$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.mft File: 3UAamS3TKfk027INWAtMpyeQ37E.mft (raw, json) Hash identifier: 6RpuRjBDQZo0SAswNcxecpPOfRlYHBfab4+XUxZs7k0= Subject key identifier: 00:6A:A9:DB:AD:6A:B1:7E:A8:8C:A4:69:5C:01:36:4A:D7:6C:88:EC Authority key identifier: DD:40:1A:99:2D:D3:29:F9:34:DB:B2:0D:58:0B:4C:A7:27:90:DF:B1 Certificate issuer: /CN=A91EAB64/serialNumber=DD401A992DD329F934DBB20D580B4CA72790DFB1 Certificate serial: 0407 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3UAamS3TKfk027INWAtMpyeQ37E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.mft Manifest number: 05DA Signing time: Sun 19 Oct 2025 02:23:02 +0000 Manifest this update: Sun 19 Oct 2025 02:23:01 +0000 Manifest next update: Sun 26 Oct 2025 02:23:01 +0000 Files and hashes: 1: 3UAamS3TKfk027INWAtMpyeQ37E.crl (hash: wCmyUkcrkpGakZYV4iUsG10gpia8dCQEr/T1l21JGqw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.crl rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3UAamS3TKfk027INWAtMpyeQ37E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:23:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1031 (0x407) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAB64, serialNumber=DD401A992DD329F934DBB20D580B4CA72790DFB1 Validity Not Before: Oct 19 02:23:01 2025 GMT Not After : Oct 26 02:23:01 2025 GMT Subject: CN=68f44b85-6d1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:46:66:8c:9f:5c:9a:a9:e5:19:fc:6a:4f:ed: 78:9d:13:b9:ed:3f:11:5d:7a:af:2e:8a:81:c0:74: 67:b8:0d:81:31:fe:7c:b2:00:70:de:2c:39:31:5c: 7e:90:6f:62:f5:29:f7:c2:7c:b8:8c:d5:08:05:cf: a6:ce:3a:d7:f2:00:bd:7f:11:19:b0:2a:f5:eb:a5: 92:c7:3b:97:ad:e3:ca:37:aa:39:e0:66:8f:e2:3a: 79:46:48:27:99:69:18:c6:8f:75:a1:ab:49:a5:37: 95:38:8c:3a:a1:3b:f0:54:1a:e9:a0:e1:a2:30:62: 73:19:f0:47:d7:51:bf:e9:fc:25:d0:b7:f2:86:37: dc:4c:13:ef:15:67:e7:dc:15:2c:6e:5a:e8:3b:ce: 24:a9:dd:9a:7f:e9:a7:1e:5a:80:00:0b:e3:6f:c4: c0:59:d6:33:a0:c3:c2:3c:ba:f6:fa:6e:90:10:da: 2f:3b:2b:a5:6d:4e:a2:a3:ab:b7:fb:ed:f1:07:16: 0c:b2:b8:3b:6b:4e:ea:38:34:f3:e6:e3:09:af:e6: 49:e2:78:96:df:6d:2c:7e:ab:99:c0:2b:5d:6a:c7: 01:95:f0:28:84:ff:eb:04:6f:27:2c:6d:ee:d3:e6: 3c:be:61:92:0b:20:4c:cf:66:08:78:db:4a:ee:a8: fc:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:6A:A9:DB:AD:6A:B1:7E:A8:8C:A4:69:5C:01:36:4A:D7:6C:88:EC X509v3 Authority Key Identifier: