$ rpki-client -vvf rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft File: 3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft (raw, json) Hash identifier: F/IQZzF3Oo7BX9N03IlyEYcL3JezfOR9IQd1NHIJp6c= Subject key identifier: D8:1B:F5:02:1A:6C:7C:B8:C9:C5:71:49:C4:9A:73:B4:2C:67:7E:EE Authority key identifier: DE:78:F7:BD:59:24:A8:06:74:90:BF:BD:32:E4:7E:7F:FA:B6:77:20 Certificate issuer: /CN=A9113C02/serialNumber=DE78F7BD5924A8067490BFBD32E47E7FFAB67720 Certificate serial: 089C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft Manifest number: 2621 Signing time: Tue 04 Nov 2025 16:24:49 +0000 Manifest this update: Tue 04 Nov 2025 16:24:49 +0000 Manifest next update: Tue 11 Nov 2025 16:24:49 +0000 Files and hashes: 1: 3nj3vVkkqAZ0kL-9MuR-f_q2dyA.crl (hash: sf0R2Fep2SQ3tLODuo6AHmEZqsScLjbGeWiiF0M7hOM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.crl rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:24:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2204 (0x89c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113C02, serialNumber=DE78F7BD5924A8067490BFBD32E47E7FFAB67720 Validity Not Before: Nov 4 16:24:49 2025 GMT Not After : Nov 11 16:24:49 2025 GMT Subject: CN=690a28d1-e608 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:74:2c:69:4f:06:8a:bf:49:ba:6e:ca:b0:22: 8e:4c:51:17:98:27:af:5e:b7:14:e7:26:3f:fa:23: f7:78:32:fa:f5:ef:5f:02:5f:9b:ae:eb:b3:b5:42: 49:f8:8a:0b:51:23:86:54:66:55:ba:f0:8d:82:57: c3:de:b9:c2:77:1f:d2:e3:a0:88:c1:75:a0:3c:2b: c3:fe:ec:ce:a2:a2:0c:06:e6:e9:63:85:14:34:7f: 76:7c:9e:3d:44:4e:2d:82:62:05:f6:e9:a0:42:a6: 96:82:f4:e5:49:7b:33:60:7f:98:ca:ac:72:db:c8: 83:75:6b:e2:ba:fb:83:0c:8a:73:69:11:79:ed:b9: db:1a:fa:7d:3e:d0:97:6b:79:9c:4d:d7:fe:36:06: 15:de:0c:c8:fa:f4:d1:5c:be:85:66:75:cb:81:49: e7:95:1f:5e:7d:82:a5:bc:dd:43:72:0b:92:e6:87: 1e:70:1f:01:c2:34:a0:75:70:cc:c0:b8:b6:9e:33: c8:ae:2c:26:c0:a9:82:ec:4f:18:5b:cb:c2:36:10: 58:01:57:b8:46:84:09:b9:98:75:ed:16:da:fe:2e: cf:c6:b5:7c:3b:68:cd:d3:26:37:ee:a7:a6:02:c3: cb:05:ba:bc:8e:b5:ee:da:54:98:c6:43:2b:d1:02: 91:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:1B:F5:02:1A:6C:7C:B8:C9:C5:71:49:C4:9A:73:B4:2C:67:7E:EE X509v3 Authority Key Identifier: keyid:DE:78:F7:BD:59:24:A8:06:74:90:BF:BD:32:E4:7E:7F:FA:B6:77:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:fd:b4:2b:2b:c8:e0:fc:51:8d:47:42:92:ed:7b:76:1c:63: 