$ rpki-client -vvf rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.mft File: 3Fys5yJTQlYHBjKHYfkTyTZJius.mft (raw, json) Hash identifier: iQkc4wXp4QUnH8IW6pM3N3wq1q9N0R8JXEmdsSile5A= Subject key identifier: 5F:55:92:BA:D9:FF:0E:E7:1B:30:48:EF:CE:D3:7B:2D:FF:8C:B5:B7 Authority key identifier: DC:5C:AC:E7:22:53:42:56:07:06:32:87:61:F9:13:C9:36:49:8A:EB Certificate issuer: /CN=A91317CB/serialNumber=DC5CACE7225342560706328761F913C936498AEB Certificate serial: 1568 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Fys5yJTQlYHBjKHYfkTyTZJius.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.mft Manifest number: 1560 Signing time: Tue 04 Nov 2025 16:52:39 +0000 Manifest this update: Tue 04 Nov 2025 16:52:39 +0000 Manifest next update: Tue 11 Nov 2025 16:52:39 +0000 Files and hashes: 1: 3Fys5yJTQlYHBjKHYfkTyTZJius.crl (hash: wom/6BAmwl5iEe0NRLJIAJbDIqDgV2aOuf2IDElU44I=) 2: CBA65F7C4AB411E887FB7E29C4F9AE02.roa (hash: ZrtNu0pCM+YSuzrUqWxCD6BDNZGKsa/yqsobccT0UqY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.crl rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Fys5yJTQlYHBjKHYfkTyTZJius.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:52:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5480 (0x1568) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91317CB, serialNumber=DC5CACE7225342560706328761F913C936498AEB Validity Not Before: Nov 4 16:52:39 2025 GMT Not After : Nov 11 16:52:39 2025 GMT Subject: CN=690a2f57-28cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:93:2a:7a:05:43:e2:34:3c:6d:8f:04:02:ea: b5:9f:8a:b3:48:68:ef:63:c1:e4:2d:f0:84:89:b4: ae:e5:40:9e:e0:a4:43:cc:4b:25:8d:b5:85:fc:01: 33:24:81:18:36:d8:df:f5:7d:dc:7f:05:8e:39:3e: 67:de:d0:b1:c5:80:a0:1e:bf:35:e3:47:f5:9f:a4: 57:a2:f8:78:b4:7f:6a:8b:36:d4:48:1f:34:a3:72: 67:3e:83:61:87:0c:92:da:a4:aa:c6:3f:c0:c6:6b: 3c:54:bf:89:60:4c:85:9c:bc:e5:74:d2:b0:cf:35: 63:8c:5b:99:17:50:71:f0:aa:64:f2:5a:e4:82:09: 16:77:e8:a2:31:3c:95:b5:8f:be:2e:ff:ec:13:1a: 9f:ea:06:ec:f2:93:15:e2:0b:49:93:d8:d8:ab:f1: 21:ac:99:71:4b:6b:03:5d:77:4a:7d:10:3c:12:0f: 55:f3:69:21:c2:d7:ba:ef:75:a8:53:2d:fd:ac:c1: d1:58:ae:e4:d0:3a:68:6c:f2:de:41:6b:ac:d7:db: b7:dc:95:e0:b2:75:be:b8:fc:33:0c:66:01:e9:fe: a9:26:8d:43:07:d7:1e:84:4a:d0:57:8c:9d:34:ef: ce:ec:d4:1f:bd:e6:b9:c3:d2:ad:47:48:fa:1d:98: 62:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:55:92:BA:D9:FF:0E:E7:1B:30:48:EF:CE:D3:7B:2D:FF:8C:B5:B7 X509v3 Authority Key Identifier: keyid:DC:5C:AC:E7:22:53:42:56:07:06:32:87:61:F9:13:C9:36:49:8A:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Fys5yJTQlYHBjKHYfkTyTZJius.