$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft File: 3oqNpw4WUAnRQNn2JFJNxNR51eg.mft (raw, json) Hash identifier: rraBp7JfwNecW0epfgXmpIYp1vbftGWoxsv8jv1hfEs= Subject key identifier: 7E:D2:D7:2A:AA:74:E1:3B:72:5D:A8:DE:03:6A:C4:98:E3:D2:87:A2 Authority key identifier: DE:8A:8D:A7:0E:16:50:09:D1:40:D9:F6:24:52:4D:C4:D4:79:D5:E8 Certificate issuer: /CN=A91DA13E/serialNumber=DE8A8DA70E165009D140D9F624524DC4D479D5E8 Certificate serial: 0814 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oqNpw4WUAnRQNn2JFJNxNR51eg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft Manifest number: 07FC Signing time: Sun 12 Oct 2025 22:27:01 +0000 Manifest this update: Sun 12 Oct 2025 22:27:00 +0000 Manifest next update: Sun 19 Oct 2025 22:27:00 +0000 Files and hashes: 1: 3oqNpw4WUAnRQNn2JFJNxNR51eg.crl (hash: zG301NWWTN/0bqC8OlV0R9L6VSRbKcPT9rSH9IAz660=) 2: 29D6DCB2849211EE8F9C5870C4F9AE02.roa (hash: Rw6zEr6DY5Vp9Hj5tF7TI5Kq9ScA3GH+aMoga9/kLfs=) 3: B9A51B1AFA4F11EDB82FCB1FC4F9AE02.roa (hash: 5YYK0YKoDCpaklYir4k5rIBA5wPjwgrEAbtRskRmQT8=) 4: 298965AC06B611EBBBFD6B2CC4F9AE02.roa (hash: U1bQn0cREbDCYE8np1FOgxq7ZLPbZTRmflBcUUu8DFM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.crl rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oqNpw4WUAnRQNn2JFJNxNR51eg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Oct 2025 22:26:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2068 (0x814) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA13E, serialNumber=DE8A8DA70E165009D140D9F624524DC4D479D5E8 Validity Not Before: Oct 12 22:27:00 2025 GMT Not After : Oct 19 22:27:00 2025 GMT Subject: CN=68ec2b34-bd09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8c:7d:65:69:84:53:09:5a:6f:cc:c9:52:d4: 01:84:9c:6b:3a:13:7d:45:64:b9:ee:d8:6c:3f:fd: 7d:36:b6:24:4a:9e:91:75:69:61:5e:e3:e3:9e:b1: 3f:98:31:c5:9e:03:29:ef:63:af:ac:b1:b7:64:9b: 7d:30:d7:e9:03:b4:46:40:96:20:64:35:9f:78:0a: 8d:f2:14:0d:b7:a5:ef:d1:78:fb:27:03:8b:79:26: 69:92:fa:20:66:16:d1:92:d7:1e:5b:90:49:d2:e9: f0:34:3d:04:64:4a:0e:0f:1d:72:87:0e:f2:f7:70: 0e:30:29:ca:d4:32:70:4c:de:67:bf:5a:51:52:eb: 26:9a:63:fc:02:15:94:25:74:42:2a:88:8e:0f:72: 65:3c:56:98:09:c2:5f:8e:68:f1:49:26:4b:c0:42: 9d:7b:63:e7:ff:f3:43:9d:a8:f6:ad:05:b7:63:d7: 83:82:aa:d3:3d:45:63:86:29:4a:f0:5c:58:31:e7: e8:f5:cd:c6:6a:39:37:51:33:a6:f0:c1:9e:c4:de: 2b:b7:9c:ad:95:6b:96:74:fd:9c:af:81:1c:18:18: cd:91:e5:1f:e9:4b:63:3e:94:3e:5d:e1:6a:c5:ff: ab:b2:b1:db:25:4b:dd:95:46:f7:1a:ec:2f:6d:47: 36:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:D2:D7:2A:AA:74:E1:3B:72:5D:A8:DE:03:6A:C4:98:E3:D2:87:A2 