$ rpki-client -vvf rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft File: 3YIYybgUroW5QGU2YHJQx6ruyAk.mft (raw, json) Hash identifier: Hr7sOwskAGC40BGNapWLfClLha1Xwgt+H/6l6oCd0fo= Subject key identifier: 9D:2E:25:56:03:F9:CC:E6:24:56:EF:01:81:9C:E0:BE:1D:50:B8:C0 Authority key identifier: DD:82:18:C9:B8:14:AE:85:B9:40:65:36:60:72:50:C7:AA:EE:C8:09 Certificate issuer: /CN=A915ABD7/serialNumber=DD8218C9B814AE85B9406536607250C7AAEEC809 Certificate serial: 03A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YIYybgUroW5QGU2YHJQx6ruyAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft Manifest number: 039B Signing time: Mon 03 Nov 2025 00:43:57 +0000 Manifest this update: Mon 03 Nov 2025 00:43:57 +0000 Manifest next update: Mon 10 Nov 2025 00:43:57 +0000 Files and hashes: 1: 3YIYybgUroW5QGU2YHJQx6ruyAk.crl (hash: x4HDwMhrUdiEPT5njwiQu/txfc/VYlDBH+KI280HhOI=) 2: 88F3C02C045611EFB93F1F33C4F9AE02.roa (hash: NYEcly+S03KH8Gz/ED4JBmnf9asUtp3vEim2ZrMueG0=) 3: A4F1EAECC09211EC8950E57AC4F9AE02.roa (hash: /dpglo9CFx73F4sqDk7WZ21gpjG8xDFFFJkPbHJ8/V0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.crl rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YIYybgUroW5QGU2YHJQx6ruyAk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:43:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 932 (0x3a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915ABD7, serialNumber=DD8218C9B814AE85B9406536607250C7AAEEC809 Validity Not Before: Nov 3 00:43:57 2025 GMT Not After : Nov 10 00:43:57 2025 GMT Subject: CN=6907facd-6be4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2f:58:a0:11:66:2b:0c:cf:46:dd:b6:b6:47: 5d:82:0d:3b:17:14:a5:a1:0b:f2:85:db:41:93:3c: b9:98:71:f7:f1:00:e7:ac:51:98:70:e7:6a:d5:11: cd:21:60:fd:21:81:30:e5:d4:0f:79:38:79:37:06: 7b:37:82:f2:02:8b:35:9c:d7:d9:db:32:fb:64:04: df:70:51:f6:01:19:46:d4:01:bd:ee:30:b0:2f:10: 11:4e:ba:46:42:e1:f0:ce:76:b4:66:9a:8b:30:35: d1:5c:fe:cc:11:d5:59:55:60:d9:de:cd:c6:fa:5e: c4:11:fc:8c:eb:0e:66:d4:2f:78:a5:ca:8b:0b:ae: dc:db:a4:7e:ab:42:44:f3:60:1d:54:e6:2f:cb:a7: 57:83:21:38:65:53:2b:aa:2e:96:9e:74:5f:67:78: c3:67:b8:fa:e1:40:6b:b7:c2:c2:5f:35:69:b8:32: 9d:fc:34:8c:c4:dc:50:1e:e2:98:25:d4:1d:e9:84: c0:59:28:bd:33:bd:b4:e7:38:5f:23:c3:e0:63:ad: 2b:0d:96:14:48:55:3d:74:6c:18:55:33:4d:e8:86: b1:da:82:09:f2:b2:45:cb:57:4a:e1:2a:50:ff:cb: 40:56:8b:63:16:8c:f9:92:b0:0c:a2:67:90:2b:6e: 0f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:2E:25:56:03:F9:CC:E6:24:56:EF:01:81:9C:E0:BE:1D:50:B8:C0 X509v3 Authority Key Identifier: keyid:DD:82:18:C9:B8:14:AE:85:B9:40:65:36:60:72:50:C7:AA:EE:C8:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YIYybgUroW5QGU2YHJQx6ruyAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:c3:a0:79:fc:d5:6a:1c:50:33:c3:0c:5e:ee:87:d7:26:c8: 1f:dc:91:7e:84:60:0e:d3:aa:49:17:56:2e:96:91:38:27:40: f0:c4:90:c3:cb:df:03:ca:02:96:62:5c:b6:2c:d7:af:2d:cc: 48:a4:c8:cf:59:dc:b8:0d:50:f0:81:be:4d:33:23:4f:f6:14: 88:0d:7f:a8:eb:5e:16:f4:08:c5:d4:62:f0:2a:5e:69:09:70: fd:ac:4f:f2:16:18:1d:08:5e:cb:29:a7:18:6e:c1:20:e8:2e: 9a:45:9b:c4:49:6f:18:ea:18:dd:85:28:8c:20:1f:cd:5a:32: 7c:c2:52:32:bc:f6:23:b4:dd:8b:93:3f:f1:51:99:d1:22:59: 24:cf:b8:d7:f1:38:39:c3:e8:f0:c2:af:c5:77:a5:cb:16:d8: e9:2f:1c:01:18:d4:e8:dd:4b:80:6e:d5:23:6b:9c:18:36:9b: c5:62:f3:ab:f3:bd:eb:8d:72:c8:26:9c:02:18:7f:b6:8e:3f: fa:62:89:53:98:3b:6e:a1:a8:80:da:76:24:e2:ea:0c:ac:e9: 3f:fb:49:6b:dd:8d:ac:b3:3a:80:32:ea:4c:b6:4b:df:a3:4b: 3e:b0:a0:b4:88:8e:c5:d8:a8:10:c3:35:d4:91:12:41:92:4d: 38:95:b1:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUFCRDcxMTAvBgNVBAUTKEREODIxOEM5QjgxNEFFODVCOTQwNjUzNjYwNzI1MEM3 QUFFRUM4MDkwHhcNMjUxMTAzMDA0MzU3WhcNMjUxMTEwMDA0MzU3WjAYMRYwFAYD VQQDEw02OTA3ZmFjZC02YmU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAui9YoBFmKwzPRt22tkddgg07FxSloQvyhdtBkzy5mHH38QDnrFGYcOdq1RHN IWD9IYEw5dQPeTh5NwZ7N4LyAos1nNfZ2zL7ZATfcFH2ARlG1AG97jCwLxARTrpG QuHwzna0ZpqLMDXRXP7MEdVZVWDZ3s3G+l7EEfyM6w5m1C94pcqLC67c26R+q0JE 82AdVOYvy6dXgyE4ZVMrqi6WnnRfZ3jDZ7j64UBrt8LCXzVpuDKd/DSMxNxQHuKY JdQd6YTAWSi9M7205zhfI8PgY60rDZYUSFU9dGwYVTNN6Iax2oIJ8rJFy1dK4SpQ /8tAVotjFoz5krAMomeQK24PLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ0uJVYD +czmJFbvAYGc4L4dULjAMB8GA1UdIwQYMBaAFN2CGMm4FK6FuUBlNmByUMeq7sgJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QUJENy81RjQ5QUE2OEJF QzQxMUVDODc4Q0MxNjZDNEY5QUUwMi8zWUlZeWJnVXJvVzVRR1UyWUhKUXg2cnV5 QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNZSVl5YmdVcm9XNVFHVTJZSEpReDZydXlBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QUJENy81RjQ5QUE2OEJFQzQxMUVDODc4Q0MxNjZDNEY5QUUwMi8zWUlZeWJnVXJv VzVRR1UyWUhKUXg2cnV5QWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4w6B5/NVqHFAzwwxe7ofXJsgf3JF+hGAO06pJF1YulpE4J0DwxJDD y98DygKWYly2LNevLcxIpMjPWdy4DVDwgb5NMyNP9hSIDX+o614W9AjF1GLwKl5p CXD9rE/yFhgdCF7LKacYbsEg6C6aRZvESW8Y6hjdhSiMIB/NWjJ8wlIyvPYjtN2L kz/xUZnRIlkkz7jX8Tg5w+jwwq/Fd6XLFtjpLxwBGNTo3UuAbtUja5wYNpvFYvOr 873rjXLIJpwCGH+2jj/6YolTmDtuoaiA2nYk4uoMrOk/+0lr3Y2sszqAMupMtkvf o0s+sKC0iI7F2KgQwzXUkRJBkk04lbFm -----END CERTIFICATE-----Generated at Tue Nov 4 15:46:51 2025 by rpki-client