$ rpki-client -vvf rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.mft File: 3LMOz3ihM3XuUlJ4-c_TD3xYqos.mft (raw, json) Hash identifier: Z9f6wuZjiUiOo2aK5mBtwBBncDJ+oZzj7mDIXBT2AlA= Subject key identifier: CD:F7:BB:00:9B:A3:41:DB:64:03:0D:64:85:D2:0C:95:36:7E:2E:F4 Authority key identifier: DC:B3:0E:CF:78:A1:33:75:EE:52:52:78:F9:CF:D3:0F:7C:58:AA:8B Certificate issuer: /CN=A9182762/serialNumber=DCB30ECF78A13375EE525278F9CFD30F7C58AA8B Certificate serial: 2FC6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3LMOz3ihM3XuUlJ4-c_TD3xYqos.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.mft Manifest number: 2F99 Signing time: Tue 04 Nov 2025 15:29:39 +0000 Manifest this update: Tue 04 Nov 2025 15:29:39 +0000 Manifest next update: Tue 11 Nov 2025 15:29:39 +0000 Files and hashes: 1: 3LMOz3ihM3XuUlJ4-c_TD3xYqos.crl (hash: TzgqKmebJ4mdYM4/IBaRGem91YI0hgGRb/AjjcU6hbU=) 2: 4ECD37E0B13D11E59299870AC4F9AE02.roa (hash: zwQt0U0MX29MPa93PKs9TYXFxS+49eXVEwZ6lR+uSHo=) 3: 502355A2B13D11E59299870AC4F9AE02.roa (hash: odNG2CTuocV+iFzm6p+rsTOH7z1wG0je4WOLqIbugr8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.crl rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3LMOz3ihM3XuUlJ4-c_TD3xYqos.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:29:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12230 (0x2fc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182762, serialNumber=DCB30ECF78A13375EE525278F9CFD30F7C58AA8B Validity Not Before: Nov 4 15:29:39 2025 GMT Not After : Nov 11 15:29:39 2025 GMT Subject: CN=690a1be3-188d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:37:47:be:6c:5b:95:39:30:9c:27:ca:5b:84: 51:a0:28:4f:fe:80:0c:da:ab:fd:58:b8:b6:87:59: ea:20:0b:3f:42:0e:9f:78:98:dc:6e:9f:2a:66:df: b9:0a:21:cb:4c:b9:c1:5d:32:7d:e2:75:43:fb:46: 5e:b4:20:f0:2c:23:89:ed:0f:74:42:ad:7b:c3:3c: c7:ea:f7:92:6e:0f:b8:d3:73:e8:cc:b7:be:15:69: 43:a2:01:44:62:08:06:80:aa:d0:e5:c8:a4:24:ab: 81:88:a1:1d:80:6a:5f:87:b9:3d:5b:3b:3f:02:ac: 49:32:03:a4:a6:e3:a5:ef:ef:68:0d:ca:4d:81:62: 24:75:09:b8:97:ca:0c:91:7c:06:7f:47:51:6e:a5: 3a:33:7f:95:87:2e:e5:9e:e5:70:2a:56:9a:27:68: be:a4:6e:09:f5:40:8d:e3:25:34:9b:3e:a3:84:3a: 5a:2a:0e:87:78:ea:1f:a3:6f:a8:9a:94:ee:31:1d: 94:79:0f:60:b8:32:65:7d:06:be:55:f6:11:d1:4f: 89:f1:d9:e0:d7:2c:6e:b1:db:58:83:34:4e:6a:e2: 44:a4:1a:d0:f3:1c:6d:ab:11:16:fd:3b:55:ba:1d: 5f:3f:f4:48:25:7c:eb:dd:6f:e8:be:7c:d5:5d:e7: 66:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:F7:BB:00:9B:A3:41:DB:64:03:0D:64:85:D2:0C:95:36:7E:2E:F4 X509v3 Authority Key Identifier: keyid:DC:B3:0E:CF:78:A1:33:75:EE:52:52:78:F9:CF:D3:0F:7C:58:AA:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3LMOz3ihM3XuUlJ4-c_TD3xYqos.