$ rpki-client -vvf rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.mft File: mdb3fuCkNuVIfpjO5VK2S17GWxM.mft (raw, json) Hash identifier: tmSuHxfrNsUj8o8WqDIRDgxzVybAsuGj2IrrdeOO2ko= Subject key identifier: C1:0C:0F:0F:30:1B:8C:25:68:1E:49:71:31:27:E6:C3:9E:D7:A4:5D Authority key identifier: 99:D6:F7:7E:E0:A4:36:E5:48:7E:98:CE:E5:52:B6:4B:5E:C6:5B:13 Certificate issuer: /CN=A912A799/serialNumber=99D6F77EE0A436E5487E98CEE552B64B5EC65B13 Certificate serial: 34D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mdb3fuCkNuVIfpjO5VK2S17GWxM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.mft Manifest number: 34D3 Signing time: Tue 04 Nov 2025 15:14:08 +0000 Manifest this update: Tue 04 Nov 2025 15:14:07 +0000 Manifest next update: Tue 11 Nov 2025 15:14:07 +0000 Files and hashes: 1: mdb3fuCkNuVIfpjO5VK2S17GWxM.crl (hash: Gfqf/ZRso85bM70AmAtUxAC7GRfB+NJDU2l451+k620=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.crl rsync://rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mdb3fuCkNuVIfpjO5VK2S17GWxM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13524 (0x34d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A799, serialNumber=99D6F77EE0A436E5487E98CEE552B64B5EC65B13 Validity Not Before: Nov 4 15:14:07 2025 GMT Not After : Nov 11 15:14:07 2025 GMT Subject: CN=690a1840-b48a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c8:c5:a0:56:ef:4f:2e:95:9c:83:73:4a:22: 12:13:3e:3e:31:cd:b0:a3:2c:75:3f:59:4b:0a:53: 67:de:a7:85:e9:50:a0:a2:c5:53:cc:91:d5:e5:d8: 7e:b9:2e:ee:d8:ca:b0:3f:04:cf:c4:4f:35:27:ed: 20:6b:0d:f8:4f:93:31:3e:41:97:76:fc:bc:13:21: ea:d0:2e:5a:d6:80:29:44:fb:c6:81:5c:a4:06:9a: b4:65:19:72:2f:56:e6:3c:78:00:fe:42:da:65:f1: 66:9d:f9:ac:49:f6:a2:5a:44:c6:b6:43:cd:65:c0: 00:2c:8d:65:be:7e:5d:e5:2d:f6:93:ea:84:e6:77: cd:f2:ef:5c:b7:ad:be:ea:91:a9:c5:e0:2b:81:6d: cb:3b:af:1f:eb:92:c4:08:8e:55:9e:ba:13:0b:b8: 81:37:a9:33:c6:d9:4b:5c:e6:94:36:47:49:48:5d: 6a:f8:a0:5b:4e:fc:54:ac:4c:5d:55:de:3b:f4:91: 1f:31:fe:56:64:54:35:8c:78:68:47:30:74:5f:6c: 54:f0:b1:ff:5c:c7:b1:08:26:8a:9e:54:36:33:45: 1b:55:50:08:cf:f9:18:ca:30:ac:b5:90:8c:0e:91: 96:89:b8:30:7f:7f:ff:9e:28:9d:a0:44:a2:db:09: 1d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:0C:0F:0F:30:1B:8C:25:68:1E:49:71:31:27:E6:C3:9E:D7:A4:5D X509v3 Authority Key Identifier: keyid:99:D6:F7:7E:E0:A4:36:E5:48:7E:98:CE:E5:52:B6:4B:5E:C6:5B:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mdb3fuCkNuVIfpjO5VK2S17GWxM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:64:c5:60:89:b2:fc:1c:92:6a:eb:66:cc:32:bf:b4:7f:37: 