$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft File: 3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft (raw, json) Hash identifier: WyTuGYZbqpMgslulQfJw1hSY0T1JsR7X4LJIFVWPt3o= Subject key identifier: AD:DA:E2:4A:74:6D:72:21:EE:7B:D5:6C:BC:E9:5E:76:F4:CF:B9:DB Authority key identifier: DD:49:30:E3:E4:2D:FE:3B:FF:F4:81:B1:79:77:0D:1A:B1:57:5B:C3 Certificate issuer: /CN=A9186214/serialNumber=DD4930E3E42DFE3BFFF481B179770D1AB1575BC3 Certificate serial: 2A67 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft Manifest number: 2A67 Signing time: Tue 04 Nov 2025 15:39:36 +0000 Manifest this update: Tue 04 Nov 2025 15:39:36 +0000 Manifest next update: Tue 11 Nov 2025 15:39:36 +0000 Files and hashes: 1: 3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.crl (hash: EkGI7O+3gxV4yipGtJU1yCak+xf1/1yprdXAiXaZVR4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.crl rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:39:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10855 (0x2a67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186214, serialNumber=DD4930E3E42DFE3BFFF481B179770D1AB1575BC3 Validity Not Before: Nov 4 15:39:36 2025 GMT Not After : Nov 11 15:39:36 2025 GMT Subject: CN=690a1e38-b91e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e4:e4:5e:2a:c1:a3:5e:2d:9e:21:ca:50:07: 0c:7e:9a:20:b4:87:8e:9f:2c:aa:83:12:b6:8d:f2: d2:65:a3:e1:0f:fb:ff:56:ee:42:24:81:e3:7b:dc: 1d:c3:e8:fd:99:f5:7e:33:0c:e8:2b:c3:3a:f6:99: 78:ea:05:df:cf:cc:ce:58:fd:3e:53:f2:21:75:d9: cc:42:9d:2a:83:3f:48:14:b4:f2:97:90:a8:b2:57: e5:d7:9e:eb:5c:0e:dd:17:03:d4:a9:99:ee:2b:ac: 83:76:ba:9e:7b:5c:c2:2a:6a:9b:52:30:db:58:2f: d9:db:ab:6c:ea:96:e5:72:7d:87:69:1a:06:d4:65: 17:13:93:4e:0b:48:b9:c3:eb:4a:7d:b7:1b:18:00: b9:ef:96:9d:92:bc:4d:50:62:b4:ba:39:05:25:d9: 78:8e:3a:c6:0d:80:90:5e:15:71:6a:81:ce:90:c2: c0:88:3f:08:d9:a2:1c:fd:6c:7e:f0:db:09:02:5c: 8b:6a:d8:84:73:27:27:f5:b4:75:40:c4:b7:01:9f: 20:f4:36:34:08:19:26:3d:b4:5d:49:df:f0:61:3d: 81:b3:97:23:86:2a:64:7a:c2:b1:8a:fa:36:b1:89: c1:5b:a9:62:fd:98:34:a7:35:c9:1d:29:4f:e8:5f: 4e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:DA:E2:4A:74:6D:72:21:EE:7B:D5:6C:BC:E9:5E:76:F4:CF:B9:DB X509v3 Authority Key Identifier: keyid:DD:49:30:E3:E4:2D:FE:3B:FF:F4:81:B1:79:77:0D:1A:B1:57:5B:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:c6:b7:bd:86:05:44:b9:19:6d:64:b1:dd:41:d8:db:5e:2d: 