$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3377/60B77DAEEF8E11EBB0DA4E59C4F9AE02/x3wTCfShUw6jlUFFKIFfnHZ8UVs.mft File: x3wTCfShUw6jlUFFKIFfnHZ8UVs.mft (raw, json) Hash identifier: QIiRCjd6Ow857hVUBhg/Sz6efNKieLu00Fh7EPi3UVU= Subject key identifier: 24:A7:FC:72:72:74:92:20:6F:F8:DC:10:50:1A:7F:88:4E:BC:59:32 Authority key identifier: C7:7C:13:09:F4:A1:53:0E:A3:95:41:45:28:81:5F:9C:76:7C:51:5B Certificate issuer: /CN=A91E3377/serialNumber=C77C1309F4A1530EA395414528815F9C767C515B Certificate serial: 0599 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x3wTCfShUw6jlUFFKIFfnHZ8UVs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3377/60B77DAEEF8E11EBB0DA4E59C4F9AE02/x3wTCfShUw6jlUFFKIFfnHZ8UVs.mft Manifest number: 0594 Signing time: Sun 19 Oct 2025 00:52:49 +0000 Manifest this update: Sun 19 Oct 2025 00:52:49 +0000 Manifest next update: Sun 26 Oct 2025 00:52:49 +0000 Files and hashes: 1: x3wTCfShUw6jlUFFKIFfnHZ8UVs.crl (hash: VDXbEMRciFcM4cdpWmO5q65eTaTdH58nyRW0NYQEo2Y=) 2: 4756B350EF9011EBAAE0375AC4F9AE02.roa (hash: H5pjI/DUhiXyW6sQwhGG/wb5HeJLy8aTxQs1mqyRqSU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3377/60B77DAEEF8E11EBB0DA4E59C4F9AE02/x3wTCfShUw6jlUFFKIFfnHZ8UVs.crl rsync://rpki.apnic.net/member_repository/A91E3377/60B77DAEEF8E11EBB0DA4E59C4F9AE02/x3wTCfShUw6jlUFFKIFfnHZ8UVs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x3wTCfShUw6jlUFFKIFfnHZ8UVs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:52:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1433 (0x599) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3377, serialNumber=C77C1309F4A1530EA395414528815F9C767C515B Validity Not Before: Oct 19 00:52:49 2025 GMT Not After : Oct 26 00:52:49 2025 GMT Subject: CN=68f43661-5272 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:37:dc:0f:c1:68:47:81:24:84:fe:e2:e5:a5: 65:3f:30:f0:4e:a6:02:46:43:b0:fa:97:f3:6c:58: 46:b5:0f:c1:dd:dc:eb:e4:ac:37:bf:72:f6:b3:26: 9a:1f:2d:ab:d4:71:94:6d:69:d1:35:ba:f6:60:80: ad:d3:45:14:cd:d6:c2:eb:ea:a5:d5:15:83:e6:1f: 8e:b4:74:c1:6b:9a:7d:dd:cd:9a:ec:3f:fc:dc:ce: d3:45:31:bb:04:d8:93:02:da:bc:dd:79:9c:91:41: 9f:7f:48:77:6b:46:e2:bf:33:df:9d:69:15:21:00: fe:fd:09:dc:63:1e:9b:d1:25:a6:c4:e9:ce:3d:53: 1c:5e:a8:0b:a1:ec:c4:20:30:52:a4:9f:c2:ce:fa: 3e:fe:9d:54:ae:ae:ce:65:f9:42:a5:00:17:02:ec: af:76:1f:50:16:e1:c7:16:93:9c:c0:9c:ad:41:26: dc:e6:3e:4f:6e:b2:2e:ba:27:2a:75:9a:75:0d:cc: b8:cc:e3:ea:8f:39:99:cf:40:73:1d:e8:d1:ea:08: f0:ab:29:fe:30:cc:88:7e:77:49:cc:d9:6b:8b:03: 11:66:58:83:32:2b:55:e2:0f:26:2e:79:44:78:2f: b2:61:da:9f:f9:14:4f:21:a1:6b:d5:25:16:e5:ff: bc:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:A7:FC:72:72:74:92:20:6F:F8:DC:10:50:1A:7F:88:4E:BC:59:32 X509v3 Authority Key Identifier: keyid:C7:7C:13:09:F4:A1:53:0E:A3:95:41:45:28:81:5F:9C:76:7C:51:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3377/60B77DAEEF8E11EBB0DA4E59C4F9AE02/x3wTCfShUw6jlUFFKIFfnHZ8UVs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x3wTCfShUw6jlUFFKIFfnHZ8UVs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3377/60B77DAEEF8E11EBB0DA4E59C4F9AE02/x3wTCfShUw6jlUFFKIFfnHZ8UVs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:5b:7a:57:fc:b9:44:03:7e:6d:65:a8:84:9e:88:f6:c6:10: b1:b1:a7:66:9f:f5:a2:11:94:19:a6:41:b1:e1:b1:de:61:d1: 20:81:8c:ba:bf:fd:11:10:40:09:25:04:ce:ba:28:f7:aa:9b: 00:bf:cd:49:34:20:cd:2c:eb:f4:ab:95:84:89:b3:31:d2:05: da:f4:dc:4c:a5:82:28:6e:7e:8f:47:ea:9b:1c:cf:ee:8b:ca: 5e:0e:94:eb:c3:be:e2:6b:d8:b3:5d:9b:52:b9:84:ff:68:cf: aa:ae:ae:17:da:18:02:77:5a:bb:be:fe:fd:43:79:c6:1b:5e: 48:11:19:d9:90:fe:f9:02:73:cd:3c:f2:36:81:6c:eb:75:02: 46:fc:b3:22:60:1e:3e:f6:18:ff:7b:0d:82:4a:5f:5b:b6:60: a7:30:25:e0:27:97:51:b9:fd:34:d6:43:f8:48:39:fd:0b:56: 59:d5:00:19:c0:d7:e3:56:c7:84:e6:31:cf:31:b1:e6:50:6b: 14:f9:b0:c8:37:30:a5:50:a1:34:ed:ac:0b:35:9d:c8:be:f7: 14:51:9d:f6:e8:f5:88:c3:bb:c4:bc:0d:ac:c5:6c:69:04:cf: f3:8b:ff:2f:f9:46:71:c1:00:3e:63:f1:35:21:be:46:97:84: 3e:e2:aa:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTMzNzcxMTAvBgNVBAUTKEM3N0MxMzA5RjRBMTUzMEVBMzk1NDE0NTI4ODE1RjlD NzY3QzUxNUIwHhcNMjUxMDE5MDA1MjQ5WhcNMjUxMDI2MDA1MjQ5WjAYMRYwFAYD VQQDEw02OGY0MzY2MS01MjcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtjfcD8FoR4EkhP7i5aVlPzDwTqYCRkOw+pfzbFhGtQ/B3dzr5Kw3v3L2syaa Hy2r1HGUbWnRNbr2YICt00UUzdbC6+ql1RWD5h+OtHTBa5p93c2a7D/83M7TRTG7 BNiTAtq83XmckUGff0h3a0bivzPfnWkVIQD+/QncYx6b0SWmxOnOPVMcXqgLoezE IDBSpJ/Czvo+/p1Urq7OZflCpQAXAuyvdh9QFuHHFpOcwJytQSbc5j5PbrIuuicq dZp1Dcy4zOPqjzmZz0BzHejR6gjwqyn+MMyIfndJzNlriwMRZliDMitV4g8mLnlE eC+yYdqf+RRPIaFr1SUW5f+89wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCSn/HJy dJIgb/jcEFAaf4hOvFkyMB8GA1UdIwQYMBaAFMd8Ewn0oVMOo5VBRSiBX5x2fFFb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzM3Ny82MEI3N0RBRUVG OEUxMUVCQjBEQTRFNTlDNEY5QUUwMi94M3dUQ2ZTaFV3NmpsVUZGS0lGZm5IWjhV VnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3gzd1RDZlNoVXc2amxVRkZLSUZmbkhaOFVWcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzM3Ny82MEI3N0RBRUVGOEUxMUVCQjBEQTRFNTlDNEY5QUUwMi94M3dUQ2ZTaFV3 NmpsVUZGS0lGZm5IWjhVVnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRW3pX/LlEA35tZaiEnoj2xhCxsadmn/WiEZQZpkGx4bHeYdEggYy6 v/0REEAJJQTOuij3qpsAv81JNCDNLOv0q5WEibMx0gXa9NxMpYIobn6PR+qbHM/u i8peDpTrw77ia9izXZtSuYT/aM+qrq4X2hgCd1q7vv79Q3nGG15IERnZkP75AnPN PPI2gWzrdQJG/LMiYB4+9hj/ew2CSl9btmCnMCXgJ5dRuf001kP4SDn9C1ZZ1QAZ wNfjVseE5jHPMbHmUGsU+bDINzClUKE07awLNZ3IvvcUUZ326PWIw7vEvA2sxWxp BM/zi/8v+UZxwQA+Y/E1Ib5Gl4Q+4qpN -----END CERTIFICATE-----Generated at Sun Oct 19 23:31:46 2025 by rpki-client