67:96:2f:ac:41:31:83:7f:17:64:c0:ed:04:46:a2:1d:f9:c9: d6:36:ed:59:46:9b:82:d6:13:5d:9b:87:ce:e0:e6:d6:54:83: ec:90:56:cb:f4:41:42:bb:b5:4a:2e:41:36:57:31:1e:eb:bb: 36:74:a9:45:4a:99:53:bb:fe:de:b0:dc:36:98:fa:22:c6:e4: 46:92:5a:5c:04:c3:55:fd:d8:9c:6a:b8:5a:3f:2c:10:a5:3d: e6:70:c9:02:53:8f:b4:4a:1d:2c:ef:7b:bb:6d:84:16:f0:ea: 01:6c:01:bb:aa:94:80:9f:f7:ff:4b:50:a1:30:14:01:2d:ea: af:46:7b:9a:2f:1b:31:32:1f:e6:04:6b:d2:e0:1f:c8:a2:2c: 6d:9a:3e:7e:d5:39:48:b6:1a:25:f3:17:64:93:38:c9:e5:d7: 69:9d:10:7e:fa:82:b5:08:a0:02:1e:1a:87:af:bc:cf:63:69: 4d:e8:21:4d:35:e0:d3:7c:2d:91:6c:2d:10:dd:59:48:96:2a: 7b:67:d4:48:ee:79:87:50:cc:23:43:6a:7e:42:ec:33:8d:6b: dd:d3:61:48:f5:12:d2:ce:a5:41:e6:f7:80:02:19:13:b1:86: 73:86:82:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTNDMDIxMTAvBgNVBAUTKERFNzhGN0JENTkyNEE4MDY3NDkwQkZCRDMyRTQ3RTdG RkFCNjc3MjAwHhcNMjUxMTA0MTYyNDQ5WhcNMjUxMTExMTYyNDQ5WjAYMRYwFAYD VQQDEw02OTBhMjhkMS1lNjA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt3QsaU8Gir9Jum7KsCKOTFEXmCevXrcU5yY/+iP3eDL69e9fAl+bruuztUJJ +IoLUSOGVGZVuvCNglfD3rnCdx/S46CIwXWgPCvD/uzOoqIMBubpY4UUNH92fJ49 RE4tgmIF9umgQqaWgvTlSXszYH+Yyqxy28iDdWviuvuDDIpzaRF57bnbGvp9PtCX a3mcTdf+NgYV3gzI+vTRXL6FZnXLgUnnlR9efYKlvN1DcguS5ocecB8BwjSgdXDM wLi2njPIriwmwKmC7E8YW8vCNhBYAVe4RoQJuZh17Rba/i7PxrV8O2jN0yY37qem AsPLBbq8jrXu2lSYxkMr0QKRuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNgb9QIa bHy4ycVxScSac7QsZ37uMB8GA1UdIwQYMBaAFN54971ZJKgGdJC/vTLkfn/6tncg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0MwMi80QzQwNkZCNjQw NTYxMUU3QUYwNDFBMzVDNEY5QUUwMi8zbmozdlZra3FBWjBrTC05TXVSLWZfcTJk eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNuajN2VmtrcUFaMGtMLTlNdVItZl9xMmR5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx M0MwMi80QzQwNkZCNjQwNTYxMUU3QUYwNDFBMzVDNEY5QUUwMi8zbmozdlZra3FB WjBrTC05TXVSLWZfcTJkeUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBI/bQrK8jg/FGNR0KS7Xt2HGNnli+sQTGDfxdkwO0ERqId+cnWNu1Z RpuC1hNdm4fO4ObWVIPskFbL9EFCu7VKLkE2VzEe67s2dKlFSplTu/7esNw2mPoi xuRGklpcBMNV/dicarhaPywQpT3mcMkCU4+0Sh0s73u7bYQW8OoBbAG7qpSAn/f/ S1ChMBQBLeqvRnuaLxsxMh/mBGvS4B/Ioixtmj5+1TlIthol8xdkkzjJ5ddpnRB+ +oK1CKACHhqHr7zPY2lN6CFNNeDTfC2RbC0Q3VlIlip7Z9RI7nmHUMwjQ2p+Quwz jWvd02FI9RLSzqVB5veAAhkTsYZzhoII -----END CERTIFICATE-----Generated at Wed Nov 5 05:49:44 2025 by rpki-client