$ rpki-client -vvf rpki.apnic.net/member_repository/A9127686/C74B1FFE304211ECAF185A10C4F9AE02/r3H1sWeV-bfPKyRYSAd-EWhbpvA.mft File: r3H1sWeV-bfPKyRYSAd-EWhbpvA.mft (raw, json) Hash identifier: zgYiwH86npz6oznB0+6vXcS7E/mTu1RgYm1YPX132xs= Subject key identifier: AB:30:D2:D1:6A:31:03:CF:FE:56:3B:52:45:E0:A8:40:0D:F0:66:57 Authority key identifier: AF:71:F5:B1:67:95:F9:B7:CF:2B:24:58:48:07:7E:11:68:5B:A6:F0 Certificate issuer: /CN=A9127686/serialNumber=AF71F5B16795F9B7CF2B245848077E11685BA6F0 Certificate serial: 0508 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3H1sWeV-bfPKyRYSAd-EWhbpvA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127686/C74B1FFE304211ECAF185A10C4F9AE02/r3H1sWeV-bfPKyRYSAd-EWhbpvA.mft Manifest number: 0502 Signing time: Tue 04 Nov 2025 23:44:09 +0000 Manifest this update: Tue 04 Nov 2025 23:44:08 +0000 Manifest next update: Tue 11 Nov 2025 23:44:08 +0000 Files and hashes: 1: r3H1sWeV-bfPKyRYSAd-EWhbpvA.crl (hash: 0x1hysXQdVpWA6i7U4C75Zs4iN8UaqnNWi93Ft7tyEg=) 2: 54BBE48A304411EC830F8610C4F9AE02.roa (hash: 8X5eBnJACDnF25R5obyjBzrkQFPgd4fVGHDaVysBGCI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127686/C74B1FFE304211ECAF185A10C4F9AE02/r3H1sWeV-bfPKyRYSAd-EWhbpvA.crl rsync://rpki.apnic.net/member_repository/A9127686/C74B1FFE304211ECAF185A10C4F9AE02/r3H1sWeV-bfPKyRYSAd-EWhbpvA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3H1sWeV-bfPKyRYSAd-EWhbpvA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:44:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1288 (0x508) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127686, serialNumber=AF71F5B16795F9B7CF2B245848077E11685BA6F0 Validity Not Before: Nov 4 23:44:08 2025 GMT Not After : Nov 11 23:44:08 2025 GMT Subject: CN=690a8fc8-0a45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:73:63:a7:e6:4a:c5:c3:01:d2:da:c9:32:cf: 1b:74:ba:9e:04:ae:7d:d9:2d:57:9b:3b:bc:01:3d: a6:db:7d:87:81:2d:06:78:81:8e:d5:11:62:0c:1d: 1d:36:a2:25:de:79:11:b5:54:68:15:7e:cd:ce:10: 30:9f:06:f0:60:03:6f:14:e5:13:dd:ba:1e:1c:86: d1:0e:58:6f:56:c0:27:0c:d0:5b:52:63:12:c2:6e: 53:29:32:7d:73:fd:e8:56:d5:f6:9a:34:f4:cf:aa: 24:e2:0d:6e:64:59:f2:6b:40:39:71:79:3d:4e:54: 6d:13:7a:f8:46:47:a2:0d:51:b1:4f:74:d8:6d:b5: c1:f9:ec:c6:21:9a:7a:30:84:1c:8d:ff:d9:29:08: 37:f6:cb:ae:4a:44:58:b6:1b:48:7a:4f:7b:e8:94: 11:cc:4e:44:d3:b2:ed:fc:2b:22:e2:f5:7a:aa:49: 05:8c:85:ea:84:7a:d4:12:a2:68:8e:24:ae:94:77: 06:41:13:ac:aa:f0:29:b4:3e:22:75:66:42:74:a2: d3:70:ff:ee:fb:b7:47:54:08:2b:a2:bb:92:ef:27: 74:bd:ff:7a:65:7f:62:ac:9c:6a:4e:66:67:63:7f: 80:b1:97:34:7f:c7:27:f5:44:fc:12:58:95:b7:08: fc:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:30:D2:D1:6A:31:03:CF:FE:56:3B:52:45:E0:A8:40:0D:F0:66:57 X509v3 Authority Key Identifier: keyid:AF:71:F5:B1:67:95:F9:B7:CF:2B:24:58:48:07:7E:11:68:5B:A6:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127686/C74B1FFE304211ECAF185A10C4F9AE02/r3H1sWeV-bfPKyRYSAd-EWhbpvA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3H1sWeV-bfPKyRYSAd-EWhbpvA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127686/C74B1FFE304211ECAF185A10C4F9AE02/r3H1sWeV-bfPKyRYSAd-EWhbpvA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:d1:eb:9a:04:cf:e9:f4:85:8c:bf:87:72:48:64:1c:70:db: 77:d1:b6:1f:29:84:f3:76:38:97:84:c6:63:11:53:00:36:b0: 4c:8a:94:24:31:22:44:bb:19:9d:03:6b:95:73:67:38:5a:bd: 9d:6c:ac:0f:a3:1b:ff:01:25:48:c6:2b:10:65:83:a0:14:0d: c9:0e:62:39:de:3c:73:61:77:a4:5e:2c:ab:4f:83:92:2f:b5: 4a:27:f0:d2:d0:20:fe:b2:5e:33:20:90:9f:ae:f4:44:1f:4a: 18:48:6c:36:46:30:a1:ec:26:fc:f5:c6:43:7b:ed:56:5d:a0: 51:75:d7:4e:0f:fb:40:86:15:92:f2:53:0b:7d:99:ec:da:dc: 74:16:f3:57:fb:43:a4:b0:98:47:e4:78:bb:dc:98:2c:48:fe: 2b:93:44:e5:24:43:b9:a1:4c:6b:fa:d3:23:7c:1a:1c:8e:22: 2e:53:aa:7e:d9:c8:f9:c8:40:7b:6f:1b:96:79:4f:32:3f:91: 80:80:7b:b7:88:d0:42:f2:f3:e7:00:a9:ef:c5:e3:e2:c5:d9: 90:f1:46:0b:a0:8f:07:a9:4b:3b:8e:d8:f2:8c:49:0d:92:91: 03:40:75:ea:c3:98:2c:64:aa:6a:45:41:08:da:26:02:44:4f: 7e:89:0a:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc2ODYxMTAvBgNVBAUTKEFGNzFGNUIxNjc5NUY5QjdDRjJCMjQ1ODQ4MDc3RTEx Njg1QkE2RjAwHhcNMjUxMTA0MjM0NDA4WhcNMjUxMTExMjM0NDA4WjAYMRYwFAYD VQQDEw02OTBhOGZjOC0wYTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlHNjp+ZKxcMB0trJMs8bdLqeBK592S1Xmzu8AT2m232HgS0GeIGO1RFiDB0d NqIl3nkRtVRoFX7NzhAwnwbwYANvFOUT3boeHIbRDlhvVsAnDNBbUmMSwm5TKTJ9 c/3oVtX2mjT0z6ok4g1uZFnya0A5cXk9TlRtE3r4RkeiDVGxT3TYbbXB+ezGIZp6 MIQcjf/ZKQg39suuSkRYthtIek976JQRzE5E07Lt/Csi4vV6qkkFjIXqhHrUEqJo jiSulHcGQROsqvAptD4idWZCdKLTcP/u+7dHVAgroruS7yd0vf96ZX9irJxqTmZn Y3+AsZc0f8cn9UT8EliVtwj83wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKsw0tFq MQPP/lY7UkXgqEAN8GZXMB8GA1UdIwQYMBaAFK9x9bFnlfm3zyskWEgHfhFoW6bw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzY4Ni9DNzRCMUZGRTMw NDIxMUVDQUYxODVBMTBDNEY5QUUwMi9yM0gxc1dlVi1iZlBLeVJZU0FkLUVXaGJw dkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IzSDFzV2VWLWJmUEt5UllTQWQtRVdoYnB2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzY4Ni9DNzRCMUZGRTMwNDIxMUVDQUYxODVBMTBDNEY5QUUwMi9yM0gxc1dlVi1i ZlBLeVJZU0FkLUVXaGJwdkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBy0euaBM/p9IWMv4dySGQccNt30bYfKYTzdjiXhMZjEVMANrBMipQk MSJEuxmdA2uVc2c4Wr2dbKwPoxv/ASVIxisQZYOgFA3JDmI53jxzYXekXiyrT4OS L7VKJ/DS0CD+sl4zIJCfrvREH0oYSGw2RjCh7Cb89cZDe+1WXaBRdddOD/tAhhWS 8lMLfZns2tx0FvNX+0OksJhH5Hi73JgsSP4rk0TlJEO5oUxr+tMjfBocjiIuU6p+ 2cj5yEB7bxuWeU8yP5GAgHu3iNBC8vPnAKnvxePixdmQ8UYLoI8HqUs7jtjyjEkN kpEDQHXqw5gsZKpqRUEI2iYCRE9+iQqU -----END CERTIFICATE-----Generated at Wed Nov 5 20:54:44 2025 by rpki-client