$ rpki-client -vvf rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.mft File: 3cXbOB_x7MpblaKFFHktzbpJGCs.mft (raw, json) Hash identifier: dII+LV0qpe3LVd2NITMK1rhWWg1IWLco+6RE7k/V0zY= Subject key identifier: 1A:BA:DB:E1:2E:A1:32:67:E9:80:6D:E5:30:60:6C:3D:01:B7:EE:68 Authority key identifier: DD:C5:DB:38:1F:F1:EC:CA:5B:95:A2:85:14:79:2D:CD:BA:49:18:2B Certificate issuer: /CN=A917D778/serialNumber=DDC5DB381FF1ECCA5B95A28514792DCDBA49182B Certificate serial: D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3cXbOB_x7MpblaKFFHktzbpJGCs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.mft Manifest number: C9 Signing time: Wed 05 Nov 2025 06:03:51 +0000 Manifest this update: Wed 05 Nov 2025 06:03:50 +0000 Manifest next update: Wed 12 Nov 2025 06:03:50 +0000 Files and hashes: 1: 3cXbOB_x7MpblaKFFHktzbpJGCs.crl (hash: GyCqfv+WqAb38OEtVammkWlBAJCQmoXa59WwLMhZ1OU=) 2: 0DEDF8C290E511EFBB48661DC4F9AE02.roa (hash: ymXlk9RJfi9V2KzOznS96G8RXYI7jJ6rpj+phG/GZks=) 3: 7DA8E78890E711EF8262A053C4F9AE02.roa (hash: SX03ccnLTHDWWqP2dXM+ZAcRiPmXaj3vkOlikMISxno=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.crl rsync://rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3cXbOB_x7MpblaKFFHktzbpJGCs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:03:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 208 (0xd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D778, serialNumber=DDC5DB381FF1ECCA5B95A28514792DCDBA49182B Validity Not Before: Nov 5 06:03:50 2025 GMT Not After : Nov 12 06:03:50 2025 GMT Subject: CN=690ae8c7-e7a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:08:47:d4:f8:b5:36:c8:76:a2:81:f2:2d:e0: 6a:07:83:90:77:09:08:be:4e:ca:88:17:3a:fb:e7: d6:c7:1e:37:9f:17:17:22:67:58:7f:02:ec:f9:10: 7b:94:55:6e:c9:8f:47:d5:ee:44:20:13:92:32:a8: 5c:13:64:d9:8e:e1:a3:b2:9b:66:ec:7c:08:b6:4b: ec:8a:e9:18:3e:0a:a5:ed:aa:72:6b:b2:1c:75:15: e1:08:e2:c1:5f:06:39:36:a3:45:a7:b3:77:28:7a: fc:1f:81:c3:0f:aa:40:40:f6:0c:e6:35:62:b5:77: 88:4f:ca:8d:10:55:d0:11:da:f5:da:c7:f2:20:4d: 10:c4:49:80:14:ff:04:29:88:da:c3:e9:c5:83:82: ea:62:59:c1:32:e2:65:50:19:52:76:28:85:4a:7f: f0:11:5e:a1:b3:2e:00:a4:ba:29:a7:97:f9:2c:cb: bc:46:a1:0a:fe:5e:6f:2d:c9:a6:f3:38:b3:2e:4e: cd:f5:87:7f:d2:f9:23:84:9f:00:e2:04:ad:3c:98: ab:d0:70:45:b6:28:36:52:2a:ce:17:4d:63:2b:76: 81:2f:a9:06:25:26:e8:25:9c:ce:59:b6:90:e3:d0: 78:d4:39:18:ba:c9:a8:33:a3:c8:22:6a:fb:b5:4f: b4:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:BA:DB:E1:2E:A1:32:67:E9:80:6D:E5:30:60:6C:3D:01:B7:EE:68 X509v3 Authority Key Identifier: keyid:DD:C5:DB:38:1F:F1:EC:CA:5B:95:A2:85:14:79:2D:CD:BA:49:18:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3cXbOB_x7MpblaKFFHktzbpJGCs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:86:87:61:60:19:94:44:0e:ea:d5:b9:a9:de:e8:7e:28:b7: ff:f0:5a:bf:d3:96:2d:90:1f:48:96:41:39:5b:0c:5e:9e:40: 5c:38:e1:84:52:74:0f:61:20:68:8b:d8:75:dd:c3:22:38:39: e3:29:eb:89:18:b4:fc:c1:be:ab:fb:f1:16:ef:26:a9:99:50: a9:d1:cc:31:db:32:91:da:32:ff:00:07:c6:80:10:ab:21:79: e7:93:10:33:0f:98:b1:70:97:88:64:67:ac:5d:86:01:7b:6e: d3:2a:65:7b:0c:f4:8f:eb:e4:2f:ff:d0:02:f9:2d:3d:d4:e0: f7:3c:24:40:21:8c:68:dc:03:e5:3e:69:c1:51:e1:36:5a:1b: 7e:5e:2d:53:1d:ac:f5:4f:cc:b7:88:8f:cd:34:ea:8d:f7:cd: 5f:ab:e0:50:0c:1a:06:6f:44:a7:44:47:a4:be:24:d8:29:32: b4:67:bb:df:a3:e7:2e:39:e5:a8:69:bc:89:2f:6e:ca:7e:55: 12:e3:54:f5:f0:c2:7e:00:c8:36:a8:66:ff:fb:72:0e:11:97: 27:a3:a8:b5:ce:9f:94:02:3a:20:6e:01:ed:a1:e5:57:6d:a1: a4:6d:db:d2:5c:cd:72:fe:71:47:c1:e5:1f:76:49:61:ce:1d: 05:1d:4d:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q3NzgxMTAvBgNVBAUTKEREQzVEQjM4MUZGMUVDQ0E1Qjk1QTI4NTE0NzkyRENE QkE0OTE4MkIwHhcNMjUxMTA1MDYwMzUwWhcNMjUxMTEyMDYwMzUwWjAYMRYwFAYD VQQDEw02OTBhZThjNy1lN2EyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxQhH1Pi1Nsh2ooHyLeBqB4OQdwkIvk7KiBc6++fWxx43nxcXImdYfwLs+RB7 lFVuyY9H1e5EIBOSMqhcE2TZjuGjsptm7HwItkvsiukYPgql7apya7IcdRXhCOLB XwY5NqNFp7N3KHr8H4HDD6pAQPYM5jVitXeIT8qNEFXQEdr12sfyIE0QxEmAFP8E KYjaw+nFg4LqYlnBMuJlUBlSdiiFSn/wEV6hsy4ApLopp5f5LMu8RqEK/l5vLcmm 8zizLk7N9Yd/0vkjhJ8A4gStPJir0HBFtig2UirOF01jK3aBL6kGJSboJZzOWbaQ 49B41DkYusmoM6PIImr7tU+0dQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBq62+Eu oTJn6YBt5TBgbD0Bt+5oMB8GA1UdIwQYMBaAFN3F2zgf8ezKW5WihRR5Lc26SRgr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDc3OC81QjhEODY2ODkw RTIxMUVGOTc2MTJBNDZDNEY5QUUwMi8zY1hiT0JfeDdNcGJsYUtGRkhrdHpicEpH Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNjWGJPQl94N01wYmxhS0ZGSGt0emJwSkdDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDc3OC81QjhEODY2ODkwRTIxMUVGOTc2MTJBNDZDNEY5QUUwMi8zY1hiT0JfeDdN cGJsYUtGRkhrdHpicEpHQ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmhodhYBmURA7q1bmp3uh+KLf/8Fq/05YtkB9IlkE5WwxenkBcOOGE UnQPYSBoi9h13cMiODnjKeuJGLT8wb6r+/EW7yapmVCp0cwx2zKR2jL/AAfGgBCr IXnnkxAzD5ixcJeIZGesXYYBe27TKmV7DPSP6+Qv/9AC+S091OD3PCRAIYxo3APl PmnBUeE2Wht+Xi1THaz1T8y3iI/NNOqN981fq+BQDBoGb0SnREekviTYKTK0Z7vf o+cuOeWoabyJL27KflUS41T18MJ+AMg2qGb/+3IOEZcno6i1zp+UAjogbgHtoeVX baGkbdvSXM1y/nFHweUfdklhzh0FHU1Q -----END CERTIFICATE-----Generated at Wed Nov 5 18:51:09 2025 by rpki-client