$ rpki-client -vvf rpki.apnic.net/member_repository/A916A0AA/6A4FFC7A0F1011EAA969FE43C4F9AE02/u3QQVrccdV0D-5zyFKQSTKTzdgw.mft File: u3QQVrccdV0D-5zyFKQSTKTzdgw.mft (raw, json) Hash identifier: mm1ywAqszgJMssx/rBX48IF+PqUCJC6it03k4jRDxWY= Subject key identifier: 58:62:DC:C6:60:FD:4A:96:FB:BB:E0:62:FF:50:04:0A:85:89:EF:FA Authority key identifier: BB:74:10:56:B7:1C:75:5D:03:FB:9C:F2:14:A4:12:4C:A4:F3:76:0C Certificate issuer: /CN=A916A0AA/serialNumber=BB741056B71C755D03FB9CF214A4124CA4F3760C Certificate serial: 0C66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3QQVrccdV0D-5zyFKQSTKTzdgw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A0AA/6A4FFC7A0F1011EAA969FE43C4F9AE02/u3QQVrccdV0D-5zyFKQSTKTzdgw.mft Manifest number: 0C5D Signing time: Tue 04 Nov 2025 18:39:34 +0000 Manifest this update: Tue 04 Nov 2025 18:39:34 +0000 Manifest next update: Tue 11 Nov 2025 18:39:34 +0000 Files and hashes: 1: u3QQVrccdV0D-5zyFKQSTKTzdgw.crl (hash: +di9FE13+kZh0/kOpIpaiD0F1L9a8PZ/h9Qdkh7Ii4M=) 2: 5AD6AAFE0F1111EA932F3E45C4F9AE02.roa (hash: fVpTiz95zT96q52Sv8C+QJmIZKHHi2b0N2xlEcRtgMo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A0AA/6A4FFC7A0F1011EAA969FE43C4F9AE02/u3QQVrccdV0D-5zyFKQSTKTzdgw.crl rsync://rpki.apnic.net/member_repository/A916A0AA/6A4FFC7A0F1011EAA969FE43C4F9AE02/u3QQVrccdV0D-5zyFKQSTKTzdgw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3QQVrccdV0D-5zyFKQSTKTzdgw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:39:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3174 (0xc66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A0AA, serialNumber=BB741056B71C755D03FB9CF214A4124CA4F3760C Validity Not Before: Nov 4 18:39:34 2025 GMT Not After : Nov 11 18:39:34 2025 GMT Subject: CN=690a4866-b30b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:37:39:12:36:b9:ac:9c:3e:93:0c:b0:e0:90: d7:83:b4:b5:0d:05:e1:12:a2:dc:b3:0c:ce:bc:f7: 8c:b7:43:f2:87:e9:5a:4b:da:d1:ce:b3:72:43:3f: 5d:1a:6e:62:97:ad:f6:23:56:83:8c:6e:ad:4f:53: ad:cd:d1:e0:6c:77:8a:9c:46:47:0e:ec:56:2e:ba: 08:ee:99:9b:0c:c3:8a:4f:89:c7:9d:99:04:17:c4: fb:a2:1b:98:26:87:0b:51:3a:4a:46:dd:b0:15:7a: cc:ce:70:7b:25:9a:e6:1b:f3:01:6c:a9:3a:3a:a3: bc:27:1a:9c:63:5b:9b:39:0e:10:63:6d:af:9d:3c: ef:32:6c:13:86:f3:98:24:98:83:ea:95:5a:76:41: b3:c7:4b:cc:aa:43:e4:ea:15:6a:05:0b:18:63:c1: 00:c6:aa:5d:d2:2f:47:42:27:87:72:21:f5:be:8c: 6a:b1:78:d1:83:6d:d5:62:63:71:1d:4f:26:6d:5c: 06:03:41:4a:7c:04:ab:c5:0d:76:cb:ef:b2:d8:3c: 9c:37:a6:2c:71:c0:17:d6:05:4d:6d:50:c8:10:bf: 0b:d9:ae:d1:a7:e6:d2:c6:92:87:db:54:7e:8e:a4: 78:27:39:cc:cb:4e:5e:8a:94:a1:84:08:d8:57:4e: d8:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:62:DC:C6:60:FD:4A:96:FB:BB:E0:62:FF:50:04:0A:85:89:EF:FA X509v3 Authority Key Identifier: keyid:BB:74:10:56:B7:1C:75:5D:03:FB:9C:F2:14:A4:12:4C:A4:F3:76:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A0AA/6A4FFC7A0F1011EAA969FE43C4F9AE02/u3QQVrccdV0D-5zyFKQSTKTzdgw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3QQVrccdV0D-5zyFKQSTKTzdgw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A0AA/6A4FFC7A0F1011EAA969FE43C4F9AE02/u3QQVrccdV0D-5zyFKQSTKTzdgw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:82:72:30:70:f7:84:12:c5:30:df:0e:51:25:9f:b4:76:6c: 06:3e:53:90:95:16:d6:81:1a:bd:ca:02:f9:5d:93:42:f0:80: e1:2a:82:e2:76:5c:b3:8d:06:dd:54:2c:f9:d3:fb:5e:5d:85: 79:9d:fd:34:20:73:2b:ba:b5:35:b7:07:e5:e0:e8:0f:7f:b6: db:eb:f7:e0:94:a4:d8:b3:9f:00:2e:7a:e5:c0:cd:80:3a:98: eb:5b:97:5d:a3:61:80:d9:9b:67:45:ff:8a:51:ce:b7:d1:ba: d6:eb:f6:ab:f5:5f:8c:f3:40:b3:67:7e:ac:b8:8a:7e:53:92: 8f:aa:31:70:cb:fc:74:90:b3:b7:ed:0d:f4:21:80:32:c7:a5: 36:02:75:e8:2b:ef:6c:b6:34:96:04:de:53:a3:92:d4:6a:52: 67:07:63:3c:56:e1:56:84:8f:e2:2f:7b:4a:d1:05:ac:57:ef: 36:1d:90:4f:87:a6:8f:0d:ff:0d:e8:59:79:6b:6c:ca:d4:f9: 8b:a1:ae:7e:2b:27:67:39:08:90:09:c8:b3:48:8d:a3:1c:fe: e1:6e:02:cb:c8:31:e6:0c:71:93:df:9d:05:1b:cc:8f:8f:30: 04:6e:34:0e:99:aa:ea:4f:2e:97:27:81:0d:bf:0d:6a:6d:9c: 85:3f:90:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEwQUExMTAvBgNVBAUTKEJCNzQxMDU2QjcxQzc1NUQwM0ZCOUNGMjE0QTQxMjRD QTRGMzc2MEMwHhcNMjUxMTA0MTgzOTM0WhcNMjUxMTExMTgzOTM0WjAYMRYwFAYD VQQDEw02OTBhNDg2Ni1iMzBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApDc5Eja5rJw+kwyw4JDXg7S1DQXhEqLcswzOvPeMt0Pyh+laS9rRzrNyQz9d Gm5il632I1aDjG6tT1OtzdHgbHeKnEZHDuxWLroI7pmbDMOKT4nHnZkEF8T7ohuY JocLUTpKRt2wFXrMznB7JZrmG/MBbKk6OqO8JxqcY1ubOQ4QY22vnTzvMmwThvOY JJiD6pVadkGzx0vMqkPk6hVqBQsYY8EAxqpd0i9HQieHciH1voxqsXjRg23VYmNx HU8mbVwGA0FKfASrxQ12y++y2DycN6YsccAX1gVNbVDIEL8L2a7Rp+bSxpKH21R+ jqR4JznMy05eipShhAjYV07YZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFhi3MZg /UqW+7vgYv9QBAqFie/6MB8GA1UdIwQYMBaAFLt0EFa3HHVdA/uc8hSkEkyk83YM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTBBQS82QTRGRkM3QTBG MTAxMUVBQTk2OUZFNDNDNEY5QUUwMi91M1FRVnJjY2RWMEQtNXp5RktRU1RLVHpk Z3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UzUVFWcmNjZFYwRC01enlGS1FTVEtUemRndy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTBBQS82QTRGRkM3QTBGMTAxMUVBQTk2OUZFNDNDNEY5QUUwMi91M1FRVnJjY2RW MEQtNXp5RktRU1RLVHpkZ3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0gnIwcPeEEsUw3w5RJZ+0dmwGPlOQlRbWgRq9ygL5XZNC8IDhKoLi dlyzjQbdVCz50/teXYV5nf00IHMrurU1twfl4OgPf7bb6/fglKTYs58ALnrlwM2A OpjrW5ddo2GA2ZtnRf+KUc630brW6/ar9V+M80CzZ36suIp+U5KPqjFwy/x0kLO3 7Q30IYAyx6U2AnXoK+9stjSWBN5To5LUalJnB2M8VuFWhI/iL3tK0QWsV+82HZBP h6aPDf8N6Fl5a2zK1PmLoa5+KydnOQiQCcizSI2jHP7hbgLLyDHmDHGT350FG8yP jzAEbjQOmarqTy6XJ4ENvw1qbZyFP5Di -----END CERTIFICATE-----Generated at Wed Nov 5 08:10:32 2025 by rpki-client