keyid:DD:40:1A:99:2D:D3:29:F9:34:DB:B2:0D:58:0B:4C:A7:27:90:DF:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3UAamS3TKfk027INWAtMpyeQ37E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:25:6d:d4:cc:29:49:e6:2d:31:5b:38:5f:27:6a:19:6f:30: a4:03:1e:e4:5d:30:67:d2:5a:f7:a8:fc:ae:a3:1d:db:70:92: e5:8c:63:0f:fa:fb:fb:00:c5:63:38:ec:73:dc:5c:6a:05:00: ce:ef:f5:82:e6:15:c8:66:8c:e7:6a:7b:dc:34:47:b5:6b:41: 4f:1e:ef:ac:bb:18:e3:5d:da:fe:d2:7c:0a:2f:22:9b:aa:2c: fa:88:58:ea:38:a2:aa:ea:80:4a:87:70:39:d8:5b:d3:90:83: 7d:0b:87:a6:38:24:61:29:82:d2:4f:bd:20:7d:0b:76:c9:3d: 16:ad:36:81:43:12:ff:4e:f0:9c:fb:d9:1c:9a:60:0b:35:95: 08:6b:1e:75:93:75:83:63:04:a1:b3:c9:cb:6d:e6:7a:ea:b8: 48:24:5d:3c:38:a4:ed:6a:2a:64:53:b2:df:51:8f:42:31:c9: fc:1b:84:a7:25:df:60:ee:29:dd:fb:ca:99:63:4b:13:e1:c3: 3c:43:98:eb:dd:cf:9e:24:f3:1f:bc:93:85:15:be:c2:82:fd: 0e:ad:ea:38:29:74:95:ff:55:ed:06:05:bd:66:6c:7b:49:39: 89:0b:4c:6d:67:72:53:c5:53:d9:d8:95:90:bd:31:48:87:65: 08:b8:b7:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFCNjQxMTAvBgNVBAUTKERENDAxQTk5MkREMzI5RjkzNERCQjIwRDU4MEI0Q0E3 Mjc5MERGQjEwHhcNMjUxMDE5MDIyMzAxWhcNMjUxMDI2MDIyMzAxWjAYMRYwFAYD VQQDEw02OGY0NGI4NS02ZDFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzEZmjJ9cmqnlGfxqT+14nRO57T8RXXqvLoqBwHRnuA2BMf58sgBw3iw5MVx+ kG9i9Sn3wny4jNUIBc+mzjrX8gC9fxEZsCr166WSxzuXrePKN6o54GaP4jp5Rkgn mWkYxo91oatJpTeVOIw6oTvwVBrpoOGiMGJzGfBH11G/6fwl0LfyhjfcTBPvFWfn 3BUsblroO84kqd2af+mnHlqAAAvjb8TAWdYzoMPCPLr2+m6QENovOyulbU6io6u3 ++3xBxYMsrg7a07qODTz5uMJr+ZJ4niW320sfquZwCtdascBlfAohP/rBG8nLG3u 0+Y8vmGSCyBMz2YIeNtK7qj8BQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFABqqdut arF+qIykaVwBNkrXbIjsMB8GA1UdIwQYMBaAFN1AGpkt0yn5NNuyDVgLTKcnkN+x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUI2NC85QjQ0RUI3NDhG MjkxMUVDQjZBNjk5NkNDNEY5QUUwMi8zVUFhbVMzVEtmazAyN0lOV0F0TXB5ZVEz N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNVQWFtUzNUS2ZrMDI3SU5XQXRNcHllUTM3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUI2NC85QjQ0RUI3NDhGMjkxMUVDQjZBNjk5NkNDNEY5QUUwMi8zVUFhbVMzVEtm azAyN0lOV0F0TXB5ZVEzN0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBJW3UzClJ5i0xWzhfJ2oZbzCkAx7kXTBn0lr3qPyuox3bcJLljGMP +vv7AMVjOOxz3FxqBQDO7/WC5hXIZoznanvcNEe1a0FPHu+suxjjXdr+0nwKLyKb qiz6iFjqOKKq6oBKh3A52FvTkIN9C4emOCRhKYLST70gfQt2yT0WrTaBQxL/TvCc +9kcmmALNZUIax51k3WDYwShs8nLbeZ66rhIJF08OKTtaipkU7LfUY9CMcn8G4Sn Jd9g7ind+8qZY0sT4cM8Q5jr3c+eJPMfvJOFFb7Cgv0Oreo4KXSV/1XtBgW9Zmx7 STmJC0xtZ3JTxVPZ2JWQvTFIh2UIuLcv -----END CERTIFICATE-----Generated at Tue Oct 21 00:11:26 2025 by rpki-client