$ rpki-client -vvf rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft File: 3YIYybgUroW5QGU2YHJQx6ruyAk.mft (raw, json) Hash identifier: ddk3gK1fJVJrLaqafNfFNOLUE84dITA5LwmwmRbB8/8= Subject key identifier: 1F:CA:94:20:EC:3A:C7:EC:3C:C1:BC:B3:D0:A2:BF:2C:0C:AD:17:05 Authority key identifier: DD:82:18:C9:B8:14:AE:85:B9:40:65:36:60:72:50:C7:AA:EE:C8:09 Certificate issuer: /CN=A915ABD7/serialNumber=DD8218C9B814AE85B9406536607250C7AAEEC809 Certificate serial: 03A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YIYybgUroW5QGU2YHJQx6ruyAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft Manifest number: 039C Signing time: Wed 05 Nov 2025 00:51:40 +0000 Manifest this update: Wed 05 Nov 2025 00:51:39 +0000 Manifest next update: Wed 12 Nov 2025 00:51:39 +0000 Files and hashes: 1: 3YIYybgUroW5QGU2YHJQx6ruyAk.crl (hash: TC+9Wgztbs+QQTFxq80g/1kRx0rJytTlqnsV5VTjywE=) 2: 88F3C02C045611EFB93F1F33C4F9AE02.roa (hash: NYEcly+S03KH8Gz/ED4JBmnf9asUtp3vEim2ZrMueG0=) 3: A4F1EAECC09211EC8950E57AC4F9AE02.roa (hash: /dpglo9CFx73F4sqDk7WZ21gpjG8xDFFFJkPbHJ8/V0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.crl rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YIYybgUroW5QGU2YHJQx6ruyAk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:51:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 933 (0x3a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915ABD7, serialNumber=DD8218C9B814AE85B9406536607250C7AAEEC809 Validity Not Before: Nov 5 00:51:39 2025 GMT Not After : Nov 12 00:51:39 2025 GMT Subject: CN=690a9f9b-0741 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b4:9d:1c:1f:d6:b9:21:2a:57:f3:6f:3e:10: 86:24:a8:9a:19:e7:8e:7d:2c:d2:14:31:48:a9:77: db:d2:fc:3a:e0:2a:d9:98:22:87:0d:97:5b:f0:d2: 3f:33:69:94:c6:2b:e0:4c:15:3a:45:e3:5a:bb:c3: 86:6b:f4:62:1b:86:53:65:fd:13:77:45:1d:44:66: a6:4a:ea:55:d3:fb:bc:04:21:26:5e:c1:01:ac:19: 0d:e5:57:c0:29:11:0d:7e:a7:9f:8f:52:aa:ed:5c: 76:ca:92:1d:c2:18:b4:15:b2:54:9b:2c:e8:74:4c: 83:23:b6:97:8a:b9:af:ba:36:de:de:21:9e:bf:f4: 10:a1:0b:18:70:4e:d1:fe:14:c1:a5:8a:ec:27:33: 5e:01:8a:8d:c4:1c:f9:ed:ce:6d:dc:00:31:34:07: 0e:0a:21:86:64:39:ed:77:d3:25:ea:c7:a1:c9:af: 20:10:04:3d:a0:22:65:44:43:fa:fa:37:21:3f:47: 6f:f2:5e:a6:b3:75:81:87:78:26:fd:e7:93:ff:ea: ee:d8:fc:d1:36:98:f3:49:40:76:42:d3:6e:aa:62: 96:ea:71:61:48:eb:ae:b3:38:0e:81:16:9d:7e:1f: b1:40:23:b2:50:c5:ea:e3:49:87:0c:f4:33:02:9d: cf:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:CA:94:20:EC:3A:C7:EC:3C:C1:BC:B3:D0:A2:BF:2C:0C:AD:17:05 X509v3 Authority Key Identifier: