$ rpki-client -vvf rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.mft File: 3OubbYP7AtxF6SA1OKXIr2-UH6k.mft (raw, json) Hash identifier: FRUvhjuKiS8S0tE7Yvakq0Vw6oxYhrk99/S6oOMKqv0= Subject key identifier: B7:7A:B1:3D:D3:30:16:23:DD:08:A9:2F:23:11:D3:61:BC:F8:33:C9 Authority key identifier: DC:EB:9B:6D:83:FB:02:DC:45:E9:20:35:38:A5:C8:AF:6F:94:1F:A9 Certificate issuer: /CN=A918D2CA/serialNumber=DCEB9B6D83FB02DC45E9203538A5C8AF6F941FA9 Certificate serial: 59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OubbYP7AtxF6SA1OKXIr2-UH6k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.mft Manifest number: 58 Signing time: Wed 05 Nov 2025 07:22:43 +0000 Manifest this update: Wed 05 Nov 2025 07:22:42 +0000 Manifest next update: Wed 12 Nov 2025 07:22:42 +0000 Files and hashes: 1: 3OubbYP7AtxF6SA1OKXIr2-UH6k.crl (hash: aPBMO8fp7y5giwMt9H93WD/p1ZxBqIlMABcf75N1dZw=) 2: 177E82C884B211F0BC4C5E79C4F9AE02.roa (hash: FR6aYWkLCYQNBfnXMLQXknGesvRShyM8s823+eOxW1M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.crl rsync://rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OubbYP7AtxF6SA1OKXIr2-UH6k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:22:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 89 (0x59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D2CA, serialNumber=DCEB9B6D83FB02DC45E9203538A5C8AF6F941FA9 Validity Not Before: Nov 5 07:22:42 2025 GMT Not After : Nov 12 07:22:42 2025 GMT Subject: CN=690afb43-86a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:6b:5c:ca:e6:7b:d3:5a:eb:5a:04:12:3b:1c: 84:09:a7:19:d0:35:8e:e7:c5:54:cb:b5:fb:a9:a8: 22:e7:51:db:38:db:8d:e5:d5:bd:45:c7:c7:96:5c: 2d:b8:42:8d:cd:a0:b8:9c:3c:15:8a:8b:67:ce:ac: b7:bf:55:49:7a:d8:f2:1f:ee:e1:23:6b:32:f7:24: 03:b2:35:62:92:94:de:37:7e:1e:a4:71:cc:90:15: fd:0c:c0:ee:bd:e3:38:76:ad:a9:01:f9:10:d6:c9: ba:7c:94:3c:b8:6f:ef:bd:a7:a7:67:ff:bb:7d:7c: 6e:b9:16:87:68:d4:7e:ae:f9:4e:fd:4a:74:73:e4: bb:5b:99:cf:92:59:a9:56:88:22:71:f4:0b:53:7c: a2:84:f9:3d:e1:92:ea:96:e0:9c:16:92:09:d6:74: 49:d6:9b:b3:3c:54:58:4d:85:eb:1f:ee:b5:a6:36: f9:be:a9:1e:28:9e:7f:b8:fb:0a:ab:d0:0d:01:7b: 6f:52:ef:4a:2f:cb:48:6c:87:5b:34:d5:78:53:06: f7:a3:f2:7f:ca:78:a6:2a:f2:57:9e:67:1f:79:18: 19:ae:39:24:b7:bf:e0:fd:b0:56:d7:63:ce:f9:ab: 79:b9:0b:7f:6c:64:9b:bd:72:b9:8e:7f:81:19:68: 29:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:7A:B1:3D:D3:30:16:23:DD:08:A9:2F:23:11:D3:61:BC:F8:33:C9 X509v3 Authority Key Identifier: keyid:DC:EB:9B:6D:83:FB:02:DC:45:E9:20:35:38:A5:C8:AF:6F:94:1F:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OubbYP7AtxF6SA1OKXIr2-UH6k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:35:41:4e:91:4f:a0:c3:c6:8a:eb:5c:40:e3:a6:e3:72:9e: d7:7b:3f:86:63:11:7c:b0:16:5d:99:72:ad:d6:27:b6:ad:cf: c7:22:ff:cf:93:cd:45:f2:59:76:69:fb:c8:53:6a:8f:c7:6a: 14:df:37:27:35:59:2d:ac:ea:73:bc:2c:62:89:9b:f3:4f:c6: 3c:92:63:31:b8:23:9e:3d:16:fb:83:54:28:3b:18:87:5e:1e: 37:e3:e7:cd:cd:b3:a4:29:fd:0f:b9:d1:09:7c:fe:3c:9f:cf: 0c:7a:6f:4b:b8:64:ce:eb:21:f6:3e:18:7a:de:41:06:8c:6c: f3:28:46:41:4a:b5:2e:61:0a:5a:05:0d:85:7e:3b:5a:fe:68: 75:79:85:80:7e:75:f3:ae:89:ff:67:e5:a8:0f:c6:3b:59:c8: 4d:87:f3:32:d8:11:55:b1:54:c4:69:d3:3d:78:b4:6d:98:fc: 18:a3:a5:9c:08:2b:cf:7d:35:c1:7b:73:f4:1a:be:e5:da:38: a4:37:19:bc:42:ac:e6:b0:66:e6:89:28:71:1d:06:79:2e:08: ba:e3:06:17:69:2f:fa:c0:5e:1a:2f:94:40:81:3f:54:56:40: 92:e6:43:d1:d1:e8:dd:34:51:78:2d:24:4d:b8:74:33:3b:67: 21:e5:5b:4b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RDJDQTExMC8GA1UEBRMoRENFQjlCNkQ4M0ZCMDJEQzQ1RTkyMDM1MzhBNUM4QUY2 Rjk0MUZBOTAeFw0yNTExMDUwNzIyNDJaFw0yNTExMTIwNzIyNDJaMBgxFjAUBgNV BAMTDTY5MGFmYjQzLTg2YTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSa1zK5nvTWutaBBI7HIQJpxnQNY7nxVTLtfupqCLnUds4243l1b1Fx8eWXC24 Qo3NoLicPBWKi2fOrLe/VUl62PIf7uEjazL3JAOyNWKSlN43fh6kccyQFf0MwO69 4zh2rakB+RDWybp8lDy4b++9p6dn/7t9fG65Fodo1H6u+U79SnRz5Ltbmc+SWalW iCJx9AtTfKKE+T3hkuqW4JwWkgnWdEnWm7M8VFhNhesf7rWmNvm+qR4onn+4+wqr 0A0Be29S70ovy0hsh1s01XhTBvej8n/KeKYq8leeZx95GBmuOSS3v+D9sFbXY875 q3m5C39sZJu9crmOf4EZaCnfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUt3qxPdMw FiPdCKkvIxHTYbz4M8kwHwYDVR0jBBgwFoAU3OubbYP7AtxF6SA1OKXIr2+UH6kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThEMkNBLzEyMzg0QURFMzU0 NzExRjA4MTAzQkUyNEM0RjlBRTAyLzNPdWJiWVA3QXR4RjZTQTFPS1hJcjItVUg2 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM091YmJZUDdBdHhGNlNBMU9LWElyMi1VSDZrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThE MkNBLzEyMzg0QURFMzU0NzExRjA4MTAzQkUyNEM0RjlBRTAyLzNPdWJiWVA3QXR4 RjZTQTFPS1hJcjItVUg2ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJw1QU6RT6DDxorrXEDjpuNyntd7P4ZjEXywFl2Zcq3WJ7atz8ci/8+T zUXyWXZp+8hTao/HahTfNyc1WS2s6nO8LGKJm/NPxjySYzG4I549FvuDVCg7GIde Hjfj583Ns6Qp/Q+50Ql8/jyfzwx6b0u4ZM7rIfY+GHreQQaMbPMoRkFKtS5hCloF DYV+O1r+aHV5hYB+dfOuif9n5agPxjtZyE2H8zLYEVWxVMRp0z14tG2Y/BijpZwI K899NcF7c/QavuXaOKQ3GbxCrOawZuaJKHEdBnkuCLrjBhdpL/rAXhovlECBP1RW QJLmQ9HR6N00UXgtJE24dDM7ZyHlW0s= -----END CERTIFICATE-----Generated at Wed Nov 5 11:56:49 2025 by rpki-client