$ rpki-client -vvf rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.mft File: 3OYifAVHwArsZcXmgPYXk_SdVYM.mft (raw, json) Hash identifier: cA13sFLLPeEmqWSDAec3iz735CjFNZldVBOLlEQY0i8= Subject key identifier: 84:56:E1:31:31:BC:B8:F7:2C:C2:74:97:E0:12:83:83:B3:DE:EE:89 Authority key identifier: DC:E6:22:7C:05:47:C0:0A:EC:65:C5:E6:80:F6:17:93:F4:9D:55:83 Certificate issuer: /CN=A918FCB4/serialNumber=DCE6227C0547C00AEC65C5E680F61793F49D5583 Certificate serial: 085A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OYifAVHwArsZcXmgPYXk_SdVYM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.mft Manifest number: 08D0 Signing time: Sun 02 Nov 2025 20:41:45 +0000 Manifest this update: Sun 02 Nov 2025 20:41:44 +0000 Manifest next update: Sun 09 Nov 2025 20:41:44 +0000 Files and hashes: 1: 3OYifAVHwArsZcXmgPYXk_SdVYM.crl (hash: 4VihQJ5gpIXwM5MO/uZnit2EKbX1qCyPefdhPSlaF7s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.crl rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OYifAVHwArsZcXmgPYXk_SdVYM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:41:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2138 (0x85a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FCB4, serialNumber=DCE6227C0547C00AEC65C5E680F61793F49D5583 Validity Not Before: Nov 2 20:41:44 2025 GMT Not After : Nov 9 20:41:44 2025 GMT Subject: CN=6907c209-6a6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:44:15:ed:a7:cc:aa:14:99:ee:b0:67:2b:32: 34:8e:1c:65:16:43:4f:30:2d:29:9a:f9:c1:1e:10: b1:06:40:9c:cb:1f:d5:39:7f:d2:fc:85:06:9a:01: cd:0b:35:f5:7d:a4:36:7e:19:9d:81:57:4c:78:61: 2e:f4:af:d3:58:5f:37:51:43:c0:87:95:7e:e9:16: 4e:ab:c4:f1:77:bd:4c:4c:9a:7c:eb:16:3c:dc:99: f8:53:59:eb:77:91:9a:f2:ea:d0:64:b7:83:30:1b: f6:04:a5:74:c3:82:f1:ac:1f:9e:d8:a8:20:3a:73: 93:65:03:a6:3f:43:3d:84:c8:59:fe:10:b5:c7:47: 82:09:bc:dd:c6:37:f2:46:2c:c4:98:79:09:4b:8c: 32:af:a9:19:a4:60:e0:f5:aa:c0:48:18:2e:36:7d: 94:f7:5d:b2:7d:7e:e0:6e:50:ba:5e:fb:76:46:31: 4a:ef:c6:f8:ba:7f:21:df:6b:91:3c:86:46:35:72: 0a:92:9c:13:e1:10:50:8e:fb:3b:4b:8a:bf:44:13: 9c:51:39:91:79:ad:07:b0:48:d3:05:ec:b0:71:49: 54:0e:04:a4:2d:f3:1e:1e:ee:7b:ab:cf:81:1a:a0: 5f:9a:3a:fb:6e:67:f3:06:5c:71:e5:fe:93:f5:6b: c5:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:56:E1:31:31:BC:B8:F7:2C:C2:74:97:E0:12:83:83:B3:DE:EE:89 X509v3 Authority Key Identifier: keyid:DC:E6:22:7C:05:47:C0:0A:EC:65:C5:E6:80:F6:17:93:F4:9D:55:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OYifAVHwArsZcXmgPYXk_SdVYM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:81:67:5c:19:11:af:03:23:b4:70:a0:db:24:23:13:db:83: 40:d5:6b:a3:66:a8:e1:89:05:18:34:a0:4d:ea:14:68:e3:07: 43:03:9e:83:62:ba:94:89:df:2f:df:d7:fb:03:92:ae:7e:0d: dc:0c:44:6c:a0:2b:bd:75:da:25:31:c9:df:c3:e8:6a:81:5d: 18:31:48:ab:01:f6:e8:0a:2b:31:71:58:2f:69:95:85:00:c4: d2:ba:7c:e7:ea:9e:99:78:f5:01:db:13:7c:9b:77:31:7c:95: 22:62:81:12:07:15:5b:d7:7c:ae:11:c9:5a:9f:46:cc:4e:d9: 0b:20:89:7a:5c:07:e4:69:65:8d:ef:94:2c:dc:15:d3:2f:07: e6:ac:c5:cf:54:5b:9d:89:de:40:7f:f0:64:ad:98:52:04:61: 3b:84:53:e7:ff:bb:f5:75:57:18:18:ae:d2:a1:52:68:77:ee: 58:ce:9d:83:e9:07:51:4a:89:b8:be:b9:98:4e:36:de:3a:02: 2d:d9:cc:55:fe:d6:20:a0:bb:de:f2:0d:61:7e:cf:bd:11:5d: 3e:89:b9:cd:0a:be:7c:ef:46:1a:b1:4a:09:ec:f9:a3:e8:f4: f3:78:df:97:69:43:89:c9:42:28:80:2b:e9:fb:55:f8:c3:3c: b2:7b:dc:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZDQjQxMTAvBgNVBAUTKERDRTYyMjdDMDU0N0MwMEFFQzY1QzVFNjgwRjYxNzkz RjQ5RDU1ODMwHhcNMjUxMTAyMjA0MTQ0WhcNMjUxMTA5MjA0MTQ0WjAYMRYwFAYD VQQDEw02OTA3YzIwOS02YTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAukQV7afMqhSZ7rBnKzI0jhxlFkNPMC0pmvnBHhCxBkCcyx/VOX/S/IUGmgHN CzX1faQ2fhmdgVdMeGEu9K/TWF83UUPAh5V+6RZOq8Txd71MTJp86xY83Jn4U1nr d5Ga8urQZLeDMBv2BKV0w4LxrB+e2KggOnOTZQOmP0M9hMhZ/hC1x0eCCbzdxjfy RizEmHkJS4wyr6kZpGDg9arASBguNn2U912yfX7gblC6Xvt2RjFK78b4un8h32uR PIZGNXIKkpwT4RBQjvs7S4q/RBOcUTmRea0HsEjTBeywcUlUDgSkLfMeHu57q8+B GqBfmjr7bmfzBlxx5f6T9WvFbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIRW4TEx vLj3LMJ0l+ASg4Oz3u6JMB8GA1UdIwQYMBaAFNzmInwFR8AK7GXF5oD2F5P0nVWD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkNCNC8zQTdBRDNCMkUz ODYxMUVBOUZBMjNBMzZDNEY5QUUwMi8zT1lpZkFWSHdBcnNaY1htZ1BZWGtfU2RW WU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNPWWlmQVZId0Fyc1pjWG1nUFlYa19TZFZZTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RkNCNC8zQTdBRDNCMkUzODYxMUVBOUZBMjNBMzZDNEY5QUUwMi8zT1lpZkFWSHdB cnNaY1htZ1BZWGtfU2RWWU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9gWdcGRGvAyO0cKDbJCMT24NA1WujZqjhiQUYNKBN6hRo4wdDA56D YrqUid8v39f7A5Kufg3cDERsoCu9ddolMcnfw+hqgV0YMUirAfboCisxcVgvaZWF AMTSunzn6p6ZePUB2xN8m3cxfJUiYoESBxVb13yuEclan0bMTtkLIIl6XAfkaWWN 75Qs3BXTLwfmrMXPVFudid5Af/BkrZhSBGE7hFPn/7v1dVcYGK7SoVJod+5Yzp2D 6QdRSom4vrmYTjbeOgIt2cxV/tYgoLve8g1hfs+9EV0+ibnNCr5870YasUoJ7Pmj 6PTzeN+XaUOJyUIogCvp+1X4wzyye9yY -----END CERTIFICATE-----Generated at Mon Nov 3 18:08:27 2025 by rpki-client