$ rpki-client -vvf rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/3gyPQrygWy9Vgea8y0wUpuZxthk.mft File: 3gyPQrygWy9Vgea8y0wUpuZxthk.mft (raw, json) Hash identifier: Qo4KfbXDUv4VdyBOjQGmO1ThM+cD+hlXhK0RM/d7VNA= Subject key identifier: BD:24:04:41:22:7D:73:0F:BA:4B:A6:19:27:F7:15:05:CB:20:38:D7 Authority key identifier: DE:0C:8F:42:BC:A0:5B:2F:55:81:E6:BC:CB:4C:14:A6:E6:71:B6:19 Certificate issuer: /CN=A9187386/serialNumber=DE0C8F42BCA05B2F5581E6BCCB4C14A6E671B619 Certificate serial: 10B0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3gyPQrygWy9Vgea8y0wUpuZxthk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/3gyPQrygWy9Vgea8y0wUpuZxthk.mft Manifest number: 10A1 Signing time: Tue 04 Nov 2025 17:26:51 +0000 Manifest this update: Tue 04 Nov 2025 17:26:51 +0000 Manifest next update: Tue 11 Nov 2025 17:26:51 +0000 Files and hashes: 1: 3gyPQrygWy9Vgea8y0wUpuZxthk.crl (hash: JJ/o3GxoV1uFfPeEELAl4tPR001APIRCtrQC7jqNSCw=) 2: E366C4B83B2611E9906E7B81C4F9AE02.roa (hash: xEIKhjUewdtyeU71/5L7KmwiUHlZvuapGiPz1UBOmLU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/3gyPQrygWy9Vgea8y0wUpuZxthk.crl rsync://rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/3gyPQrygWy9Vgea8y0wUpuZxthk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3gyPQrygWy9Vgea8y0wUpuZxthk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:26:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4272 (0x10b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187386, serialNumber=DE0C8F42BCA05B2F5581E6BCCB4C14A6E671B619 Validity Not Before: Nov 4 17:26:51 2025 GMT Not After : Nov 11 17:26:51 2025 GMT Subject: CN=690a375b-697c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:95:60:b4:93:dd:2c:ab:38:24:2b:45:63:80: b9:d9:90:c1:b6:16:7d:a4:f7:f7:68:14:26:79:47: 98:d6:e0:85:b2:f9:dd:1c:b0:92:49:70:5d:8e:dd: 5d:9f:99:17:03:7e:8e:36:7d:a7:71:6b:1b:f7:0d: b6:7d:95:13:d7:26:6f:76:d2:1c:26:7e:64:14:f5: df:1b:56:bb:9a:c4:5a:ef:78:db:ef:c7:a6:14:b5: 91:8f:d3:2f:0f:18:d4:b0:56:09:84:96:55:b7:33: 85:02:07:60:24:db:4c:f0:a0:f0:20:a4:8c:ee:5a: 7e:cd:89:19:00:90:9e:2c:49:7d:14:57:ee:ae:ae: 19:bb:69:f5:cf:13:62:df:5f:e5:a3:25:4c:30:15: f4:b8:db:36:02:1c:d8:5a:12:51:a2:96:a4:d7:82: f4:61:45:aa:bc:69:36:7c:1c:41:ed:3e:77:be:bd: b4:ee:8b:4d:25:d3:93:1f:e6:52:7e:14:3f:8b:97: af:9d:54:aa:12:55:82:e5:7b:d4:ff:47:7b:f1:c5: 1d:48:8f:5e:a6:3e:43:02:3c:fb:8c:8e:8a:ff:61: 66:ca:5e:59:1b:9e:af:1c:52:69:da:a1:1c:7a:fc: ce:5d:ae:7d:ad:77:40:a7:f1:8f:44:46:8d:02:59: d3:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:24:04:41:22:7D:73:0F:BA:4B:A6:19:27:F7:15:05:CB:20:38:D7 X509v3 Authority Key Identifier: keyid:DE:0C:8F:42:BC:A0:5B:2F:55:81:E6:BC:CB:4C:14:A6:E6:71:B6:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/3gyPQrygWy9Vgea8y0wUpuZxthk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3gyPQrygWy9Vgea8y0wUpuZxthk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/3gyPQrygWy9Vgea8y0wUpuZxthk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:ec:ce:28:fb:ea:d0:b0:df:2f:ea:0f:3d:64:cf:01:81:bd: ed:e8:ae:97:87:db:af:94:94:88:cb:41:0b:e1:f8:c5:e0:41: 1c:92:21:ce:74:ea:52:83:d3:1d:d7:cf:47:07:0e:2a:96:67: 20:d6:74:ef:cc:c4:53:12:3c:d8:df:91:97:90:7f:f8:cf:38: 1b:5d:99:4f:8b:3a:00:0f:d6:6d:d6:f0:60:e6:75:0d:c6:88: 69:94:42:55:ea:6a:c3:37:0f:58:a5:d4:08:a9:4b:8b:fb:00: b6:73:11:f2:3a:ac:89:c0:92:e0:86:02:7a:94:af:76:80:93: 42:0c:ae:db:15:32:df:5d:ba:b6:72:33:3c:f1:d0:95:3c:06: 8b:33:43:0f:bc:d6:e0:5f:f8:f5:5c:02:d7:fe:fa:1e:96:e8: a0:9c:57:c0:de:f3:6c:04:9a:6c:9b:89:64:44:cb:d5:7c:b0: 8b:d3:99:b1:17:e4:43:97:40:2d:8a:d1:16:5b:ea:54:3c:99: ae:49:92:ab:68:46:74:d7:26:a5:c7:9b:ad:30:e4:bc:cf:ec: 8c:6e:d8:c9:7e:84:da:fd:ef:ae:58:4f:e0:0c:65:0e:75:cc: 0f:e4:1c:42:3b:26:df:75:73:f4:bb:b8:b6:fc:a4:d8:16:ba: 08:88:50:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICELAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODczODYxMTAvBgNVBAUTKERFMEM4RjQyQkNBMDVCMkY1NTgxRTZCQ0NCNEMxNEE2 RTY3MUI2MTkwHhcNMjUxMTA0MTcyNjUxWhcNMjUxMTExMTcyNjUxWjAYMRYwFAYD VQQDEw02OTBhMzc1Yi02OTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyJVgtJPdLKs4JCtFY4C52ZDBthZ9pPf3aBQmeUeY1uCFsvndHLCSSXBdjt1d n5kXA36ONn2ncWsb9w22fZUT1yZvdtIcJn5kFPXfG1a7msRa73jb78emFLWRj9Mv DxjUsFYJhJZVtzOFAgdgJNtM8KDwIKSM7lp+zYkZAJCeLEl9FFfurq4Zu2n1zxNi 31/loyVMMBX0uNs2AhzYWhJRopak14L0YUWqvGk2fBxB7T53vr207otNJdOTH+ZS fhQ/i5evnVSqElWC5XvU/0d78cUdSI9epj5DAjz7jI6K/2Fmyl5ZG56vHFJp2qEc evzOXa59rXdAp/GPREaNAlnTTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL0kBEEi fXMPukumGSf3FQXLIDjXMB8GA1UdIwQYMBaAFN4Mj0K8oFsvVYHmvMtMFKbmcbYZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzM4Ni80OUNENkEzQzNC MjYxMUU5QjIwRDI2ODFDNEY5QUUwMi8zZ3lQUXJ5Z1d5OVZnZWE4eTB3VXB1Wnh0 aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzNneVBRcnlnV3k5VmdlYTh5MHdVcHVaeHRoay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzM4Ni80OUNENkEzQzNCMjYxMUU5QjIwRDI2ODFDNEY5QUUwMi8zZ3lQUXJ5Z1d5 OVZnZWE4eTB3VXB1Wnh0aGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAa7M4o++rQsN8v6g89ZM8Bgb3t6K6Xh9uvlJSIy0EL4fjF4EEckiHO dOpSg9Md189HBw4qlmcg1nTvzMRTEjzY35GXkH/4zzgbXZlPizoAD9Zt1vBg5nUN xohplEJV6mrDNw9YpdQIqUuL+wC2cxHyOqyJwJLghgJ6lK92gJNCDK7bFTLfXbq2 cjM88dCVPAaLM0MPvNbgX/j1XALX/voeluignFfA3vNsBJpsm4lkRMvVfLCL05mx F+RDl0AtitEWW+pUPJmuSZKraEZ01yalx5utMOS8z+yMbtjJfoTa/e+uWE/gDGUO dcwP5BxCOybfdXP0u7i2/KTYFroIiFBB -----END CERTIFICATE-----Generated at Wed Nov 5 17:10:28 2025 by rpki-client