$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBC61/4C6F6856B6C411EFA24AA616C4F9AE02/C3f3vSPLQoWNC7_29-OscxNVMdU.mft File: C3f3vSPLQoWNC7_29-OscxNVMdU.mft (raw, json) Hash identifier: iiotucsSViSMDBX6WAeJkHU+SW5qHNMapXtTzg5dN14= Subject key identifier: F3:3E:86:41:B4:22:E8:3D:03:5D:B9:34:F6:06:C3:6A:1F:9F:75:31 Authority key identifier: 0B:77:F7:BD:23:CB:42:85:8D:0B:BF:F6:F7:E3:AC:73:13:55:31:D5 Certificate issuer: /CN=A91EBC61/serialNumber=0B77F7BD23CB42858D0BBFF6F7E3AC73135531D5 Certificate serial: A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C3f3vSPLQoWNC7_29-OscxNVMdU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBC61/4C6F6856B6C411EFA24AA616C4F9AE02/C3f3vSPLQoWNC7_29-OscxNVMdU.mft Manifest number: A2 Signing time: Sun 19 Oct 2025 09:31:18 +0000 Manifest this update: Sun 19 Oct 2025 09:31:18 +0000 Manifest next update: Sun 26 Oct 2025 09:31:18 +0000 Files and hashes: 1: C3f3vSPLQoWNC7_29-OscxNVMdU.crl (hash: WSt57ekkiyNpyFaNSaTBEs9yKJ0jPEZSxHiQ6cuQxRo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBC61/4C6F6856B6C411EFA24AA616C4F9AE02/C3f3vSPLQoWNC7_29-OscxNVMdU.crl rsync://rpki.apnic.net/member_repository/A91EBC61/4C6F6856B6C411EFA24AA616C4F9AE02/C3f3vSPLQoWNC7_29-OscxNVMdU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C3f3vSPLQoWNC7_29-OscxNVMdU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:31:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162 (0xa2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBC61, serialNumber=0B77F7BD23CB42858D0BBFF6F7E3AC73135531D5 Validity Not Before: Oct 19 09:31:18 2025 GMT Not After : Oct 26 09:31:18 2025 GMT Subject: CN=68f4afe6-cf7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b9:b5:ba:90:f9:21:4c:a7:f9:ba:6f:7a:80: b5:3a:de:ad:01:c8:b9:ef:44:bc:6e:c9:91:11:de: e4:78:f5:62:e5:9c:c6:89:16:b0:8b:62:0b:6b:bd: 35:fd:68:7d:c7:0c:a1:05:d7:36:a4:7d:70:b3:e1: 5f:28:52:d8:d8:a3:28:53:83:92:b2:79:3f:0b:19: 04:89:ad:26:09:84:7f:46:aa:c5:99:19:30:ac:cf: af:33:85:d5:62:cc:9d:14:77:13:ef:bf:12:96:28: 71:1a:5c:89:57:f0:84:2d:3c:17:4e:9e:d5:9c:75: 16:d6:2b:fb:72:61:b7:c8:a3:41:fa:fd:64:a2:e7: 31:24:b3:c2:6c:56:c3:6f:bf:30:92:d9:02:52:c1: 9b:17:ba:b2:eb:0d:b7:ad:08:70:91:ed:bd:4b:5a: a5:50:ea:9a:e8:4a:b1:30:c0:89:6b:97:88:ab:97: e7:b9:10:7f:46:df:fe:a6:dd:08:f3:d5:fc:74:ed: 4c:de:dc:4d:a6:2b:17:ae:37:29:60:00:e6:dc:a3: e8:16:71:aa:c3:01:f4:33:b8:86:d5:05:dc:34:e7: d8:b8:53:9f:ca:4f:e9:43:0a:05:0a:ba:45:ee:aa: d5:32:f4:83:22:cb:c8:59:eb:05:93:00:5a:ec:8b: 0f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:3E:86:41:B4:22:E8:3D:03:5D:B9:34:F6:06:C3:6A:1F:9F:75:31 X509v3 Authority Key Identifier: