$ rpki-client -vvf rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft File: 3jE8s1zQdq_lw3ePBeXKFc8zevk.mft (raw, json) Hash identifier: CBO8EfAj9wmvK9BMUmueBb25pmzN2jZyknN+1PvGo0Y= Subject key identifier: 4E:00:69:AE:31:3C:3B:B3:07:B8:93:8E:D7:FC:5F:7F:E2:24:18:FB Authority key identifier: DE:31:3C:B3:5C:D0:76:AF:E5:C3:77:8F:05:E5:CA:15:CF:33:7A:F9 Certificate issuer: /CN=A9148AC4/serialNumber=DE313CB35CD076AFE5C3778F05E5CA15CF337AF9 Certificate serial: 2D04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3jE8s1zQdq_lw3ePBeXKFc8zevk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft Manifest number: 2CEE Signing time: Tue 04 Nov 2025 15:33:51 +0000 Manifest this update: Tue 04 Nov 2025 15:33:51 +0000 Manifest next update: Tue 11 Nov 2025 15:33:51 +0000 Files and hashes: 1: 3jE8s1zQdq_lw3ePBeXKFc8zevk.crl (hash: de3mqHTYw1E5uczyFivnsl/VuRI9nTCtSyHAarFGEIo=) 2: E33945D6B0ED11E5B7779F44C4F9AE02.roa (hash: R9f6Z3Uevp4d36wvfS3ESJSWBBwm4wuAIByOXNTGRgE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.crl rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3jE8s1zQdq_lw3ePBeXKFc8zevk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:33:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11524 (0x2d04) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148AC4, serialNumber=DE313CB35CD076AFE5C3778F05E5CA15CF337AF9 Validity Not Before: Nov 4 15:33:51 2025 GMT Not After : Nov 11 15:33:51 2025 GMT Subject: CN=690a1cdf-f347 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6c:c4:9e:56:9b:01:85:59:15:54:6a:b7:e7: 69:ee:19:29:11:c2:69:c1:08:d2:d8:17:bd:de:a2: 47:6e:93:34:59:82:5c:70:fb:2b:dd:31:59:d5:a7: cd:82:81:8c:fd:15:8e:3b:98:22:b1:51:53:86:66: 9f:66:c2:0e:2c:f9:cb:8f:3d:78:1c:01:2f:74:4a: 0f:9d:ce:6e:0b:0c:e3:df:92:be:a2:23:8c:dc:c2: 68:bf:b9:55:92:2b:f3:14:8c:9d:a4:d2:41:5d:87: 36:11:ca:d2:b5:8c:a0:06:a8:cc:02:e8:35:8f:d3: 64:89:13:a2:1c:e5:5c:29:9c:d5:dd:5b:a6:0e:6e: 60:3e:b3:1c:35:dd:b1:15:96:83:13:ac:32:07:95: 4f:77:4a:a2:cb:65:8c:7d:cf:75:6f:6b:23:f3:76: 11:21:82:29:3a:e0:26:4e:cb:50:51:e6:43:f2:26: e1:1c:72:f0:ec:c2:7c:05:0d:fa:c4:b7:4f:d9:60: 73:b0:87:6b:2e:fb:2d:01:69:a6:47:56:76:a8:47: d8:62:da:bf:57:7f:2b:a7:a6:b3:f8:e8:c6:f2:60: 16:c8:1c:22:21:5d:c3:a0:2d:b3:06:9c:c6:9d:52: a8:11:76:3b:a0:c6:eb:74:6d:1d:1a:1d:a9:cc:52: 80:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:00:69:AE:31:3C:3B:B3:07:B8:93:8E:D7:FC:5F:7F:E2:24:18:FB X509v3 Authority Key Identifier: keyid:DE:31:3C:B3:5C:D0:76:AF:E5:C3:77:8F:05:E5:CA:15:CF:33:7A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3jE8s1zQdq_lw3ePBeXKFc8zevk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:c1:35:39:9a:48:1d:ba:74:58:38:45:c6:e2:ef:7e:55:67: 21:b5:c8:10:c5:c1:bd:68:9c:6e:67:2f:62:46:ab:83:15:20: 8d:a9:4c:15:c7:51:14:61:17:12:c5:ed:27:c3:50:d6:a5:2e: d1:d7:c6:11:e0:f0:71:4b:4b:8f:63:94:b6:06:9f:9e:8a:9d: 6c:39:61:a5:23:2e:29:c6:ee:e0:84:b7:cf:5f:31:16:9e:52: c0:4b:fb:30:6b:38:eb:c1:12:31:51:91:8f:ae:76:4e:20:e0: 05:a3:d1:b2:b4:29:97:a7:15:87:14:6a:0d:d9:45:a6:0f:e3: 5b:de:f1:ac:86:d6:5b:19:fa:ce:f5:d6:c9:4a:28:68:b5:4d: ce:02:f1:76:be:6f:c0:6e:36:63:f8:38:d2:d9:7c:9c:b6:b4: 40:6a:94:e9:30:f7:f8:15:f4:f3:fb:32:df:97:d5:e6:9a:34: 89:3c:a2:c0:5f:7e:2e:54:02:30:c3:fd:89:df:59:33:f9:6c: c1:a1:bf:30:f2:f1:d5:45:32:51:87:0b:8d:f7:9b:fd:4f:12: 2d:48:a7:3f:7a:3e:d4:6f:e7:ca:79:44:d0:09:6c:07:e6:44: ce:b0:8e:f1:9e:6f:75:ee:45:8f:33:a7:80:d6:40:6a:80:23: 2e:d8:ca:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhBQzQxMTAvBgNVBAUTKERFMzEzQ0IzNUNEMDc2QUZFNUMzNzc4RjA1RTVDQTE1 Q0YzMzdBRjkwHhcNMjUxMTA0MTUzMzUxWhcNMjUxMTExMTUzMzUxWjAYMRYwFAYD VQQDEw02OTBhMWNkZi1mMzQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvmzEnlabAYVZFVRqt+dp7hkpEcJpwQjS2Be93qJHbpM0WYJccPsr3TFZ1afN goGM/RWOO5gisVFThmafZsIOLPnLjz14HAEvdEoPnc5uCwzj35K+oiOM3MJov7lV kivzFIydpNJBXYc2EcrStYygBqjMAug1j9NkiROiHOVcKZzV3VumDm5gPrMcNd2x FZaDE6wyB5VPd0qiy2WMfc91b2sj83YRIYIpOuAmTstQUeZD8ibhHHLw7MJ8BQ36 xLdP2WBzsIdrLvstAWmmR1Z2qEfYYtq/V38rp6az+OjG8mAWyBwiIV3DoC2zBpzG nVKoEXY7oMbrdG0dGh2pzFKADQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE4Aaa4x PDuzB7iTjtf8X3/iJBj7MB8GA1UdIwQYMBaAFN4xPLNc0Hav5cN3jwXlyhXPM3r5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEFDNC8yMDZCQzg2Q0FF NkExMUUzOTM3OUQ1NTA1OTExRUEzMi8zakU4czF6UWRxX2x3M2VQQmVYS0ZjOHpl dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNqRThzMXpRZHFfbHczZVBCZVhLRmM4emV2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEFDNC8yMDZCQzg2Q0FFNkExMUUzOTM3OUQ1NTA1OTExRUEzMi8zakU4czF6UWRx X2x3M2VQQmVYS0ZjOHpldmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkwTU5mkgdunRYOEXG4u9+VWchtcgQxcG9aJxuZy9iRquDFSCNqUwV x1EUYRcSxe0nw1DWpS7R18YR4PBxS0uPY5S2Bp+eip1sOWGlIy4pxu7ghLfPXzEW nlLAS/swazjrwRIxUZGPrnZOIOAFo9GytCmXpxWHFGoN2UWmD+Nb3vGshtZbGfrO 9dbJSihotU3OAvF2vm/AbjZj+DjS2XyctrRAapTpMPf4FfTz+zLfl9XmmjSJPKLA X34uVAIww/2J31kz+WzBob8w8vHVRTJRhwuN95v9TxItSKc/ej7Ub+fKeUTQCWwH 5kTOsI7xnm917kWPM6eA1kBqgCMu2MqI -----END CERTIFICATE-----Generated at Wed Nov 5 05:47:31 2025 by rpki-client