$ rpki-client -vvf rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.mft File: 3FfpX2KSEzop44hINlCWI10ZN8o.mft (raw, json) Hash identifier: bSAKvy4jaJnFPcAEd8v/BK66s2KLgLc7iLd9pDdXs5Y= Subject key identifier: A1:5A:6A:4A:D0:87:B4:A7:13:49:64:96:AF:83:87:05:0A:50:90:11 Authority key identifier: DC:57:E9:5F:62:92:13:3A:29:E3:88:48:36:50:96:23:5D:19:37:CA Certificate issuer: /CN=A914E1E3/serialNumber=DC57E95F6292133A29E38848365096235D1937CA Certificate serial: 1D52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FfpX2KSEzop44hINlCWI10ZN8o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.mft Manifest number: 1D47 Signing time: Sun 02 Nov 2025 16:09:23 +0000 Manifest this update: Sun 02 Nov 2025 16:09:22 +0000 Manifest next update: Sun 09 Nov 2025 16:09:22 +0000 Files and hashes: 1: 3FfpX2KSEzop44hINlCWI10ZN8o.crl (hash: E/wJpX0cgwiKBJ0y0ZyCVuUWA/jdprgO3vF157We7N8=) 2: 3C1382D0BEA211E68902BC3DC4F9AE02.roa (hash: 4tdhNCoXuQpi6+LVzEflBnVNgk5q7DhclUHPWv4LN4k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.crl rsync://rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FfpX2KSEzop44hINlCWI10ZN8o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 16:09:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7506 (0x1d52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E1E3, serialNumber=DC57E95F6292133A29E38848365096235D1937CA Validity Not Before: Nov 2 16:09:22 2025 GMT Not After : Nov 9 16:09:22 2025 GMT Subject: CN=69078233-9c8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e1:90:33:70:31:cc:16:37:cc:4f:a8:da:d1: 15:c0:fa:dc:42:33:ec:6e:77:dd:13:bc:af:05:2d: a2:27:d4:30:40:2b:5b:c6:5c:11:a1:ff:28:d6:9e: 6a:3a:e2:b5:27:d1:b2:ee:72:4c:df:89:7c:70:d4: 98:5c:a1:02:c2:91:e8:95:de:4e:74:53:de:94:03: 25:d4:fb:bb:28:2b:dd:48:d5:73:f1:3b:1e:c0:82: c8:c6:91:36:e6:0b:6d:ba:53:96:bd:1f:e9:da:8a: 1a:cb:47:49:4d:bc:a7:6d:90:45:9f:73:1a:de:9e: 80:4c:05:89:66:73:25:95:ff:5a:78:38:cc:8c:57: 79:c1:0a:e5:c8:81:2b:d2:b4:50:00:ea:85:dc:b1: 3c:41:05:8e:2d:88:00:ab:5a:66:e8:7a:57:b8:2a: dc:23:d1:8b:74:9c:b9:5e:ff:d4:52:4e:e7:ee:ae: 5a:72:96:70:7c:b6:44:96:18:13:7e:b7:75:c7:32: 9d:78:77:c8:96:f5:ce:ec:83:68:e3:cb:8e:a1:93: 54:52:50:20:2d:e7:a5:cb:31:78:24:2b:1b:20:7d: 9e:d1:c2:26:3f:af:53:aa:61:1e:3d:0c:6b:f2:1c: b4:72:2b:7a:6a:fa:c2:30:b1:7a:da:c3:8e:6b:6d: 67:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:5A:6A:4A:D0:87:B4:A7:13:49:64:96:AF:83:87:05:0A:50:90:11 X509v3 Authority Key Identifier: keyid:DC:57:E9:5F:62:92:13:3A:29:E3:88:48:36:50:96:23:5D:19:37:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FfpX2KSEzop44hINlCWI10ZN8o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:42:f1:2d:f9:25:51:25:e0:21:7c:fc:e7:cd:ce:55:76:d1: b3:94:d8:9e:e4:62:c6:f2:0e:52:52:56:44:5c:ff:81:24:12: 87:2a:04:33:28:9e:4a:6e:5d:0f:42:c9:93:cb:fb:cb:83:cd: 64:5c:ff:8b:f3:b2:f8:d0:01:ac:db:e5:8e:d7:32:d0:9c:e4: 88:ed:94:9e:56:97:b8:7b:4c:04:a9:05:66:d2:89:b4:45:21: 39:4c:f2:c0:a0:76:ab:13:e8:98:f7:11:5b:6f:5b:b3:75:e4: f0:12:d9:87:85:37:e1:b4:b3:75:f3:3b:fd:c5:22:cd:53:84: 3e:49:b9:44:d9:8a:17:9c:4b:13:28:a3:2b:1b:a6:81:5e:0f: c2:44:13:57:07:7e:03:ab:35:c3:61:cb:11:ab:32:67:92:dc: 3a:76:f4:d6:9c:84:cd:9c:fb:40:48:f0:b1:42:20:71:b5:f4: d1:29:7a:0f:88:5d:f8:0f:e6:fe:ba:10:a4:8c:56:a7:28:c5: 2c:df:0e:f4:02:a6:bf:23:af:39:24:e0:00:b7:0f:f2:fc:5e: d5:00:52:4d:40:b7:c7:50:49:05:d5:75:0a:d4:d4:6f:4d:de: 3e:4d:1a:20:ce:13:a2:5e:fb:68:b2:0d:4b:49:7c:1d:0a:f0: a5:cd:40:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUxRTMxMTAvBgNVBAUTKERDNTdFOTVGNjI5MjEzM0EyOUUzODg0ODM2NTA5NjIz NUQxOTM3Q0EwHhcNMjUxMTAyMTYwOTIyWhcNMjUxMTA5MTYwOTIyWjAYMRYwFAYD VQQDEw02OTA3ODIzMy05YzhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2eGQM3AxzBY3zE+o2tEVwPrcQjPsbnfdE7yvBS2iJ9QwQCtbxlwRof8o1p5q OuK1J9Gy7nJM34l8cNSYXKECwpHold5OdFPelAMl1Pu7KCvdSNVz8TsewILIxpE2 5gttulOWvR/p2ooay0dJTbynbZBFn3Ma3p6ATAWJZnMllf9aeDjMjFd5wQrlyIEr 0rRQAOqF3LE8QQWOLYgAq1pm6HpXuCrcI9GLdJy5Xv/UUk7n7q5acpZwfLZElhgT frd1xzKdeHfIlvXO7INo48uOoZNUUlAgLeelyzF4JCsbIH2e0cImP69TqmEePQxr 8hy0cit6avrCMLF62sOOa21nCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKFaakrQ h7SnE0lklq+DhwUKUJARMB8GA1UdIwQYMBaAFNxX6V9ikhM6KeOISDZQliNdGTfK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTFFMy8wMjFBRTkyQUJE RTMxMUU2ODRDRTBCNTRDNEY5QUUwMi8zRmZwWDJLU0V6b3A0NGhJTmxDV0kxMFpO OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNGZnBYMktTRXpvcDQ0aElObENXSTEwWk44by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTFFMy8wMjFBRTkyQUJERTMxMUU2ODRDRTBCNTRDNEY5QUUwMi8zRmZwWDJLU0V6 b3A0NGhJTmxDV0kxMFpOOG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXQvEt+SVRJeAhfPznzc5VdtGzlNie5GLG8g5SUlZEXP+BJBKHKgQz KJ5Kbl0PQsmTy/vLg81kXP+L87L40AGs2+WO1zLQnOSI7ZSeVpe4e0wEqQVm0om0 RSE5TPLAoHarE+iY9xFbb1uzdeTwEtmHhTfhtLN18zv9xSLNU4Q+SblE2YoXnEsT KKMrG6aBXg/CRBNXB34DqzXDYcsRqzJnktw6dvTWnITNnPtASPCxQiBxtfTRKXoP iF34D+b+uhCkjFanKMUs3w70Aqa/I685JOAAtw/y/F7VAFJNQLfHUEkF1XUK1NRv Td4+TRogzhOiXvtosg1LSXwdCvClzUAn -----END CERTIFICATE-----Generated at Tue Nov 4 08:30:28 2025 by rpki-client