$ rpki-client -vvf rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.mft File: A3uPBfSQLZ2otCTDk0CGXz2smyY.mft (raw, json) Hash identifier: b0Qru2xweCz++zfjpqgaCNIrpT1IM+CiWu6Me7ybMBI= Subject key identifier: 6C:6E:09:E7:6C:EF:CC:B0:2A:B4:ED:21:8F:3D:B3:EE:A2:C3:3B:BA Authority key identifier: 03:7B:8F:05:F4:90:2D:9D:A8:B4:24:C3:93:40:86:5F:3D:AC:9B:26 Certificate issuer: /CN=A9167D07/serialNumber=037B8F05F4902D9DA8B424C39340865F3DAC9B26 Certificate serial: 167D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3uPBfSQLZ2otCTDk0CGXz2smyY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.mft Manifest number: 1667 Signing time: Sun 02 Nov 2025 16:44:01 +0000 Manifest this update: Sun 02 Nov 2025 16:44:01 +0000 Manifest next update: Sun 09 Nov 2025 16:44:01 +0000 Files and hashes: 1: A3uPBfSQLZ2otCTDk0CGXz2smyY.crl (hash: L3fUpzB5EXby14MqUoZPdoUIpwu+k7yTAzlKH3JIABI=) 2: EFE8CDF6C8D111EE95249F25C4F9AE02.roa (hash: 8hTBYho7Wl/PAQj3XMQdwTxzLXCHLSq50BmnZke9xMc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.crl rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3uPBfSQLZ2otCTDk0CGXz2smyY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 16:44:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5757 (0x167d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167D07, serialNumber=037B8F05F4902D9DA8B424C39340865F3DAC9B26 Validity Not Before: Nov 2 16:44:01 2025 GMT Not After : Nov 9 16:44:01 2025 GMT Subject: CN=69078a51-3d70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e4:7d:e1:7c:54:bb:bf:e5:70:5c:60:21:f5: 3b:e3:2f:3b:26:00:8c:eb:87:92:ba:e1:8a:41:c2: f4:87:9a:d9:f1:4a:a3:39:67:f8:87:79:9d:6c:61: 71:ac:3a:a9:46:87:ea:ba:0c:d7:bf:aa:85:99:8c: 9e:1b:a7:33:f7:5d:1f:d0:51:b5:80:4e:e1:7f:b3: f3:49:d2:64:52:5a:10:54:e7:cd:98:77:98:a3:22: 67:ef:11:11:17:14:b1:c2:b1:f0:91:f1:4c:3d:08: 09:a6:62:e9:b7:3b:1a:61:a1:4b:59:09:dc:03:63: 0c:6b:f3:1f:17:2d:e4:80:79:c2:c2:15:d9:3d:24: 6d:ff:ab:59:1a:ef:39:86:72:11:f1:6c:7d:aa:03: 47:ba:1a:3e:ab:37:e0:e9:06:38:8a:45:60:47:ed: 65:63:51:f9:92:30:83:e7:93:ec:06:e8:8c:01:9e: 15:dd:c6:cf:21:19:85:b8:a1:f4:db:f3:69:c3:8b: dc:8a:b9:50:90:cd:ea:85:fd:51:53:52:54:25:f7: 96:f9:09:91:2b:cc:e2:3c:90:a6:d5:3c:39:c7:88: a2:bc:a2:b3:57:45:43:cc:09:99:76:ad:ec:4b:2c: 20:77:8e:c3:95:be:16:7e:a4:33:d1:70:55:a2:6f: 8a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:6E:09:E7:6C:EF:CC:B0:2A:B4:ED:21:8F:3D:B3:EE:A2:C3:3B:BA X509v3 Authority Key Identifier: