$ rpki-client -vvf rpki.apnic.net/member_repository/A91F182D/407448BA3B8411F090C39565C4F9AE02/3MtG6q3c1z9ar64LPwAu2SDA6H4.mft File: 3MtG6q3c1z9ar64LPwAu2SDA6H4.mft (raw, json) Hash identifier: dh51ihFFTFI37opbi2ZGdr1wA745+d0y6a68z+k7Qf8= Subject key identifier: 10:F6:4F:0F:29:18:13:AC:9E:1B:DF:F8:47:04:66:3B:43:A1:38:E8 Authority key identifier: DC:CB:46:EA:AD:DC:D7:3F:5A:AF:AE:0B:3F:00:2E:D9:20:C0:E8:7E Certificate issuer: /CN=A91F182D/serialNumber=DCCB46EAADDCD73F5AAFAE0B3F002ED920C0E87E Certificate serial: 58 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MtG6q3c1z9ar64LPwAu2SDA6H4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F182D/407448BA3B8411F090C39565C4F9AE02/3MtG6q3c1z9ar64LPwAu2SDA6H4.mft Manifest number: 53 Signing time: Sun 19 Oct 2025 10:45:05 +0000 Manifest this update: Sun 19 Oct 2025 10:45:04 +0000 Manifest next update: Sun 26 Oct 2025 10:45:04 +0000 Files and hashes: 1: 3MtG6q3c1z9ar64LPwAu2SDA6H4.crl (hash: gAhKOb+ouLazpcBBp57oKJhBzdpi4GbvH+DRWekFf7Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F182D/407448BA3B8411F090C39565C4F9AE02/3MtG6q3c1z9ar64LPwAu2SDA6H4.crl rsync://rpki.apnic.net/member_repository/A91F182D/407448BA3B8411F090C39565C4F9AE02/3MtG6q3c1z9ar64LPwAu2SDA6H4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MtG6q3c1z9ar64LPwAu2SDA6H4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:45:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 88 (0x58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F182D, serialNumber=DCCB46EAADDCD73F5AAFAE0B3F002ED920C0E87E Validity Not Before: Oct 19 10:45:04 2025 GMT Not After : Oct 26 10:45:04 2025 GMT Subject: CN=68f4c131-27e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d0:aa:bf:60:ac:70:50:02:92:6c:e9:c7:f0: 6b:29:15:7c:b6:5e:c0:4e:d0:56:cc:23:0b:1d:40: 7b:da:d9:be:d1:41:f2:0c:f3:03:0a:35:40:8c:36: 8b:c9:54:0b:a6:bc:4a:c1:82:b9:98:41:23:23:1e: a7:bd:05:00:b4:b0:f8:85:95:3b:28:36:b3:e9:bb: e9:67:51:99:32:fa:16:03:c9:39:8e:07:30:8f:ac: b6:84:15:25:58:c8:2f:7f:47:30:47:df:5f:f1:37: b4:c7:bd:02:c9:87:18:6b:ca:24:13:f9:fc:aa:68: 9f:33:78:d8:ee:bd:45:99:ca:54:fd:a1:eb:a4:b8: c5:da:c1:46:c4:e9:c2:d8:30:ef:6d:53:72:42:23: 41:a6:7a:a7:70:71:39:26:0a:87:71:1b:0f:fe:a4: 64:6c:1a:0d:2b:53:54:8e:72:05:9d:5f:b1:46:bb: f4:49:e7:92:96:ba:08:16:15:18:7f:b5:15:db:ac: 52:44:2c:e1:b8:7c:e7:7c:e2:f4:a3:4f:52:9d:2b: 24:8c:cc:33:b6:cd:33:b9:46:6c:a2:d5:7a:42:37: 94:a2:fb:2a:a3:a9:52:44:45:e7:74:a1:22:fa:98: ce:ae:fd:4b:c5:a5:81:46:9b:4e:94:02:c4:1d:41: 4f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:F6:4F:0F:29:18:13:AC:9E:1B:DF:F8:47:04:66:3B:43:A1:38:E8 X509v3 Authority Key Identifier: keyid:DC:CB:46:EA:AD:DC:D7:3F:5A:AF:AE:0B:3F:00:2E:D9:20:C0:E8:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F182D/407448BA3B8411F090C39565C4F9AE02/3MtG6q3c1z9ar64LPwAu2SDA6H4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MtG6q3c1z9ar64LPwAu2SDA6H4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F182D/407448BA3B8411F090C39565C4F9AE02/3MtG6q3c1z9ar64LPwAu2SDA6H4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:25:ea:1f:84:16:aa:53:e8:8c:93:b4:a4:5c:8e:a4:90:3b: cd:70:9d:aa:61:1b:5d:b5:46:32:e8:d4:91:1c:be:b4:96:d6: b2:01:37:66:82:81:e0:c3:52:7e:ed:ae:46:ba:84:66:d6:d5: 03:64:16:f4:04:0c:e5:9c:84:a2:d5:b2:73:8e:63:9c:40:6a: ca:f7:21:9a:96:b8:a8:8c:20:75:2f:35:e7:11:7a:d3:c4:03: 75:8e:bb:c9:0a:1b:cb:65:c5:b0:c0:58:85:cf:f6:2b:29:27: 4f:5c:c3:b6:14:cf:1f:bd:91:db:36:eb:8b:6b:90:95:1b:60: 14:5d:9a:13:16:e2:ce:f7:ac:ca:18:ec:92:89:fd:35:d6:02: 67:d2:07:2e:b2:29:c1:8d:30:46:06:0b:e7:98:eb:f3:34:6a: 4f:7c:55:07:ae:26:e2:46:38:c6:02:e2:f3:c8:af:67:e9:3e: 96:16:86:ca:90:e3:4e:42:b3:a0:94:63:b8:00:41:f5:d6:0b: b9:0a:05:ff:35:e6:a8:46:19:48:fc:22:db:de:dc:b6:84:b7: c1:0d:0c:d1:0f:8e:c6:43:a3:e3:dd:49:41:f4:bd:b2:45:86: ae:b3:41:cd:7c:df:b5:69:67:d7:a5:25:07:ee:27:24:93:20: 44:04:1d:2c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MTgyRDExMC8GA1UEBRMoRENDQjQ2RUFBRERDRDczRjVBQUZBRTBCM0YwMDJFRDky MEMwRTg3RTAeFw0yNTEwMTkxMDQ1MDRaFw0yNTEwMjYxMDQ1MDRaMBgxFjAUBgNV BAMTDTY4ZjRjMTMxLTI3ZTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCl0Kq/YKxwUAKSbOnH8GspFXy2XsBO0FbMIwsdQHva2b7RQfIM8wMKNUCMNovJ VAumvErBgrmYQSMjHqe9BQC0sPiFlTsoNrPpu+lnUZky+hYDyTmOBzCPrLaEFSVY yC9/RzBH31/xN7THvQLJhxhryiQT+fyqaJ8zeNjuvUWZylT9oeukuMXawUbE6cLY MO9tU3JCI0GmeqdwcTkmCodxGw/+pGRsGg0rU1SOcgWdX7FGu/RJ55KWuggWFRh/ tRXbrFJELOG4fOd84vSjT1KdKySMzDO2zTO5Rmyi1XpCN5Si+yqjqVJERed0oSL6 mM6u/UvFpYFGm06UAsQdQU/dAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUEPZPDykY E6yeG9/4RwRmO0OhOOgwHwYDVR0jBBgwFoAU3MtG6q3c1z9ar64LPwAu2SDA6H4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYxODJELzQwNzQ0OEJBM0I4 NDExRjA5MEMzOTU2NUM0RjlBRTAyLzNNdEc2cTNjMXo5YXI2NExQd0F1MlNEQTZI NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM010RzZxM2MxejlhcjY0TFB3QXUyU0RBNkg0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYx ODJELzQwNzQ0OEJBM0I4NDExRjA5MEMzOTU2NUM0RjlBRTAyLzNNdEc2cTNjMXo5 YXI2NExQd0F1MlNEQTZINC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKYl6h+EFqpT6IyTtKRcjqSQO81wnaphG121RjLo1JEcvrSW1rIBN2aC geDDUn7trka6hGbW1QNkFvQEDOWchKLVsnOOY5xAasr3IZqWuKiMIHUvNecRetPE A3WOu8kKG8tlxbDAWIXP9ispJ09cw7YUzx+9kds264trkJUbYBRdmhMW4s73rMoY 7JKJ/TXWAmfSBy6yKcGNMEYGC+eY6/M0ak98VQeuJuJGOMYC4vPIr2fpPpYWhsqQ 405Cs6CUY7gAQfXWC7kKBf815qhGGUj8Itve3LaEt8ENDNEPjsZDo+PdSUH0vbJF hq6zQc1837VpZ9elJQfuJySTIEQEHSw= -----END CERTIFICATE-----Generated at Mon Oct 20 16:06:48 2025 by rpki-client