$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft File: L3f37TT2am_GcID7m2G7JnkvhaE.mft (raw, json) Hash identifier: ZimVeh62CCluUoJDZuZHnEpHNzTXoQKySqVhfrE0sw0= Subject key identifier: 00:22:78:D8:29:53:C3:A7:E1:EB:05:97:3D:9C:34:3E:33:69:87:B7 Authority key identifier: 2F:77:F7:ED:34:F6:6A:6F:C6:70:80:FB:9B:61:BB:26:79:2F:85:A1 Certificate issuer: /CN=A91A5C90/serialNumber=2F77F7ED34F66A6FC67080FB9B61BB26792F85A1 Certificate serial: 04D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3f37TT2am_GcID7m2G7JnkvhaE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft Manifest number: 04CB Signing time: Mon 06 Oct 2025 23:59:44 +0000 Manifest this update: Mon 06 Oct 2025 23:59:43 +0000 Manifest next update: Mon 13 Oct 2025 23:59:43 +0000 Files and hashes: 1: L3f37TT2am_GcID7m2G7JnkvhaE.crl (hash: gewwyZDKbNgWwBjVHQ0fdZdIcxRPfaYKWCYZK0YeyLY=) 2: CDA06D9C3D2A11EC8ECCEB1FC4F9AE02.roa (hash: cJIs31sqlgOhonhzClBxUM9SmxEaq46WFcZovXHGcPw=) 3: CE319EDE3D2A11EC8ECCEB1FC4F9AE02.roa (hash: Mum2g6Ft9eC1OvjjJ0nqhQo1XRrbGEG1M1RHx+Vnh0c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.crl rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3f37TT2am_GcID7m2G7JnkvhaE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Oct 2025 23:59:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1235 (0x4d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5C90, serialNumber=2F77F7ED34F66A6FC67080FB9B61BB26792F85A1 Validity Not Before: Oct 6 23:59:43 2025 GMT Not After : Oct 13 23:59:43 2025 GMT Subject: CN=68e457f0-00c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:de:1b:95:93:db:01:60:be:44:4f:70:91:89: 10:a3:59:72:58:5f:5d:2d:52:ed:9d:52:dc:6a:96: a5:2c:a6:d7:bc:ba:de:f6:d4:7f:cb:ad:5f:a8:13: 92:5d:a5:ee:e3:0f:e1:cc:7a:7e:07:bc:35:ba:11: 59:bd:e3:f2:0e:c6:11:2c:7b:37:ed:5d:12:b7:83: e5:66:66:a9:2f:47:4d:5b:6d:45:04:0f:27:eb:82: 0c:04:8f:ff:56:d8:03:6e:70:2b:c4:39:7a:68:8a: 8c:fd:e9:d8:80:b8:c5:c9:e8:8c:60:60:97:76:45: 0c:8e:69:6f:90:bb:ea:5b:c3:75:fd:d9:ac:69:49: 0f:bb:a8:92:e3:da:b5:70:6f:59:ea:b3:37:47:4b: 29:6c:5c:f2:59:b3:4c:40:81:c7:2c:70:b4:1d:42: 2e:10:ff:31:ec:09:ec:51:20:57:5e:1a:55:64:59: 7d:ee:3e:0e:ba:1c:fa:32:e2:f7:d6:e4:b1:38:45: b3:e3:e6:7c:62:c5:e0:1f:7f:c3:63:12:c0:e2:af: 81:36:63:e2:3c:e0:aa:49:f7:f2:b2:dd:ba:d0:d2: e2:a0:eb:72:d1:36:44:73:4e:da:7a:a0:9b:50:64: b9:c4:03:30:4b:38:4e:15:eb:99:9f:7a:53:31:96: d7:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:22:78:D8:29:53:C3:A7:E1:EB:05:97:3D:9C:34:3E:33:69:87:B7 X509v3 Authority Key Identifier: keyid:2F:77:F7:ED:34:F6:6A:6F:C6:70:80:FB:9B:61:BB:26:79:2F:85:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3f37TT2am_GcID7m2G7JnkvhaE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:d5:b8:3b:76:79:07:44:fc:e2:7f:00:ca:67:5c:28:49:d2: d4:ce:77:c7:3e:b8:d7:e6:44:e2:ef:1a:fb:31:94:65:9f:41: 8c:10:ce:81:d8:e3:48:16:0c:78:a6:64:21:87:e0:f0:dd:22: a5:2b:1a:2c:1a:c0:bf:0d:21:2a:e0:e4:28:7d:36:4a:a6:a9: 32:4e:32:50:3f:fb:b1:1c:c9:a0:f2:08:de:34:d3:0a:44:3f: 3c:08:b4:01:af:2c:b3:64:7b:8d:ee:b2:ee:1a:b1:57:96:f7: 80:5b:f3:d8:1e:e0:81:86:78:06:51:ba:f5:98:ff:64:3e:3d: f2:e0:b1:ad:bc:5e:8b:70:da:0f:62:22:88:93:92:76:ff:b4: a6:54:ed:8d:f0:2a:f1:f3:ab:b0:7e:93:98:d0:65:c7:b7:a1: 8e:9f:6b:6d:0b:a8:c6:f4:f9:3a:76:f9:31:ad:97:a4:85:96: ca:9e:b8:10:1c:9f:9c:3e:87:81:7e:c0:ed:44:f1:80:52:50: 21:d1:03:43:00:a9:f1:6c:a7:c3:53:f5:4a:16:d3:ec:22:0d: 2c:ef:c0:46:23:0a:e1:b0:cd:dd:b8:2b:36:f4:66:78:04:1e: c4:c8:a1:c9:14:ed:22:68:ec:94:93:ff:0b:79:d7:22:34:fe: 4f:e6:e0:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVDOTAxMTAvBgNVBAUTKDJGNzdGN0VEMzRGNjZBNkZDNjcwODBGQjlCNjFCQjI2 NzkyRjg1QTEwHhcNMjUxMDA2MjM1OTQzWhcNMjUxMDEzMjM1OTQzWjAYMRYwFAYD VQQDEw02OGU0NTdmMC0wMGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzd4blZPbAWC+RE9wkYkQo1lyWF9dLVLtnVLcapalLKbXvLre9tR/y61fqBOS XaXu4w/hzHp+B7w1uhFZvePyDsYRLHs37V0St4PlZmapL0dNW21FBA8n64IMBI// VtgDbnArxDl6aIqM/enYgLjFyeiMYGCXdkUMjmlvkLvqW8N1/dmsaUkPu6iS49q1 cG9Z6rM3R0spbFzyWbNMQIHHLHC0HUIuEP8x7AnsUSBXXhpVZFl97j4Ouhz6MuL3 1uSxOEWz4+Z8YsXgH3/DYxLA4q+BNmPiPOCqSffyst260NLioOty0TZEc07aeqCb UGS5xAMwSzhOFeuZn3pTMZbXuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAAieNgp U8On4esFlz2cND4zaYe3MB8GA1UdIwQYMBaAFC939+009mpvxnCA+5thuyZ5L4Wh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUM5MC80MkUxRkQyQTNE MjkxMUVDQjBCQ0QyMUZDNEY5QUUwMi9MM2YzN1RUMmFtX0djSUQ3bTJHN0pua3Zo YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wzZjM3VFQyYW1fR2NJRDdtMkc3Sm5rdmhhRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUM5MC80MkUxRkQyQTNEMjkxMUVDQjBCQ0QyMUZDNEY5QUUwMi9MM2YzN1RUMmFt X0djSUQ3bTJHN0pua3ZoYUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBn1bg7dnkHRPzifwDKZ1woSdLUznfHPrjX5kTi7xr7MZRln0GMEM6B 2ONIFgx4pmQhh+Dw3SKlKxosGsC/DSEq4OQofTZKpqkyTjJQP/uxHMmg8gjeNNMK RD88CLQBryyzZHuN7rLuGrFXlveAW/PYHuCBhngGUbr1mP9kPj3y4LGtvF6LcNoP YiKIk5J2/7SmVO2N8Crx86uwfpOY0GXHt6GOn2ttC6jG9Pk6dvkxrZekhZbKnrgQ HJ+cPoeBfsDtRPGAUlAh0QNDAKnxbKfDU/VKFtPsIg0s78BGIwrhsM3duCs29GZ4 BB7EyKHJFO0iaOyUk/8LedciNP5P5uDh -----END CERTIFICATE-----Generated at Wed Oct 8 23:18:42 2025 by rpki-client