$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.mft File: UT3TCM11FCJ69R2AXlVApqn10zk.mft (raw, json) Hash identifier: fu+jW3o5F7ZencLXwBlu98KyG8BZ0r7iYfIprz+k9qU= Subject key identifier: 1E:37:96:79:3B:1B:94:73:19:20:9B:30:C5:22:FD:86:72:FA:80:9C Authority key identifier: 51:3D:D3:08:CD:75:14:22:7A:F5:1D:80:5E:55:40:A6:A9:F5:D3:39 Certificate issuer: /CN=A91F8119/serialNumber=513DD308CD7514227AF51D805E5540A6A9F5D339 Certificate serial: 102D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UT3TCM11FCJ69R2AXlVApqn10zk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.mft Manifest number: 1025 Signing time: Mon 20 Oct 2025 15:55:02 +0000 Manifest this update: Mon 20 Oct 2025 15:55:01 +0000 Manifest next update: Mon 27 Oct 2025 15:55:01 +0000 Files and hashes: 1: UT3TCM11FCJ69R2AXlVApqn10zk.crl (hash: nHa8qSviF+JEsvElx2n1YyUDQ/2PJe8i35of1wAsfKs=) 2: 8BCB105015EA11EC86834E2FC4F9AE02.roa (hash: IX9d9TIKewpWNDigl1ZdHd+4/uZo37EA6gD3nX3eWyM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.crl rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UT3TCM11FCJ69R2AXlVApqn10zk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 15:55:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4141 (0x102d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8119, serialNumber=513DD308CD7514227AF51D805E5540A6A9F5D339 Validity Not Before: Oct 20 15:55:01 2025 GMT Not After : Oct 27 15:55:01 2025 GMT Subject: CN=68f65b55-1c1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:76:bc:13:37:dd:5f:8b:ba:9e:ec:d8:fb:68: 57:c2:d0:33:1c:7d:00:bf:c4:f3:0a:20:a6:63:28: a5:9d:1b:bb:e3:e2:4a:6a:80:40:b5:9d:67:3f:f7: bf:6c:29:9f:1b:fd:1b:02:04:e2:be:6d:64:25:06: e3:97:1c:4f:dd:1e:cc:ac:47:29:a5:97:7e:17:14: d8:ab:59:ff:e5:f0:f1:b2:5d:5c:6b:46:6b:c4:69: 39:34:4d:e4:23:c8:fb:d2:a4:06:10:bc:70:a6:74: bf:7d:ac:6a:3c:a5:cd:0c:44:4f:6c:65:41:07:f1: e5:c9:f2:d8:96:c3:6a:57:e5:53:83:0b:05:bc:71: fe:65:27:fc:71:06:1e:dc:bf:c9:ca:f2:d0:ed:f3: 3b:00:71:e0:21:b8:e6:62:b2:b0:bd:45:d7:db:62: ce:a7:59:1a:2e:f2:71:8e:70:37:80:9d:69:d5:38: 09:28:51:c2:d7:60:4e:ad:7a:e0:ce:75:6b:57:8d: 54:05:82:92:5f:2b:e5:4d:8b:3c:f0:58:94:8b:39: 2a:ef:46:35:52:17:e9:bb:8b:08:ba:f7:fe:9e:70: 36:ac:47:1e:8b:80:d3:c8:17:bd:5f:b1:7f:fc:c3: e9:66:1f:0b:f2:47:b4:79:73:1f:dc:d1:ff:e0:49: ed:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:37:96:79:3B:1B:94:73:19:20:9B:30:C5:22:FD:86:72:FA:80:9C X509v3 Authority Key Identifier: keyid:51:3D:D3:08:CD:75:14:22:7A:F5:1D:80:5E:55:40:A6:A9:F5:D3:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UT3TCM11FCJ69R2AXlVApqn10zk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:9b:07:0c:fd:59:6a:97:d1:c1:df:ec:6b:d1:58:4f:b7:e0: b0:2c:1b:35:70:dc:31:34:59:db:07:d6:5b:fd:b8:d8:52:e8: f7:51:a1:fa:49:42:21:ca:da:2f:13:f0:b0:67:41:8e:83:b4: 4e:06:90:7f:0b:8e:97:29:06:86:a1:a1:05:78:d9:e7:c8:49: dd:9f:b1:55:8a:39:72:51:fd:31:45:77:91:89:8a:e6:fe:61: 9d:82:ec:60:34:6f:05:ec:71:f0:c0:71:ff:07:dd:57:c7:70: 79:d5:33:71:3f:1a:f7:68:94:af:77:58:22:20:67:83:20:89: e8:10:8d:2f:42:ba:94:06:3b:22:90:fc:bb:67:26:48:13:bd: ab:6e:bf:b6:b0:82:46:2e:33:27:40:a5:0e:e0:a4:e1:6b:e7: 2e:15:25:3e:06:b3:1e:ce:eb:3e:c6:5d:74:9d:a5:79:50:48: e4:16:73:99:ee:20:65:ea:ef:59:71:dc:6d:43:40:b7:e5:c2: cc:85:71:d8:0b:ba:37:5a:24:09:55:17:82:ab:45:93:fa:be: bf:49:8e:8b:9d:77:58:ec:d1:36:27:df:6d:39:e5:5b:a4:68: 4e:f5:c6:b3:9e:0d:6d:f1:89:af:2f:18:bc:5f:5c:72:66:ac: 7f:1e:80:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEC0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgxMTkxMTAvBgNVBAUTKDUxM0REMzA4Q0Q3NTE0MjI3QUY1MUQ4MDVFNTU0MEE2 QTlGNUQzMzkwHhcNMjUxMDIwMTU1NTAxWhcNMjUxMDI3MTU1NTAxWjAYMRYwFAYD VQQDEw02OGY2NWI1NS0xYzFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0na8EzfdX4u6nuzY+2hXwtAzHH0Av8TzCiCmYyilnRu74+JKaoBAtZ1nP/e/ bCmfG/0bAgTivm1kJQbjlxxP3R7MrEcppZd+FxTYq1n/5fDxsl1ca0ZrxGk5NE3k I8j70qQGELxwpnS/faxqPKXNDERPbGVBB/HlyfLYlsNqV+VTgwsFvHH+ZSf8cQYe 3L/JyvLQ7fM7AHHgIbjmYrKwvUXX22LOp1kaLvJxjnA3gJ1p1TgJKFHC12BOrXrg znVrV41UBYKSXyvlTYs88FiUizkq70Y1Uhfpu4sIuvf+nnA2rEcei4DTyBe9X7F/ /MPpZh8L8ke0eXMf3NH/4EntgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB43lnk7 G5RzGSCbMMUi/YZy+oCcMB8GA1UdIwQYMBaAFFE90wjNdRQievUdgF5VQKap9dM5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODExOS80RTJEN0EzODUx NDAxMUU5OEQ5ODNCNjFDNEY5QUUwMi9VVDNUQ00xMUZDSjY5UjJBWGxWQXBxbjEw emsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1VUM1RDTTExRkNKNjlSMkFYbFZBcHFuMTB6ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODExOS80RTJEN0EzODUxNDAxMUU5OEQ5ODNCNjFDNEY5QUUwMi9VVDNUQ00xMUZD SjY5UjJBWGxWQXBxbjEwemsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7mwcM/Vlql9HB3+xr0VhPt+CwLBs1cNwxNFnbB9Zb/bjYUuj3UaH6 SUIhytovE/CwZ0GOg7ROBpB/C46XKQaGoaEFeNnnyEndn7FVijlyUf0xRXeRiYrm /mGdguxgNG8F7HHwwHH/B91Xx3B51TNxPxr3aJSvd1giIGeDIInoEI0vQrqUBjsi kPy7ZyZIE72rbr+2sIJGLjMnQKUO4KTha+cuFSU+BrMezus+xl10naV5UEjkFnOZ 7iBl6u9ZcdxtQ0C35cLMhXHYC7o3WiQJVReCq0WT+r6/SY6LnXdY7NE2J99tOeVb pGhO9cazng1t8YmvLxi8X1xyZqx/HoAN -----END CERTIFICATE-----Generated at Tue Oct 21 10:40:35 2025 by rpki-client