$ rpki-client -vvf rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.mft File: 3glSX1epVbpvLTKtIoMwQhUYLkU.mft (raw, json) Hash identifier: 2Mx0VJzLEUgOMZ4YD7x/swuTv/p0rTwlwxBY3KMIQ6k= Subject key identifier: 18:10:5C:F4:26:CE:82:96:BC:BE:A5:3D:E8:3D:34:29:C0:23:3C:A3 Authority key identifier: DE:09:52:5F:57:A9:55:BA:6F:2D:32:AD:22:83:30:42:15:18:2E:45 Certificate issuer: /CN=A9119C32/serialNumber=DE09525F57A955BA6F2D32AD2283304215182E45 Certificate serial: 019F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3glSX1epVbpvLTKtIoMwQhUYLkU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.mft Manifest number: 019B Signing time: Mon 03 Nov 2025 03:22:33 +0000 Manifest this update: Mon 03 Nov 2025 03:22:32 +0000 Manifest next update: Mon 10 Nov 2025 03:22:32 +0000 Files and hashes: 1: 3glSX1epVbpvLTKtIoMwQhUYLkU.crl (hash: f4x2EvpeqmzcvmbiH0PykCFGSR9EZ32/0CrjdQHAzdM=) 2: 5D79BDF8486C11EEB3C19A71C4F9AE02.roa (hash: Pq73PgAG6oMeQVEVi6eMUHjuXX4heTdR3HOjLtOdzzc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.crl rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3glSX1epVbpvLTKtIoMwQhUYLkU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:22:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 415 (0x19f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119C32, serialNumber=DE09525F57A955BA6F2D32AD2283304215182E45 Validity Not Before: Nov 3 03:22:32 2025 GMT Not After : Nov 10 03:22:32 2025 GMT Subject: CN=69081ff8-fb42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e0:2b:c1:21:50:5c:2e:06:c5:14:40:1b:ff: 9a:dd:7d:dd:a8:3b:6d:c4:fe:71:36:95:d8:a0:82: 29:61:c9:5a:ea:b6:7a:5c:06:e5:98:c4:10:b9:48: fa:4b:90:12:b7:e5:f8:fa:7b:43:7d:72:5d:05:ab: 4e:64:f7:50:95:53:8c:05:3b:97:10:4d:f9:89:c0: 7e:5b:30:85:a4:da:0b:de:af:14:c8:a5:6b:ee:41: e1:4e:80:fd:d1:30:f3:b8:52:d8:c4:e2:6d:f3:0a: 6c:8b:53:8f:1d:4d:51:23:09:59:63:a9:7e:52:ba: 43:21:4a:9f:6b:91:35:66:80:96:61:00:f3:38:d0: bd:7a:06:b9:4d:29:ef:1b:13:81:db:f3:f3:7b:4b: bc:03:f9:8f:c7:ac:36:a5:7e:30:9b:3f:1e:73:59: c1:c7:a5:c7:8a:94:e8:40:8c:57:b9:e1:c1:be:11: c8:f1:47:dc:68:df:92:0f:ee:5b:62:22:37:b0:d6: 88:a2:93:d3:27:78:fb:b6:b0:c5:43:f9:39:ab:30: 07:71:f9:29:f0:0b:f0:e5:19:c9:76:01:77:f4:1b: 34:aa:9a:b2:06:fe:4b:fb:1d:a4:f0:f9:a5:d3:4f: 21:de:fe:a2:76:97:bd:a8:54:c3:1c:56:d9:1d:7d: 75:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:10:5C:F4:26:CE:82:96:BC:BE:A5:3D:E8:3D:34:29:C0:23:3C:A3 X509v3 Authority Key Identifier: keyid:DE:09:52:5F:57:A9:55:BA:6F:2D:32:AD:22:83:30:42:15:18:2E:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3glSX1epVbpvLTKtIoMwQhUYLkU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:4c:b3:d2:7c:42:43:ec:8b:05:a5:3d:ba:85:55:e1:fb:08: 06:57:95:18:32:8e:ed:1a:be:99:aa:07:4d:b4:e8:97:7e:6f: 2c:e4:f0:08:e1:38:91:36:08:b4:43:4e:bd:d7:a4:d5:2b:d5: 7a:3d:3e:f9:6b:b4:66:e5:f5:0f:95:82:e5:f4:ca:44:5a:44: da:1f:18:3a:82:0f:98:8e:5a:9b:eb:52:c0:a6:57:fb:0d:ac: 99:14:b4:c3:62:e8:ac:dc:58:ca:a8:5f:25:5a:85:ba:31:c4: 2e:f7:a5:0b:df:21:d7:d5:11:ca:9a:ee:77:d7:a3:58:87:35: d0:31:9c:f2:b5:5c:f2:20:1a:33:07:45:41:4c:1d:c7:81:f7: 89:2a:4b:ab:ea:e2:6d:2f:51:b8:ca:76:c0:e1:e1:d7:8e:7b: 09:8d:01:ea:c3:7d:5e:80:e5:d1:32:33:b0:71:ee:f8:66:8f: bd:0b:e3:4c:24:b9:63:39:59:8b:25:a1:c4:f8:fa:79:1f:51: 25:5c:4c:93:71:16:2e:89:72:1a:9a:28:3c:d7:11:2f:1a:5a: c8:58:d2:7c:7a:25:95:dd:c9:67:32:05:57:14:f7:a2:46:c4: 88:ef:2b:d2:eb:c1:57:4b:0d:86:a6:27:64:9e:f1:0b:9f:1c: fa:cc:0c:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTlDMzIxMTAvBgNVBAUTKERFMDk1MjVGNTdBOTU1QkE2RjJEMzJBRDIyODMzMDQy MTUxODJFNDUwHhcNMjUxMTAzMDMyMjMyWhcNMjUxMTEwMDMyMjMyWjAYMRYwFAYD VQQDEw02OTA4MWZmOC1mYjQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw+ArwSFQXC4GxRRAG/+a3X3dqDttxP5xNpXYoIIpYcla6rZ6XAblmMQQuUj6 S5ASt+X4+ntDfXJdBatOZPdQlVOMBTuXEE35icB+WzCFpNoL3q8UyKVr7kHhToD9 0TDzuFLYxOJt8wpsi1OPHU1RIwlZY6l+UrpDIUqfa5E1ZoCWYQDzONC9ega5TSnv GxOB2/Pze0u8A/mPx6w2pX4wmz8ec1nBx6XHipToQIxXueHBvhHI8UfcaN+SD+5b YiI3sNaIopPTJ3j7trDFQ/k5qzAHcfkp8Avw5RnJdgF39Bs0qpqyBv5L+x2k8Pml 008h3v6idpe9qFTDHFbZHX11HQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBgQXPQm zoKWvL6lPeg9NCnAIzyjMB8GA1UdIwQYMBaAFN4JUl9XqVW6by0yrSKDMEIVGC5F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOUMzMi9DNEVBMUI5RTQ2 RTIxMUVFQTIzNzJGNDFDNEY5QUUwMi8zZ2xTWDFlcFZicHZMVEt0SW9Nd1FoVVlM a1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNnbFNYMWVwVmJwdkxUS3RJb013UWhVWUxrVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OUMzMi9DNEVBMUI5RTQ2RTIxMUVFQTIzNzJGNDFDNEY5QUUwMi8zZ2xTWDFlcFZi cHZMVEt0SW9Nd1FoVVlMa1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6TLPSfEJD7IsFpT26hVXh+wgGV5UYMo7tGr6ZqgdNtOiXfm8s5PAI 4TiRNgi0Q06916TVK9V6PT75a7Rm5fUPlYLl9MpEWkTaHxg6gg+Yjlqb61LAplf7 DayZFLTDYuis3FjKqF8lWoW6McQu96UL3yHX1RHKmu5316NYhzXQMZzytVzyIBoz B0VBTB3HgfeJKkur6uJtL1G4ynbA4eHXjnsJjQHqw31egOXRMjOwce74Zo+9C+NM JLljOVmLJaHE+Pp5H1ElXEyTcRYuiXIamig81xEvGlrIWNJ8eiWV3clnMgVXFPei RsSI7yvS68FXSw2GpidknvELnxz6zAwg -----END CERTIFICATE-----Generated at Tue Nov 4 19:04:04 2025 by rpki-client