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:37:02:62:b9:6d:3f:20:25:34:42:78:1d:f0:8e:9a:58:bc: 8b:b8:c9:bf:7a:aa:a9:87:a7:c5:be:81:16:02:a5:5d:a9:a1: 2e:6a:4a:ec:c7:2d:4b:31:f1:6f:45:de:a7:82:b2:93:db:fb: 17:f1:34:fc:d4:ff:90:81:1a:16:1c:b3:f2:d6:21:80:a0:40: af:28:e8:4d:8e:a7:7c:ce:4e:75:8d:37:96:e8:14:c7:7e:f5: 69:36:95:3c:93:ce:b7:0f:c1:79:9d:05:4c:52:4c:ea:e1:38: e1:03:0e:22:2f:69:73:53:7e:49:0b:94:4b:79:a6:88:94:0e: ae:16:ec:4f:3b:6e:90:97:45:17:f9:7f:90:65:1d:e0:0d:9c: 81:11:20:ce:84:15:96:50:4f:f3:51:c5:bb:51:8a:c8:0a:49: 7b:f3:29:43:88:32:6e:bb:1f:c7:58:19:da:c2:ca:d7:a8:1b: 01:d8:c7:c9:a9:8a:e8:a5:a8:a5:f0:9e:bf:60:ee:b0:59:4b: e6:1b:1d:f8:9b:e1:2c:c2:af:23:61:2e:9a:56:80:16:5f:da: f6:9f:32:9f:96:5a:06:ff:82:ea:5b:ff:40:e1:e9:71:1d:d4: 4f:2c:36:c7:7f:ed:36:2b:b1:50:81:0e:5e:95:fc:72:e2:84: 26:2b:ce:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICL8YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODI3NjIxMTAvBgNVBAUTKERDQjMwRUNGNzhBMTMzNzVFRTUyNTI3OEY5Q0ZEMzBG N0M1OEFBOEIwHhcNMjUxMTA0MTUyOTM5WhcNMjUxMTExMTUyOTM5WjAYMRYwFAYD VQQDEw02OTBhMWJlMy0xODhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqzdHvmxblTkwnCfKW4RRoChP/oAM2qv9WLi2h1nqIAs/Qg6feJjcbp8qZt+5 CiHLTLnBXTJ94nVD+0ZetCDwLCOJ7Q90Qq17wzzH6veSbg+403PozLe+FWlDogFE YggGgKrQ5cikJKuBiKEdgGpfh7k9Wzs/AqxJMgOkpuOl7+9oDcpNgWIkdQm4l8oM kXwGf0dRbqU6M3+Vhy7lnuVwKlaaJ2i+pG4J9UCN4yU0mz6jhDpaKg6HeOofo2+o mpTuMR2UeQ9guDJlfQa+VfYR0U+J8dng1yxusdtYgzROauJEpBrQ8xxtqxEW/TtV uh1fP/RIJXzr3W/ovnzVXedmlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM33uwCb o0HbZAMNZIXSDJU2fi70MB8GA1UdIwQYMBaAFNyzDs94oTN17lJSePnP0w98WKqL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Mjc2Mi84QUFFMEY4QzI4 MzcxMUUzQjUyQkQzM0I1OTExRUEzMi8zTE1PejNpaE0zWHVVbEo0LWNfVEQzeFlx b3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNMTU96M2loTTNYdVVsSjQtY19URDN4WXFvcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Mjc2Mi84QUFFMEY4QzI4MzcxMUUzQjUyQkQzM0I1OTExRUEzMi8zTE1PejNpaE0z WHVVbEo0LWNfVEQzeFlxb3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7NwJiuW0/ICU0Qngd8I6aWLyLuMm/eqqph6fFvoEWAqVdqaEuakrs xy1LMfFvRd6ngrKT2/sX8TT81P+QgRoWHLPy1iGAoECvKOhNjqd8zk51jTeW6BTH fvVpNpU8k863D8F5nQVMUkzq4TjhAw4iL2lzU35JC5RLeaaIlA6uFuxPO26Ql0UX +X+QZR3gDZyBESDOhBWWUE/zUcW7UYrICkl78ylDiDJuux/HWBnawsrXqBsB2MfJ qYropail8J6/YO6wWUvmGx34m+Eswq8jYS6aVoAWX9r2nzKflloG/4LqW/9A4elx HdRPLDbHf+02K7FQgQ5elfxy4oQmK87W -----END CERTIFICATE-----Generated at Wed Nov 5 08:10:30 2025 by rpki-client