$ rpki-client -vvf rpki.apnic.net/member_repository/A91104BD/4373D50C384311EAA6192E53C4F9AE02/pi3nVqmxabvP97VW1DMAlV1A4yA.mft File: pi3nVqmxabvP97VW1DMAlV1A4yA.mft (raw, json) Hash identifier: KFKnzBC1aJsTlw2SomWEzSgxs5gkAuEUVBBnBGYSvc4= Subject key identifier: 5D:53:74:A7:99:11:67:D4:0F:80:64:AD:1C:7C:93:AB:8B:2F:32:01 Authority key identifier: A6:2D:E7:56:A9:B1:69:BB:CF:F7:B5:56:D4:33:00:95:5D:40:E3:20 Certificate issuer: /CN=A91104BD/serialNumber=A62DE756A9B169BBCFF7B556D43300955D40E320 Certificate serial: 0B93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pi3nVqmxabvP97VW1DMAlV1A4yA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91104BD/4373D50C384311EAA6192E53C4F9AE02/pi3nVqmxabvP97VW1DMAlV1A4yA.mft Manifest number: 0B8C Signing time: Tue 04 Nov 2025 19:07:06 +0000 Manifest this update: Tue 04 Nov 2025 19:07:06 +0000 Manifest next update: Tue 11 Nov 2025 19:07:06 +0000 Files and hashes: 1: pi3nVqmxabvP97VW1DMAlV1A4yA.crl (hash: va8IW9jmlkt6dDjsV9VupQ30emo2rwOPvs2VK1+g4/Q=) 2: D326CC30384411EA9D540B58C4F9AE02.roa (hash: y7gm3Ye3cCKsMlMiwHP3v0HJTLEmZvMTdt93lWQK5j4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91104BD/4373D50C384311EAA6192E53C4F9AE02/pi3nVqmxabvP97VW1DMAlV1A4yA.crl rsync://rpki.apnic.net/member_repository/A91104BD/4373D50C384311EAA6192E53C4F9AE02/pi3nVqmxabvP97VW1DMAlV1A4yA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pi3nVqmxabvP97VW1DMAlV1A4yA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:07:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2963 (0xb93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91104BD, serialNumber=A62DE756A9B169BBCFF7B556D43300955D40E320 Validity Not Before: Nov 4 19:07:06 2025 GMT Not After : Nov 11 19:07:06 2025 GMT Subject: CN=690a4eda-d392 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:be:cf:7c:98:1c:bb:94:ba:2e:76:c9:14:0b: 40:2f:f3:16:38:43:2a:2e:32:07:9d:a6:55:9b:a1: 71:90:d4:d0:57:e4:74:f1:6e:c1:63:c2:c7:fd:95: 26:bc:1e:39:0f:e1:2f:79:3e:0c:3f:15:ee:95:af: 38:f3:da:16:0e:26:14:c6:a8:9b:3f:82:5e:ea:ae: df:f2:2a:a0:e6:db:4a:28:ec:d4:62:c0:94:d7:62: 9c:31:d0:9b:fe:ae:ad:25:26:ec:a6:1e:24:16:fb: bb:ac:51:d5:35:6c:f5:b1:c6:06:55:b9:6a:7b:3a: bf:49:8b:bc:3b:41:ed:5d:9a:47:3b:6f:e2:03:f7: ff:37:50:b3:1b:50:dc:e7:e2:d0:1a:f4:f3:b4:dc: 29:d0:b1:de:7b:9d:1e:a3:c2:08:25:91:74:cf:a4: e1:53:ba:ca:dd:40:d0:ad:ce:7f:f2:f0:6a:5a:e5: cc:7b:24:90:7d:03:64:55:2b:01:fb:92:99:cc:ff: c1:b1:c4:f4:df:28:29:63:ed:b3:03:a4:3d:5b:6d: 0e:24:8d:3b:55:1a:b5:1d:d4:0a:b7:15:a1:98:58: a7:23:cf:5f:69:58:fb:e2:69:7a:3a:c5:cf:7d:b7: e4:28:b2:15:0f:d0:7f:bc:f2:15:c1:30:b6:20:49: 6b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:53:74:A7:99:11:67:D4:0F:80:64:AD:1C:7C:93:AB:8B:2F:32:01 X509v3 Authority Key Identifier: keyid:A6:2D:E7:56:A9:B1:69:BB:CF:F7:B5:56:D4:33:00:95:5D:40:E3:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91104BD/4373D50C384311EAA6192E53C4F9AE02/pi3nVqmxabvP97VW1DMAlV1A4yA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pi3nVqmxabvP97VW1DMAlV1A4yA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91104BD/4373D50C384311EAA6192E53C4F9AE02/pi3nVqmxabvP97VW1DMAlV1A4yA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:a0:ac:8d:d9:87:d8:cd:42:fa:7f:b8:2f:22:4d:5d:70:55: 38:4e:f1:99:41:0c:88:0a:c4:d4:78:e3:70:e1:f9:7d:23:b2: df:3e:26:67:ae:ea:37:41:e6:72:62:c5:f9:97:d0:54:37:32: a7:8a:76:2c:11:1f:b5:ee:19:0c:8c:de:f7:72:12:84:9b:17: 35:5c:f2:b4:e8:50:20:5c:12:bf:fb:2f:fd:b6:b3:7c:54:52: 12:ac:e1:d4:5c:13:7a:0d:b6:28:c7:a7:3b:94:b3:0b:68:3d: c0:23:1b:1c:18:9f:4f:ee:8c:fa:f5:0e:7d:3f:67:b2:3b:91: c5:5e:e3:49:fc:16:c5:e9:04:a7:47:e6:8c:01:8c:80:b4:cb: ae:89:99:95:1e:03:35:c0:0f:d1:e4:42:7d:f5:ac:14:a8:da: 42:dd:c5:23:88:16:e2:e2:6a:3a:ce:98:1a:b0:94:ab:b9:c8: 28:b0:17:8e:a2:a7:3b:53:7b:c5:ec:f6:9d:c8:8c:39:69:c5: 45:b1:cc:41:31:3a:a2:8f:6c:3e:fe:61:16:80:d4:db:d8:2b: 43:9b:b9:94:e5:e8:7e:db:9e:91:b1:54:ee:7a:a3:81:cc:65: f6:df:5f:03:0f:01:de:b4:40:ac:3d:6c:4d:9e:5b:8f:c4:db: 58:da:88:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC5MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTA0QkQxMTAvBgNVBAUTKEE2MkRFNzU2QTlCMTY5QkJDRkY3QjU1NkQ0MzMwMDk1 NUQ0MEUzMjAwHhcNMjUxMTA0MTkwNzA2WhcNMjUxMTExMTkwNzA2WjAYMRYwFAYD VQQDEw02OTBhNGVkYS1kMzkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo77PfJgcu5S6LnbJFAtAL/MWOEMqLjIHnaZVm6FxkNTQV+R08W7BY8LH/ZUm vB45D+EveT4MPxXula8489oWDiYUxqibP4Je6q7f8iqg5ttKKOzUYsCU12KcMdCb /q6tJSbsph4kFvu7rFHVNWz1scYGVblqezq/SYu8O0HtXZpHO2/iA/f/N1CzG1Dc 5+LQGvTztNwp0LHee50eo8IIJZF0z6ThU7rK3UDQrc5/8vBqWuXMeySQfQNkVSsB +5KZzP/BscT03ygpY+2zA6Q9W20OJI07VRq1HdQKtxWhmFinI89faVj74ml6OsXP fbfkKLIVD9B/vPIVwTC2IElrqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF1TdKeZ EWfUD4BkrRx8k6uLLzIBMB8GA1UdIwQYMBaAFKYt51apsWm7z/e1VtQzAJVdQOMg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDRCRC80MzczRDUwQzM4 NDMxMUVBQTYxOTJFNTNDNEY5QUUwMi9waTNuVnFteGFidlA5N1ZXMURNQWxWMUE0 eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BpM25WcW14YWJ2UDk3VlcxRE1BbFYxQTR5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDRCRC80MzczRDUwQzM4NDMxMUVBQTYxOTJFNTNDNEY5QUUwMi9waTNuVnFteGFi dlA5N1ZXMURNQWxWMUE0eUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtoKyN2YfYzUL6f7gvIk1dcFU4TvGZQQyICsTUeONw4fl9I7LfPiZn ruo3QeZyYsX5l9BUNzKninYsER+17hkMjN73chKEmxc1XPK06FAgXBK/+y/9trN8 VFISrOHUXBN6DbYox6c7lLMLaD3AIxscGJ9P7oz69Q59P2eyO5HFXuNJ/BbF6QSn R+aMAYyAtMuuiZmVHgM1wA/R5EJ99awUqNpC3cUjiBbi4mo6zpgasJSrucgosBeO oqc7U3vF7PadyIw5acVFscxBMTqij2w+/mEWgNTb2CtDm7mU5eh+256RsVTueqOB zGX2318DDwHetECsPWxNnluPxNtY2ohi -----END CERTIFICATE-----Generated at Wed Nov 5 12:04:04 2025 by rpki-client