$ rpki-client -vvf rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.mft File: 2c3AiUgqZ0m1IAUcDzhfYt6MtJM.mft (raw, json) Hash identifier: foFBbqz6/3lJzPw6F52qRvX2fqGSzvZfN2Hs6t25ce4= Subject key identifier: 76:D8:8E:4F:05:59:BE:A3:A5:8E:A3:A6:F3:00:BB:1D:3C:F7:D4:3E Authority key identifier: D9:CD:C0:89:48:2A:67:49:B5:20:05:1C:0F:38:5F:62:DE:8C:B4:93 Certificate issuer: /CN=A9164F6C/serialNumber=D9CDC089482A6749B520051C0F385F62DE8CB493 Certificate serial: 0122 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.mft Manifest number: 011C Signing time: Mon 03 Nov 2025 04:48:34 +0000 Manifest this update: Mon 03 Nov 2025 04:48:34 +0000 Manifest next update: Mon 10 Nov 2025 04:48:34 +0000 Files and hashes: 1: 2c3AiUgqZ0m1IAUcDzhfYt6MtJM.crl (hash: LsN6RiadluomCRcuWG64FeU1yLCxoXDnSk5Pip1set4=) 2: EC1244C40C0A11EF86081F2FC4F9AE02.roa (hash: NJlTUu7/QW4EWdki02Krp+vIjKwpqnHJl+6zdGP8Tfo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.crl rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:48:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 290 (0x122) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164F6C, serialNumber=D9CDC089482A6749B520051C0F385F62DE8CB493 Validity Not Before: Nov 3 04:48:34 2025 GMT Not After : Nov 10 04:48:34 2025 GMT Subject: CN=69083422-23eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d7:ad:b4:38:37:48:c1:42:75:df:03:fe:66: a9:c2:6c:c2:ef:93:ec:7d:02:22:06:3a:89:c6:5d: 80:a6:74:fe:f1:c4:29:cb:eb:24:cc:01:8b:43:61: c8:6c:cb:19:d5:85:5d:0b:c8:29:f0:97:e9:fe:4b: 5b:e5:75:68:a6:6e:b3:df:be:76:2c:fd:fb:d1:8d: 1b:c3:fe:77:f5:13:3c:10:58:2c:f8:b5:8d:fa:64: cc:bc:f0:26:dc:8f:d1:11:f7:2d:56:37:ba:22:0f: af:46:5c:c2:ba:71:5e:78:7c:63:a6:08:68:f4:a9: 23:c9:72:4f:84:c0:d8:10:34:67:a8:d7:d4:90:5f: 85:7b:13:da:df:6a:0b:83:32:53:60:f4:e2:2a:21: 3e:f2:ff:5a:07:9c:4e:3c:d9:70:71:7d:f8:86:06: f0:fb:aa:d8:5d:d5:f4:0f:6e:fd:1d:ed:0b:17:7f: b1:32:18:9b:5c:75:f1:a8:12:90:7d:d6:70:73:22: 25:3a:42:b2:c5:47:87:dc:2a:b0:33:a3:b7:fb:c5: f6:11:7e:95:4d:77:d4:0b:fc:fb:cc:6c:c9:b4:b7: 6a:bc:57:17:c3:53:a3:35:ec:42:95:2c:2b:95:52: 20:50:7a:4b:05:8a:dd:b7:ee:07:89:45:b0:e2:3a: 6f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:D8:8E:4F:05:59:BE:A3:A5:8E:A3:A6:F3:00:BB:1D:3C:F7:D4:3E X509v3 Authority Key Identifier: keyid:D9:CD:C0:89:48:2A:67:49:B5:20:05:1C:0F:38:5F:62:DE:8C:B4:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:71:8b:f6:92:c7:bb:85:04:a1:8c:ea:54:ba:9b:3d:45:45: 