$ rpki-client -vvf rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft File: 3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft (raw, json) Hash identifier: q2ZU7sL7rZXJDwo1Nsev6q/chY0ItsfGcRmOSjg+Ct0= Subject key identifier: FF:B3:D7:0C:19:BA:74:5E:5D:75:72:E3:A8:85:CC:C1:58:51:67:30 Authority key identifier: DE:87:B6:67:69:7D:46:F4:55:05:EA:A1:23:BA:F6:86:DB:22:07:81 Certificate issuer: /CN=A915D8F3/serialNumber=DE87B667697D46F45505EAA123BAF686DB220781 Certificate serial: 0131 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oe2Z2l9RvRVBeqhI7r2htsiB4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft Manifest number: 012D Signing time: Mon 03 Nov 2025 04:33:04 +0000 Manifest this update: Mon 03 Nov 2025 04:33:04 +0000 Manifest next update: Mon 10 Nov 2025 04:33:04 +0000 Files and hashes: 1: 3oe2Z2l9RvRVBeqhI7r2htsiB4E.crl (hash: /C3y6kt1UM82SQop3fP3Easj5HcGgqAycKxdxrrGrMM=) 2: D47D55EEE5BB11EE8B36C249C4F9AE02.roa (hash: 8mrj6WG5h96Mu545OyQl3U5aMKI1r2gwobV+i2Zi3aE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.crl rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oe2Z2l9RvRVBeqhI7r2htsiB4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:33:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 305 (0x131) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D8F3, serialNumber=DE87B667697D46F45505EAA123BAF686DB220781 Validity Not Before: Nov 3 04:33:04 2025 GMT Not After : Nov 10 04:33:04 2025 GMT Subject: CN=69083080-c66a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:2e:dd:85:a1:ce:ed:0f:3b:85:0b:d1:a6:89: b2:db:8d:13:68:81:b2:d7:8b:fc:d8:e3:c0:33:cf: 2d:06:9e:81:49:e4:30:18:b8:3c:04:fc:c7:8e:c4: f4:4c:f8:42:b5:09:26:fc:85:85:d1:46:91:91:62: b8:77:b7:c6:49:16:15:73:90:c4:74:b0:70:81:8a: a4:95:a3:c0:4b:3c:75:ed:56:9a:7e:59:1b:82:e1: d2:e6:13:18:64:30:ce:a6:af:8b:2e:65:a3:a0:91: 7a:af:7d:e1:7b:87:1e:96:9d:ad:64:1e:84:c1:be: 3a:6d:0f:36:1f:5a:42:e8:d4:7b:f1:bf:a5:d7:e1: 9f:5f:6b:03:aa:9f:b2:13:e1:5b:d5:1c:56:4a:23: 81:76:45:87:a4:48:e1:dc:19:4f:92:d6:0e:32:4d: 65:e8:87:d9:3e:d0:b2:59:7f:fa:49:ae:63:29:29: 52:a0:49:d0:1e:aa:cf:e3:84:4c:cf:d3:cc:4e:4c: 2f:75:ee:54:1f:c9:96:f6:9a:aa:2a:96:ee:05:0b: 52:56:f2:4f:3d:a8:f5:30:07:16:12:23:cc:b0:b0: ee:05:6a:72:46:b3:dc:c7:c1:f6:9e:26:8b:5b:97: b2:f0:fd:25:e3:11:b3:cc:c4:5b:16:f2:64:5d:38: 8d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:B3:D7:0C:19:BA:74:5E:5D:75:72:E3:A8:85:CC:C1:58:51:67:30 X509v3 Authority Key Identifier: