$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.mft File: 3p1kAWKR6ioW87eVag9ANbcJ5Uc.mft (raw, json) Hash identifier: MxJPpBS8iyvk5XIUsFFryWi+Nbdv+tMNOGTtb8pNCzQ= Subject key identifier: 8E:CE:8A:3B:23:75:DF:51:F6:61:F3:9D:BC:A9:8D:19:9F:02:CB:43 Authority key identifier: DE:9D:64:01:62:91:EA:2A:16:F3:B7:95:6A:0F:40:35:B7:09:E5:47 Certificate issuer: /CN=A9125475/serialNumber=DE9D64016291EA2A16F3B7956A0F4035B709E547 Certificate serial: 25C8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3p1kAWKR6ioW87eVag9ANbcJ5Uc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.mft Manifest number: 2592 Signing time: Wed 22 Oct 2025 14:21:20 +0000 Manifest this update: Wed 22 Oct 2025 14:21:20 +0000 Manifest next update: Wed 29 Oct 2025 14:21:20 +0000 Files and hashes: 1: 3p1kAWKR6ioW87eVag9ANbcJ5Uc.crl (hash: EU3QVwCAz5eAw/tyIXoFD8M2KIwE6xkwkq5uge29sDQ=) 2: 19FEDB562AB611EC93861F65C4F9AE02.roa (hash: IctK1F2f+smhGbfiZwt5TjovlvY8GgFhI80wuux0L94=) 3: 87B992CE90E211EDB4035D5EC4F9AE02.roa (hash: 9Mx2YbXgiyB8AIZIQ7AHexIPVIu7UgKFpNuf1xsWr8w=) 4: 0171064E1E7511EFA136126DC4F9AE02.roa (hash: XFxbQQJDj0rE3ZIrAGCdNw3StLs+W3TJQN2I+ajNUy8=) 5: C40F099A1E7411EF818FAE6CC4F9AE02.roa (hash: B3CcjXzeJ4dABXXB8sqhv86VgPvTtQb+NKigWAQp3Ao=) 6: E7D3D36A406911EC83A0470DC4F9AE02.roa (hash: GjOaQSD+yOTMszKkoCotay0oJsTwIhHAKh5smJri11o=) 7: 3373DB98902C11EA898EFD7FC4F9AE02.roa (hash: IbE+JWM/Bgx4LvXRfO5AkKCxabxFW5QHg0Anl0b9X1Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.crl rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3p1kAWKR6ioW87eVag9ANbcJ5Uc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 14:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9672 (0x25c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125475, serialNumber=DE9D64016291EA2A16F3B7956A0F4035B709E547 Validity Not Before: Oct 22 14:21:20 2025 GMT Not After : Oct 29 14:21:20 2025 GMT Subject: CN=68f8e860-e092 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:cc:b0:30:0f:67:04:7d:ad:42:88:bf:93:18: 95:82:5e:fa:12:72:aa:ef:90:16:b4:bc:dd:d6:b4: 61:60:b6:b0:7b:b1:ab:80:31:b1:e7:55:d6:11:fc: e4:95:5d:dc:50:57:70:83:1b:ec:9a:04:57:7b:b8: c8:81:d2:f7:65:9b:bd:92:f1:6a:4b:85:f8:f9:2f: 5e:24:38:71:83:c5:6b:3b:47:40:80:c5:19:31:3b: 4d:6f:41:27:08:d1:94:55:ad:8a:e5:fb:4b:39:4a: 98:f4:c9:7a:c8:0d:87:83:3b:ce:16:3d:65:7d:99: 1f:73:02:01:9b:31:d0:32:15:0a:99:d6:a4:33:60: fc:c5:3f:6e:27:f7:04:05:87:fc:19:6f:3a:7a:6d: 37:65:21:34:f4:4d:dc:d4:82:1c:74:2e:cb:6c:d1: 33:ea:7a:98:97:9f:cd:b7:02:e4:94:6c:a6:77:97: 99:f6:d6:d7:90:20:d2:63:88:6b:5c:69:7c:76:e7: 94:18:60:9e:92:25:6b:f8:18:49:a7:f7:81:66:96: e3:9c:64:42:2b:f7:72:2a:8c:2f:2e:e2:6c:63:6f: 2e:e6:29:be:fb:8b:a4:bc:41:7f:1f:72:0c:75:4e: 9a:d9:89:71:e3:9e:da:d8:90:00:30:82:a3:fd:9f: ec:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:CE:8A:3B:23:75:DF:51:F6:61:F3:9D:BC:A9:8D:19:9F:02:CB:43 X509v3 Authority Key Identifier: keyid:DE:9D:64:01:62:91:EA:2A:16:F3:B7:95:6A:0F:40:35:B7:09:E5:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3p1kAWKR6ioW87eVag9ANbcJ5Uc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:f3:13:69:00:15:a9:80:0f:2a:01:7c:d0:f4:76:e9:13:c5: 12:46:3f:c9:33:66:58:a6:0b:e1:93:b6:18:51:72:54:6e:8e: 9b:59:77:43:ea:e2:c6:54:af:5f:20:48:56:6f:ad:00:7b:62: c4:9e:ee:38:ed:17:0f:47:cc:3c:17:09:0a:0b:e5:64:17:ae: ad:f0:ed:ee:ee:cf:cb:e5:1d:02:49:b5:4a:a4:56:b8:52:82: 1e:a7:74:fa:d5:50:7d:dc:de:a7:fd:b5:3b:74:87:7f:ef:0a: d0:3f:c7:78:43:ff:b0:50:8b:19:f9:23:0a:ca:0a:08:8d:41: 58:5a:49:80:c1:2f:7f:db:b4:8f:b1:4d:f7:78:21:5c:2e:9f: 1e:a2:af:63:3b:77:50:d8:62:ed:a3:83:bb:75:1d:09:45:34: 5d:79:56:3d:27:1a:da:0d:5c:b1:64:4c:14:52:32:91:6e:e9: 7c:00:8f:1c:56:56:bd:51:2f:68:7b:3e:bc:3d:70:1f:bb:d4: a9:36:7b:5e:e7:c7:49:9b:c8:f5:db:51:f9:54:e7:3a:c7:23: 95:3a:6e:2b:09:a5:8c:fb:eb:94:ed:c2:3a:36:8d:63:25:3f: 23:4f:d8:ed:6d:88:ff:f7:9c:fc:fd:2c:89:19:71:3b:88:5b: 9d:52:05:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJcgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU0NzUxMTAvBgNVBAUTKERFOUQ2NDAxNjI5MUVBMkExNkYzQjc5NTZBMEY0MDM1 QjcwOUU1NDcwHhcNMjUxMDIyMTQyMTIwWhcNMjUxMDI5MTQyMTIwWjAYMRYwFAYD VQQDEw02OGY4ZTg2MC1lMDkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvsywMA9nBH2tQoi/kxiVgl76EnKq75AWtLzd1rRhYLawe7GrgDGx51XWEfzk lV3cUFdwgxvsmgRXe7jIgdL3ZZu9kvFqS4X4+S9eJDhxg8VrO0dAgMUZMTtNb0En CNGUVa2K5ftLOUqY9Ml6yA2HgzvOFj1lfZkfcwIBmzHQMhUKmdakM2D8xT9uJ/cE BYf8GW86em03ZSE09E3c1IIcdC7LbNEz6nqYl5/NtwLklGymd5eZ9tbXkCDSY4hr XGl8dueUGGCekiVr+BhJp/eBZpbjnGRCK/dyKowvLuJsY28u5im++4ukvEF/H3IM dU6a2Ylx457a2JAAMIKj/Z/s3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI7Oijsj dd9R9mHznbypjRmfAstDMB8GA1UdIwQYMBaAFN6dZAFikeoqFvO3lWoPQDW3CeVH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTQ3NS84RDk0NzFGNjI5 MDYxMUU1OTNCRkM2MjZDNEY5QUUwMi8zcDFrQVdLUjZpb1c4N2VWYWc5QU5iY0o1 VWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzNwMWtBV0tSNmlvVzg3ZVZhZzlBTmJjSjVVYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTQ3NS84RDk0NzFGNjI5MDYxMUU1OTNCRkM2MjZDNEY5QUUwMi8zcDFrQVdLUjZp b1c4N2VWYWc5QU5iY0o1VWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCs8xNpABWpgA8qAXzQ9HbpE8USRj/JM2ZYpgvhk7YYUXJUbo6bWXdD 6uLGVK9fIEhWb60Ae2LEnu447RcPR8w8FwkKC+VkF66t8O3u7s/L5R0CSbVKpFa4 UoIep3T61VB93N6n/bU7dId/7wrQP8d4Q/+wUIsZ+SMKygoIjUFYWkmAwS9/27SP sU33eCFcLp8eoq9jO3dQ2GLto4O7dR0JRTRdeVY9JxraDVyxZEwUUjKRbul8AI8c Vla9US9oez68PXAfu9SpNnte58dJm8j121H5VOc6xyOVOm4rCaWM++uU7cI6No1j JT8jT9jtbYj/95z8/SyJGXE7iFudUgUK -----END CERTIFICATE-----Generated at Fri Oct 24 00:54:54 2025 by rpki-client