keyid:DD:82:18:C9:B8:14:AE:85:B9:40:65:36:60:72:50:C7:AA:EE:C8:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YIYybgUroW5QGU2YHJQx6ruyAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:ab:c1:3d:e2:0f:c8:bc:4f:3b:6a:7c:1b:8b:e2:d7:f2:35: dd:3c:f3:2e:62:ae:43:1e:4f:cd:32:1e:86:40:6d:ca:b8:4a: f0:2a:87:56:64:e8:f7:9e:58:0d:80:f2:12:ab:bb:98:65:29: 11:e4:d8:63:48:73:b6:66:05:11:6e:09:d5:9c:82:c0:6a:5f: 39:63:b8:67:0b:2d:b2:9c:e4:6d:8c:f5:e3:2f:a6:e0:74:72: 09:e2:04:e6:02:88:5c:ba:41:88:be:d0:f2:16:e0:98:51:de: 80:e1:68:37:1f:56:3a:54:f1:1a:1c:ea:05:d9:4b:c5:b5:1d: f4:df:a0:78:a5:bd:ef:d0:4d:fe:4b:41:05:21:1a:f9:9b:05: da:91:2e:bc:2e:64:f5:fc:d3:9e:e9:82:0e:66:30:20:b5:28: 88:22:b5:95:69:3a:e4:a5:aa:2b:bb:fa:f0:e6:89:df:28:37: 3e:25:99:2e:87:90:d9:ac:97:f7:82:96:d3:0b:a5:69:a0:86: 0e:2f:2a:8d:39:3c:33:9a:42:1d:fa:29:02:d7:79:58:e1:df: 5d:26:19:a8:0b:91:5f:9a:c8:e4:17:4a:72:14:03:e1:2c:5f: 6b:45:99:2b:6e:37:1d:51:10:d8:0f:47:df:99:ad:6e:1a:d6: 83:4d:70:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUFCRDcxMTAvBgNVBAUTKEREODIxOEM5QjgxNEFFODVCOTQwNjUzNjYwNzI1MEM3 QUFFRUM4MDkwHhcNMjUxMTA1MDA1MTM5WhcNMjUxMTEyMDA1MTM5WjAYMRYwFAYD VQQDEw02OTBhOWY5Yi0wNzQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqrSdHB/WuSEqV/NvPhCGJKiaGeeOfSzSFDFIqXfb0vw64CrZmCKHDZdb8NI/ M2mUxivgTBU6ReNau8OGa/RiG4ZTZf0Td0UdRGamSupV0/u8BCEmXsEBrBkN5VfA KRENfqefj1Kq7Vx2ypIdwhi0FbJUmyzodEyDI7aXirmvujbe3iGev/QQoQsYcE7R /hTBpYrsJzNeAYqNxBz57c5t3AAxNAcOCiGGZDntd9Ml6sehya8gEAQ9oCJlREP6 +jchP0dv8l6ms3WBh3gm/eeT/+ru2PzRNpjzSUB2QtNuqmKW6nFhSOuuszgOgRad fh+xQCOyUMXq40mHDPQzAp3P5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB/KlCDs OsfsPMG8s9CivywMrRcFMB8GA1UdIwQYMBaAFN2CGMm4FK6FuUBlNmByUMeq7sgJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QUJENy81RjQ5QUE2OEJF QzQxMUVDODc4Q0MxNjZDNEY5QUUwMi8zWUlZeWJnVXJvVzVRR1UyWUhKUXg2cnV5 QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNZSVl5YmdVcm9XNVFHVTJZSEpReDZydXlBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QUJENy81RjQ5QUE2OEJFQzQxMUVDODc4Q0MxNjZDNEY5QUUwMi8zWUlZeWJnVXJv VzVRR1UyWUhKUXg2cnV5QWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8q8E94g/IvE87anwbi+LX8jXdPPMuYq5DHk/NMh6GQG3KuErwKodW ZOj3nlgNgPISq7uYZSkR5NhjSHO2ZgURbgnVnILAal85Y7hnCy2ynORtjPXjL6bg dHIJ4gTmAohcukGIvtDyFuCYUd6A4Wg3H1Y6VPEaHOoF2UvFtR3036B4pb3v0E3+ S0EFIRr5mwXakS68LmT1/NOe6YIOZjAgtSiIIrWVaTrkpaoru/rw5onfKDc+JZku h5DZrJf3gpbTC6VpoIYOLyqNOTwzmkId+ikC13lY4d9dJhmoC5FfmsjkF0pyFAPh LF9rRZkrbjcdURDYD0ffma1uGtaDTXDG -----END CERTIFICATE-----Generated at Wed Nov 5 15:03:48 2025 by rpki-client