$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.mft File: P3PMOoZ5wNsESRpHvnaddbptwZQ.mft (raw, json) Hash identifier: sPyVtixtn+GL7AFaK8kIjbXb6FrDLGV2yYhU/YU3dXg= Subject key identifier: E6:CD:AA:B0:AB:04:6C:29:BD:12:6B:96:F5:80:30:97:91:71:98:F0 Authority key identifier: 3F:73:CC:3A:86:79:C0:DB:04:49:1A:47:BE:76:9D:75:BA:6D:C1:94 Certificate issuer: /CN=A91D6DEC/serialNumber=3F73CC3A8679C0DB04491A47BE769D75BA6DC194 Certificate serial: 021A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3PMOoZ5wNsESRpHvnaddbptwZQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.mft Manifest number: 0214 Signing time: Sun 19 Oct 2025 04:35:29 +0000 Manifest this update: Sun 19 Oct 2025 04:35:29 +0000 Manifest next update: Sun 26 Oct 2025 04:35:29 +0000 Files and hashes: 1: P3PMOoZ5wNsESRpHvnaddbptwZQ.crl (hash: ObPer1xwW3VRIWjeABKyf7tq6HIPbDI8Acwy+zEliEo=) 2: 777244A4506A11EE8D08A11BC4F9AE02.roa (hash: zxrXFqsfD+7NRRncl+qUeb1Nz8SeSSAW+8BU/fya5cs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.crl rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3PMOoZ5wNsESRpHvnaddbptwZQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:35:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 538 (0x21a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6DEC, serialNumber=3F73CC3A8679C0DB04491A47BE769D75BA6DC194 Validity Not Before: Oct 19 04:35:29 2025 GMT Not After : Oct 26 04:35:29 2025 GMT Subject: CN=68f46a91-1324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:58:84:26:26:99:2d:92:20:f3:82:ad:7e:10: 3e:73:61:c1:70:66:3c:ec:46:03:29:d7:44:ee:ed: 18:49:33:10:01:6e:be:ff:8e:7d:92:f5:35:bf:55: ad:ec:2c:9f:34:ad:ec:4a:4c:2d:92:46:f5:e9:3d: 74:7c:6a:09:81:69:77:d1:58:8d:e7:47:5d:43:fd: 1e:9e:a5:08:ec:3b:9d:18:de:1c:53:e6:d4:bc:ff: 4b:d6:20:1e:d3:d1:87:dd:77:63:5c:41:99:37:62: c6:39:72:86:cc:e1:0c:55:f7:f2:36:6d:25:70:ea: 42:65:3e:2e:6b:ea:75:cf:99:3d:59:4e:fa:fd:83: 64:3c:48:60:46:37:d4:3a:59:53:9d:06:c0:55:b1: 95:5c:27:59:f5:9f:15:13:fe:ba:10:50:ad:d4:45: cc:97:f0:83:c5:6b:6d:cd:36:fd:1b:34:f3:31:0e: 30:40:de:f9:00:72:7b:0d:54:0d:a5:9a:55:d7:6d: 2b:39:00:18:65:c2:e9:7f:d6:ea:66:a7:c1:2b:9b: ae:0f:eb:79:69:74:f8:56:d1:3e:fb:6b:6b:74:4a: 3d:4b:ea:f6:cd:a5:57:27:9b:84:09:d4:2c:aa:c5: 2d:f7:0e:4f:a9:8f:b1:5d:49:9b:20:e2:b3:b8:1e: a5:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:CD:AA:B0:AB:04:6C:29:BD:12:6B:96:F5:80:30:97:91:71:98:F0 X509v3 Authority Key Identifier: keyid:3F:73:CC:3A:86:79:C0:DB:04:49:1A:47:BE:76:9D:75:BA:6D:C1:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3PMOoZ5wNsESRpHvnaddbptwZQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:6c:e8:4d:0d:db:3a:65:85:6c:95:20:6e:2e:b2:e7:7c:24: 31:b1:46:0f:9f:3b:0b:c5:19:12:86:48:ec:13:cf:88:91:a0: 34:51:ad:a3:fb:2b:fa:cf:c3:07:e6:f9:0d:fa:7a:16:49:88: 8e:9c:a6:74:f5:fb:ba:74:59:a8:cf:20:fe:e5:ac:a8:cf:06: 12:05:6e:88:7e:e0:ec:63:7d:30:db:67:ea:b5:0b:e5:ee:76: fc:98:38:8b:29:04:45:a2:e3:0b:61:c4:b6:72:b6:72:36:4e: f9:4e:38:79:a4:4b:d8:26:62:13:5d:71:a9:ec:d9:fd:27:05: 7f:4c:fd:7b:a9:e3:43:16:c5:f5:b4:14:67:a2:55:50:48:15: dc:c3:66:80:2d:8f:81:9a:2e:a5:7e:0d:58:e7:c1:1e:77:55: 45:69:e8:16:ec:b4:09:8f:dc:e7:d8:59:5a:bb:8f:f8:ea:4f: 8e:c2:c6:ad:1c:0f:45:8e:15:6c:ef:9b:88:ea:91:c8:8f:84: 33:6a:ad:a5:7e:30:75:a7:2a:03:9b:2f:49:93:d7:f8:6e:36: ee:65:13:d3:8c:b5:45:51:ba:7f:5a:45:81:84:0e:7f:a9:73: e7:79:68:3b:16:15:1c:c0:07:84:38:fe:56:1a:7a:2e:d1:43: 4b:65:2c:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDZERUMxMTAvBgNVBAUTKDNGNzNDQzNBODY3OUMwREIwNDQ5MUE0N0JFNzY5RDc1 QkE2REMxOTQwHhcNMjUxMDE5MDQzNTI5WhcNMjUxMDI2MDQzNTI5WjAYMRYwFAYD VQQDEw02OGY0NmE5MS0xMzI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz1iEJiaZLZIg84KtfhA+c2HBcGY87EYDKddE7u0YSTMQAW6+/459kvU1v1Wt 7CyfNK3sSkwtkkb16T10fGoJgWl30ViN50ddQ/0enqUI7DudGN4cU+bUvP9L1iAe 09GH3XdjXEGZN2LGOXKGzOEMVffyNm0lcOpCZT4ua+p1z5k9WU76/YNkPEhgRjfU OllTnQbAVbGVXCdZ9Z8VE/66EFCt1EXMl/CDxWttzTb9GzTzMQ4wQN75AHJ7DVQN pZpV120rOQAYZcLpf9bqZqfBK5uuD+t5aXT4VtE++2trdEo9S+r2zaVXJ5uECdQs qsUt9w5PqY+xXUmbIOKzuB6lZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFObNqrCr BGwpvRJrlvWAMJeRcZjwMB8GA1UdIwQYMBaAFD9zzDqGecDbBEkaR752nXW6bcGU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkRFQy9ENDIxNzk0QThC RUUxMUVEQTdCM0Q1MjJDNEY5QUUwMi9QM1BNT29aNXdOc0VTUnBIdm5hZGRicHR3 WlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AzUE1Pb1o1d05zRVNScEh2bmFkZGJwdHdaUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NkRFQy9ENDIxNzk0QThCRUUxMUVEQTdCM0Q1MjJDNEY5QUUwMi9QM1BNT29aNXdO c0VTUnBIdm5hZGRicHR3WlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqbOhNDds6ZYVslSBuLrLnfCQxsUYPnzsLxRkShkjsE8+IkaA0Ua2j +yv6z8MH5vkN+noWSYiOnKZ09fu6dFmozyD+5ayozwYSBW6IfuDsY30w22fqtQvl 7nb8mDiLKQRFouMLYcS2crZyNk75Tjh5pEvYJmITXXGp7Nn9JwV/TP17qeNDFsX1 tBRnolVQSBXcw2aALY+Bmi6lfg1Y58Eed1VFaegW7LQJj9zn2Flau4/46k+Owsat HA9FjhVs75uI6pHIj4Qzaq2lfjB1pyoDmy9Jk9f4bjbuZRPTjLVFUbp/WkWBhA5/ qXPneWg7FhUcwAeEOP5WGnou0UNLZSwj -----END CERTIFICATE-----Generated at Mon Oct 20 21:41:16 2025 by rpki-client