$ rpki-client -vvf rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.mft File: 3WHCKpWyjv3jeDEqdZ-sr-5AbBg.mft (raw, json) Hash identifier: uB+1Jz89DbwqdoBR94MrQEJEwGyF//hbQN3Y4eFH/qQ= Subject key identifier: 1B:5F:A4:E6:C2:50:3E:21:5E:FD:AD:9C:E7:5D:A2:1C:FC:21:FF:AD Authority key identifier: DD:61:C2:2A:95:B2:8E:FD:E3:78:31:2A:75:9F:AC:AF:EE:40:6C:18 Certificate issuer: /CN=A912918B/serialNumber=DD61C22A95B28EFDE378312A759FACAFEE406C18 Certificate serial: 085B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.mft Manifest number: 0842 Signing time: Tue 04 Nov 2025 20:53:13 +0000 Manifest this update: Tue 04 Nov 2025 20:53:12 +0000 Manifest next update: Tue 11 Nov 2025 20:53:12 +0000 Files and hashes: 1: 3WHCKpWyjv3jeDEqdZ-sr-5AbBg.crl (hash: 7TfztnhX4QUcbZHFw6QpEAsDwyHfwCHTYF6i69BOeQI=) 2: E54ED53A8D7311F0B0F9AE62C4F9AE02.roa (hash: TsqETkD2u8/g/tvy6c4rcdVrAda/jhvYOMUCzR3OzIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.crl rsync://rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:53:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2139 (0x85b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912918B, serialNumber=DD61C22A95B28EFDE378312A759FACAFEE406C18 Validity Not Before: Nov 4 20:53:12 2025 GMT Not After : Nov 11 20:53:12 2025 GMT Subject: CN=690a67b9-e4e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:38:c3:e9:57:5a:40:6b:24:30:e4:e6:00:c7: 70:b0:b9:54:1c:8e:3b:97:63:ce:57:5a:ff:5d:88: bb:f1:f6:9c:05:30:b3:38:f0:54:3d:7f:c1:3e:b5: 0f:11:36:c9:d2:28:15:c1:21:9e:38:ce:70:71:f2: 0f:44:f8:3d:35:6d:5f:47:51:44:66:54:3c:4b:92: 51:52:d9:03:36:6a:d4:f5:57:02:2d:af:8a:9e:be: a9:01:61:5b:58:18:e4:f0:ff:6a:37:e7:be:fd:25: 08:50:10:d5:de:c4:b9:fe:4d:50:49:95:b3:1a:12: ec:5a:09:ed:e4:00:2d:be:97:4f:a3:6b:18:1b:07: c2:65:2b:f4:d1:3d:31:1a:97:1b:c7:29:d3:c7:fb: eb:0e:e3:4b:a9:d6:51:5f:5b:19:21:1e:17:55:5a: 9a:bc:cb:0c:72:bc:0f:03:07:65:2e:e3:be:c8:78: c9:83:ed:f4:d1:82:d6:9a:36:b5:5c:4a:0b:77:92: bf:53:a2:0c:6d:be:e7:68:81:af:f5:30:b9:7a:4d: 18:6d:89:86:2d:d6:8d:b1:e3:10:41:f4:a7:7a:83: 9a:79:43:92:4b:76:9b:40:5a:8f:40:53:1a:9a:32: c3:96:97:9e:8d:5e:c1:aa:c3:96:1d:d5:cc:5c:df: 2b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:5F:A4:E6:C2:50:3E:21:5E:FD:AD:9C:E7:5D:A2:1C:FC:21:FF:AD X509v3 Authority Key Identifier: keyid:DD:61:C2:2A:95:B2:8E:FD:E3:78:31:2A:75:9F:AC:AF:EE:40:6C:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:36:ad:54:5b:b5:b8:1e:a7:c5:57:5c:fa:98:4a:74:42:1b: a4:0c:0a:e8:8f:82:20:8d:eb:5a:e8:d5:59:c2:23:9c:87:18: 71:04:a6:48:cd:64:c5:c7:45:24:9a:fe:55:29:c0:a5:c9:8d: 71:ba:08:45:b2:13:26:b5:67:6a:79:8c:d0:ef:62:88:66:1a: 8d:9b:ee:9b:e1:66:80:91:51:fa:5b:f9:7f:4e:37:d7:a2:c7: 11:65:90:c4:50:47:05:e1:74:e1:74:73:d9:37:34:e6:6e:af: 99:43:67:0f:b8:f6:72:28:13:08:6e:d6:1c:75:7a:44:d3:55: a1:37:a1:94:3d:60:20:dc:66:c4:20:b5:ed:fb:e9:9a:ca:fc: dc:cf:79:f1:00:6d:d7:f6:6c:bc:06:43:0b:ed:6b:0a:9c:3d: 08:47:d4:63:8d:cf:2b:79:07:85:52:38:a1:f3:dd:9e:49:63: 8b:de:83:31:ad:5b:f1:f4:bb:e4:a1:cf:55:ee:45:84:66:cf: bf:e1:b1:34:36:ab:b9:6d:8c:15:00:5b:95:ee:14:76:74:25: 95:d6:bc:b2:72:cf:ea:46:71:19:c5:41:00:60:e3:12:fc:a1: b1:bb:b3:26:73:bd:c0:da:37:27:a8:35:bd:a8:13:54:ee:cf: 1a:c7:84:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjkxOEIxMTAvBgNVBAUTKERENjFDMjJBOTVCMjhFRkRFMzc4MzEyQTc1OUZBQ0FG RUU0MDZDMTgwHhcNMjUxMTA0MjA1MzEyWhcNMjUxMTExMjA1MzEyWjAYMRYwFAYD VQQDEw02OTBhNjdiOS1lNGU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxzjD6VdaQGskMOTmAMdwsLlUHI47l2POV1r/XYi78facBTCzOPBUPX/BPrUP ETbJ0igVwSGeOM5wcfIPRPg9NW1fR1FEZlQ8S5JRUtkDNmrU9VcCLa+Knr6pAWFb WBjk8P9qN+e+/SUIUBDV3sS5/k1QSZWzGhLsWgnt5AAtvpdPo2sYGwfCZSv00T0x GpcbxynTx/vrDuNLqdZRX1sZIR4XVVqavMsMcrwPAwdlLuO+yHjJg+300YLWmja1 XEoLd5K/U6IMbb7naIGv9TC5ek0YbYmGLdaNseMQQfSneoOaeUOSS3abQFqPQFMa mjLDlpeejV7BqsOWHdXMXN8rWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBtfpObC UD4hXv2tnOddohz8If+tMB8GA1UdIwQYMBaAFN1hwiqVso7943gxKnWfrK/uQGwY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTE4Qi83RTBDRUVGQUVF QjUxMUVBQUE0RkFEMzJDNEY5QUUwMi8zV0hDS3BXeWp2M2plREVxZFotc3ItNUFi QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNXSENLcFd5anYzamVERXFkWi1zci01QWJCZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTE4Qi83RTBDRUVGQUVFQjUxMUVBQUE0RkFEMzJDNEY5QUUwMi8zV0hDS3BXeWp2 M2plREVxZFotc3ItNUFiQmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3Nq1UW7W4HqfFV1z6mEp0QhukDAroj4Igjeta6NVZwiOchxhxBKZI zWTFx0Ukmv5VKcClyY1xughFshMmtWdqeYzQ72KIZhqNm+6b4WaAkVH6W/l/TjfX oscRZZDEUEcF4XThdHPZNzTmbq+ZQ2cPuPZyKBMIbtYcdXpE01WhN6GUPWAg3GbE ILXt++mayvzcz3nxAG3X9my8BkML7WsKnD0IR9Rjjc8reQeFUjih892eSWOL3oMx rVvx9Lvkoc9V7kWEZs+/4bE0Nqu5bYwVAFuV7hR2dCWV1ryycs/qRnEZxUEAYOMS /KGxu7Mmc73A2jcnqDW9qBNU7s8ax4Rk -----END CERTIFICATE-----Generated at Wed Nov 5 16:41:37 2025 by rpki-client