$ rpki-client -vvf rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.mft File: 3glSX1epVbpvLTKtIoMwQhUYLkU.mft (raw, json) Hash identifier: phAeZDMYU+GvzHU3M9SmiZOMubWI8Wh2PSU/osthuSk= Subject key identifier: 50:FA:AB:C4:D7:F4:CC:05:19:9E:E9:5F:4A:1B:7A:80:6C:6E:F7:14 Authority key identifier: DE:09:52:5F:57:A9:55:BA:6F:2D:32:AD:22:83:30:42:15:18:2E:45 Certificate issuer: /CN=A9119C32/serialNumber=DE09525F57A955BA6F2D32AD2283304215182E45 Certificate serial: 01A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3glSX1epVbpvLTKtIoMwQhUYLkU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.mft Manifest number: 019D Signing time: Thu 06 Nov 2025 23:09:48 +0000 Manifest this update: Thu 06 Nov 2025 23:09:47 +0000 Manifest next update: Thu 13 Nov 2025 23:09:47 +0000 Files and hashes: 1: 3glSX1epVbpvLTKtIoMwQhUYLkU.crl (hash: nVrzTjLZmdrZjKBI0ctt+k3Tg8ttvpC+kJfE70BA/rg=) 2: 5D79BDF8486C11EEB3C19A71C4F9AE02.roa (hash: Pq73PgAG6oMeQVEVi6eMUHjuXX4heTdR3HOjLtOdzzc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.crl rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3glSX1epVbpvLTKtIoMwQhUYLkU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Nov 2025 23:09:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 417 (0x1a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119C32, serialNumber=DE09525F57A955BA6F2D32AD2283304215182E45 Validity Not Before: Nov 6 23:09:47 2025 GMT Not After : Nov 13 23:09:47 2025 GMT Subject: CN=690d2abb-7ac5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:88:2a:db:b8:16:f7:05:ee:36:e8:9e:6d:74: 3b:fe:50:34:7e:4c:07:6d:e5:50:00:32:cb:fd:31: b5:2e:ab:d9:b5:ef:fb:66:e5:54:3f:95:e5:44:10: 03:42:63:09:16:b4:89:ab:ae:d2:24:2a:e6:7c:1b: f1:5f:4d:c3:4e:8c:67:ce:2b:c0:be:ec:7e:1e:55: 60:69:ff:ff:6d:cb:bd:9b:6b:32:ce:c8:32:15:f2: ea:11:a4:9b:bd:67:64:3b:e6:a4:fe:29:31:c9:84: 9b:6b:e6:6c:f0:78:bd:5a:71:ec:c6:a5:10:b4:a0: bd:ba:f9:81:7b:de:b6:d2:ad:1e:6b:1d:ba:b7:88: a1:7c:34:41:4e:11:01:82:fd:e3:70:1a:c2:37:1c: 4f:86:df:8b:4a:88:1f:af:31:f9:5b:d9:fd:7f:e8: 00:77:a7:20:6b:4a:e3:51:9d:5c:6e:7a:7d:f8:6f: 4e:9f:47:ed:0b:2c:8a:cf:78:95:c2:d1:63:32:ce: 35:7e:d4:9b:f6:9a:a2:62:52:5b:39:7a:6e:5c:48: 33:56:7e:4e:36:27:06:f1:87:42:86:ac:cc:b8:99: 68:45:87:1f:99:c0:b5:47:09:9d:5f:69:fe:7b:a6: c8:f8:04:cd:8b:07:10:74:8b:98:7c:0e:6b:a7:41: d2:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:FA:AB:C4:D7:F4:CC:05:19:9E:E9:5F:4A:1B:7A:80:6C:6E:F7:14 X509v3 Authority Key Identifier: keyid:DE:09:52:5F:57:A9:55:BA:6F:2D:32:AD:22:83:30:42:15:18:2E:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3glSX1epVbpvLTKtIoMwQhUYLkU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:de:06:92:6e:e8:e8:54:dd:e4:94:cb:af:9b:e5:4a:7d:d7: 1f:7d:9e:19:61:73:e3:55:b5:91:20:7a:f9:8d:ed:e1:44:89: fd:52:fd:fd:32:8e:a3:67:70:db:3a:fa:54:c7:7c:dd:ac:67: b4:cb:b6:e3:9a:db:60:c9:8e:4e:f6:cc:51:78:48:7e:15:09: a4:4f:a0:8d:cd:b4:86:f8:71:52:45:f1:24:d1:1e:f2:bd:6f: c2:f5:2c:bb:76:20:b8:28:87:f3:0b:9d:f7:43:ba:dd:1f:8c: 65:e2:7b:5c:c2:2a:d1:7e:c2:89:2a:96:66:b6:8f:c4:67:0b: bf:f9:85:02:93:7f:3c:65:d5:bd:98:a4:8b:05:6c:66:1d:a4: 0a:0f:77:60:80:db:c2:da:06:c7:83:da:82:15:d8:ec:2d:45: e1:9d:4b:6b:0e:f5:e1:d0:85:7a:d7:08:9c:62:77:c6:a3:2d: cf:5d:4b:6c:51:04:19:8a:9c:f5:32:da:10:0b:fe:ba:53:3b: 68:98:3b:31:d2:5c:c1:dc:df:0d:2f:56:47:63:89:9a:f0:20: 7a:86:7e:db:e0:31:b0:96:e4:c8:56:91:26:b6:cc:e1:23:17: 43:39:a5:7e:11:e9:e4:0c:ce:94:ed:a3:85:fc:2a:03:1d:e3: 8b:5f:e7:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTlDMzIxMTAvBgNVBAUTKERFMDk1MjVGNTdBOTU1QkE2RjJEMzJBRDIyODMzMDQy MTUxODJFNDUwHhcNMjUxMTA2MjMwOTQ3WhcNMjUxMTEzMjMwOTQ3WjAYMRYwFAYD VQQDEw02OTBkMmFiYi03YWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqYgq27gW9wXuNuiebXQ7/lA0fkwHbeVQADLL/TG1LqvZte/7ZuVUP5XlRBAD QmMJFrSJq67SJCrmfBvxX03DToxnzivAvux+HlVgaf//bcu9m2syzsgyFfLqEaSb vWdkO+ak/ikxyYSba+Zs8Hi9WnHsxqUQtKC9uvmBe9620q0eax26t4ihfDRBThEB gv3jcBrCNxxPht+LSogfrzH5W9n9f+gAd6cga0rjUZ1cbnp9+G9On0ftCyyKz3iV wtFjMs41ftSb9pqiYlJbOXpuXEgzVn5ONicG8YdChqzMuJloRYcfmcC1RwmdX2n+ e6bI+ATNiwcQdIuYfA5rp0HSdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFD6q8TX 9MwFGZ7pX0obeoBsbvcUMB8GA1UdIwQYMBaAFN4JUl9XqVW6by0yrSKDMEIVGC5F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOUMzMi9DNEVBMUI5RTQ2 RTIxMUVFQTIzNzJGNDFDNEY5QUUwMi8zZ2xTWDFlcFZicHZMVEt0SW9Nd1FoVVlM a1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNnbFNYMWVwVmJwdkxUS3RJb013UWhVWUxrVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OUMzMi9DNEVBMUI5RTQ2RTIxMUVFQTIzNzJGNDFDNEY5QUUwMi8zZ2xTWDFlcFZi cHZMVEt0SW9Nd1FoVVlMa1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAr3gaSbujoVN3klMuvm+VKfdcffZ4ZYXPjVbWRIHr5je3hRIn9Uv39 Mo6jZ3DbOvpUx3zdrGe0y7bjmttgyY5O9sxReEh+FQmkT6CNzbSG+HFSRfEk0R7y vW/C9Sy7diC4KIfzC533Q7rdH4xl4ntcwirRfsKJKpZmto/EZwu/+YUCk388ZdW9 mKSLBWxmHaQKD3dggNvC2gbHg9qCFdjsLUXhnUtrDvXh0IV61wicYnfGoy3PXUts UQQZipz1MtoQC/66UztomDsx0lzB3N8NL1ZHY4ma8CB6hn7b4DGwluTIVpEmtszh IxdDOaV+EenkDM6U7aOF/CoDHeOLX+cF -----END CERTIFICATE-----Generated at Fri Nov 7 14:23:27 2025 by rpki-client