8b:a7:10:63:69:d3:6b:f1:0d:6b:2c:a7:3b:a0:db:fd:67:ab: db:3f:f1:6e:34:af:9f:8a:19:ba:cf:1c:b4:3a:87:73:d1:f3: 51:df:35:c0:96:88:b6:01:d8:f1:3d:d1:fc:ba:86:c7:ce:66: 75:82:88:09:aa:54:fc:d4:28:b3:cc:3e:62:fb:a5:df:14:ef: 05:23:22:32:31:1b:9f:b2:9c:7d:af:89:d3:6d:0b:34:41:72: 40:52:49:8c:2d:3f:b0:b5:6b:d2:6d:9d:83:4e:c1:04:03:1c: 38:81:74:b9:2d:d9:e6:7c:90:9c:4c:b2:3b:c2:f6:cb:da:d4: c7:c6:03:f3:62:32:21:e2:cc:5c:f3:19:de:4c:86:b9:e2:65: fe:bb:92:9e:05:a3:a6:0b:30:46:f2:ad:46:5f:85:ff:7f:53: 03:9c:94:4b:4e:62:9b:c1:2d:3e:88:8c:0d:25:be:53:e3:fc: 9e:71:37:b6:e8:4f:fc:93:c8:03:33:7c:78:4c:54:44:82:3a: 87:d1:5e:81:21:f3:22:1c:68:6a:a6:4e:8e:99:c6:f0:56:09: 09:69:31:1d:35:ed:cd:1a:c4:eb:55:05:2f:a2:cf:ff:de:8a: 52:2e:84:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKmcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyMTQxMTAvBgNVBAUTKERENDkzMEUzRTQyREZFM0JGRkY0ODFCMTc5NzcwRDFB QjE1NzVCQzMwHhcNMjUxMTA0MTUzOTM2WhcNMjUxMTExMTUzOTM2WjAYMRYwFAYD VQQDEw02OTBhMWUzOC1iOTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvuTkXirBo14tniHKUAcMfpogtIeOnyyqgxK2jfLSZaPhD/v/Vu5CJIHje9wd w+j9mfV+MwzoK8M69pl46gXfz8zOWP0+U/IhddnMQp0qgz9IFLTyl5Coslfl157r XA7dFwPUqZnuK6yDdrqee1zCKmqbUjDbWC/Z26ts6pblcn2HaRoG1GUXE5NOC0i5 w+tKfbcbGAC575adkrxNUGK0ujkFJdl4jjrGDYCQXhVxaoHOkMLAiD8I2aIc/Wx+ 8NsJAlyLatiEcycn9bR1QMS3AZ8g9DY0CBkmPbRdSd/wYT2Bs5cjhipkesKxivo2 sYnBW6li/Zg0pzXJHSlP6F9OpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK3a4kp0 bXIh7nvVbLzpXnb0z7nbMB8GA1UdIwQYMBaAFN1JMOPkLf47//SBsXl3DRqxV1vD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9ENzg1OTlCQzMz MUExMUU0QUYyQUIzN0NDNEY5QUUwMi8zVWt3NC1RdF9qdl85SUd4ZVhjTkdyRlhX OE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzNVa3c0LVF0X2p2XzlJR3hlWGNOR3JGWFc4TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjIxNC9ENzg1OTlCQzMzMUExMUU0QUYyQUIzN0NDNEY5QUUwMi8zVWt3NC1RdF9q dl85SUd4ZVhjTkdyRlhXOE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGxre9hgVEuRltZLHdQdjbXi2LpxBjadNr8Q1rLKc7oNv9Z6vbP/Fu NK+fihm6zxy0Oodz0fNR3zXAloi2AdjxPdH8uobHzmZ1gogJqlT81CizzD5i+6Xf FO8FIyIyMRufspx9r4nTbQs0QXJAUkmMLT+wtWvSbZ2DTsEEAxw4gXS5LdnmfJCc TLI7wvbL2tTHxgPzYjIh4sxc8xneTIa54mX+u5KeBaOmCzBG8q1GX4X/f1MDnJRL TmKbwS0+iIwNJb5T4/yecTe26E/8k8gDM3x4TFREgjqH0V6BIfMiHGhqpk6Omcbw VgkJaTEdNe3NGsTrVQUvos//3opSLoSP -----END CERTIFICATE-----Generated at Wed Nov 5 22:15:22 2025 by rpki-client