4e:e0:3d:57:ec:ed:b4:59:e0:42:59:e2:5e:06:db:ef:39:9b: fc:f9:4a:0e:ea:27:82:ce:65:39:c7:3c:d5:a4:58:a3:18:f8: 6b:42:75:33:f4:87:5a:fc:d8:d6:b7:0b:14:ce:37:c3:56:4c: 0f:51:9f:32:9e:05:b1:9a:1d:d4:85:8c:8e:55:25:b4:1c:c7: 7e:be:7c:96:d7:4c:78:16:2e:b4:33:7e:ce:52:57:f7:f2:fa: 39:b1:78:8b:d2:3a:46:f1:80:96:9e:a8:76:48:3d:2a:27:63: 83:93:b7:18:f6:47:26:07:6f:55:da:03:26:a6:28:91:e8:ac: 0c:ba:c7:4b:67:78:0d:05:5f:6c:2c:c9:fb:1b:75:f5:5c:9c: a4:b5:95:ac:2c:7f:08:73:76:36:73:f1:7a:7d:bf:d4:3b:eb: 73:12:4a:d6:fb:72:45:06:a6:83:f4:08:84:be:88:4f:29:6b: d2:c5:b5:1d:b4:e5:33:34:58:02:8a:6f:0e:06:19:65:81:cf: 92:c1:07:66:52:a4:a8:d6:18:a0:a5:8d:2b:b8:d9:66:6b:ad: c0:ec:0d:12:fc:2f:8f:82:6c:c1:9d:2a:e4:7f:19:da:c9:5e: fa:e0:b8:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjRGNkMxMTAvBgNVBAUTKEQ5Q0RDMDg5NDgyQTY3NDlCNTIwMDUxQzBGMzg1RjYy REU4Q0I0OTMwHhcNMjUxMTAzMDQ0ODM0WhcNMjUxMTEwMDQ0ODM0WjAYMRYwFAYD VQQDEw02OTA4MzQyMi0yM2ViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAztettDg3SMFCdd8D/mapwmzC75PsfQIiBjqJxl2ApnT+8cQpy+skzAGLQ2HI bMsZ1YVdC8gp8Jfp/ktb5XVopm6z3752LP370Y0bw/539RM8EFgs+LWN+mTMvPAm 3I/REfctVje6Ig+vRlzCunFeeHxjpgho9KkjyXJPhMDYEDRnqNfUkF+FexPa32oL gzJTYPTiKiE+8v9aB5xOPNlwcX34hgbw+6rYXdX0D279He0LF3+xMhibXHXxqBKQ fdZwcyIlOkKyxUeH3CqwM6O3+8X2EX6VTXfUC/z7zGzJtLdqvFcXw1OjNexClSwr lVIgUHpLBYrdt+4HiUWw4jpvFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHbYjk8F Wb6jpY6jpvMAux0899Q+MB8GA1UdIwQYMBaAFNnNwIlIKmdJtSAFHA84X2LejLST MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NEY2Qy9CODgyMzcyODBD MDkxMUVGOUJEOTEzMkNDNEY5QUUwMi8yYzNBaVVncVowbTFJQVVjRHpoZll0Nk10 Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJjM0FpVWdxWjBtMUlBVWNEemhmWXQ2TXRKTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NEY2Qy9CODgyMzcyODBDMDkxMUVGOUJEOTEzMkNDNEY5QUUwMi8yYzNBaVVncVow bTFJQVVjRHpoZll0Nk10Sk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpcYv2kse7hQShjOpUups9RUVO4D1X7O20WeBCWeJeBtvvOZv8+UoO 6ieCzmU5xzzVpFijGPhrQnUz9Ida/NjWtwsUzjfDVkwPUZ8yngWxmh3UhYyOVSW0 HMd+vnyW10x4Fi60M37OUlf38vo5sXiL0jpG8YCWnqh2SD0qJ2ODk7cY9kcmB29V 2gMmpiiR6KwMusdLZ3gNBV9sLMn7G3X1XJyktZWsLH8Ic3Y2c/F6fb/UO+tzEkrW +3JFBqaD9AiEvohPKWvSxbUdtOUzNFgCim8OBhllgc+SwQdmUqSo1higpY0ruNlm a63A7A0S/C+PgmzBnSrkfxnayV764LiP -----END CERTIFICATE-----Generated at Mon Nov 3 18:19:57 2025 by rpki-client