$ rpki-client -vvf rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft File: 3604bKySNIOAxXSS2xjyvIScUoY.mft (raw, json) Hash identifier: Vmt6XIkeStzXJvXKinKbNsHzj2BXA5fy3RNPr4idxok= Subject key identifier: ED:41:FA:57:07:70:EF:E6:15:6E:69:8C:20:D5:B6:D9:1E:79:BC:84 Authority key identifier: DF:AD:38:6C:AC:92:34:83:80:C5:74:92:DB:18:F2:BC:84:9C:52:86 Certificate issuer: /CN=A913E36B/serialNumber=DFAD386CAC92348380C57492DB18F2BC849C5286 Certificate serial: 099E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft Manifest number: 0986 Signing time: Tue 04 Nov 2025 20:11:10 +0000 Manifest this update: Tue 04 Nov 2025 20:11:09 +0000 Manifest next update: Tue 11 Nov 2025 20:11:09 +0000 Files and hashes: 1: 3604bKySNIOAxXSS2xjyvIScUoY.crl (hash: 9Gbu51XpiZGVoWWoN2GkznGpZyPOG6Rh/c690k4oqjI=) 2: 361E40F8B7B411F09BC03F67C4F9AE02.roa (hash: vSHaQ8x5/dUFJ2VaCOEg3IfJ6i5TW1m1+SlMwO7G4nc=) 3: F568EF1A7F1711F094D2F035C4F9AE02.roa (hash: zT0Sz7g9V+D+Ya+GE9O18/USSfPNOgS69nwUWk/3R4k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.crl rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:11:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2462 (0x99e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E36B, serialNumber=DFAD386CAC92348380C57492DB18F2BC849C5286 Validity Not Before: Nov 4 20:11:09 2025 GMT Not After : Nov 11 20:11:09 2025 GMT Subject: CN=690a5ddd-7b30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:35:16:9d:7a:d9:0c:21:c1:57:5f:69:d0:74: ff:9e:ee:17:1f:7b:00:80:80:bb:b5:05:07:9b:9f: 6a:20:80:49:49:ff:5d:26:7f:cc:26:44:41:51:f5: 07:2e:70:57:4c:da:5d:94:30:cc:b9:5e:a9:e1:ef: df:3b:14:d0:17:31:02:96:fd:9f:c3:e7:d3:a1:7b: c2:4c:9f:8d:f4:c8:cf:cd:c9:2e:d4:c6:5e:e5:3c: 5f:28:f9:7d:96:0d:56:d5:17:5d:d1:d4:13:20:19: 50:8c:52:f4:72:c3:45:03:e8:86:aa:fb:f8:bb:81: 1f:2e:af:1d:67:32:c5:95:1b:f0:64:3e:d8:ee:fe: 84:95:09:59:59:f2:a1:a3:0f:a4:7f:f4:85:c9:e0: 5c:d7:e2:44:68:61:eb:9d:fd:3d:2e:96:18:b7:16: 26:86:6e:36:a9:40:92:03:cc:da:5c:02:27:6d:27: 5d:95:fe:ec:96:f2:79:78:1e:54:3f:34:48:62:c8: 38:ba:ee:ee:2a:a7:15:b4:44:37:60:30:5a:c5:7f: 53:27:ea:d7:f7:b8:d3:df:1e:91:b2:23:92:d8:a8: 85:54:fc:30:00:c2:99:fe:ea:33:06:e8:4f:f9:8b: ad:07:ee:80:e4:ca:42:46:8a:f6:9f:fc:0b:14:6c: 52:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:41:FA:57:07:70:EF:E6:15:6E:69:8C:20:D5:B6:D9:1E:79:BC:84 X509v3 Authority Key Identifier: keyid:DF:AD:38:6C:AC:92:34:83:80:C5:74:92:DB:18:F2:BC:84:9C:52:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:b4:60:80:36:fd:c4:00:01:1b:ca:88:7f:13:a6:4d:54:dc: a7:34:2a:c7:88:c3:0d:21:a1:49:61:2d:f4:4e:99:b5:e7:22: 3a:56:15:bd:21:e9:ac:85:a9:4b:6b:91:bf:74:43:18:56:35: bc:46:8c:19:97:f2:31:a8:68:40:ed:59:ef:a5:9a:e9:d7:cf: 88:df:f3:5d:33:96:ba:20:1a:82:a4:6b:50:17:87:26:6f:41: cb:9c:32:34:7a:16:be:db:fa:4f:25:32:9d:48:f0:fb:17:a6: 14:56:df:d1:9c:15:e6:7c:ea:8f:d1:4d:03:e7:58:66:80:82: d4:72:43:13:e2:a7:36:3d:2b:52:94:8f:13:b8:69:31:49:51: f8:bd:9c:af:e0:2b:a3:f5:52:f1:50:d4:14:34:06:d3:e2:b3: 54:45:09:b3:64:a4:e8:5b:68:33:fc:10:92:a2:a0:9d:1e:e1: 76:bf:8d:73:c4:87:a6:8d:62:06:04:de:3f:35:2c:ee:71:c0: 71:75:31:da:0b:8e:71:05:12:97:a4:1e:01:c8:08:d8:3b:30: 06:bc:fb:b5:8b:8d:97:a2:9b:d7:3f:28:f1:c2:4d:4d:14:40: 18:62:09:36:ba:a0:a6:b7:f1:bb:53:a4:61:de:3e:c0:ad:d5: 3a:83:35:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0UzNkIxMTAvBgNVBAUTKERGQUQzODZDQUM5MjM0ODM4MEM1NzQ5MkRCMThGMkJD ODQ5QzUyODYwHhcNMjUxMTA0MjAxMTA5WhcNMjUxMTExMjAxMTA5WjAYMRYwFAYD VQQDEw02OTBhNWRkZC03YjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAozUWnXrZDCHBV19p0HT/nu4XH3sAgIC7tQUHm59qIIBJSf9dJn/MJkRBUfUH LnBXTNpdlDDMuV6p4e/fOxTQFzEClv2fw+fToXvCTJ+N9MjPzcku1MZe5TxfKPl9 lg1W1Rdd0dQTIBlQjFL0csNFA+iGqvv4u4EfLq8dZzLFlRvwZD7Y7v6ElQlZWfKh ow+kf/SFyeBc1+JEaGHrnf09LpYYtxYmhm42qUCSA8zaXAInbSddlf7slvJ5eB5U PzRIYsg4uu7uKqcVtEQ3YDBaxX9TJ+rX97jT3x6RsiOS2KiFVPwwAMKZ/uozBuhP +YutB+6A5MpCRor2n/wLFGxS2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO1B+lcH cO/mFW5pjCDVttkeebyEMB8GA1UdIwQYMBaAFN+tOGyskjSDgMV0ktsY8ryEnFKG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTM2Qi83QzJDNjI0MEEw OTExMUVBQTk0MjdDNDRDNEY5QUUwMi8zNjA0Ykt5U05JT0F4WFNTMnhqeXZJU2NV b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzM2MDRiS3lTTklPQXhYU1MyeGp5dklTY1VvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTM2Qi83QzJDNjI0MEEwOTExMUVBQTk0MjdDNDRDNEY5QUUwMi8zNjA0Ykt5U05J T0F4WFNTMnhqeXZJU2NVb1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPtGCANv3EAAEbyoh/E6ZNVNynNCrHiMMNIaFJYS30Tpm15yI6VhW9 IemshalLa5G/dEMYVjW8RowZl/IxqGhA7VnvpZrp18+I3/NdM5a6IBqCpGtQF4cm b0HLnDI0eha+2/pPJTKdSPD7F6YUVt/RnBXmfOqP0U0D51hmgILUckMT4qc2PStS lI8TuGkxSVH4vZyv4Cuj9VLxUNQUNAbT4rNURQmzZKToW2gz/BCSoqCdHuF2v41z xIemjWIGBN4/NSzuccBxdTHaC45xBRKXpB4ByAjYOzAGvPu1i42XopvXPyjxwk1N FEAYYgk2uqCmt/G7U6Rh3j7ArdU6gzV/ -----END CERTIFICATE-----Generated at Wed Nov 5 13:37:58 2025 by rpki-client