$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft File: d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft (raw, json) Hash identifier: bk5Rr0gpwlRHrl07vjKYLYqEiRcTS9Ff4UA9NorLddE= Subject key identifier: 4D:C4:AE:46:85:0A:DC:64:92:E7:94:6D:50:DB:73:EE:CE:09:0A:F0 Authority key identifier: 77:76:61:2A:43:C2:2D:0A:66:B8:F1:36:80:B3:05:8B:ED:5D:98:92 Certificate issuer: /CN=A91DEB81/serialNumber=7776612A43C22D0A66B8F13680B3058BED5D9892 Certificate serial: 0495 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft Manifest number: 046D Signing time: Thu 23 Oct 2025 01:25:38 +0000 Manifest this update: Thu 23 Oct 2025 01:25:37 +0000 Manifest next update: Thu 30 Oct 2025 01:25:37 +0000 Files and hashes: 1: d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl (hash: NbSvL1YzmiW6AM1IDl6k5BGG9YOyzTsDb/TzdndzNfk=) 2: EEECC55A8C3611EFA07E612DC4F9AE02.roa (hash: S448nKM+pkzyKAVAq+QLZ6c2Rwj7lMGOSqjzi17yKYo=) 3: 216DB034DE9711EC9289256FC4F9AE02.roa (hash: +Y2vKS8CZ7xVCXV7DmrOc6o0OVVkIHves16LK2wsX2I=) 4: 204E25DADE9711EC9289256FC4F9AE02.roa (hash: Nm0NB5K/NvPqifGuFp/i7DvZfN/unt+xIyxa1mf1Ru8=) 5: E184C6F48F2C11EEA361B22FC4F9AE02.roa (hash: m7hFb23btwRa7iUoc5sSfQwuK6EzzQbsJrT19RdsUzA=) 6: 1FBEA1EEDE9711EC9289256FC4F9AE02.roa (hash: wFyDTsNGRzgAv8mhqHHalbGpjw+H79Gqqrm8IklHVfE=) 7: E0C5B7148F2C11EEA361B22FC4F9AE02.roa (hash: Aqyl2hhEx5BpBctkE5rWM8Kv0ZDOqQAIfUrt5yWaYks=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 01:25:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1173 (0x495) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEB81, serialNumber=7776612A43C22D0A66B8F13680B3058BED5D9892 Validity Not Before: Oct 23 01:25:37 2025 GMT Not After : Oct 30 01:25:37 2025 GMT Subject: CN=68f98412-dd97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ac:61:df:2a:c1:b6:9e:cf:03:1f:ff:e3:eb: 53:04:08:f3:a9:e5:11:eb:f5:a6:68:4d:d6:db:a2: 26:8d:db:fe:75:a9:b4:50:ee:49:82:9c:d1:94:11: be:37:e9:30:c4:16:d3:37:40:34:ee:0e:a8:59:93: 4b:be:e9:a1:7f:38:0e:90:ab:62:e1:ad:e7:07:e2: 53:2b:9d:e8:ea:11:10:fd:55:29:70:79:b2:99:b0: 4e:3b:f7:8e:ff:ee:40:ab:a7:e1:be:a8:a6:41:9b: c5:93:62:b9:8f:8c:b9:a8:a1:62:04:99:1c:33:04: 53:b1:f9:68:53:21:07:ea:54:bf:2e:b6:cb:9c:e5: 13:b0:25:d9:64:59:49:e2:b8:a8:6a:96:05:fc:64: a9:89:ef:f4:25:e3:bf:af:5d:d8:eb:01:bf:a6:cd: 6f:bc:f5:f7:b6:55:0f:8e:e7:7e:da:25:17:24:10: b8:ca:6c:0a:d6:7f:b8:6e:be:bf:5c:63:99:f5:e9: 8d:93:17:69:e1:14:b5:99:49:8c:10:f6:b7:ea:90: 43:2b:85:23:ad:f1:16:0b:d2:6e:8e:de:75:60:93: 29:d0:09:45:e5:d1:ff:ce:ea:9b:2a:51:37:a8:c8: 19:43:34:34:79:29:5b:28:d5:7b:6a:e6:af:d8:11: 04:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:C4:AE:46:85:0A:DC:64:92:E7:94:6D:50:DB:73:EE:CE:09:0A:F0 X509v3 Authority Key Identifier: keyid:77:76:61:2A:43:C2:2D:0A:66:B8:F1:36:80:B3:05:8B:ED:5D:98:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:30:f3:0f:86:a6:e1:2b:59:f9:37:30:66:70:be:2b:58:6c: 88:27:65:5a:ed:f1:36:f8:45:c5:25:d5:7d:7a:26:ca:a5:87: 5c:a9:56:1f:02:c4:36:7a:58:89:d9:45:58:70:6d:de:c3:91: 7d:9d:3f:24:16:11:56:50:4e:a3:a6:0f:dc:c1:31:fc:87:72: d0:7e:71:4d:b5:01:b6:d1:1d:e7:92:a8:a1:04:40:0a:d0:b3: aa:bc:8f:f2:bf:68:d7:0f:94:bf:07:29:eb:22:0c:74:5a:8b: c5:9e:22:13:50:ce:bb:87:12:57:a6:af:00:55:02:89:66:5b: 73:aa:5c:ff:38:b5:66:05:25:d5:c5:e9:cc:9d:4c:18:64:03: 28:95:3b:62:d7:d2:26:d2:46:58:88:a5:c9:9f:ae:dc:83:91: e8:8e:4d:49:b3:a3:2d:bd:89:3a:b8:ca:1e:d5:cc:d8:f2:5d: 1a:4d:e1:a5:dc:41:82:f3:cd:66:de:b1:b0:66:39:e1:09:db: 8c:81:84:26:7f:6c:71:ab:57:25:6f:6e:bf:be:5c:bd:c9:20: 7d:5a:1e:2f:a9:55:31:e1:e7:e6:49:7b:34:17:82:13:58:28: 4c:d5:27:db:65:41:47:d0:86:6f:b4:c2:fa:c2:2b:78:31:1a: 68:a7:7b:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVCODExMTAvBgNVBAUTKDc3NzY2MTJBNDNDMjJEMEE2NkI4RjEzNjgwQjMwNThC RUQ1RDk4OTIwHhcNMjUxMDIzMDEyNTM3WhcNMjUxMDMwMDEyNTM3WjAYMRYwFAYD VQQDEw02OGY5ODQxMi1kZDk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm6xh3yrBtp7PAx//4+tTBAjzqeUR6/WmaE3W26Imjdv+dam0UO5JgpzRlBG+ N+kwxBbTN0A07g6oWZNLvumhfzgOkKti4a3nB+JTK53o6hEQ/VUpcHmymbBOO/eO /+5Aq6fhvqimQZvFk2K5j4y5qKFiBJkcMwRTsfloUyEH6lS/LrbLnOUTsCXZZFlJ 4rioapYF/GSpie/0JeO/r13Y6wG/ps1vvPX3tlUPjud+2iUXJBC4ymwK1n+4br6/ XGOZ9emNkxdp4RS1mUmMEPa36pBDK4UjrfEWC9Jujt51YJMp0AlF5dH/zuqbKlE3 qMgZQzQ0eSlbKNV7auav2BEEIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE3ErkaF CtxkkueUbVDbc+7OCQrwMB8GA1UdIwQYMBaAFHd2YSpDwi0KZrjxNoCzBYvtXZiS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUI4MS9DRjk2NjNDNjcw RjcxMUVDQjMxOEU0M0FDNEY5QUUwMi9kM1poS2tQQ0xRcG11UEUyZ0xNRmktMWRt SkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QzWmhLa1BDTFFwbXVQRTJnTE1GaS0xZG1KSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUI4MS9DRjk2NjNDNjcwRjcxMUVDQjMxOEU0M0FDNEY5QUUwMi9kM1poS2tQQ0xR cG11UEUyZ0xNRmktMWRtSkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcMPMPhqbhK1n5NzBmcL4rWGyIJ2Va7fE2+EXFJdV9eibKpYdcqVYf AsQ2eliJ2UVYcG3ew5F9nT8kFhFWUE6jpg/cwTH8h3LQfnFNtQG20R3nkqihBEAK 0LOqvI/yv2jXD5S/BynrIgx0WovFniITUM67hxJXpq8AVQKJZltzqlz/OLVmBSXV xenMnUwYZAMolTti19Im0kZYiKXJn67cg5Hojk1Js6MtvYk6uMoe1czY8l0aTeGl 3EGC881m3rGwZjnhCduMgYQmf2xxq1clb26/vly9ySB9Wh4vqVUx4efmSXs0F4IT WChM1SfbZUFH0IZvtML6wit4MRpop3sz -----END CERTIFICATE-----Generated at Fri Oct 24 18:54:51 2025 by rpki-client