$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF94/5B24A5C8A6C111E98C379E0FC4F9AE02/p3fkgYyg3MY4LlYlcG-YyB6TByA.mft File: p3fkgYyg3MY4LlYlcG-YyB6TByA.mft (raw, json) Hash identifier: fgBH00Wk8+6sLsDUk+9zfO253BCL2giDPLGwv5yp0gs= Subject key identifier: 25:A5:F9:49:01:34:CF:2B:01:1B:7B:A8:FA:A6:24:FD:3E:65:13:14 Authority key identifier: A7:77:E4:81:8C:A0:DC:C6:38:2E:56:25:70:6F:98:C8:1E:93:07:20 Certificate issuer: /CN=A918EF94/serialNumber=A777E4818CA0DCC6382E5625706F98C81E930720 Certificate serial: 0E7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3fkgYyg3MY4LlYlcG-YyB6TByA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EF94/5B24A5C8A6C111E98C379E0FC4F9AE02/p3fkgYyg3MY4LlYlcG-YyB6TByA.mft Manifest number: 0E74 Signing time: Sun 02 Nov 2025 17:44:39 +0000 Manifest this update: Sun 02 Nov 2025 17:44:39 +0000 Manifest next update: Sun 09 Nov 2025 17:44:39 +0000 Files and hashes: 1: p3fkgYyg3MY4LlYlcG-YyB6TByA.crl (hash: N/kJuu5HE5uTrH9O2K6EzpE3Homw/nXVTFpVIuXGYb4=) 2: EE78BE36068611EDA1C2070DC4F9AE02.roa (hash: X7Dq3eZ/GJf+9yPNH4D4Wvo3ddILMQm0OljP2i+67DY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EF94/5B24A5C8A6C111E98C379E0FC4F9AE02/p3fkgYyg3MY4LlYlcG-YyB6TByA.crl rsync://rpki.apnic.net/member_repository/A918EF94/5B24A5C8A6C111E98C379E0FC4F9AE02/p3fkgYyg3MY4LlYlcG-YyB6TByA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3fkgYyg3MY4LlYlcG-YyB6TByA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:44:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3708 (0xe7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EF94, serialNumber=A777E4818CA0DCC6382E5625706F98C81E930720 Validity Not Before: Nov 2 17:44:39 2025 GMT Not After : Nov 9 17:44:39 2025 GMT Subject: CN=69079887-d751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:02:f0:40:df:14:c1:c5:0f:1a:0f:42:a8:a5: d8:e8:04:60:0f:27:76:64:f8:ea:42:37:39:da:3c: 3a:6e:62:2f:96:2f:3d:15:37:71:eb:c3:a5:d5:2a: 68:f0:08:38:4a:25:32:3b:e7:04:ca:1d:62:bf:64: 70:9d:5c:2b:09:18:73:fb:43:42:43:d1:d4:50:9e: 55:a4:e7:62:a6:36:f5:91:52:2a:7b:56:d3:4a:cd: f2:11:58:6e:5c:62:37:83:d9:80:45:82:34:9d:32: 34:64:eb:a2:71:82:86:18:19:87:bb:12:2e:4a:27: bc:4e:8f:e5:71:a9:c2:30:f7:85:dc:7a:71:6c:b2: 3a:54:78:a5:e1:e9:a5:44:34:4c:52:a6:44:e6:9b: 4a:5a:9f:43:ef:d0:00:28:b6:23:25:71:7f:4d:dd: 4d:a0:8e:5a:c0:cb:c5:9f:44:b1:1a:34:67:00:b3: 82:04:a7:15:51:4e:aa:d9:67:2e:33:d8:55:09:ac: ab:98:a5:ff:ab:34:15:8e:1e:ba:43:64:e8:45:ee: d8:89:f1:1f:82:a5:6f:65:d0:fc:06:93:43:86:3c: c1:a6:eb:ec:91:0c:e5:e8:d5:1c:cc:ca:36:ce:77: 62:54:b2:a2:78:b5:77:e5:aa:20:45:85:2f:11:1e: 4e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:A5:F9:49:01:34:CF:2B:01:1B:7B:A8:FA:A6:24:FD:3E:65:13:14 X509v3 Authority Key Identifier: keyid:A7:77:E4:81:8C:A0:DC:C6:38:2E:56:25:70:6F:98:C8:1E:93:07:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EF94/5B24A5C8A6C111E98C379E0FC4F9AE02/p3fkgYyg3MY4LlYlcG-YyB6TByA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3fkgYyg3MY4LlYlcG-YyB6TByA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF94/5B24A5C8A6C111E98C379E0FC4F9AE02/p3fkgYyg3MY4LlYlcG-YyB6TByA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:24:a5:73:98:c7:07:c9:80:34:bd:7e:88:bf:0d:b1:39:2f: af:f6:83:34:21:5d:46:27:c7:8d:05:83:04:fe:00:0c:d9:ad: 0d:aa:77:d7:6d:e8:f5:e5:f0:22:be:a2:61:a3:09:0e:08:eb: 77:10:44:6a:9e:3d:45:95:ae:b2:fe:d8:ac:8f:ee:20:12:53: 33:27:86:37:1e:dc:53:fd:07:56:96:98:cf:b6:89:34:28:26: 77:86:ec:81:0f:b6:28:04:7f:24:05:22:59:f8:c4:39:36:0c: 22:6d:1a:c0:b8:76:23:95:94:eb:c1:4a:e3:cd:b3:0e:d9:87: a7:79:39:54:60:6f:53:ab:94:85:4a:77:79:ef:21:13:08:fa: 06:a3:69:83:f1:e8:d1:9b:f7:70:de:36:0d:96:f4:41:dc:e9: 2d:12:c2:43:dc:90:b6:7b:bf:68:96:5c:99:2a:41:23:54:cb: 85:ca:a1:25:74:de:45:fe:60:82:c9:68:ee:a0:4b:2e:72:96: 26:07:89:36:66:40:b0:13:aa:e0:30:06:36:b2:88:f2:9a:ac: da:d1:e0:d7:12:55:a5:88:d3:01:1f:3b:f6:cd:cc:f9:65:ec: 30:f3:77:38:77:d8:71:de:48:26:8d:06:ec:77:1a:62:16:59: 2e:98:f0:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDnwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVGOTQxMTAvBgNVBAUTKEE3NzdFNDgxOENBMERDQzYzODJFNTYyNTcwNkY5OEM4 MUU5MzA3MjAwHhcNMjUxMTAyMTc0NDM5WhcNMjUxMTA5MTc0NDM5WjAYMRYwFAYD VQQDEw02OTA3OTg4Ny1kNzUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2gLwQN8UwcUPGg9CqKXY6ARgDyd2ZPjqQjc52jw6bmIvli89FTdx68Ol1Spo 8Ag4SiUyO+cEyh1iv2RwnVwrCRhz+0NCQ9HUUJ5VpOdipjb1kVIqe1bTSs3yEVhu XGI3g9mARYI0nTI0ZOuicYKGGBmHuxIuSie8To/lcanCMPeF3HpxbLI6VHil4eml RDRMUqZE5ptKWp9D79AAKLYjJXF/Td1NoI5awMvFn0SxGjRnALOCBKcVUU6q2Wcu M9hVCayrmKX/qzQVjh66Q2ToRe7YifEfgqVvZdD8BpNDhjzBpuvskQzl6NUczMo2 zndiVLKieLV35aogRYUvER5OcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCWl+UkB NM8rARt7qPqmJP0+ZRMUMB8GA1UdIwQYMBaAFKd35IGMoNzGOC5WJXBvmMgekwcg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUY5NC81QjI0QTVDOEE2 QzExMUU5OEMzNzlFMEZDNEY5QUUwMi9wM2ZrZ1l5ZzNNWTRMbFlsY0ctWXlCNlRC eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AzZmtnWXlnM01ZNExsWWxjRy1ZeUI2VEJ5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RUY5NC81QjI0QTVDOEE2QzExMUU5OEMzNzlFMEZDNEY5QUUwMi9wM2ZrZ1l5ZzNN WTRMbFlsY0ctWXlCNlRCeUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOJKVzmMcHyYA0vX6Ivw2xOS+v9oM0IV1GJ8eNBYME/gAM2a0NqnfX bej15fAivqJhowkOCOt3EERqnj1Fla6y/tisj+4gElMzJ4Y3HtxT/QdWlpjPtok0 KCZ3huyBD7YoBH8kBSJZ+MQ5NgwibRrAuHYjlZTrwUrjzbMO2YeneTlUYG9Tq5SF Snd57yETCPoGo2mD8ejRm/dw3jYNlvRB3OktEsJD3JC2e79ollyZKkEjVMuFyqEl dN5F/mCCyWjuoEsucpYmB4k2ZkCwE6rgMAY2sojymqza0eDXElWliNMBHzv2zcz5 Zeww83c4d9hx3kgmjQbsdxpiFlkumPAj -----END CERTIFICATE-----Generated at Mon Nov 3 18:19:13 2025 by rpki-client