$ rpki-client -vvf rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft File: 3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft (raw, json) Hash identifier: s2Q6w5JDQ3XMA1sx1dwY1QKTC4LaaeQIBp4dTawDA0c= Subject key identifier: 3C:15:2A:4C:68:10:92:CE:99:53:0A:37:4B:02:65:C8:FC:C7:F9:94 Authority key identifier: DD:11:8B:BB:34:9F:2C:9B:40:DD:9B:B7:1A:5B:61:C6:4B:DB:3E:11 Certificate issuer: /CN=A91D76BE/serialNumber=DD118BBB349F2C9B40DD9BB71A5B61C64BDB3E11 Certificate serial: 0A84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3RGLuzSfLJtA3Zu3GlthxkvbPhE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft Manifest number: 0A7D Signing time: Sat 18 Oct 2025 20:34:28 +0000 Manifest this update: Sat 18 Oct 2025 20:34:28 +0000 Manifest next update: Sat 25 Oct 2025 20:34:28 +0000 Files and hashes: 1: 3RGLuzSfLJtA3Zu3GlthxkvbPhE.crl (hash: lSHMfXeyohdXG3tSuQjHdQBSSppDV5OrvZJjp9UZcN8=) 2: 47772F946C2011EAA5965B3CC4F9AE02.roa (hash: VtwEbio1gRB7Ch5LlsoNkh9yhOMrAAqsTjIWAhPZFj0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.crl rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3RGLuzSfLJtA3Zu3GlthxkvbPhE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:34:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2692 (0xa84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D76BE, serialNumber=DD118BBB349F2C9B40DD9BB71A5B61C64BDB3E11 Validity Not Before: Oct 18 20:34:28 2025 GMT Not After : Oct 25 20:34:28 2025 GMT Subject: CN=68f3f9d4-5298 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:c3:cd:ee:0b:0f:39:18:ef:5a:28:fb:6c:cc: 5a:79:4a:95:08:99:f9:39:e9:5b:44:43:20:2e:09: 95:30:a0:97:7f:ec:c3:c4:76:dc:16:24:be:a5:6f: 83:d5:eb:8e:ba:ab:2c:24:64:fd:73:67:77:20:6d: e4:63:55:93:c4:ae:b0:e7:65:36:8d:af:7f:f7:4c: d9:4d:63:ff:f7:b3:da:41:9f:eb:56:a7:41:84:45: e3:d7:0f:15:5a:ed:2f:41:9a:d9:62:c4:cf:ca:ec: 9b:79:49:3e:c1:fd:ea:b2:cd:43:03:e6:b8:57:43: 64:c0:7e:23:3d:df:3a:41:18:01:34:0a:6f:18:7a: 96:28:1c:ac:55:e1:5a:1b:fe:95:67:c3:f6:df:69: c2:7f:19:27:10:0e:95:a3:9a:96:b0:1e:8a:51:6b: b1:be:51:55:08:d9:43:2f:8f:fb:48:b7:4b:fd:f2: e7:8f:34:d1:a8:26:3a:50:37:e2:c7:b7:7b:41:21: d5:fa:2a:79:ac:ea:59:9e:2a:12:61:63:14:52:b1: ee:c8:5e:5f:cf:d5:98:b6:fa:5d:f0:97:40:b5:db: 4c:e0:33:65:18:0f:8c:6e:af:03:3e:94:1d:98:a4: 60:f4:e4:b8:7f:d7:ca:84:25:3a:9c:c5:87:f6:d6: c2:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:15:2A:4C:68:10:92:CE:99:53:0A:37:4B:02:65:C8:FC:C7:F9:94 X509v3 Authority Key Identifier: keyid:DD:11:8B:BB:34:9F:2C:9B:40:DD:9B:B7:1A:5B:61:C6:4B:DB:3E:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3RGLuzSfLJtA3Zu3GlthxkvbPhE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:35:42:bd:14:e8:b3:ef:e2:73:e3:0c:5c:f0:98:c2:84:f1: 3e:ac:1e:ec:5e:19:41:31:36:58:52:6d:ef:96:79:20:62:c2: 5f:12:3b:ac:73:23:f2:9b:92:c7:1b:83:c0:72:b8:89:ba:d2: c5:5b:89:0d:a7:7e:33:ea:6c:0b:0c:86:e9:34:d3:1b:46:0a: 04:b1:a2:c5:32:44:a8:e5:8e:69:81:27:7d:5e:1f:19:b3:a8: 78:7b:72:a7:da:7f:2f:5a:be:b1:fb:dc:a3:f7:e8:29:3e:fe: 2b:67:fa:aa:69:94:4d:b3:44:eb:46:ce:ea:a1:00:e4:fb:a8: b2:e8:54:5a:46:ac:f1:70:bf:72:39:6b:ad:ea:03:f5:b6:e5: 93:12:4d:58:d7:d2:2e:06:45:d5:1b:af:64:86:74:a4:9d:e9: 0b:78:8b:78:18:db:20:1c:48:f1:c9:64:8b:2f:06:5d:f1:08: 1e:5e:41:3f:f0:7b:8b:12:70:15:4d:ad:f8:06:c7:0f:c8:e1: 80:52:17:01:40:46:aa:48:44:e5:46:4a:eb:b3:f5:84:e4:1e: 68:41:e0:16:4d:57:de:68:3c:fe:fd:d1:ec:26:6f:ed:86:02: 6d:11:4a:28:7c:ca:3c:9c:a1:9a:8a:f5:74:34:51:e4:f5:d4: 3e:d5:18:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCoQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc2QkUxMTAvBgNVBAUTKEREMTE4QkJCMzQ5RjJDOUI0MEREOUJCNzFBNUI2MUM2 NEJEQjNFMTEwHhcNMjUxMDE4MjAzNDI4WhcNMjUxMDI1MjAzNDI4WjAYMRYwFAYD VQQDEw02OGYzZjlkNC01Mjk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7MPN7gsPORjvWij7bMxaeUqVCJn5OelbREMgLgmVMKCXf+zDxHbcFiS+pW+D 1euOuqssJGT9c2d3IG3kY1WTxK6w52U2ja9/90zZTWP/97PaQZ/rVqdBhEXj1w8V Wu0vQZrZYsTPyuybeUk+wf3qss1DA+a4V0NkwH4jPd86QRgBNApvGHqWKBysVeFa G/6VZ8P232nCfxknEA6Vo5qWsB6KUWuxvlFVCNlDL4/7SLdL/fLnjzTRqCY6UDfi x7d7QSHV+ip5rOpZnioSYWMUUrHuyF5fz9WYtvpd8JdAtdtM4DNlGA+Mbq8DPpQd mKRg9OS4f9fKhCU6nMWH9tbCGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDwVKkxo EJLOmVMKN0sCZcj8x/mUMB8GA1UdIwQYMBaAFN0Ri7s0nyybQN2btxpbYcZL2z4R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzZCRS80NEMyOUUwRTZC NzcxMUVBODY1OTQ0NzZDNEY5QUUwMi8zUkdMdXpTZkxKdEEzWnUzR2x0aHhrdmJQ aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNSR0x1elNmTEp0QTNadTNHbHRoeGt2YlBoRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzZCRS80NEMyOUUwRTZCNzcxMUVBODY1OTQ0NzZDNEY5QUUwMi8zUkdMdXpTZkxK dEEzWnUzR2x0aHhrdmJQaEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaNUK9FOiz7+Jz4wxc8JjChPE+rB7sXhlBMTZYUm3vlnkgYsJfEjus cyPym5LHG4PAcriJutLFW4kNp34z6mwLDIbpNNMbRgoEsaLFMkSo5Y5pgSd9Xh8Z s6h4e3Kn2n8vWr6x+9yj9+gpPv4rZ/qqaZRNs0TrRs7qoQDk+6iy6FRaRqzxcL9y OWut6gP1tuWTEk1Y19IuBkXVG69khnSknekLeIt4GNsgHEjxyWSLLwZd8QgeXkE/ 8HuLEnAVTa34BscPyOGAUhcBQEaqSETlRkrrs/WE5B5oQeAWTVfeaDz+/dHsJm/t hgJtEUoofMo8nKGaivV0NFHk9dQ+1Rjm -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:29 2025 by rpki-client