$ rpki-client -vvf rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.mft File: 3OYifAVHwArsZcXmgPYXk_SdVYM.mft (raw, json) Hash identifier: eMigyAa5Zo4I4TAFrmxrNq/I5+9OHrfmk8X4oHksJxk= Subject key identifier: 9F:15:8C:2D:B6:87:17:DC:93:D1:34:C9:6C:60:4B:7C:D5:46:8D:E0 Authority key identifier: DC:E6:22:7C:05:47:C0:0A:EC:65:C5:E6:80:F6:17:93:F4:9D:55:83 Certificate issuer: /CN=A918FCB4/serialNumber=DCE6227C0547C00AEC65C5E680F61793F49D5583 Certificate serial: 085B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OYifAVHwArsZcXmgPYXk_SdVYM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.mft Manifest number: 08D2 Signing time: Tue 04 Nov 2025 20:48:07 +0000 Manifest this update: Tue 04 Nov 2025 20:48:07 +0000 Manifest next update: Tue 11 Nov 2025 20:48:07 +0000 Files and hashes: 1: 3OYifAVHwArsZcXmgPYXk_SdVYM.crl (hash: wMQmf4iOD8IJzc5Qj7YNi0lPtXxc0k7l8KQtrNP/A1s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.crl rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OYifAVHwArsZcXmgPYXk_SdVYM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:48:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2139 (0x85b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FCB4, serialNumber=DCE6227C0547C00AEC65C5E680F61793F49D5583 Validity Not Before: Nov 4 20:48:07 2025 GMT Not After : Nov 11 20:48:07 2025 GMT Subject: CN=690a6687-56bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4c:f8:c2:d3:88:1f:fd:d1:b4:9a:1f:79:71: 00:53:cb:d1:50:4b:a8:2c:1a:70:58:8d:ad:dd:ba: ff:db:a5:20:2f:60:ad:61:c6:b1:55:4d:a2:ca:e0: 01:f2:4b:a2:da:a7:80:36:c8:d4:18:de:08:f6:d1: 75:42:96:b8:4a:ab:d3:18:77:15:61:85:36:a3:ed: 52:f7:32:ec:5f:bf:49:a7:28:3e:b0:17:c4:7c:cf: 79:05:59:ee:c0:7e:8d:ac:b0:c3:35:9d:48:f7:18: ef:71:d4:ce:6e:c5:f9:ba:ab:e8:b6:18:bd:5b:0b: e8:2b:45:fd:48:74:c8:31:90:d0:b7:74:e8:70:2a: e1:6e:7c:9e:bb:12:2d:d6:cd:cb:7f:aa:dd:e2:68: 8c:7d:11:b2:64:60:29:0f:6f:60:6b:98:77:e0:95: cf:e4:d7:26:ce:db:f8:49:d8:71:10:d3:50:11:86: fa:d7:e4:ff:d1:37:39:f9:9f:6b:41:d5:73:44:9d: bf:25:0a:5e:d9:48:35:b1:72:06:cd:2f:01:a7:ea: c4:5e:3a:14:70:64:5e:20:8b:d8:84:d9:e7:74:6a: 35:d5:0f:f1:7e:72:bf:09:e0:19:f1:45:8f:d8:d0: 1f:31:60:5c:00:36:4a:ce:c0:76:e6:2d:5e:7c:10: 34:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:15:8C:2D:B6:87:17:DC:93:D1:34:C9:6C:60:4B:7C:D5:46:8D:E0 X509v3 Authority Key Identifier: keyid:DC:E6:22:7C:05:47:C0:0A:EC:65:C5:E6:80:F6:17:93:F4:9D:55:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OYifAVHwArsZcXmgPYXk_SdVYM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:69:ae:a6:e7:2b:a2:c3:56:5c:59:2e:8c:ab:b9:1e:be:e1: 02:b6:a5:83:39:77:36:b8:81:be:b2:69:07:ba:ad:88:5f:a0: e5:6e:6b:6c:79:cb:ec:8b:4e:83:42:22:a7:d2:cd:82:27:f7: df:aa:a3:76:38:c5:f0:81:0b:1b:eb:3f:ab:16:c2:9e:4e:d6: be:c1:2d:02:b1:b4:df:a1:44:64:5f:ef:8a:5a:fe:ba:09:7f: a7:35:86:3e:74:f4:f9:e0:01:ed:b4:cc:99:34:54:95:ea:b7: 37:ff:b1:93:cb:d7:44:a4:50:79:3d:b6:67:f4:2c:17:67:0a: 6d:0c:17:c3:b7:e1:b4:20:d7:83:b9:e8:c6:36:58:5c:cb:5c: d1:3a:6b:da:9a:23:e2:97:6e:e6:18:75:08:d9:ba:55:43:ba: 36:e5:b2:e2:11:00:93:21:d5:5c:98:b9:f5:ae:2f:0f:47:1e: 3f:19:81:ca:22:88:e3:ae:e3:09:20:9d:e4:2f:4b:69:d6:02: 85:04:5e:7e:2c:71:8a:21:33:10:ae:45:bc:18:44:15:cf:12: 58:ed:fe:71:ff:f3:12:4e:62:0a:24:7d:af:9f:a4:86:9c:a0: 4e:80:bf:05:b9:9c:8c:57:33:1f:07:ce:79:30:ba:d2:af:4a: 26:e4:59:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZDQjQxMTAvBgNVBAUTKERDRTYyMjdDMDU0N0MwMEFFQzY1QzVFNjgwRjYxNzkz RjQ5RDU1ODMwHhcNMjUxMTA0MjA0ODA3WhcNMjUxMTExMjA0ODA3WjAYMRYwFAYD VQQDEw02OTBhNjY4Ny01NmJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr0z4wtOIH/3RtJofeXEAU8vRUEuoLBpwWI2t3br/26UgL2CtYcaxVU2iyuAB 8kui2qeANsjUGN4I9tF1Qpa4SqvTGHcVYYU2o+1S9zLsX79Jpyg+sBfEfM95BVnu wH6NrLDDNZ1I9xjvcdTObsX5uqvothi9WwvoK0X9SHTIMZDQt3TocCrhbnyeuxIt 1s3Lf6rd4miMfRGyZGApD29ga5h34JXP5Ncmztv4SdhxENNQEYb61+T/0Tc5+Z9r QdVzRJ2/JQpe2Ug1sXIGzS8Bp+rEXjoUcGReIIvYhNnndGo11Q/xfnK/CeAZ8UWP 2NAfMWBcADZKzsB25i1efBA0rwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ8VjC22 hxfck9E0yWxgS3zVRo3gMB8GA1UdIwQYMBaAFNzmInwFR8AK7GXF5oD2F5P0nVWD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkNCNC8zQTdBRDNCMkUz ODYxMUVBOUZBMjNBMzZDNEY5QUUwMi8zT1lpZkFWSHdBcnNaY1htZ1BZWGtfU2RW WU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNPWWlmQVZId0Fyc1pjWG1nUFlYa19TZFZZTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RkNCNC8zQTdBRDNCMkUzODYxMUVBOUZBMjNBMzZDNEY5QUUwMi8zT1lpZkFWSHdB cnNaY1htZ1BZWGtfU2RWWU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDFaa6m5yuiw1ZcWS6Mq7kevuECtqWDOXc2uIG+smkHuq2IX6Dlbmts ecvsi06DQiKn0s2CJ/ffqqN2OMXwgQsb6z+rFsKeTta+wS0CsbTfoURkX++KWv66 CX+nNYY+dPT54AHttMyZNFSV6rc3/7GTy9dEpFB5PbZn9CwXZwptDBfDt+G0INeD uejGNlhcy1zROmvamiPil27mGHUI2bpVQ7o25bLiEQCTIdVcmLn1ri8PRx4/GYHK IojjruMJIJ3kL0tp1gKFBF5+LHGKITMQrkW8GEQVzxJY7f5x//MSTmIKJH2vn6SG nKBOgL8FuZyMVzMfB855MLrSr0om5FnK -----END CERTIFICATE-----Generated at Wed Nov 5 04:25:42 2025 by rpki-client