$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.mft File: 3DHPX8nyg0g327s2g8uK9kKrSnw.mft (raw, json) Hash identifier: Pa3OrBrw8Thb8Ood0hwQfqHD/LJpSfOaasKcFRLWM0c= Subject key identifier: B6:C7:A3:06:14:0A:60:E6:7C:18:A6:31:CF:15:F0:17:FE:DC:ED:B3 Authority key identifier: DC:31:CF:5F:C9:F2:83:48:37:DB:BB:36:83:CB:8A:F6:42:AB:4A:7C Certificate issuer: /CN=A91DF85B/serialNumber=DC31CF5FC9F2834837DBBB3683CB8AF642AB4A7C Certificate serial: 0182 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3DHPX8nyg0g327s2g8uK9kKrSnw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.mft Manifest number: 017F Signing time: Sun 19 Oct 2025 06:17:05 +0000 Manifest this update: Sun 19 Oct 2025 06:17:05 +0000 Manifest next update: Sun 26 Oct 2025 06:17:05 +0000 Files and hashes: 1: 3DHPX8nyg0g327s2g8uK9kKrSnw.crl (hash: dBeufqDf/ay0nN+a5BbPALjKVhvYIPkby8VYWxvPx5M=) 2: EE28B64661D611EE9C66300EC4F9AE02.roa (hash: aEwpt3FN/b3agcSqsy028NBcRbgaV2C2DNdzwhDgaUQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.crl rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3DHPX8nyg0g327s2g8uK9kKrSnw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:17:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 386 (0x182) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF85B, serialNumber=DC31CF5FC9F2834837DBBB3683CB8AF642AB4A7C Validity Not Before: Oct 19 06:17:05 2025 GMT Not After : Oct 26 06:17:05 2025 GMT Subject: CN=68f48261-72cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:7e:23:4c:c7:aa:51:5b:0a:e7:81:c2:55:1d: 76:49:92:88:ca:dc:26:09:5d:29:c1:1f:0e:90:e5: 17:4b:9b:53:75:ba:f5:a8:b7:a1:9a:1a:b6:90:cd: 59:36:47:04:c5:f7:fe:f2:22:7c:36:d2:42:52:f0: 1c:9d:4d:d1:d4:8f:82:91:c4:d0:08:20:4c:88:1f: c2:20:e3:b1:84:4b:67:82:ff:09:a3:69:de:4b:75: 63:75:72:e1:3e:37:58:db:85:3d:54:6c:33:67:3d: 0c:13:5c:17:a0:f8:21:e8:27:ae:b0:c1:c2:0a:f8: 77:e7:7a:5d:79:20:36:2a:48:32:db:cb:ee:60:bb: 14:0e:41:e5:7d:7f:0c:5a:46:b0:18:6b:9d:8f:52: 60:cc:5d:1c:9b:7e:aa:92:01:22:24:83:59:93:c4: 49:dd:6e:76:fa:4f:1b:75:a4:bd:6c:04:30:af:89: 38:9e:2e:00:63:9a:eb:e6:2f:33:d4:c8:77:84:1e: ab:a5:37:4b:15:50:79:c4:a5:d1:b1:cd:1a:f1:f5: 6e:7d:ec:8e:e6:72:a7:59:87:a7:5c:c8:95:7d:c4: 71:10:88:69:53:a5:ee:96:75:48:50:59:2a:2b:81: 0e:59:f2:e1:90:1f:cb:38:8e:14:08:42:b7:fb:38: ce:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:C7:A3:06:14:0A:60:E6:7C:18:A6:31:CF:15:F0:17:FE:DC:ED:B3 X509v3 Authority Key Identifier: keyid:DC:31:CF:5F:C9:F2:83:48:37:DB:BB:36:83:CB:8A:F6:42:AB:4A:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3DHPX8nyg0g327s2g8uK9kKrSnw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:32:73:ba:0c:ac:94:d2:2c:bb:c2:05:82:0a:00:e6:80:8f: 7f:59:1d:2e:0c:2c:d4:c8:da:49:a4:fb:47:54:43:90:d3:c1: 58:c5:d5:32:92:fb:be:59:ff:98:99:b1:7b:89:e7:d4:ad:97: 4b:e2:30:e9:73:07:d9:94:14:88:0c:ba:f5:21:d3:84:0d:1a: 66:e1:54:88:72:e5:5f:45:69:3a:3a:1a:06:a1:fc:66:38:3f: 30:9d:73:f3:19:1d:4e:69:ae:93:fb:e0:ab:9a:66:07:71:46: 2e:e0:d7:b7:b0:f4:5a:dc:61:59:ca:87:9f:1b:e2:7b:c2:16: 21:a3:c7:8d:4c:46:86:90:fc:a6:7d:0b:4c:e9:3e:fe:ab:dd: 3d:79:f6:0e:29:dc:02:4f:e4:48:51:51:e3:d5:fb:22:c8:85: 81:e5:05:f9:63:80:33:1c:83:49:24:ec:26:e9:30:67:63:81: 4e:aa:64:ee:8c:ff:20:76:fb:15:77:b9:1c:26:ba:2c:42:33: cc:06:21:42:88:bc:5f:9c:64:4c:9e:27:aa:12:6c:d4:bd:dc: 93:9d:29:50:5e:d4:b7:9d:57:11:01:68:f8:b1:c9:1f:f7:ba: e6:c0:e3:78:d3:fe:03:10:53:1f:13:a3:c0:a5:c0:bc:ed:2d: 5b:b2:8b:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY4NUIxMTAvBgNVBAUTKERDMzFDRjVGQzlGMjgzNDgzN0RCQkIzNjgzQ0I4QUY2 NDJBQjRBN0MwHhcNMjUxMDE5MDYxNzA1WhcNMjUxMDI2MDYxNzA1WjAYMRYwFAYD VQQDEw02OGY0ODI2MS03MmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA834jTMeqUVsK54HCVR12SZKIytwmCV0pwR8OkOUXS5tTdbr1qLehmhq2kM1Z NkcExff+8iJ8NtJCUvAcnU3R1I+CkcTQCCBMiB/CIOOxhEtngv8Jo2neS3VjdXLh PjdY24U9VGwzZz0ME1wXoPgh6CeusMHCCvh353pdeSA2Kkgy28vuYLsUDkHlfX8M WkawGGudj1JgzF0cm36qkgEiJINZk8RJ3W52+k8bdaS9bAQwr4k4ni4AY5rr5i8z 1Mh3hB6rpTdLFVB5xKXRsc0a8fVufeyO5nKnWYenXMiVfcRxEIhpU6XulnVIUFkq K4EOWfLhkB/LOI4UCEK3+zjOgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLbHowYU CmDmfBimMc8V8Bf+3O2zMB8GA1UdIwQYMBaAFNwxz1/J8oNIN9u7NoPLivZCq0p8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjg1Qi9DNzEzQzJGRTYx RDUxMUVFQkFBMDRBNUVDNEY5QUUwMi8zREhQWDhueWcwZzMyN3MyZzh1SzlrS3JT bncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNESFBYOG55ZzBnMzI3czJnOHVLOWtLclNudy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Rjg1Qi9DNzEzQzJGRTYxRDUxMUVFQkFBMDRBNUVDNEY5QUUwMi8zREhQWDhueWcw ZzMyN3MyZzh1SzlrS3JTbncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDBMnO6DKyU0iy7wgWCCgDmgI9/WR0uDCzUyNpJpPtHVEOQ08FYxdUy kvu+Wf+YmbF7iefUrZdL4jDpcwfZlBSIDLr1IdOEDRpm4VSIcuVfRWk6OhoGofxm OD8wnXPzGR1Oaa6T++CrmmYHcUYu4Ne3sPRa3GFZyoefG+J7whYho8eNTEaGkPym fQtM6T7+q909efYOKdwCT+RIUVHj1fsiyIWB5QX5Y4AzHINJJOwm6TBnY4FOqmTu jP8gdvsVd7kcJrosQjPMBiFCiLxfnGRMnieqEmzUvdyTnSlQXtS3nVcRAWj4sckf 97rmwON40/4DEFMfE6PApcC87S1bsoud -----END CERTIFICATE-----Generated at Mon Oct 20 01:49:54 2025 by rpki-client