keyid:0B:77:F7:BD:23:CB:42:85:8D:0B:BF:F6:F7:E3:AC:73:13:55:31:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBC61/4C6F6856B6C411EFA24AA616C4F9AE02/C3f3vSPLQoWNC7_29-OscxNVMdU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C3f3vSPLQoWNC7_29-OscxNVMdU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBC61/4C6F6856B6C411EFA24AA616C4F9AE02/C3f3vSPLQoWNC7_29-OscxNVMdU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:7f:c8:de:1d:80:05:77:0c:1d:03:6e:24:e2:7f:ea:67:fa: 81:ad:b1:8a:6f:a4:4d:36:8f:73:e1:59:e5:a3:9f:8d:bd:df: 14:2e:be:b8:f8:c3:8b:6c:cb:00:f5:2c:c0:ee:24:3c:12:27: e6:c7:cf:00:85:ab:7f:4f:16:2b:86:d4:2d:7d:26:80:5e:59: a4:b4:89:17:1a:42:e8:9d:42:ce:05:4c:21:58:73:5a:85:12: ef:18:95:62:8d:01:5c:ba:ab:5b:b7:7a:a6:ac:a0:2c:4f:a0: 97:3e:be:71:1f:b9:10:dc:63:10:c1:ad:fc:ae:03:26:79:5b: 3f:70:d5:bc:66:80:b0:7e:5f:9f:b0:ca:d6:5d:fe:50:5c:a8: 00:7e:1a:46:06:f3:63:94:c9:a2:9d:7b:f6:d2:18:38:26:65: 2b:92:c4:d2:36:6f:74:af:5c:61:ba:cf:f0:a4:31:48:36:7c: c3:55:ce:d5:0d:6c:8e:5e:ba:9f:e5:ac:22:1f:4c:f2:5e:ea: 07:e5:4f:15:43:16:d9:b6:15:6f:c4:93:1b:8b:26:de:1c:da: d2:96:1a:7d:3b:aa:81:1d:da:4b:9b:c6:2e:dd:a5:1c:86:b9: ed:73:5e:8a:b1:a4:d0:97:c4:61:29:e3:46:34:9a:b2:f5:df: 84:3b:5b:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJDNjExMTAvBgNVBAUTKDBCNzdGN0JEMjNDQjQyODU4RDBCQkZGNkY3RTNBQzcz MTM1NTMxRDUwHhcNMjUxMDE5MDkzMTE4WhcNMjUxMDI2MDkzMTE4WjAYMRYwFAYD VQQDEw02OGY0YWZlNi1jZjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA17m1upD5IUyn+bpveoC1Ot6tAci570S8bsmREd7kePVi5ZzGiRawi2ILa701 /Wh9xwyhBdc2pH1ws+FfKFLY2KMoU4OSsnk/CxkEia0mCYR/RqrFmRkwrM+vM4XV YsydFHcT778SlihxGlyJV/CELTwXTp7VnHUW1iv7cmG3yKNB+v1koucxJLPCbFbD b78wktkCUsGbF7qy6w23rQhwke29S1qlUOqa6EqxMMCJa5eIq5fnuRB/Rt/+pt0I 89X8dO1M3txNpisXrjcpYADm3KPoFnGqwwH0M7iG1QXcNOfYuFOfyk/pQwoFCrpF 7qrVMvSDIsvIWesFkwBa7IsPCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPM+hkG0 Iug9A125NPYGw2ofn3UxMB8GA1UdIwQYMBaAFAt3970jy0KFjQu/9vfjrHMTVTHV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkM2MS80QzZGNjg1NkI2 QzQxMUVGQTI0QUE2MTZDNEY5QUUwMi9DM2YzdlNQTFFvV05DN18yOS1Pc2N4TlZN ZFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MzZjN2U1BMUW9XTkM3XzI5LU9zY3hOVk1kVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkM2MS80QzZGNjg1NkI2QzQxMUVGQTI0QUE2MTZDNEY5QUUwMi9DM2YzdlNQTFFv V05DN18yOS1Pc2N4TlZNZFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8f8jeHYAFdwwdA24k4n/qZ/qBrbGKb6RNNo9z4Vnlo5+Nvd8ULr64 +MOLbMsA9SzA7iQ8Eifmx88Ahat/TxYrhtQtfSaAXlmktIkXGkLonULOBUwhWHNa hRLvGJVijQFcuqtbt3qmrKAsT6CXPr5xH7kQ3GMQwa38rgMmeVs/cNW8ZoCwfl+f sMrWXf5QXKgAfhpGBvNjlMminXv20hg4JmUrksTSNm90r1xhus/wpDFINnzDVc7V DWyOXrqf5awiH0zyXuoH5U8VQxbZthVvxJMbiybeHNrSlhp9O6qBHdpLm8Yu3aUc hrntc16KsaTQl8RhKeNGNJqy9d+EO1vN -----END CERTIFICATE-----Generated at Mon Oct 20 08:48:54 2025 by rpki-client