$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.mft File: 3HVZ7loiUGA5czj8qjgD_6pLI1c.mft (raw, json) Hash identifier: YRZ1D+/PDfeGlr1EgyVba5+GY+9y8JpYd72tciDMoTk= Subject key identifier: C8:51:8A:A5:26:88:80:C0:9D:AD:D5:33:B0:29:69:7B:EF:74:FA:10 Authority key identifier: DC:75:59:EE:5A:22:50:60:39:73:38:FC:AA:38:03:FF:AA:4B:23:57 Certificate issuer: /CN=A91FA56C/serialNumber=DC7559EE5A225060397338FCAA3803FFAA4B2357 Certificate serial: DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HVZ7loiUGA5czj8qjgD_6pLI1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.mft Manifest number: D9 Signing time: Sun 19 Oct 2025 08:39:41 +0000 Manifest this update: Sun 19 Oct 2025 08:39:40 +0000 Manifest next update: Sun 26 Oct 2025 08:39:40 +0000 Files and hashes: 1: 3HVZ7loiUGA5czj8qjgD_6pLI1c.crl (hash: d7Ve+m8e25cpY7n8ZzHWbjiPRRt8gkbi90k9GCjcrQo=) 2: 6E16949065A011EFA4AA8E6BC4F9AE02.roa (hash: oWQYGFiOVrig6e7wgMi2E0kAg4y2iK2+1Mn5HCvnfk8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.crl rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HVZ7loiUGA5czj8qjgD_6pLI1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:39:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 219 (0xdb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA56C, serialNumber=DC7559EE5A225060397338FCAA3803FFAA4B2357 Validity Not Before: Oct 19 08:39:40 2025 GMT Not After : Oct 26 08:39:40 2025 GMT Subject: CN=68f4a3cc-fe19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:84:8e:63:e0:7d:ac:22:e9:89:b8:b2:b5:ed: 69:44:93:98:b4:66:86:7b:a1:97:ec:04:1d:65:bc: ce:a3:58:68:66:2a:06:16:52:5e:b7:b5:f1:9c:b4: a4:f3:79:2c:f8:e5:ca:3c:b8:37:85:69:b1:39:cc: 8d:5c:b0:7e:50:0d:6c:e4:7b:c8:ed:b4:c9:46:60: df:11:ce:f2:43:32:e5:a6:39:b8:95:74:86:cd:60: 73:cd:1d:d6:b8:8c:d8:70:16:1b:af:c8:2f:b8:0c: 75:da:4f:28:cc:4f:d6:72:b9:52:b1:82:bf:b5:47: ab:ac:a7:9b:6d:ab:bc:71:f6:d9:6e:36:bf:2b:f0: b7:da:a6:d1:a6:a7:dd:4d:eb:58:7f:58:b6:ef:dc: 23:e4:5c:10:a9:aa:77:75:4c:48:34:d3:f7:b9:d7: ea:11:dc:80:9a:72:ee:b1:df:73:d5:ba:76:e6:0a: 38:64:d8:55:84:c2:8a:ab:e4:77:aa:76:1a:5a:ad: a5:a0:5e:78:03:dc:b4:64:9a:66:1e:e8:b3:4b:70: 0d:c9:bb:f6:ed:49:21:07:1b:33:52:6c:0d:66:07: 50:bb:a3:09:38:c1:91:34:85:dc:81:22:26:d4:3d: da:74:94:cd:6d:29:cc:57:6e:06:27:02:2c:e1:db: b7:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:51:8A:A5:26:88:80:C0:9D:AD:D5:33:B0:29:69:7B:EF:74:FA:10 X509v3 Authority Key Identifier: