$ rpki-client -vvf rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.mft File: _3cE5KczP2k3LZ8zQfjQAstKwM8.mft (raw, json) Hash identifier: MQezr66G3YppebLtl5hr/5q8JY4wEvFuncBwUS4cM+E= Subject key identifier: F3:EA:19:71:9D:9C:70:11:92:FC:9A:08:58:D5:E6:CF:DC:BC:2A:52 Authority key identifier: FF:77:04:E4:A7:33:3F:69:37:2D:9F:33:41:F8:D0:02:CB:4A:C0:CF Certificate issuer: /CN=A919992D/serialNumber=FF7704E4A7333F69372D9F3341F8D002CB4AC0CF Certificate serial: 1D72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3cE5KczP2k3LZ8zQfjQAstKwM8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.mft Manifest number: 1D5D Signing time: Sun 02 Nov 2025 16:09:02 +0000 Manifest this update: Sun 02 Nov 2025 16:09:01 +0000 Manifest next update: Sun 09 Nov 2025 16:09:01 +0000 Files and hashes: 1: _3cE5KczP2k3LZ8zQfjQAstKwM8.crl (hash: HhW1SeLgjfTQeh1j44OjjGaV9MWA4aS3/P+DfuMFWfs=) 2: F2E707C4CB2D11E6B15E0480C4F9AE02.roa (hash: /prr9YJCzmst/EHhwq+RVn+bdS5HeKi3OTJCcnb49ks=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.crl rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3cE5KczP2k3LZ8zQfjQAstKwM8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 16:09:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7538 (0x1d72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919992D, serialNumber=FF7704E4A7333F69372D9F3341F8D002CB4AC0CF Validity Not Before: Nov 2 16:09:01 2025 GMT Not After : Nov 9 16:09:01 2025 GMT Subject: CN=6907821d-9251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a1:11:d8:a8:a0:0b:aa:3a:7b:0d:85:2d:bf: a6:e1:1d:ac:e6:64:0c:43:b4:c4:06:74:6e:7f:7d: c0:db:64:58:87:34:01:a9:b3:2d:37:17:5e:6f:71: 22:55:17:b7:8e:5a:df:9e:3b:5d:cb:d3:f7:b4:3f: a8:90:5f:fc:64:d2:d6:14:ce:e8:cb:7c:e4:a8:85: 28:b6:8a:c6:8e:2d:7a:27:09:4e:46:91:da:14:fc: ba:17:26:bd:d0:99:c7:c7:3c:05:f1:14:68:32:c4: bf:8c:2e:fb:cb:86:49:5d:c4:31:43:f8:96:16:22: ec:f6:8a:a8:2a:a0:44:f7:c1:2c:ac:7e:d4:87:82: 0a:50:8c:17:89:0e:a1:e7:6c:27:f1:a0:6a:f2:af: 3d:97:dd:01:79:2e:3a:97:41:a4:ca:5d:ee:a8:14: 55:d3:80:16:77:1c:ae:ce:d2:39:8a:1a:e3:38:65: ee:0c:a7:30:62:a9:60:31:ab:15:a1:d6:43:c4:99: 68:3a:eb:91:58:aa:20:a4:1e:dc:5f:7d:55:10:0d: 1a:e7:60:15:c7:ea:5e:e3:c9:9d:86:40:90:ee:ea: 64:d1:f2:24:ee:d9:ae:d6:c3:0f:9e:b9:4f:c2:0a: 6d:d0:4d:f9:ca:86:c5:f0:fe:15:48:3a:0d:28:c3: 79:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:EA:19:71:9D:9C:70:11:92:FC:9A:08:58:D5:E6:CF:DC:BC:2A:52 X509v3 Authority Key Identifier: keyid:FF:77:04:E4:A7:33:3F:69:37:2D:9F:33:41:F8:D0:02:CB:4A:C0:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3cE5KczP2k3LZ8zQfjQAstKwM8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:ce:da:20:ce:00:47:50:12:a0:4d:e3:cc:55:b5:2d:07:f8: 0b:3c:fa:7f:e4:2a:fe:91:f4:76:53:ed:4f:f5:97:e2:a1:92: 59:f4:0f:d3:14:5f:f8:82:33:1a:04:60:9a:34:c5:e3:d0:7e: e7:ee:54:1d:03:b5:68:7e:fc:c8:47:5b:1e:7f:ea:4d:5a:6f: 03:16:60:b0:25:d7:21:f1:35:d7:6c:62:02:2b:f5:72:91:a6: c6:a4:5a:b5:ed:2d:81:48:29:cd:44:f3:b8:28:74:f9:8b:96: fb:ff:e2:a2:7e:bd:3d:9d:e2:00:f6:c8:57:2f:18:53:1c:5d: 70:c2:c5:ca:ff:3a:ac:65:09:06:97:d2:54:51:43:4c:a1:28: 99:34:81:00:97:91:e1:6f:72:68:57:d8:72:c2:86:3c:77:ee: 99:32:f2:55:28:fd:d5:59:8f:e6:9a:58:b6:0f:cc:92:4b:59: dc:c1:ff:35:2c:2f:8d:44:8c:47:66:98:c1:84:d8:26:51:c2: 54:3f:10:fe:f8:57:7b:d1:a3:06:ca:76:79:d1:ff:61:fb:65: 57:9d:14:12:80:65:fc:da:5f:62:2b:01:11:03:8e:0f:cc:8b: 6b:96:fa:e6:e0:29:cb:4e:7d:8b:ce:4b:db:4d:39:46:2c:61: ae:37:60:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk5MkQxMTAvBgNVBAUTKEZGNzcwNEU0QTczMzNGNjkzNzJEOUYzMzQxRjhEMDAy Q0I0QUMwQ0YwHhcNMjUxMTAyMTYwOTAxWhcNMjUxMTA5MTYwOTAxWjAYMRYwFAYD VQQDEw02OTA3ODIxZC05MjUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn6ER2KigC6o6ew2FLb+m4R2s5mQMQ7TEBnRuf33A22RYhzQBqbMtNxdeb3Ei VRe3jlrfnjtdy9P3tD+okF/8ZNLWFM7oy3zkqIUotorGji16JwlORpHaFPy6Fya9 0JnHxzwF8RRoMsS/jC77y4ZJXcQxQ/iWFiLs9oqoKqBE98EsrH7Uh4IKUIwXiQ6h 52wn8aBq8q89l90BeS46l0Gkyl3uqBRV04AWdxyuztI5ihrjOGXuDKcwYqlgMasV odZDxJloOuuRWKogpB7cX31VEA0a52AVx+pe48mdhkCQ7upk0fIk7tmu1sMPnrlP wgpt0E35yobF8P4VSDoNKMN5dQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPPqGXGd nHARkvyaCFjV5s/cvCpSMB8GA1UdIwQYMBaAFP93BOSnMz9pNy2fM0H40ALLSsDP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTkyRC85MTMzMjlGNEJC QTYxMUU2OEZDMTIxMkRDNEY5QUUwMi9fM2NFNUtjelAyazNMWjh6UWZqUUFzdEt3 TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18zY0U1S2N6UDJrM0xaOHpRZmpRQXN0S3dNOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTkyRC85MTMzMjlGNEJCQTYxMUU2OEZDMTIxMkRDNEY5QUUwMi9fM2NFNUtjelAy azNMWjh6UWZqUUFzdEt3TTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEztogzgBHUBKgTePMVbUtB/gLPPp/5Cr+kfR2U+1P9ZfioZJZ9A/T FF/4gjMaBGCaNMXj0H7n7lQdA7VofvzIR1sef+pNWm8DFmCwJdch8TXXbGICK/Vy kabGpFq17S2BSCnNRPO4KHT5i5b7/+Kifr09neIA9shXLxhTHF1wwsXK/zqsZQkG l9JUUUNMoSiZNIEAl5Hhb3JoV9hywoY8d+6ZMvJVKP3VWY/mmli2D8ySS1ncwf81 LC+NRIxHZpjBhNgmUcJUPxD++Fd70aMGynZ50f9h+2VXnRQSgGX82l9iKwERA44P zItrlvrm4CnLTn2LzkvbTTlGLGGuN2DP -----END CERTIFICATE-----Generated at Mon Nov 3 18:17:09 2025 by rpki-client