X509v3 Authority Key Identifier: keyid:DE:8A:8D:A7:0E:16:50:09:D1:40:D9:F6:24:52:4D:C4:D4:79:D5:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oqNpw4WUAnRQNn2JFJNxNR51eg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:43:6c:c9:6a:ef:26:6e:fc:d4:92:c1:d8:8a:75:3c:71:f3: 27:84:9d:61:e2:9b:b8:0e:14:0c:88:60:ff:35:cb:c9:ad:c8: 34:f7:27:0e:b8:79:fc:65:93:a8:a1:0e:b7:02:12:10:74:80: b1:80:0a:85:69:48:ee:5d:50:99:3e:9c:83:e0:8f:29:b0:2a: b2:87:1d:04:37:60:c7:cb:be:02:a2:9e:dd:dd:bd:d9:3c:df: a3:f1:c5:c3:bb:76:98:de:84:61:38:68:da:9e:94:85:fb:a8: a8:a3:f1:44:5c:11:ab:5b:2e:ca:ed:d0:82:7e:e8:ce:05:c5: 03:2b:90:0c:d0:6f:01:19:11:08:35:24:88:10:0a:ef:29:c3: e8:c3:87:c3:9a:1d:8e:d3:89:d9:03:73:0c:45:31:50:96:ca: 65:91:ee:63:e0:a6:0f:21:4b:ee:c6:74:13:60:02:c7:ef:b8: de:1c:fb:c8:d9:b2:f1:24:c0:df:96:55:b1:15:71:f8:6e:cb: 59:0b:45:6a:7c:8f:4c:fc:a9:59:ac:b2:30:b5:3d:17:74:c2: 43:b7:f6:12:25:f6:4d:c1:f5:bb:39:a3:03:05:ae:03:ef:12: 9d:34:fe:ab:f2:2f:3e:bc:d2:5b:dd:02:db:57:de:2e:b0:94: fd:84:aa:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REExM0UxMTAvBgNVBAUTKERFOEE4REE3MEUxNjUwMDlEMTQwRDlGNjI0NTI0REM0 RDQ3OUQ1RTgwHhcNMjUxMDEyMjIyNzAwWhcNMjUxMDE5MjIyNzAwWjAYMRYwFAYD VQQDEw02OGVjMmIzNC1iZDA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt4x9ZWmEUwlab8zJUtQBhJxrOhN9RWS57thsP/19NrYkSp6RdWlhXuPjnrE/ mDHFngMp72OvrLG3ZJt9MNfpA7RGQJYgZDWfeAqN8hQNt6Xv0Xj7JwOLeSZpkvog ZhbRktceW5BJ0unwND0EZEoODx1yhw7y93AOMCnK1DJwTN5nv1pRUusmmmP8AhWU JXRCKoiOD3JlPFaYCcJfjmjxSSZLwEKde2Pn//NDnaj2rQW3Y9eDgqrTPUVjhilK 8FxYMefo9c3Gajk3UTOm8MGexN4rt5ytlWuWdP2cr4EcGBjNkeUf6UtjPpQ+XeFq xf+rsrHbJUvdlUb3GuwvbUc2ewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH7S1yqq dOE7cl2o3gNqxJjj0oeiMB8GA1UdIwQYMBaAFN6KjacOFlAJ0UDZ9iRSTcTUedXo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTEzRS81NEQ2QTUwRTA2 QjUxMUVCOTM3MkQzMkJDNEY5QUUwMi8zb3FOcHc0V1VBblJRTm4ySkZKTnhOUjUx ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNvcU5wdzRXVUFuUlFObjJKRkpOeE5SNTFlZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTEzRS81NEQ2QTUwRTA2QjUxMUVCOTM3MkQzMkJDNEY5QUUwMi8zb3FOcHc0V1VB blJRTm4ySkZKTnhOUjUxZWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAQ2zJau8mbvzUksHYinU8cfMnhJ1h4pu4DhQMiGD/NcvJrcg09ycO uHn8ZZOooQ63AhIQdICxgAqFaUjuXVCZPpyD4I8psCqyhx0EN2DHy74Cop7d3b3Z PN+j8cXDu3aY3oRhOGjanpSF+6ioo/FEXBGrWy7K7dCCfujOBcUDK5AM0G8BGREI NSSIEArvKcPow4fDmh2O04nZA3MMRTFQlsplke5j4KYPIUvuxnQTYALH77jeHPvI 2bLxJMDfllWxFXH4bstZC0VqfI9M/KlZrLIwtT0XdMJDt/YSJfZNwfW7OaMDBa4D 7xKdNP6r8i8+vNJb3QLbV94usJT9hKoE -----END CERTIFICATE-----Generated at Tue Oct 14 00:54:01 2025 by rpki-client