$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.mft File: g3nXR_dKVe3HOg4EIcebXsDk3nY.mft (raw, json) Hash identifier: Zh4LE+zw2p5TyKKDqOScH9xnsrt0xFi0zwsvYUH9Hjo= Subject key identifier: C3:C4:B7:CF:2F:07:6C:6E:51:1A:E2:CC:B1:D9:6B:DA:22:53:4E:0D Authority key identifier: 83:79:D7:47:F7:4A:55:ED:C7:3A:0E:04:21:C7:9B:5E:C0:E4:DE:76 Certificate issuer: /CN=A91F9C42/serialNumber=8379D747F74A55EDC73A0E0421C79B5EC0E4DE76 Certificate serial: 01BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3nXR_dKVe3HOg4EIcebXsDk3nY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.mft Manifest number: 01B3 Signing time: Sun 19 Oct 2025 05:43:57 +0000 Manifest this update: Sun 19 Oct 2025 05:43:56 +0000 Manifest next update: Sun 26 Oct 2025 05:43:56 +0000 Files and hashes: 1: g3nXR_dKVe3HOg4EIcebXsDk3nY.crl (hash: vbGqVsx1fws+tNDtyi+kNLfwyPo3bu9ZiA8skkdAO9o=) 2: 3A7527ECC1F711EF8B510B86C4F9AE02.roa (hash: 7UGzCq6Cb6amiBq87W5KeE/DUZqLNVV6OVzp45wF3WQ=) 3: 79FC546E326611F08478D72AC4F9AE02.roa (hash: ACKLgoePLs3Ke5FTi4aaIlytoIlfeMfpdj0hhLm4rHA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.crl rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3nXR_dKVe3HOg4EIcebXsDk3nY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:43:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 445 (0x1bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9C42, serialNumber=8379D747F74A55EDC73A0E0421C79B5EC0E4DE76 Validity Not Before: Oct 19 05:43:56 2025 GMT Not After : Oct 26 05:43:56 2025 GMT Subject: CN=68f47a9d-7264 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:7a:d5:25:63:78:fb:b5:9b:fe:8a:05:73:d0: 82:08:34:ce:9b:0d:38:5e:37:5f:3c:1b:86:56:d1: 57:5e:41:84:01:f1:57:23:f3:d4:03:e1:1c:d8:e5: 6d:8e:3f:7d:0d:49:62:b8:7a:65:2e:2b:6b:d9:77: 0a:13:1c:78:52:d5:fc:92:56:fc:cf:f4:95:35:15: a2:9c:83:25:42:6e:47:93:6f:1d:93:e4:8e:b0:13: e3:9c:bb:26:49:5f:12:2e:74:82:fb:83:7f:41:5e: b4:ff:37:68:1a:e2:9b:9d:57:5f:4f:a1:3b:c1:88: 51:5b:68:f3:e3:a3:1b:6d:1f:8f:f2:c7:15:ee:3a: cb:9f:53:f8:39:cc:3e:e5:b5:a7:f4:a8:19:25:08: 2b:f4:cf:15:f4:9f:85:80:9d:49:9b:44:5c:24:bd: 3a:b5:e2:5a:54:f3:7a:77:1f:5f:d2:46:d1:3f:2b: b9:2a:c8:5c:4e:21:bd:d0:12:5c:8e:22:a3:e0:0e: 4f:62:92:5f:29:5b:f1:bd:9b:e8:16:f7:ea:ce:89: a3:3b:7e:4f:55:ca:6f:49:ed:dd:99:c8:3e:bb:b3: 2c:ba:cf:79:7b:8c:9b:c7:8b:25:41:f1:a6:c7:65: e8:f7:b8:de:5e:41:6e:33:4d:dc:52:c7:33:5d:f2: 45:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:C4:B7:CF:2F:07:6C:6E:51:1A:E2:CC:B1:D9:6B:DA:22:53:4E:0D X509v3 Authority Key Identifier: keyid:83:79:D7:47:F7:4A:55:ED:C7:3A:0E:04:21:C7:9B:5E:C0:E4:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3nXR_dKVe3HOg4EIcebXsDk3nY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:a7:72:bb:cd:58:e2:24:88:50:d7:78:e3:5f:2e:15:f7:12: c7:1a:e8:fb:79:e5:09:66:a1:0b:25:3e:af:8c:ed:d2:58:7b: 26:c0:74:26:95:94:75:c5:78:54:4d:fc:8b:e1:c0:8d:20:46: d7:c4:19:b3:79:bb:9f:59:ac:30:ab:e1:e2:6d:b7:3b:e3:54: 37:82:b6:fc:50:41:ee:f5:4f:e9:ee:c2:1f:e4:c1:3c:96:0e: 09:91:bf:5d:69:05:be:b2:86:8e:69:50:57:23:c9:ab:c0:83: 08:21:aa:b9:ea:7f:a8:70:41:4f:a8:0d:24:b5:17:05:b9:fb: cd:9f:ec:4a:e1:66:b8:37:14:24:00:17:25:fa:1f:26:47:57: 17:8f:37:70:ab:9a:8f:51:5a:db:4e:2c:39:76:2e:94:b4:b8: 0a:5e:62:fb:3c:5f:42:d9:45:6a:3f:17:f1:aa:67:4d:65:a1: 06:73:a5:f6:5d:23:e6:d8:d1:5f:51:3d:71:75:ee:bb:63:b0: ae:82:6f:96:a7:57:92:b4:58:54:69:01:10:2c:68:d4:44:10: ee:6f:ef:6d:6e:07:f6:fc:a4:46:ed:5a:4f:ca:2b:52:03:cf: f2:89:6e:16:4e:6a:3c:56:be:c4:06:d6:e6:50:f0:55:f8:b6: a4:78:78:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlDNDIxMTAvBgNVBAUTKDgzNzlENzQ3Rjc0QTU1RURDNzNBMEUwNDIxQzc5QjVF QzBFNERFNzYwHhcNMjUxMDE5MDU0MzU2WhcNMjUxMDI2MDU0MzU2WjAYMRYwFAYD VQQDEw02OGY0N2E5ZC03MjY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz3rVJWN4+7Wb/ooFc9CCCDTOmw04XjdfPBuGVtFXXkGEAfFXI/PUA+Ec2OVt jj99DUliuHplLitr2XcKExx4UtX8klb8z/SVNRWinIMlQm5Hk28dk+SOsBPjnLsm SV8SLnSC+4N/QV60/zdoGuKbnVdfT6E7wYhRW2jz46MbbR+P8scV7jrLn1P4Ocw+ 5bWn9KgZJQgr9M8V9J+FgJ1Jm0RcJL06teJaVPN6dx9f0kbRPyu5KshcTiG90BJc jiKj4A5PYpJfKVvxvZvoFvfqzomjO35PVcpvSe3dmcg+u7Msus95e4ybx4slQfGm x2Xo97jeXkFuM03cUsczXfJFMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMPEt88v B2xuURrizLHZa9oiU04NMB8GA1UdIwQYMBaAFIN510f3SlXtxzoOBCHHm17A5N52 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUM0Mi8yNEE2NUVCRTIw RDAxMUVFOTAwODRGNUNDNEY5QUUwMi9nM25YUl9kS1ZlM0hPZzRFSWNlYlhzRGsz blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2czblhSX2RLVmUzSE9nNEVJY2ViWHNEazNuWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUM0Mi8yNEE2NUVCRTIwRDAxMUVFOTAwODRGNUNDNEY5QUUwMi9nM25YUl9kS1Zl M0hPZzRFSWNlYlhzRGszblkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfp3K7zVjiJIhQ13jjXy4V9xLHGuj7eeUJZqELJT6vjO3SWHsmwHQm lZR1xXhUTfyL4cCNIEbXxBmzebufWawwq+Hibbc741Q3grb8UEHu9U/p7sIf5ME8 lg4Jkb9daQW+soaOaVBXI8mrwIMIIaq56n+ocEFPqA0ktRcFufvNn+xK4Wa4NxQk ABcl+h8mR1cXjzdwq5qPUVrbTiw5di6UtLgKXmL7PF9C2UVqPxfxqmdNZaEGc6X2 XSPm2NFfUT1xde67Y7Cugm+Wp1eStFhUaQEQLGjURBDub+9tbgf2/KRG7VpPyitS A8/yiW4WTmo8Vr7EBtbmUPBV+LakeHis -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:48 2025 by rpki-client