5e:25:a0:97:60:92:cc:3f:da:5e:fa:47:f6:4e:9e:be:66:03: bb:94:99:88:1e:53:4c:4e:81:47:9b:d4:f2:3f:de:57:72:51: 0f:53:48:0a:cb:aa:ed:62:c4:db:49:91:a5:f7:97:0a:b0:b3: 90:3b:84:07:44:85:09:44:ab:ee:b1:ea:f2:86:80:7b:90:f0: c7:0e:0f:e5:b7:74:95:9d:eb:2c:ec:74:8e:bd:9e:c3:a6:57: 7f:68:b4:2f:cb:26:11:f6:65:7f:80:f1:64:c1:32:e5:34:c4: de:91:b2:5f:c8:ad:b3:d5:68:8c:27:91:af:ab:7a:4a:df:b0: cc:be:26:fc:e3:37:b7:6e:ab:d4:12:68:e5:69:bb:b2:2b:1a: 45:3c:6f:b3:7c:b6:42:e9:7a:1e:0b:b3:2c:5a:d4:5b:06:7a: 7c:16:b8:ca:54:59:10:22:b1:e6:4f:4d:c1:7d:9f:1a:da:d0: c4:69:b5:65:42:14:14:56:a5:77:c4:c5:af:4d:98:fd:fb:95: bd:25:8a:7f:8f:bb:da:3c:e5:8a:e9:5e:93:5c:a0:33:64:1e: b1:e8:13:4b:8d:1a:0e:12:97:4c:0e:ba:3c:61:2c:ab:05:3f: ed:c5:f9:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE3OTkxMTAvBgNVBAUTKDk5RDZGNzdFRTBBNDM2RTU0ODdFOThDRUU1NTJCNjRC NUVDNjVCMTMwHhcNMjUxMTA0MTUxNDA3WhcNMjUxMTExMTUxNDA3WjAYMRYwFAYD VQQDEw02OTBhMTg0MC1iNDhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw8jFoFbvTy6VnINzSiISEz4+Mc2woyx1P1lLClNn3qeF6VCgosVTzJHV5dh+ uS7u2MqwPwTPxE81J+0gaw34T5MxPkGXdvy8EyHq0C5a1oApRPvGgVykBpq0ZRly L1bmPHgA/kLaZfFmnfmsSfaiWkTGtkPNZcAALI1lvn5d5S32k+qE5nfN8u9ct62+ 6pGpxeArgW3LO68f65LECI5VnroTC7iBN6kzxtlLXOaUNkdJSF1q+KBbTvxUrExd Vd479JEfMf5WZFQ1jHhoRzB0X2xU8LH/XMexCCaKnlQ2M0UbVVAIz/kYyjCstZCM DpGWibgwf3//niidoESi2wkdDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMEMDw8w G4wlaB5JcTEn5sOe16RdMB8GA1UdIwQYMBaAFJnW937gpDblSH6YzuVStktexlsT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTc5OS8wREE5RjAyRTFE QTYxMUUyQjgyQjIzOUQwOEIwMkNEMi9tZGIzZnVDa051VklmcGpPNVZLMlMxN0dX eE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21kYjNmdUNrTnVWSWZwak81VksyUzE3R1d4TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTc5OS8wREE5RjAyRTFEQTYxMUUyQjgyQjIzOUQwOEIwMkNEMi9tZGIzZnVDa051 VklmcGpPNVZLMlMxN0dXeE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWZMVgibL8HJJq62bMMr+0fzdeJaCXYJLMP9pe+kf2Tp6+ZgO7lJmI HlNMToFHm9TyP95XclEPU0gKy6rtYsTbSZGl95cKsLOQO4QHRIUJRKvuseryhoB7 kPDHDg/lt3SVness7HSOvZ7Dpld/aLQvyyYR9mV/gPFkwTLlNMTekbJfyK2z1WiM J5Gvq3pK37DMvib84ze3bqvUEmjlabuyKxpFPG+zfLZC6XoeC7MsWtRbBnp8FrjK VFkQIrHmT03BfZ8a2tDEabVlQhQUVqV3xMWvTZj9+5W9JYp/j7vaPOWK6V6TXKAz ZB6x6BNLjRoOEpdMDro8YSyrBT/txfmg -----END CERTIFICATE-----Generated at Wed Nov 5 05:50:11 2025 by rpki-client