$ rpki-client -vvf rpki.apnic.net/member_repository/A917A2E5/B0B28FA68C9711F0A009D572C4F9AE02/m3GXbfcKU0c1AkN1KyIJIeANL6E.mft File: m3GXbfcKU0c1AkN1KyIJIeANL6E.mft (raw, json) Hash identifier: p+MZnsUtJVLYNh/Mk5mF/z2h05+9tUXRnxPHDQ7B4Ao= Subject key identifier: D3:54:1B:4F:FA:C7:2E:14:05:7E:B0:80:96:D1:C1:C4:9C:BA:E4:2E Authority key identifier: 9B:71:97:6D:F7:0A:53:47:35:02:43:75:2B:22:09:21:E0:0D:2F:A1 Certificate issuer: /CN=A917A2E5/serialNumber=9B71976DF70A5347350243752B220921E00D2FA1 Certificate serial: 1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m3GXbfcKU0c1AkN1KyIJIeANL6E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A2E5/B0B28FA68C9711F0A009D572C4F9AE02/m3GXbfcKU0c1AkN1KyIJIeANL6E.mft Manifest number: 1D Signing time: Mon 03 Nov 2025 07:47:05 +0000 Manifest this update: Mon 03 Nov 2025 07:47:05 +0000 Manifest next update: Mon 10 Nov 2025 07:47:04 +0000 Files and hashes: 1: m3GXbfcKU0c1AkN1KyIJIeANL6E.crl (hash: LMkc+CLUyiNX3NjutIBgTU79PnuHakUeEpVeEyoxy/w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A2E5/B0B28FA68C9711F0A009D572C4F9AE02/m3GXbfcKU0c1AkN1KyIJIeANL6E.crl rsync://rpki.apnic.net/member_repository/A917A2E5/B0B28FA68C9711F0A009D572C4F9AE02/m3GXbfcKU0c1AkN1KyIJIeANL6E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m3GXbfcKU0c1AkN1KyIJIeANL6E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:47:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A2E5, serialNumber=9B71976DF70A5347350243752B220921E00D2FA1 Validity Not Before: Nov 3 07:47:05 2025 GMT Not After : Nov 10 07:47:04 2025 GMT Subject: CN=69085df9-e0f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:73:41:4c:57:11:05:ed:7d:eb:02:dc:a0:46: a4:46:4e:54:52:84:93:4e:13:d6:ba:8e:83:ee:a9: 79:12:4f:92:47:ae:33:16:4f:8d:25:25:99:74:14: 64:37:45:e1:72:10:28:19:0d:3c:26:6a:e8:28:75: e8:56:c0:b8:c9:44:20:c1:81:f8:8c:ca:b1:ac:cb: d3:13:01:74:e8:01:e9:30:79:01:3a:d1:4e:ff:9a: 5b:e1:ba:7b:4b:c8:c3:a3:4f:72:6a:eb:3d:6c:4c: 46:e4:7d:ff:25:85:22:f0:43:c6:a4:b9:6b:8e:18: 36:bd:72:bb:41:45:5d:2f:13:d9:82:70:c0:08:fc: 62:23:51:33:43:64:56:02:2d:f0:d5:dd:7b:8b:4b: c6:eb:59:7b:09:d3:8c:d6:53:cf:c8:28:8f:43:5c: d8:c1:14:84:1a:09:55:f3:64:54:4a:ff:5a:9b:e1: a7:f1:2f:92:ba:23:98:f3:11:54:f0:02:8c:f2:0b: 16:36:2f:54:60:5d:bf:17:71:de:c2:6e:b9:34:86: 31:33:75:72:ff:82:58:65:d0:21:60:6d:63:09:f7: e6:30:a7:aa:3b:54:ce:77:36:65:aa:e8:f2:66:d6: 76:a8:96:74:8a:cf:ef:67:e5:1e:e1:fa:06:c2:48: c7:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:54:1B:4F:FA:C7:2E:14:05:7E:B0:80:96:D1:C1:C4:9C:BA:E4:2E X509v3 Authority Key Identifier: keyid:9B:71:97:6D:F7:0A:53:47:35:02:43:75:2B:22:09:21:E0:0D:2F:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A2E5/B0B28FA68C9711F0A009D572C4F9AE02/m3GXbfcKU0c1AkN1KyIJIeANL6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m3GXbfcKU0c1AkN1KyIJIeANL6E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A2E5/B0B28FA68C9711F0A009D572C4F9AE02/m3GXbfcKU0c1AkN1KyIJIeANL6E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:f3:ae:88:b7:bc:13:d0:a3:60:2b:96:cd:7b:26:0c:4c:84: 2d:51:88:3e:14:71:b5:fc:94:15:21:de:fa:6a:64:0a:df:6e: fd:18:0c:03:1a:17:39:55:2c:e7:83:cb:c0:d0:10:34:01:5a: f9:1b:8c:42:30:8f:3c:34:17:7f:af:41:8e:10:72:17:b3:5f: 1b:1d:ac:e4:20:87:8e:a2:a0:ae:41:39:f5:91:c2:b5:0b:6d: 0f:f3:7f:7e:50:c9:d4:22:90:ab:4d:1c:33:a7:4c:88:e0:5e: 5e:fe:22:1c:71:5f:ac:83:87:12:e8:6e:39:c1:55:75:64:23: 23:48:bb:a3:3a:49:2a:f1:84:23:f3:cd:b6:8f:e5:63:8f:8d: fd:88:2a:ee:f7:89:3b:d8:22:42:11:a6:63:80:36:91:fd:b4: 39:3c:bd:1c:40:cb:37:f7:09:f8:fe:5d:9c:90:6d:69:29:4b: 09:78:28:a4:24:7a:4d:45:78:72:f1:7d:7b:2b:5a:7f:3c:ea: 5e:11:08:3f:cf:ca:14:07:85:47:24:b7:0c:55:7b:12:40:79: 33:e7:62:79:b9:8d:f0:11:8d:6f:78:04:fe:59:88:f6:f4:53: 79:97:e5:5e:c6:91:10:fb:a2:d9:6c:db:aa:91:6e:87:8e:99: c5:47:b3:02 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QTJFNTExMC8GA1UEBRMoOUI3MTk3NkRGNzBBNTM0NzM1MDI0Mzc1MkIyMjA5MjFF MDBEMkZBMTAeFw0yNTExMDMwNzQ3MDVaFw0yNTExMTAwNzQ3MDRaMBgxFjAUBgNV BAMTDTY5MDg1ZGY5LWUwZjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD2c0FMVxEF7X3rAtygRqRGTlRShJNOE9a6joPuqXkST5JHrjMWT40lJZl0FGQ3 ReFyECgZDTwmaugodehWwLjJRCDBgfiMyrGsy9MTAXToAekweQE60U7/mlvhuntL yMOjT3Jq6z1sTEbkff8lhSLwQ8akuWuOGDa9crtBRV0vE9mCcMAI/GIjUTNDZFYC LfDV3XuLS8brWXsJ04zWU8/IKI9DXNjBFIQaCVXzZFRK/1qb4afxL5K6I5jzEVTw AozyCxY2L1RgXb8Xcd7Cbrk0hjEzdXL/glhl0CFgbWMJ9+Ywp6o7VM53NmWq6PJm 1naolnSKz+9n5R7h+gbCSMdDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU01QbT/rH LhQFfrCAltHBxJy65C4wHwYDVR0jBBgwFoAUm3GXbfcKU0c1AkN1KyIJIeANL6Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdBMkU1L0IwQjI4RkE2OEM5 NzExRjBBMDA5RDU3MkM0RjlBRTAyL20zR1hiZmNLVTBjMUFrTjFLeUlKSWVBTkw2 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbTNHWGJmY0tVMGMxQWtOMUt5SUpJZUFOTDZFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdB MkU1L0IwQjI4RkE2OEM5NzExRjBBMDA5RDU3MkM0RjlBRTAyL20zR1hiZmNLVTBj MUFrTjFLeUlKSWVBTkw2RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH/zroi3vBPQo2Arls17JgxMhC1RiD4UcbX8lBUh3vpqZArfbv0YDAMa FzlVLOeDy8DQEDQBWvkbjEIwjzw0F3+vQY4QchezXxsdrOQgh46ioK5BOfWRwrUL bQ/zf35QydQikKtNHDOnTIjgXl7+IhxxX6yDhxLobjnBVXVkIyNIu6M6SSrxhCPz zbaP5WOPjf2IKu73iTvYIkIRpmOANpH9tDk8vRxAyzf3Cfj+XZyQbWkpSwl4KKQk ek1FeHLxfXsrWn886l4RCD/PyhQHhUcktwxVexJAeTPnYnm5jfARjW94BP5ZiPb0 U3mX5V7GkRD7otls26qRboeOmcVHswI= -----END CERTIFICATE-----Generated at Tue Nov 4 07:28:45 2025 by rpki-client