$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.mft File: 3lBUK-oQggGncsALyfJRrRf6ls0.mft (raw, json) Hash identifier: SS05uptIWaro8EfwiUAtZYuhom5lLt2uPO5Mw6jISZ0= Subject key identifier: DA:02:53:45:2B:FA:A1:6D:83:82:D3:D8:19:3C:18:73:FC:CA:62:CC Authority key identifier: DE:50:54:2B:EA:10:82:01:A7:72:C0:0B:C9:F2:51:AD:17:FA:96:CD Certificate issuer: /CN=A91DEBE3/serialNumber=DE50542BEA108201A772C00BC9F251AD17FA96CD Certificate serial: 0D01 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lBUK-oQggGncsALyfJRrRf6ls0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.mft Manifest number: 0CC4 Signing time: Sat 18 Oct 2025 19:01:38 +0000 Manifest this update: Sat 18 Oct 2025 19:01:38 +0000 Manifest next update: Sat 25 Oct 2025 19:01:38 +0000 Files and hashes: 1: 3lBUK-oQggGncsALyfJRrRf6ls0.crl (hash: MbDz0Z0V0oHPLIUOIh6Iliogox9gl75sLDTW9UnkqdA=) 2: AF0508E8B1EE11EF93E70F63C4F9AE02.roa (hash: /m7E0Dw/anD8qYNxCWedW44uleLaVBkf0eBmZ6XFvMk=) 3: D59CB8F4968511EF93AE8239C4F9AE02.roa (hash: rZ4CQjG/7W0/b4/xy8McSOxNbiTi926f91iRcbtKHeo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.crl rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lBUK-oQggGncsALyfJRrRf6ls0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3329 (0xd01) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEBE3, serialNumber=DE50542BEA108201A772C00BC9F251AD17FA96CD Validity Not Before: Oct 18 19:01:38 2025 GMT Not After : Oct 25 19:01:38 2025 GMT Subject: CN=68f3e412-74b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f5:2e:fa:cc:5e:07:b3:dd:c9:32:01:02:c4: d5:11:c2:a8:9c:2e:5d:1a:61:5a:ad:24:51:6b:6a: 2e:78:2d:da:23:b0:ff:3e:92:b2:97:87:6b:17:e2: 71:d4:3e:95:37:92:73:e6:f7:98:51:89:1a:8a:cb: a9:4d:4c:eb:38:7b:ab:f7:fb:3a:1d:0c:02:c4:21: 2d:2c:ba:45:96:77:49:5d:96:8a:9b:0a:c0:93:35: 1b:28:45:f7:57:fe:14:e7:e7:db:41:6e:e4:b2:7c: 6a:4b:aa:17:c4:1b:86:54:b8:15:79:a3:5a:9f:1a: db:91:3c:fa:db:21:1c:5e:9f:bf:32:c6:54:70:a6: 26:19:13:a6:47:9f:33:70:a7:f9:46:ce:a8:42:a9: ee:a2:dd:2e:d7:d0:ea:f6:21:d0:51:5b:3b:eb:3d: f4:80:ab:4b:9d:cf:50:ef:1a:b7:b8:d9:b0:50:9b: 65:c4:3e:d4:4d:4f:bc:ae:d1:35:54:36:33:7f:be: 7f:ca:0c:a2:e4:1f:8c:68:b6:b6:a6:fe:49:4a:5e: 77:68:7d:ff:41:c4:f0:a5:2b:05:0d:3b:19:db:f6: 17:33:d0:07:75:32:b9:e7:64:32:89:d3:0a:7e:1e: 7e:06:cb:f1:b2:06:f5:0f:01:5c:78:2b:a5:a6:7f: 0f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:02:53:45:2B:FA:A1:6D:83:82:D3:D8:19:3C:18:73:FC:CA:62:CC X509v3 Authority Key Identifier: keyid:DE:50:54:2B:EA:10:82:01:A7:72:C0:0B:C9:F2:51:AD:17:FA:96:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lBUK-oQggGncsALyfJRrRf6ls0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:62:6b:d2:96:f0:b0:1c:6f:a5:2c:a5:b7:19:4a:0d:15:c4: 8e:97:cc:d3:e2:e0:f1:97:e7:4a:09:45:37:e4:40:d2:94:80: 9a:ed:5a:aa:0f:61:7d:3e:b8:1a:cb:c8:03:91:94:ef:a9:7a: a8:ff:1a:46:ea:4e:0d:29:4c:24:b2:2e:3e:53:62:48:32:e6: b9:74:e9:b3:cc:ba:3d:ad:6a:42:4d:3f:b5:7f:46:5c:21:c0: f2:bd:85:7f:40:cb:1e:11:ae:21:b5:ce:6f:24:47:9d:38:dc: 0d:5a:b9:e2:fa:b8:12:52:59:95:4c:0a:65:7a:eb:5b:8d:bf: 1f:42:d0:99:53:2d:23:a0:07:b8:c1:71:d9:9e:9d:44:30:07: 62:f2:6d:79:e7:6b:f0:53:69:d4:8b:6d:30:b8:5d:5b:71:76: 77:8f:00:0f:aa:cc:61:8d:3f:ec:4b:36:a3:6c:2e:c5:94:db: 98:c9:62:63:03:f4:86:5e:49:84:db:e7:f8:24:00:72:c0:3d: e9:0d:0c:cb:0a:7f:41:6a:1c:fb:3b:59:31:f3:e9:17:01:3b: d8:a0:6e:da:be:bf:66:bc:6d:1b:ee:d1:53:a2:a0:dd:7a:89: 04:ad:a0:f3:30:6c:bb:73:69:1c:73:fc:ea:48:ff:b1:48:13: ba:1b:8d:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVCRTMxMTAvBgNVBAUTKERFNTA1NDJCRUExMDgyMDFBNzcyQzAwQkM5RjI1MUFE MTdGQTk2Q0QwHhcNMjUxMDE4MTkwMTM4WhcNMjUxMDI1MTkwMTM4WjAYMRYwFAYD VQQDEw02OGYzZTQxMi03NGI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu/Uu+sxeB7PdyTIBAsTVEcKonC5dGmFarSRRa2oueC3aI7D/PpKyl4drF+Jx 1D6VN5Jz5veYUYkaisupTUzrOHur9/s6HQwCxCEtLLpFlndJXZaKmwrAkzUbKEX3 V/4U5+fbQW7ksnxqS6oXxBuGVLgVeaNanxrbkTz62yEcXp+/MsZUcKYmGROmR58z cKf5Rs6oQqnuot0u19Dq9iHQUVs76z30gKtLnc9Q7xq3uNmwUJtlxD7UTU+8rtE1 VDYzf75/ygyi5B+MaLa2pv5JSl53aH3/QcTwpSsFDTsZ2/YXM9AHdTK552QyidMK fh5+Bsvxsgb1DwFceCulpn8POQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNoCU0Ur +qFtg4LT2Bk8GHP8ymLMMB8GA1UdIwQYMBaAFN5QVCvqEIIBp3LAC8nyUa0X+pbN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUJFMy84MEFFMTBDNjA0 NTAxMUVBQkE4MkM0MTVDNEY5QUUwMi8zbEJVSy1vUWdnR25jc0FMeWZKUnJSZjZs czAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNsQlVLLW9RZ2dHbmNzQUx5ZkpSclJmNmxzMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUJFMy84MEFFMTBDNjA0NTAxMUVBQkE4MkM0MTVDNEY5QUUwMi8zbEJVSy1vUWdn R25jc0FMeWZKUnJSZjZsczAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWYmvSlvCwHG+lLKW3GUoNFcSOl8zT4uDxl+dKCUU35EDSlICa7Vqq D2F9Prgay8gDkZTvqXqo/xpG6k4NKUwksi4+U2JIMua5dOmzzLo9rWpCTT+1f0Zc IcDyvYV/QMseEa4htc5vJEedONwNWrni+rgSUlmVTApleutbjb8fQtCZUy0joAe4 wXHZnp1EMAdi8m1552vwU2nUi20wuF1bcXZ3jwAPqsxhjT/sSzajbC7FlNuYyWJj A/SGXkmE2+f4JABywD3pDQzLCn9Bahz7O1kx8+kXATvYoG7avr9mvG0b7tFToqDd eokEraDzMGy7c2kcc/zqSP+xSBO6G41f -----END CERTIFICATE-----Generated at Mon Oct 20 13:49:11 2025 by rpki-client