keyid:DE:87:B6:67:69:7D:46:F4:55:05:EA:A1:23:BA:F6:86:DB:22:07:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oe2Z2l9RvRVBeqhI7r2htsiB4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:95:10:15:c3:3b:b1:75:92:31:03:97:46:ac:87:7c:8f:d5: 0c:f6:47:d4:30:2e:a0:79:f3:1d:e4:5e:bd:68:ed:75:72:8e: c6:4a:ed:db:f4:e4:3a:80:ee:53:75:92:08:8c:3a:b8:9a:cc: b8:1c:6a:84:10:ff:b1:fc:36:fd:2c:cc:bc:2a:82:16:9d:39: 24:fe:03:35:d5:89:1a:4b:e0:0d:20:57:da:ce:be:be:40:39: 9f:fc:18:f9:fc:0f:69:41:a8:4a:3b:1f:e3:71:c4:5c:e6:d9: c5:ef:e9:6d:c9:40:42:9e:7c:3a:2a:f1:c0:21:fb:9a:d6:43: 5a:41:44:61:52:5e:b4:89:f2:5b:2a:db:72:5e:48:e4:a6:fb: b4:dc:d1:16:d9:39:68:08:96:d9:4e:a7:6e:fa:2d:03:7a:62: 3d:e5:f7:9b:b9:be:90:1c:18:94:35:27:d2:ca:5f:14:ee:c9: fd:ce:12:d8:d5:57:fd:1f:6f:3e:f3:35:50:71:6a:5a:4d:4c: c4:b7:0e:58:46:d3:56:cd:a4:7a:b9:bd:93:9c:80:c1:a6:cd: 2f:7b:21:69:14:78:78:61:fa:2c:fe:86:05:4a:1a:60:f8:71: 24:c9:d9:a7:8c:05:86:f6:6c:49:b2:c7:69:9b:11:68:6d:52: 40:3f:ae:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ4RjMxMTAvBgNVBAUTKERFODdCNjY3Njk3RDQ2RjQ1NTA1RUFBMTIzQkFGNjg2 REIyMjA3ODEwHhcNMjUxMTAzMDQzMzA0WhcNMjUxMTEwMDQzMzA0WjAYMRYwFAYD VQQDEw02OTA4MzA4MC1jNjZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1i7dhaHO7Q87hQvRpomy240TaIGy14v82OPAM88tBp6BSeQwGLg8BPzHjsT0 TPhCtQkm/IWF0UaRkWK4d7fGSRYVc5DEdLBwgYqklaPASzx17VaaflkbguHS5hMY ZDDOpq+LLmWjoJF6r33he4celp2tZB6Ewb46bQ82H1pC6NR78b+l1+GfX2sDqp+y E+Fb1RxWSiOBdkWHpEjh3BlPktYOMk1l6IfZPtCyWX/6Sa5jKSlSoEnQHqrP44RM z9PMTkwvde5UH8mW9pqqKpbuBQtSVvJPPaj1MAcWEiPMsLDuBWpyRrPcx8H2niaL W5ey8P0l4xGzzMRbFvJkXTiNhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP+z1wwZ unReXXVy46iFzMFYUWcwMB8GA1UdIwQYMBaAFN6HtmdpfUb0VQXqoSO69obbIgeB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDhGMy9FQTQ1QjNDMkU1 QkExMUVFOUI2MDdCNDdDNEY5QUUwMi8zb2UyWjJsOVJ2UlZCZXFoSTdyMmh0c2lC NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNvZTJaMmw5UnZSVkJlcWhJN3IyaHRzaUI0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDhGMy9FQTQ1QjNDMkU1QkExMUVFOUI2MDdCNDdDNEY5QUUwMi8zb2UyWjJsOVJ2 UlZCZXFoSTdyMmh0c2lCNEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6lRAVwzuxdZIxA5dGrId8j9UM9kfUMC6gefMd5F69aO11co7GSu3b 9OQ6gO5TdZIIjDq4msy4HGqEEP+x/Db9LMy8KoIWnTkk/gM11YkaS+ANIFfazr6+ QDmf/Bj5/A9pQahKOx/jccRc5tnF7+ltyUBCnnw6KvHAIfua1kNaQURhUl60ifJb KttyXkjkpvu03NEW2TloCJbZTqdu+i0DemI95febub6QHBiUNSfSyl8U7sn9zhLY 1Vf9H28+8zVQcWpaTUzEtw5YRtNWzaR6ub2TnIDBps0veyFpFHh4Yfos/oYFShpg +HEkydmnjAWG9mxJssdpmxFobVJAP65E -----END CERTIFICATE-----Generated at Mon Nov 3 18:13:30 2025 by rpki-client