$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft File: d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft (raw, json) Hash identifier: siZOWQsxkzK5mLgNx076JagY3nYH62nElGk17bZTjK8= Subject key identifier: EA:1F:35:6E:07:94:26:AA:4B:A3:86:37:46:88:E8:8C:CC:DF:D3:2D Authority key identifier: 77:76:61:2A:43:C2:2D:0A:66:B8:F1:36:80:B3:05:8B:ED:5D:98:92 Certificate issuer: /CN=A91DEB81/serialNumber=7776612A43C22D0A66B8F13680B3058BED5D9892 Certificate serial: 0494 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft Manifest number: 046C Signing time: Sun 19 Oct 2025 02:05:42 +0000 Manifest this update: Sun 19 Oct 2025 02:05:41 +0000 Manifest next update: Sun 26 Oct 2025 02:05:41 +0000 Files and hashes: 1: d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl (hash: es6Xv8JemgqGdmmrb6DdLeW5os0mAj2c2pxRGNMd8Mo=) 2: EEECC55A8C3611EFA07E612DC4F9AE02.roa (hash: S448nKM+pkzyKAVAq+QLZ6c2Rwj7lMGOSqjzi17yKYo=) 3: 216DB034DE9711EC9289256FC4F9AE02.roa (hash: +Y2vKS8CZ7xVCXV7DmrOc6o0OVVkIHves16LK2wsX2I=) 4: 204E25DADE9711EC9289256FC4F9AE02.roa (hash: Nm0NB5K/NvPqifGuFp/i7DvZfN/unt+xIyxa1mf1Ru8=) 5: E184C6F48F2C11EEA361B22FC4F9AE02.roa (hash: m7hFb23btwRa7iUoc5sSfQwuK6EzzQbsJrT19RdsUzA=) 6: 1FBEA1EEDE9711EC9289256FC4F9AE02.roa (hash: wFyDTsNGRzgAv8mhqHHalbGpjw+H79Gqqrm8IklHVfE=) 7: E0C5B7148F2C11EEA361B22FC4F9AE02.roa (hash: Aqyl2hhEx5BpBctkE5rWM8Kv0ZDOqQAIfUrt5yWaYks=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1172 (0x494) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEB81, serialNumber=7776612A43C22D0A66B8F13680B3058BED5D9892 Validity Not Before: Oct 19 02:05:41 2025 GMT Not After : Oct 26 02:05:41 2025 GMT Subject: CN=68f44775-1391 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:42:fd:25:65:ee:e4:1d:77:38:af:01:1a:a0: 3b:d6:cc:6e:f4:6b:76:e1:06:ac:3f:b2:5f:e2:9e: 13:c3:93:83:eb:90:b3:c5:da:ca:77:9b:cd:df:23: f7:bb:82:66:7a:02:20:b3:d3:93:0b:65:3e:6b:59: 46:a7:a9:c9:eb:56:d8:2c:ae:12:02:c7:a2:ce:61: 00:20:d9:c1:7f:d6:ae:3e:c6:6c:93:14:ba:2e:75: 2f:ec:4b:1c:a8:b6:67:ba:c9:b0:10:6e:42:d5:f0: 2d:00:38:87:54:a0:66:19:9e:1d:c9:c0:f8:c3:55: 7b:29:0e:a7:f6:93:ca:af:21:c2:b6:36:a7:b5:79: 28:cc:84:cb:7a:30:34:54:39:51:43:bf:2b:39:4d: a2:3e:89:f9:ce:46:5b:64:27:54:b4:55:2c:a5:21: a3:e9:dc:61:37:c1:de:f5:c5:80:f9:98:89:f4:9d: 53:33:2d:57:6e:f1:42:ea:95:eb:a3:12:86:fb:27: 1d:d6:47:c8:90:eb:77:4d:ad:7a:d9:ec:42:a1:92: 8d:9a:43:19:ee:03:60:0d:63:e0:bf:36:a3:61:67: 6d:b2:9b:bf:81:7b:ad:de:76:9a:45:1d:3f:ea:e6: b8:01:ac:42:54:d0:f4:2d:31:57:80:6c:6b:7f:ed: b8:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:1F:35:6E:07:94:26:AA:4B:A3:86:37:46:88:E8:8C:CC:DF:D3:2D X509v3 Authority Key Identifier: keyid:77:76:61:2A:43:C2:2D:0A:66:B8:F1:36:80:B3:05:8B:ED:5D:98:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:f8:10:1c:22:16:03:00:f1:a3:0a:a8:89:40:b5:aa:e0:e4: c4:cb:8e:25:b3:fe:45:12:f6:a8:d5:98:33:66:07:6e:09:de: 3c:73:54:71:36:e6:e5:13:e2:68:72:4d:e2:34:66:a6:83:44: ee:4b:a1:29:a3:fe:61:fb:f6:9f:aa:d5:f9:b1:87:c0:36:04: e8:ef:94:13:fb:30:ac:77:39:77:40:ea:27:ff:64:d6:7e:90: 99:79:c3:d5:d6:a7:fd:39:e9:d2:a2:43:f3:93:82:d4:48:79: 02:43:d2:55:ba:72:a7:b2:1c:51:05:d3:6c:91:17:d9:e7:16: c3:0f:27:7e:4d:7f:16:28:7a:f7:95:9f:ec:4b:a1:cb:fe:60: f6:d9:08:3e:36:27:cd:b6:4e:ce:a5:80:eb:fe:a2:66:da:db: 6a:1a:5e:fa:6f:93:45:3b:7d:82:f2:09:55:18:32:77:29:ba: 12:fa:5c:ea:24:69:3c:a9:75:93:c3:fa:c3:94:21:af:b9:42: 03:8a:56:06:75:14:df:a1:bf:35:1d:10:71:b9:61:2f:66:36: ab:e9:61:ed:4e:d2:e6:cd:57:22:16:01:f1:72:d2:98:63:1c: aa:42:23:37:44:65:e4:29:c1:8c:b5:96:d6:a7:a5:50:be:97: 44:ec:10:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVCODExMTAvBgNVBAUTKDc3NzY2MTJBNDNDMjJEMEE2NkI4RjEzNjgwQjMwNThC RUQ1RDk4OTIwHhcNMjUxMDE5MDIwNTQxWhcNMjUxMDI2MDIwNTQxWjAYMRYwFAYD VQQDEw02OGY0NDc3NS0xMzkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApUL9JWXu5B13OK8BGqA71sxu9Gt24QasP7Jf4p4Tw5OD65CzxdrKd5vN3yP3 u4JmegIgs9OTC2U+a1lGp6nJ61bYLK4SAseizmEAINnBf9auPsZskxS6LnUv7Esc qLZnusmwEG5C1fAtADiHVKBmGZ4dycD4w1V7KQ6n9pPKryHCtjantXkozITLejA0 VDlRQ78rOU2iPon5zkZbZCdUtFUspSGj6dxhN8He9cWA+ZiJ9J1TMy1XbvFC6pXr oxKG+ycd1kfIkOt3Ta162exCoZKNmkMZ7gNgDWPgvzajYWdtspu/gXut3naaRR0/ 6ua4AaxCVND0LTFXgGxrf+24zwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOofNW4H lCaqS6OGN0aI6IzM39MtMB8GA1UdIwQYMBaAFHd2YSpDwi0KZrjxNoCzBYvtXZiS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUI4MS9DRjk2NjNDNjcw RjcxMUVDQjMxOEU0M0FDNEY5QUUwMi9kM1poS2tQQ0xRcG11UEUyZ0xNRmktMWRt SkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QzWmhLa1BDTFFwbXVQRTJnTE1GaS0xZG1KSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUI4MS9DRjk2NjNDNjcwRjcxMUVDQjMxOEU0M0FDNEY5QUUwMi9kM1poS2tQQ0xR cG11UEUyZ0xNRmktMWRtSkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9+BAcIhYDAPGjCqiJQLWq4OTEy44ls/5FEvao1ZgzZgduCd48c1Rx NublE+Jock3iNGamg0TuS6Epo/5h+/afqtX5sYfANgTo75QT+zCsdzl3QOon/2TW fpCZecPV1qf9OenSokPzk4LUSHkCQ9JVunKnshxRBdNskRfZ5xbDDyd+TX8WKHr3 lZ/sS6HL/mD22Qg+NifNtk7OpYDr/qJm2ttqGl76b5NFO32C8glVGDJ3KboS+lzq JGk8qXWTw/rDlCGvuUIDilYGdRTfob81HRBxuWEvZjar6WHtTtLmzVciFgHxctKY YxyqQiM3RGXkKcGMtZbWp6VQvpdE7BDe -----END CERTIFICATE-----Generated at Mon Oct 20 01:45:41 2025 by rpki-client