keyid:DC:75:59:EE:5A:22:50:60:39:73:38:FC:AA:38:03:FF:AA:4B:23:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HVZ7loiUGA5czj8qjgD_6pLI1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:c6:14:71:d0:26:f9:5c:62:5a:d9:b7:ac:97:66:0e:ad:04: df:59:73:d3:1a:4f:1d:02:e6:57:27:10:3c:2d:7d:d7:c6:ca: 4c:ca:c5:a3:28:62:6c:49:32:f1:26:f8:cb:bc:e5:8a:9d:29: cb:d8:19:e0:fa:e5:53:1f:ed:e6:9e:6f:44:81:02:2b:5e:e9: 6d:f9:c7:16:0f:71:a5:93:46:ea:b0:4b:51:65:c2:ff:e3:e7: 77:df:67:fd:3a:6d:aa:46:41:d1:b1:fa:c3:6e:a3:55:34:e9: cc:87:1d:ce:37:62:97:e8:12:57:e4:e6:de:5c:3d:42:94:33: 41:7a:70:d3:56:1d:87:da:70:74:9b:9a:d2:b7:c1:00:61:14: 43:12:6a:97:ab:d3:b5:af:02:b0:99:ed:26:82:c9:28:39:a0: f8:f9:80:0c:d5:b3:21:c7:f4:0d:98:ea:bf:86:c8:6a:6c:a5: f7:7e:ba:a7:42:33:bd:db:45:b2:5b:f5:18:6c:84:71:60:46: ae:8d:23:b6:12:1f:5c:7a:4b:e6:1d:e7:b9:81:bc:9f:54:71: 94:07:5b:9a:15:79:15:ec:24:ef:0c:cb:ed:92:1e:84:95:a5: 9f:8e:d3:86:f4:f4:1c:d7:40:8b:50:95:ea:bb:36:a3:6e:f6: ac:63:26:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE1NkMxMTAvBgNVBAUTKERDNzU1OUVFNUEyMjUwNjAzOTczMzhGQ0FBMzgwM0ZG QUE0QjIzNTcwHhcNMjUxMDE5MDgzOTQwWhcNMjUxMDI2MDgzOTQwWjAYMRYwFAYD VQQDEw02OGY0YTNjYy1mZTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzoSOY+B9rCLpibiyte1pRJOYtGaGe6GX7AQdZbzOo1hoZioGFlJet7XxnLSk 83ks+OXKPLg3hWmxOcyNXLB+UA1s5HvI7bTJRmDfEc7yQzLlpjm4lXSGzWBzzR3W uIzYcBYbr8gvuAx12k8ozE/WcrlSsYK/tUerrKebbau8cfbZbja/K/C32qbRpqfd TetYf1i279wj5FwQqap3dUxINNP3udfqEdyAmnLusd9z1bp25go4ZNhVhMKKq+R3 qnYaWq2loF54A9y0ZJpmHuizS3ANybv27UkhBxszUmwNZgdQu6MJOMGRNIXcgSIm 1D3adJTNbSnMV24GJwIs4du3xwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMhRiqUm iIDAna3VM7ApaXvvdPoQMB8GA1UdIwQYMBaAFNx1We5aIlBgOXM4/Ko4A/+qSyNX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTU2Qy9ERERFOEM0ODY0 RkYxMUVGQTVBODExNThDNEY5QUUwMi8zSFZaN2xvaVVHQTVjemo4cWpnRF82cExJ MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNIVlo3bG9pVUdBNWN6ajhxamdEXzZwTEkxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTU2Qy9ERERFOEM0ODY0RkYxMUVGQTVBODExNThDNEY5QUUwMi8zSFZaN2xvaVVH QTVjemo4cWpnRF82cExJMWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxxhRx0Cb5XGJa2besl2YOrQTfWXPTGk8dAuZXJxA8LX3XxspMysWj KGJsSTLxJvjLvOWKnSnL2Bng+uVTH+3mnm9EgQIrXult+ccWD3Glk0bqsEtRZcL/ 4+d332f9Om2qRkHRsfrDbqNVNOnMhx3ON2KX6BJX5ObeXD1ClDNBenDTVh2H2nB0 m5rSt8EAYRRDEmqXq9O1rwKwme0mgskoOaD4+YAM1bMhx/QNmOq/hshqbKX3frqn QjO920WyW/UYbIRxYEaujSO2Eh9cekvmHee5gbyfVHGUB1uaFXkV7CTvDMvtkh6E laWfjtOG9PQc10CLUJXquzajbvasYyb5 -----END CERTIFICATE-----Generated at Mon Oct 20 09:31:37 2025 by rpki-client