$ rpki-client -vvf rpki.apnic.net/member_repository/A9183F7F/E37E5B32150E11EB8CEB9543C4F9AE02/mc3A6r4YBBJhGaHVGpjMhxkT86k.mft File: mc3A6r4YBBJhGaHVGpjMhxkT86k.mft (raw, json) Hash identifier: pFC1RJzk7A+/KONIwzsrNQllveztYJ6L54zhmmS95Ek= Subject key identifier: A0:66:F8:7A:1F:BE:6D:2C:93:5D:6A:D3:39:B8:21:82:BC:7B:D3:D7 Authority key identifier: 99:CD:C0:EA:BE:18:04:12:61:19:A1:D5:1A:98:CC:87:19:13:F3:A9 Certificate issuer: /CN=A9183F7F/serialNumber=99CDC0EABE1804126119A1D51A98CC871913F3A9 Certificate serial: 07D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mc3A6r4YBBJhGaHVGpjMhxkT86k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183F7F/E37E5B32150E11EB8CEB9543C4F9AE02/mc3A6r4YBBJhGaHVGpjMhxkT86k.mft Manifest number: 07D1 Signing time: Tue 04 Nov 2025 21:21:13 +0000 Manifest this update: Tue 04 Nov 2025 21:21:12 +0000 Manifest next update: Tue 11 Nov 2025 21:21:12 +0000 Files and hashes: 1: mc3A6r4YBBJhGaHVGpjMhxkT86k.crl (hash: oLWKOnMeH7MkrGRwj+a6XVgywrMx6y/4hZmwf8uiFZo=) 2: AE26CE12180911EB962CB216C4F9AE02.roa (hash: 2MLqNLG1c5f9W1Oa6laD6D4M2hQ2BaRHZstB1sfOGMM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183F7F/E37E5B32150E11EB8CEB9543C4F9AE02/mc3A6r4YBBJhGaHVGpjMhxkT86k.crl rsync://rpki.apnic.net/member_repository/A9183F7F/E37E5B32150E11EB8CEB9543C4F9AE02/mc3A6r4YBBJhGaHVGpjMhxkT86k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mc3A6r4YBBJhGaHVGpjMhxkT86k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:21:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2009 (0x7d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183F7F, serialNumber=99CDC0EABE1804126119A1D51A98CC871913F3A9 Validity Not Before: Nov 4 21:21:12 2025 GMT Not After : Nov 11 21:21:12 2025 GMT Subject: CN=690a6e49-5271 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c9:09:20:d9:f4:b5:a8:60:93:9d:a6:29:e2: cc:e0:d7:58:96:48:8c:64:f3:a8:55:43:69:2d:1f: 9b:f5:5e:97:08:46:36:42:0c:8c:5c:49:ce:b7:05: 99:aa:9b:d6:2f:26:e8:27:1e:c6:a6:7b:55:73:fd: a8:75:f0:94:d6:70:64:09:56:6c:8d:ce:c2:67:c5: 5b:3a:3e:c9:47:53:5a:b9:60:ee:88:ed:da:ea:cd: 00:f9:b2:75:86:c9:59:4b:0f:39:61:df:db:c1:3a: 27:45:41:c3:87:93:41:59:41:e5:ce:91:8f:0e:36: 7b:46:e4:ad:23:9c:80:84:fe:f4:7b:e0:56:d7:3d: 28:20:b1:c6:0f:86:7b:be:71:83:cb:72:1f:e6:5a: dd:b6:58:7a:72:96:25:17:9b:fd:a4:f7:cc:6a:48: 71:b2:47:47:f3:29:c6:66:9b:cc:21:70:e9:de:70: 63:23:7c:39:c6:5e:cc:47:e2:60:2d:9a:46:5c:48: bb:b4:0e:0d:49:5a:65:85:04:42:0b:ff:22:94:3f: af:de:9d:2b:9b:a1:8c:47:e8:2c:91:e0:96:e9:ef: a6:5f:0a:a0:3a:43:05:7a:ad:be:c6:ad:59:97:80: 50:db:5e:cb:67:d0:ee:5b:27:ae:bc:4f:08:f7:53: cc:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:66:F8:7A:1F:BE:6D:2C:93:5D:6A:D3:39:B8:21:82:BC:7B:D3:D7 X509v3 Authority Key Identifier: keyid:99:CD:C0:EA:BE:18:04:12:61:19:A1:D5:1A:98:CC:87:19:13:F3:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183F7F/E37E5B32150E11EB8CEB9543C4F9AE02/mc3A6r4YBBJhGaHVGpjMhxkT86k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mc3A6r4YBBJhGaHVGpjMhxkT86k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183F7F/E37E5B32150E11EB8CEB9543C4F9AE02/mc3A6r4YBBJhGaHVGpjMhxkT86k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:74:af:a1:96:9e:3b:10:08:da:01:f7:aa:c3:29:02:8d:a7: 1b:53:62:8f:9b:4b:c3:3c:5c:3e:fc:3c:5d:b7:ba:dc:05:b5: 29:92:78:51:78:02:63:ff:19:9c:5c:b7:9b:ea:57:60:e5:f3: 93:38:ee:68:32:f8:1f:50:ab:05:14:b0:c0:05:8c:05:47:6b: 3f:e4:4b:c7:41:5c:dc:26:ff:a8:6a:c2:d3:0f:03:5c:f1:4a: 65:fe:03:0e:fb:40:53:22:f7:c7:1c:7b:a1:3c:c5:f8:2d:6c: ed:8d:c3:ee:40:b4:18:b6:c4:c5:d4:98:da:dd:20:8d:22:f6: 33:2c:17:8d:d1:21:2b:96:92:b6:5d:50:de:f6:ae:cd:e8:cf: 3c:4b:92:88:e5:f4:5c:36:45:c8:2a:45:15:0b:b8:5b:5d:c1: ac:37:30:c0:ac:94:c5:85:ef:36:e0:7a:3a:69:43:5d:eb:d0: 90:cc:4a:35:b7:44:36:3f:a1:9d:aa:5f:a0:a4:a9:82:67:ec: 1d:4f:a0:0b:98:10:dc:3c:b2:e1:08:27:44:91:4e:64:55:78: 07:b4:df:74:66:91:11:8e:a0:a2:6a:f0:03:af:44:3a:dc:36: 13:0d:1e:17:18:da:6f:0f:06:8f:45:e9:8d:84:ef:1c:43:f6: 2d:d6:11:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODNGN0YxMTAvBgNVBAUTKDk5Q0RDMEVBQkUxODA0MTI2MTE5QTFENTFBOThDQzg3 MTkxM0YzQTkwHhcNMjUxMTA0MjEyMTEyWhcNMjUxMTExMjEyMTEyWjAYMRYwFAYD VQQDEw02OTBhNmU0OS01MjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs8kJINn0tahgk52mKeLM4NdYlkiMZPOoVUNpLR+b9V6XCEY2QgyMXEnOtwWZ qpvWLyboJx7GpntVc/2odfCU1nBkCVZsjc7CZ8VbOj7JR1NauWDuiO3a6s0A+bJ1 hslZSw85Yd/bwTonRUHDh5NBWUHlzpGPDjZ7RuStI5yAhP70e+BW1z0oILHGD4Z7 vnGDy3If5lrdtlh6cpYlF5v9pPfMakhxskdH8ynGZpvMIXDp3nBjI3w5xl7MR+Jg LZpGXEi7tA4NSVplhQRCC/8ilD+v3p0rm6GMR+gskeCW6e+mXwqgOkMFeq2+xq1Z l4BQ217LZ9DuWyeuvE8I91PM6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKBm+Hof vm0sk11q0zm4IYK8e9PXMB8GA1UdIwQYMBaAFJnNwOq+GAQSYRmh1RqYzIcZE/Op MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0Y3Ri9FMzdFNUIzMjE1 MEUxMUVCOENFQjk1NDNDNEY5QUUwMi9tYzNBNnI0WUJCSmhHYUhWR3BqTWh4a1Q4 NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21jM0E2cjRZQkJKaEdhSFZHcGpNaHhrVDg2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 M0Y3Ri9FMzdFNUIzMjE1MEUxMUVCOENFQjk1NDNDNEY5QUUwMi9tYzNBNnI0WUJC SmhHYUhWR3BqTWh4a1Q4NmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+dK+hlp47EAjaAfeqwykCjacbU2KPm0vDPFw+/Dxdt7rcBbUpknhR eAJj/xmcXLeb6ldg5fOTOO5oMvgfUKsFFLDABYwFR2s/5EvHQVzcJv+oasLTDwNc 8Upl/gMO+0BTIvfHHHuhPMX4LWztjcPuQLQYtsTF1Jja3SCNIvYzLBeN0SErlpK2 XVDe9q7N6M88S5KI5fRcNkXIKkUVC7hbXcGsNzDArJTFhe824Ho6aUNd69CQzEo1 t0Q2P6Gdql+gpKmCZ+wdT6ALmBDcPLLhCCdEkU5kVXgHtN90ZpERjqCiavADr0Q6 3DYTDR4XGNpvDwaPRemNhO8cQ/Yt1hHr -----END CERTIFICATE-----Generated at Wed Nov 5 10:01:27 2025 by rpki-client