keyid:03:7B:8F:05:F4:90:2D:9D:A8:B4:24:C3:93:40:86:5F:3D:AC:9B:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3uPBfSQLZ2otCTDk0CGXz2smyY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:78:07:6c:3c:ce:a0:17:db:b2:b0:6e:04:30:7f:c0:4c:1a: 7f:70:10:ac:27:e5:33:d2:f7:50:d3:99:b3:7c:c5:20:52:3c: 23:43:96:2a:bc:d8:f6:79:0d:da:1b:ac:76:44:d5:09:ec:8a: 99:cc:f6:c9:35:58:e2:d2:bd:cb:b6:0f:fb:ef:cd:89:f1:c1: 28:45:33:9c:53:d0:be:40:85:0e:b7:ea:35:1b:9b:ce:f7:b0: 87:88:64:b6:25:14:9a:ef:17:2c:4a:fb:7c:82:b9:aa:01:16: 0d:82:e3:d0:6b:17:31:87:a3:7b:ba:5a:87:93:a8:a6:5c:81: fc:bf:50:c0:e2:67:f6:d8:1a:d9:f5:be:29:4e:08:44:60:d1: 83:ed:cc:8d:3b:3d:e5:e8:f0:2d:06:86:5a:fd:4e:f5:b6:b8: 23:d8:6b:c6:16:81:db:98:0f:a4:c8:6e:fd:dc:35:23:45:bb: 7c:cd:9e:2b:e8:b4:70:4a:9a:b3:c6:ef:ee:55:91:29:b4:82: 66:ed:69:70:4f:2a:45:e2:65:58:fb:f0:cc:10:2d:73:93:5a: e9:e0:5e:5e:c2:41:c4:9b:24:f7:f5:9c:a1:07:c1:d9:ac:df: 7b:f7:08:f2:50:2d:d9:47:fa:25:cf:69:bc:bf:eb:bf:54:a5: d3:48:72:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFn0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdEMDcxMTAvBgNVBAUTKDAzN0I4RjA1RjQ5MDJEOURBOEI0MjRDMzkzNDA4NjVG M0RBQzlCMjYwHhcNMjUxMTAyMTY0NDAxWhcNMjUxMTA5MTY0NDAxWjAYMRYwFAYD VQQDEw02OTA3OGE1MS0zZDcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvOR94XxUu7/lcFxgIfU74y87JgCM64eSuuGKQcL0h5rZ8UqjOWf4h3mdbGFx rDqpRofqugzXv6qFmYyeG6cz910f0FG1gE7hf7PzSdJkUloQVOfNmHeYoyJn7xER FxSxwrHwkfFMPQgJpmLptzsaYaFLWQncA2MMa/MfFy3kgHnCwhXZPSRt/6tZGu85 hnIR8Wx9qgNHuho+qzfg6QY4ikVgR+1lY1H5kjCD55PsBuiMAZ4V3cbPIRmFuKH0 2/Npw4vcirlQkM3qhf1RU1JUJfeW+QmRK8ziPJCm1Tw5x4iivKKzV0VDzAmZdq3s Sywgd47Dlb4WfqQz0XBVom+KOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGxuCeds 78ywKrTtIY89s+6iwzu6MB8GA1UdIwQYMBaAFAN7jwX0kC2dqLQkw5NAhl89rJsm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0QwNy9ENzRBRTI3NDFC QTkxMUU4QThGNTc4NjVDNEY5QUUwMi9BM3VQQmZTUUxaMm90Q1REazBDR1h6MnNt eVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0EzdVBCZlNRTFoyb3RDVERrMENHWHoyc215WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0QwNy9ENzRBRTI3NDFCQTkxMUU4QThGNTc4NjVDNEY5QUUwMi9BM3VQQmZTUUxa Mm90Q1REazBDR1h6MnNteVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgeAdsPM6gF9uysG4EMH/ATBp/cBCsJ+Uz0vdQ05mzfMUgUjwjQ5Yq vNj2eQ3aG6x2RNUJ7IqZzPbJNVji0r3Ltg/7782J8cEoRTOcU9C+QIUOt+o1G5vO 97CHiGS2JRSa7xcsSvt8grmqARYNguPQaxcxh6N7ulqHk6imXIH8v1DA4mf22BrZ 9b4pTghEYNGD7cyNOz3l6PAtBoZa/U71trgj2GvGFoHbmA+kyG793DUjRbt8zZ4r 6LRwSpqzxu/uVZEptIJm7WlwTypF4mVY+/DMEC1zk1rp4F5ewkHEmyT39ZyhB8HZ rN979wjyUC3ZR/olz2m8v+u/VKXTSHKO -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:20 2025 by rpki-client