$ rpki-client -vvf rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft File: 3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft (raw, json) Hash identifier: hiJjveAkfuQRxNIr8WjSm/rKA4bksZifo90frCHHJLw= Subject key identifier: 7E:54:B8:ED:84:B4:39:F1:A0:F7:15:E3:87:36:FB:23:6E:BB:20:87 Authority key identifier: DC:21:B9:02:9E:AC:07:90:87:8F:AC:A7:CA:81:3B:4B:3A:ED:C9:0E Certificate issuer: /CN=A9116351/serialNumber=DC21B9029EAC0790878FACA7CA813B4B3AEDC90E Certificate serial: 01B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft Manifest number: 01B0 Signing time: Mon 03 Nov 2025 03:08:53 +0000 Manifest this update: Mon 03 Nov 2025 03:08:52 +0000 Manifest next update: Mon 10 Nov 2025 03:08:52 +0000 Files and hashes: 1: 3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.crl (hash: F79uPIE5pO+u+PfOkzz1R0E6zxYHtuCAFI788qd6wkY=) 2: 602678F8252A11EEA290E91FC4F9AE02.roa (hash: 9qj5nS2jHu6HnjeglTS9hUbn0VPzT6niooBC/rePBvA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.crl rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:08:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 436 (0x1b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116351, serialNumber=DC21B9029EAC0790878FACA7CA813B4B3AEDC90E Validity Not Before: Nov 3 03:08:52 2025 GMT Not After : Nov 10 03:08:52 2025 GMT Subject: CN=69081cc5-4c9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:05:38:96:46:10:53:6e:d0:30:af:71:41:9f: 90:0e:e1:d1:e8:4f:3e:2c:42:55:c2:11:10:e3:cd: b0:2a:0b:72:75:d7:c2:da:1f:cf:18:ec:55:0f:0e: 13:e5:a2:07:81:ee:2c:2f:54:e5:ac:dc:a0:9e:85: 4a:bc:fc:89:78:ea:0c:fe:21:c6:1f:3c:9a:62:aa: 00:8e:c3:38:cd:08:6d:d5:be:0b:5b:0f:65:ff:e9: 97:05:78:4f:ef:6d:c8:ba:2f:68:ca:b5:f4:55:55: a0:d1:de:8a:a8:41:b4:b7:05:ae:fd:7a:7b:9e:22: bf:c8:77:01:de:8e:c7:09:ff:f6:4a:e1:ef:3c:14: 93:59:3b:79:c0:6d:b9:b3:c8:42:4b:86:5a:1b:2f: 14:ef:b9:a4:88:19:d3:15:9e:54:a4:15:31:31:07: 43:23:c2:af:6d:1b:e5:8b:88:98:b9:31:e7:b7:b0: d6:a3:fb:b3:1c:8a:bc:91:02:fe:42:b0:1e:85:3f: 98:ba:c0:be:f4:b8:fc:0e:08:65:96:2d:a4:71:5a: 28:d5:d7:a2:3b:c0:8b:80:41:0e:ba:10:5c:f4:b5: 9f:f6:02:55:21:0b:21:26:b0:8e:bb:bc:1e:77:89: cf:5a:ed:90:58:e8:8d:f2:bc:13:75:1f:ef:6b:09: 9a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:54:B8:ED:84:B4:39:F1:A0:F7:15:E3:87:36:FB:23:6E:BB:20:87 X509v3 Authority Key Identifier: keyid:DC:21:B9:02:9E:AC:07:90:87:8F:AC:A7:CA:81:3B:4B:3A:ED:C9:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:88:9c:2b:f6:b0:23:e2:0e:3a:90:ec:4b:a8:53:fe:5f:10: 45:bf:b4:99:6a:f5:a9:ee:d8:bf:dd:a0:22:0a:43:23:fc:ef: 89:35:97:d9:89:0b:9f:da:36:1a:7f:3b:d1:98:18:31:c4:46: f5:c5:bf:5b:e4:fe:a8:46:f6:6b:dc:2a:0c:6c:cc:83:92:2f: d1:8a:6c:d1:26:69:51:41:89:a8:60:f8:e0:93:bc:27:e2:a2: 7c:b7:1f:51:5d:77:83:0d:52:e5:27:f9:e2:03:12:0d:64:39: a5:f6:22:2f:fd:9b:46:ad:f1:1f:68:57:0b:24:e7:a2:ba:d5: 04:d0:d6:c5:12:99:6b:4f:d4:2f:5a:08:cd:4f:cb:5e:a6:9b: 35:00:38:49:ac:bb:51:29:22:78:c7:e4:47:8e:c3:84:2f:f4: 13:f2:66:88:6c:75:59:3c:fb:de:7a:7b:f5:ea:67:ce:9c:ef: 14:6f:c2:f9:89:16:76:79:b7:e3:cb:2c:7b:fb:32:d7:07:26: a6:6f:1c:04:35:0f:6c:89:3b:7d:cb:99:f6:6a:43:8e:f5:40: da:b4:1e:35:1a:24:5e:9a:c1:ed:1a:2f:f6:69:d5:38:5f:2f: 16:54:34:b7:8e:57:42:2c:89:bf:91:d1:2e:1c:8d:92:32:05: 5e:98:6a:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTYzNTExMTAvBgNVBAUTKERDMjFCOTAyOUVBQzA3OTA4NzhGQUNBN0NBODEzQjRC M0FFREM5MEUwHhcNMjUxMTAzMDMwODUyWhcNMjUxMTEwMDMwODUyWjAYMRYwFAYD VQQDEw02OTA4MWNjNS00YzliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzgU4lkYQU27QMK9xQZ+QDuHR6E8+LEJVwhEQ482wKgtyddfC2h/PGOxVDw4T 5aIHge4sL1TlrNygnoVKvPyJeOoM/iHGHzyaYqoAjsM4zQht1b4LWw9l/+mXBXhP 723Iui9oyrX0VVWg0d6KqEG0twWu/Xp7niK/yHcB3o7HCf/2SuHvPBSTWTt5wG25 s8hCS4ZaGy8U77mkiBnTFZ5UpBUxMQdDI8KvbRvli4iYuTHnt7DWo/uzHIq8kQL+ QrAehT+YusC+9Lj8Dghlli2kcVoo1deiO8CLgEEOuhBc9LWf9gJVIQshJrCOu7we d4nPWu2QWOiN8rwTdR/vawmaGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH5UuO2E tDnxoPcV44c2+yNuuyCHMB8GA1UdIwQYMBaAFNwhuQKerAeQh4+sp8qBO0s67ckO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjM1MS9DOEE4RDk3NjI1 MjkxMUVFOTM5RkMzMUVDNEY5QUUwMi8zQ0c1QXA2c0I1Q0hqNnlueW9FN1N6cnR5 UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNDRzVBcDZzQjVDSGo2eW55b0U3U3pydHlRNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjM1MS9DOEE4RDk3NjI1MjkxMUVFOTM5RkMzMUVDNEY5QUUwMi8zQ0c1QXA2c0I1 Q0hqNnlueW9FN1N6cnR5UTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6iJwr9rAj4g46kOxLqFP+XxBFv7SZavWp7ti/3aAiCkMj/O+JNZfZ iQuf2jYafzvRmBgxxEb1xb9b5P6oRvZr3CoMbMyDki/RimzRJmlRQYmoYPjgk7wn 4qJ8tx9RXXeDDVLlJ/niAxINZDml9iIv/ZtGrfEfaFcLJOeiutUE0NbFEplrT9Qv WgjNT8tepps1ADhJrLtRKSJ4x+RHjsOEL/QT8maIbHVZPPveenv16mfOnO8Ub8L5 iRZ2ebfjyyx7+zLXByambxwENQ9siTt9y5n2akOO9UDatB41GiRemsHtGi/2adU4 Xy8WVDS3jldCLIm/kdEuHI2SMgVemGqf -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:27 2025 by rpki-client