$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.mft File: 3p1kAWKR6ioW87eVag9ANbcJ5Uc.mft (raw, json) Hash identifier: P3wYiM41cVIugmHaiZLixejOTAsokEvZGSXJgCv45cs= Subject key identifier: CB:60:DE:BA:E4:5B:AE:6A:E4:52:D6:A0:58:2B:CA:64:D9:0E:D4:02 Authority key identifier: DE:9D:64:01:62:91:EA:2A:16:F3:B7:95:6A:0F:40:35:B7:09:E5:47 Certificate issuer: /CN=A9125475/serialNumber=DE9D64016291EA2A16F3B7956A0F4035B709E547 Certificate serial: 25CF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3p1kAWKR6ioW87eVag9ANbcJ5Uc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.mft Manifest number: 2599 Signing time: Tue 04 Nov 2025 14:20:41 +0000 Manifest this update: Tue 04 Nov 2025 14:20:40 +0000 Manifest next update: Tue 11 Nov 2025 14:20:40 +0000 Files and hashes: 1: 3p1kAWKR6ioW87eVag9ANbcJ5Uc.crl (hash: CwwZOlwM3nxb6kXC7lfYhaDQIHwjZBcQa+c1wyAZz10=) 2: 19FEDB562AB611EC93861F65C4F9AE02.roa (hash: IctK1F2f+smhGbfiZwt5TjovlvY8GgFhI80wuux0L94=) 3: 87B992CE90E211EDB4035D5EC4F9AE02.roa (hash: 9Mx2YbXgiyB8AIZIQ7AHexIPVIu7UgKFpNuf1xsWr8w=) 4: 0171064E1E7511EFA136126DC4F9AE02.roa (hash: XFxbQQJDj0rE3ZIrAGCdNw3StLs+W3TJQN2I+ajNUy8=) 5: C40F099A1E7411EF818FAE6CC4F9AE02.roa (hash: B3CcjXzeJ4dABXXB8sqhv86VgPvTtQb+NKigWAQp3Ao=) 6: E7D3D36A406911EC83A0470DC4F9AE02.roa (hash: GjOaQSD+yOTMszKkoCotay0oJsTwIhHAKh5smJri11o=) 7: 3373DB98902C11EA898EFD7FC4F9AE02.roa (hash: IbE+JWM/Bgx4LvXRfO5AkKCxabxFW5QHg0Anl0b9X1Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.crl rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3p1kAWKR6ioW87eVag9ANbcJ5Uc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:20:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9679 (0x25cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125475, serialNumber=DE9D64016291EA2A16F3B7956A0F4035B709E547 Validity Not Before: Nov 4 14:20:40 2025 GMT Not After : Nov 11 14:20:40 2025 GMT Subject: CN=690a0bb9-e149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:f9:3c:71:12:c0:d4:cf:a5:44:0d:fa:7c:19: e3:09:a5:1b:41:08:7f:e9:b1:02:cb:ba:74:b4:ce: a5:a3:20:58:d7:e3:b7:d6:12:50:7c:d7:78:e8:0f: 6b:7c:75:90:03:d1:18:79:50:bd:4d:90:23:9f:9b: 69:c3:80:b9:0c:a7:2b:f3:f3:71:12:77:73:c1:84: 33:cb:42:92:99:49:68:63:10:de:1b:8b:8d:2d:ed: 72:ff:82:b5:12:31:00:19:a7:e8:71:25:e3:a2:4b: 96:5d:fe:df:e2:61:12:34:e2:d2:b4:8e:6a:1f:47: 80:84:5c:07:71:c9:cd:83:00:a7:d1:c2:7d:a9:fd: 75:09:1e:d7:29:69:20:43:e6:26:2b:ef:95:d9:49: 7c:93:60:02:20:1e:a7:de:5d:4d:00:63:2e:3c:2a: 08:d8:da:f0:ef:46:81:eb:24:8a:bd:7b:c8:4a:80: cc:21:79:f3:f6:bc:ba:77:b9:bc:96:c4:90:39:59: 74:a5:56:a3:e3:6d:f9:e8:35:5c:e6:0b:31:7a:3b: ae:17:4e:5b:95:c1:50:79:54:34:4f:62:33:90:99: 5b:ba:7a:69:08:c1:4c:fc:3d:bf:85:7c:da:4c:34: bd:6c:4b:88:4c:3a:7f:b7:26:bc:66:ca:59:49:bf: cc:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:60:DE:BA:E4:5B:AE:6A:E4:52:D6:A0:58:2B:CA:64:D9:0E:D4:02 X509v3 Authority Key Identifier: keyid:DE:9D:64:01:62:91:EA:2A:16:F3:B7:95:6A:0F:40:35:B7:09:E5:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3p1kAWKR6ioW87eVag9ANbcJ5Uc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:c3:92:5f:6e:8a:67:a8:4f:89:54:db:5c:fb:b1:7d:0f:27: b9:29:d9:78:d0:c8:7b:38:f3:45:14:fd:b5:34:5c:2e:d5:2e: 55:fd:2c:dc:d6:6d:3f:66:b7:25:90:aa:25:5b:ad:47:43:49: 14:8d:38:b1:55:b9:67:e8:f4:36:9b:e2:27:03:79:fe:dd:60: 69:1f:41:bd:a4:c0:4b:ca:b6:9d:80:7e:2a:a5:a8:92:2b:ed: bd:5e:c0:e7:ce:51:1c:37:32:76:25:51:ce:e2:63:95:19:23: d4:36:6f:ff:fd:05:b9:83:58:cf:81:bf:38:65:34:26:8b:ad: bd:c4:a1:3c:27:46:31:34:64:97:ad:c2:b2:f5:89:1c:7f:41: 51:ca:bb:9c:6c:43:5d:2a:47:3c:d0:64:98:be:7d:1f:b1:51: 66:8e:ca:f8:bf:ea:a6:1e:c2:32:24:b2:26:6f:b4:5b:eb:57: 11:67:36:b3:59:d4:c0:17:c9:e5:dc:c4:19:c2:97:e3:c2:bb: ac:eb:13:e6:cb:fd:39:85:ad:17:1c:57:47:92:38:22:40:d9: 5e:1c:68:b4:54:10:8b:c2:b5:f7:c6:61:c0:86:6a:2b:9f:2b: 24:03:ac:00:aa:58:80:43:ba:5b:ee:b2:76:31:73:5c:f5:d6: 2a:41:36:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJc8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU0NzUxMTAvBgNVBAUTKERFOUQ2NDAxNjI5MUVBMkExNkYzQjc5NTZBMEY0MDM1 QjcwOUU1NDcwHhcNMjUxMTA0MTQyMDQwWhcNMjUxMTExMTQyMDQwWjAYMRYwFAYD VQQDEw02OTBhMGJiOS1lMTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+vk8cRLA1M+lRA36fBnjCaUbQQh/6bECy7p0tM6loyBY1+O31hJQfNd46A9r fHWQA9EYeVC9TZAjn5tpw4C5DKcr8/NxEndzwYQzy0KSmUloYxDeG4uNLe1y/4K1 EjEAGafocSXjokuWXf7f4mESNOLStI5qH0eAhFwHccnNgwCn0cJ9qf11CR7XKWkg Q+YmK++V2Ul8k2ACIB6n3l1NAGMuPCoI2Nrw70aB6ySKvXvISoDMIXnz9ry6d7m8 lsSQOVl0pVaj42356DVc5gsxejuuF05blcFQeVQ0T2IzkJlbunppCMFM/D2/hXza TDS9bEuITDp/tya8ZspZSb/MdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMtg3rrk W65q5FLWoFgrymTZDtQCMB8GA1UdIwQYMBaAFN6dZAFikeoqFvO3lWoPQDW3CeVH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTQ3NS84RDk0NzFGNjI5 MDYxMUU1OTNCRkM2MjZDNEY5QUUwMi8zcDFrQVdLUjZpb1c4N2VWYWc5QU5iY0o1 VWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzNwMWtBV0tSNmlvVzg3ZVZhZzlBTmJjSjVVYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTQ3NS84RDk0NzFGNjI5MDYxMUU1OTNCRkM2MjZDNEY5QUUwMi8zcDFrQVdLUjZp b1c4N2VWYWc5QU5iY0o1VWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTw5JfbopnqE+JVNtc+7F9Dye5Kdl40Mh7OPNFFP21NFwu1S5V/Szc 1m0/ZrclkKolW61HQ0kUjTixVbln6PQ2m+InA3n+3WBpH0G9pMBLyradgH4qpaiS K+29XsDnzlEcNzJ2JVHO4mOVGSPUNm///QW5g1jPgb84ZTQmi629xKE8J0YxNGSX rcKy9Ykcf0FRyrucbENdKkc80GSYvn0fsVFmjsr4v+qmHsIyJLImb7Rb61cRZzaz WdTAF8nl3MQZwpfjwrus6xPmy/05ha0XHFdHkjgiQNleHGi0VBCLwrX3xmHAhmor nyskA6wAqliAQ7pb7rJ2MXNc9dYqQTZC -----END CERTIFICATE-----Generated at Tue Nov 4 21:35:49 2025 by rpki-client