$ rpki-client -vvf rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/P3MTY_5HQEYaWciPp2e9ijbsDfY.mft File: P3MTY_5HQEYaWciPp2e9ijbsDfY.mft (raw, json) Hash identifier: 8lVC+i6/bvHC70Juu5Wx9tciClM+oAReGO6/sksf+qY= Subject key identifier: 5C:B3:81:DE:58:C7:F5:3E:54:98:94:72:95:62:EE:85:4A:94:22:9E Authority key identifier: 3F:73:13:63:FE:47:40:46:1A:59:C8:8F:A7:67:BD:8A:36:EC:0D:F6 Certificate issuer: /CN=A915FD1D/serialNumber=3F731363FE4740461A59C88FA767BD8A36EC0DF6 Certificate serial: 077D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3MTY_5HQEYaWciPp2e9ijbsDfY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/P3MTY_5HQEYaWciPp2e9ijbsDfY.mft Manifest number: 076B Signing time: Sun 02 Nov 2025 21:39:40 +0000 Manifest this update: Sun 02 Nov 2025 21:39:40 +0000 Manifest next update: Sun 09 Nov 2025 21:39:40 +0000 Files and hashes: 1: P3MTY_5HQEYaWciPp2e9ijbsDfY.crl (hash: jK+ZOJizOiPIaY4+Df1iexHL4kzQRjYXs7TA2SChmy0=) 2: 3576B330ABFA11F0A2E07C6AC4F9AE02.roa (hash: jTOu+3QXEuK982CzF4ecBkhu0815qn3MTIZfxxKR5kY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/P3MTY_5HQEYaWciPp2e9ijbsDfY.crl rsync://rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/P3MTY_5HQEYaWciPp2e9ijbsDfY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3MTY_5HQEYaWciPp2e9ijbsDfY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:39:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1917 (0x77d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FD1D, serialNumber=3F731363FE4740461A59C88FA767BD8A36EC0DF6 Validity Not Before: Nov 2 21:39:40 2025 GMT Not After : Nov 9 21:39:40 2025 GMT Subject: CN=6907cf9c-828b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:ae:87:0c:a6:20:2b:12:fe:35:3c:72:22:e4: 05:96:41:3c:d6:53:1a:19:16:2d:b6:d3:ee:2a:c1: 20:40:20:94:71:33:66:4c:cb:4d:1f:2d:6a:65:4f: e1:06:58:a9:c3:d6:74:20:df:68:27:d1:c3:e6:5c: 4a:01:9b:e7:cd:f1:16:e1:a9:f3:1e:26:7e:12:9a: 84:ac:1e:3f:94:a1:59:a1:82:5e:f2:57:f3:eb:98: ce:72:79:39:8c:ca:f2:10:09:35:b1:3c:6c:ab:17: 16:c1:88:ba:7b:b0:75:f3:4f:4f:09:ee:5d:e9:70: c3:43:2f:7b:72:64:4c:0c:97:10:11:3d:6e:88:28: 85:9c:46:48:61:77:55:5c:9e:45:5e:ef:44:ef:01: 84:b7:8b:36:ce:41:89:6c:99:b3:5a:62:fc:8a:da: 83:2b:cd:73:2b:91:5a:cb:dc:0c:d4:b2:2d:09:fe: d9:70:da:38:e3:55:04:2b:ea:d0:d0:7f:03:ff:95: 06:c7:b5:b3:07:e0:6b:dd:be:cd:35:29:fd:e3:53: 32:bd:42:91:7e:55:e1:9e:ce:f1:02:a8:d9:15:00: 6d:0b:ea:33:a5:6e:83:53:c7:20:61:ce:aa:a9:a5: 35:b9:61:08:35:65:f6:e9:c5:d6:20:ea:c3:5c:b6: d0:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:B3:81:DE:58:C7:F5:3E:54:98:94:72:95:62:EE:85:4A:94:22:9E X509v3 Authority Key Identifier: keyid:3F:73:13:63:FE:47:40:46:1A:59:C8:8F:A7:67:BD:8A:36:EC:0D:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/P3MTY_5HQEYaWciPp2e9ijbsDfY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3MTY_5HQEYaWciPp2e9ijbsDfY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/P3MTY_5HQEYaWciPp2e9ijbsDfY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:2a:98:08:96:13:61:e0:e2:6a:7e:59:18:dd:f6:cc:57:95: 0c:9e:23:e0:fa:fe:64:24:52:c7:2a:54:ce:60:51:59:a3:76: dc:04:c1:51:2a:c6:ff:e6:cf:97:f7:8d:0d:64:34:80:ee:09: f6:77:33:fd:61:ec:ae:fd:a5:7c:00:66:b6:06:68:3b:de:68: 68:85:47:6f:34:ee:c7:84:a4:e8:e2:d6:b7:53:b9:ad:da:7a: da:22:2c:f7:3a:0b:5c:74:ed:0a:c2:68:3c:87:b8:04:71:75: 0d:d5:36:9c:d3:20:b0:95:49:db:54:4a:23:1e:af:8f:e1:4f: 4f:21:68:a2:aa:18:39:75:75:f9:d6:dc:47:9c:b5:c8:b1:63: 46:a0:d1:75:de:d1:6c:3e:60:4e:07:15:17:4c:63:3e:02:00: 50:94:b5:ee:fc:4c:45:3b:40:e9:67:00:47:56:04:b0:d7:23: db:27:72:88:17:e1:27:27:0b:7c:79:39:45:0e:10:da:e9:84: d7:9b:b7:87:59:a7:24:ed:98:ca:49:3c:59:34:4b:ba:12:43: 67:32:01:cd:a7:ca:55:1a:7f:94:ea:da:72:af:e0:2b:19:06: 92:9c:1a:d5:a3:05:58:a6:3e:fc:f2:d8:e5:33:b5:f3:2d:51: ba:43:ce:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB30wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZEMUQxMTAvBgNVBAUTKDNGNzMxMzYzRkU0NzQwNDYxQTU5Qzg4RkE3NjdCRDhB MzZFQzBERjYwHhcNMjUxMTAyMjEzOTQwWhcNMjUxMTA5MjEzOTQwWjAYMRYwFAYD VQQDEw02OTA3Y2Y5Yy04MjhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA866HDKYgKxL+NTxyIuQFlkE81lMaGRYtttPuKsEgQCCUcTNmTMtNHy1qZU/h Blipw9Z0IN9oJ9HD5lxKAZvnzfEW4anzHiZ+EpqErB4/lKFZoYJe8lfz65jOcnk5 jMryEAk1sTxsqxcWwYi6e7B1809PCe5d6XDDQy97cmRMDJcQET1uiCiFnEZIYXdV XJ5FXu9E7wGEt4s2zkGJbJmzWmL8itqDK81zK5Fay9wM1LItCf7ZcNo441UEK+rQ 0H8D/5UGx7WzB+Br3b7NNSn941MyvUKRflXhns7xAqjZFQBtC+ozpW6DU8cgYc6q qaU1uWEINWX26cXWIOrDXLbQfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFyzgd5Y x/U+VJiUcpVi7oVKlCKeMB8GA1UdIwQYMBaAFD9zE2P+R0BGGlnIj6dnvYo27A32 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkQxRC84QURFMzNGQzQx MkUxMUVCOUE5NzRDMTZDNEY5QUUwMi9QM01UWV81SFFFWWFXY2lQcDJlOWlqYnNE ZlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AzTVRZXzVIUUVZYVdjaVBwMmU5aWpic0RmWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkQxRC84QURFMzNGQzQxMkUxMUVCOUE5NzRDMTZDNEY5QUUwMi9QM01UWV81SFFF WWFXY2lQcDJlOWlqYnNEZlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdKpgIlhNh4OJqflkY3fbMV5UMniPg+v5kJFLHKlTOYFFZo3bcBMFR Ksb/5s+X940NZDSA7gn2dzP9Yeyu/aV8AGa2Bmg73mhohUdvNO7HhKTo4ta3U7mt 2nraIiz3OgtcdO0Kwmg8h7gEcXUN1Tac0yCwlUnbVEojHq+P4U9PIWiiqhg5dXX5 1txHnLXIsWNGoNF13tFsPmBOBxUXTGM+AgBQlLXu/ExFO0DpZwBHVgSw1yPbJ3KI F+EnJwt8eTlFDhDa6YTXm7eHWack7ZjKSTxZNEu6EkNnMgHNp8pVGn+U6tpyr+Ar GQaSnBrVowVYpj788tjlM7XzLVG6Q84A -----END CERTIFICATE-----Generated at Mon Nov 3 18:16:28 2025 by rpki-client