYWFiOC1iZmMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAptg/DtDLkDkg+i2kHodK07CcwB3+cJYqCvzIKBJ1fvc0tzSdisAdieT/dmwL uJ27b0c2289BvK4yDje4kJ+Impnli29Xxt66gJK/jDhLPmTP3VjKu3Epjm2gjY2x yLD3ml9U/JO9PJBjlCld/Zy9Ss+J9mYP18UKGp+Jg9Ovyid6z4RKpS5R1XspVVss RWQLavEmRwPtzcX6zQQTiZh6QlzZfwHEJE4accVVlUSaEsnEIv3uHjpFGeQnm4A9 1fVYZ4daYTL+6jEUbY090kdSC5pFLjLrQvpJ/Qj9n9UPxWM8ThOqrSpqc29r53D/ 95UP6A14rcFoazpPKgSot/ysjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHf+bJxO quLYYAOucymbZr3mXu6SMB8GA1UdIwQYMBaAFEt2f+ME1PJ/URGGS6dDuUec4Up7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTNBQy8wMzE2OEM0RTFE OTcxMUUyOEI2QzAwODAwOEIwMkNEMi9TM1pfNHdUVThuOVJFWVpMcDBPNVI1emhT bnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1MzWl80d1RVOG45UkVZWkxwME81UjV6aFNucy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTNBQy8wMzE2OEM0RTFEOTcxMUUyOEI2QzAwODAwOEIwMkNEMi9TM1pfNHdUVThu OVJFWVpMcDBPNVI1emhTbnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUiI6V0ZfvVNJ2wmoL7/4e0p3oHHhrywRHaGng9vZVUW3hbXrYKp8C h4QMJiOKwuzx4RT+znAaCed1SkeDupTXp7WaBnKR7dFhrTiYrAOWR2NQJ2I6BXSZ c/C+IzqUPcwhxa7Pozxg1qxiXKsNR3DKpm1NgRw3pVk7jGfeBiNFwcJ9elvU36h1 gyeh4W1k8GA5MfpdfsIiVXQlS9gHQ+OLGNnJ1jiUq6JYjsOBUzkIoNoAxgE0Gse1 EqW2zoI389vbTSFHJ3grKpWNRLHMYVtTGBQRQCZOMsNsjdOnxA4uUnhMF4K6Fifa 9+zmNVPf++Dmhf8z+EqfqA333INYnVQK -----END CERTIFICATE-----Generated at Mon Oct 20 01:43:58 2025 by rpki-client