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:a3:9f:fd:1e:c8:e6:28:1a:b6:e4:8a:e8:fe:d0:6a:d2:d6: d1:bc:d6:99:a7:af:c8:c6:23:be:fb:fe:18:52:5c:88:d0:2d: 58:eb:19:bc:0c:10:c9:0f:c4:b4:ab:e2:b5:31:6b:32:d3:87: 40:4d:93:6d:89:16:b0:3e:79:49:2f:7a:e6:53:cd:b7:c0:a9: 5a:c4:87:3b:1d:07:5b:2b:1d:c7:a5:76:a5:89:e7:08:1f:3f: d8:f7:25:c3:19:cb:07:b8:e3:7c:d3:01:6c:1b:8e:76:58:2c: 23:04:02:9d:ec:4b:99:b3:b8:0f:60:68:70:9b:1e:2f:69:dc: cc:8b:c0:91:a4:02:5a:0b:30:67:db:a2:41:42:94:bb:c0:a7: b8:44:04:88:b2:3e:81:97:3b:16:d1:f5:8b:8b:e2:3c:a0:66: 8e:5c:9c:6f:41:c8:3d:9f:3b:eb:93:02:d0:a9:e0:79:ed:2f: f7:e1:47:6e:0d:ff:0e:c2:76:90:81:e9:b3:1a:d7:9e:ae:c3: 6c:69:c7:97:5a:32:6d:ea:09:62:6a:72:42:53:38:84:1f:04: 20:30:12:1d:4f:35:14:1e:52:f2:41:97:dc:20:44:c8:67:e1: 23:d7:7c:85:96:43:98:1f:08:5a:d1:20:98:1d:37:8f:8e:4b: c3:0e:36:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE3Q0IxMTAvBgNVBAUTKERDNUNBQ0U3MjI1MzQyNTYwNzA2MzI4NzYxRjkxM0M5 MzY0OThBRUIwHhcNMjUxMTA0MTY1MjM5WhcNMjUxMTExMTY1MjM5WjAYMRYwFAYD VQQDEw02OTBhMmY1Ny0yOGNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyJMqegVD4jQ8bY8EAuq1n4qzSGjvY8HkLfCEibSu5UCe4KRDzEsljbWF/AEz JIEYNtjf9X3cfwWOOT5n3tCxxYCgHr8140f1n6RXovh4tH9qizbUSB80o3JnPoNh hwyS2qSqxj/Axms8VL+JYEyFnLzldNKwzzVjjFuZF1Bx8Kpk8lrkggkWd+iiMTyV tY++Lv/sExqf6gbs8pMV4gtJk9jYq/EhrJlxS2sDXXdKfRA8Eg9V82khwte673Wo Uy39rMHRWK7k0DpobPLeQWus19u33JXgsnW+uPwzDGYB6f6pJo1DB9cehErQV4yd NO/O7NQfvea5w9KtR0j6HZhi+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF9VkrrZ /w7nGzBI787Tey3/jLW3MB8GA1UdIwQYMBaAFNxcrOciU0JWBwYyh2H5E8k2SYrr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTdDQi9DQjczRjc4NjRB QjMxMUU4QUQ0RDFFMjhDNEY5QUUwMi8zRnlzNXlKVFFsWUhCaktIWWZrVHlUWkpp dXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNGeXM1eUpUUWxZSEJqS0hZZmtUeVRaSml1cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTdDQi9DQjczRjc4NjRBQjMxMUU4QUQ0RDFFMjhDNEY5QUUwMi8zRnlzNXlKVFFs WUhCaktIWWZrVHlUWkppdXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHo5/9HsjmKBq25Iro/tBq0tbRvNaZp6/IxiO++/4YUlyI0C1Y6xm8 DBDJD8S0q+K1MWsy04dATZNtiRawPnlJL3rmU823wKlaxIc7HQdbKx3HpXaliecI Hz/Y9yXDGcsHuON80wFsG452WCwjBAKd7EuZs7gPYGhwmx4vadzMi8CRpAJaCzBn 26JBQpS7wKe4RASIsj6BlzsW0fWLi+I8oGaOXJxvQcg9nzvrkwLQqeB57S/34Udu Df8OwnaQgemzGteersNsaceXWjJt6glianJCUziEHwQgMBIdTzUUHlLyQZfcIETI Z+Ej13yFlkOYHwha0SCYHTePjkvDDjZk -----END CERTIFICATE-----Generated at Wed Nov 5 10:01:58 2025 by rpki-client