$ rpki-client -vvf rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.mft File: 3MvMmJOAkJntArcXgYQ2VBazHhw.mft (raw, json) Hash identifier: XVH9scXp0hEh9KcovnLJYfZR6ClUeB7f8GZ5Fge8k6k= Subject key identifier: 3F:25:D5:71:2F:14:3F:06:3F:0D:55:DD:0C:7B:0A:23:DF:E5:9E:2C Authority key identifier: DC:CB:CC:98:93:80:90:99:ED:02:B7:17:81:84:36:54:16:B3:1E:1C Certificate issuer: /CN=A913AE91/serialNumber=DCCBCC9893809099ED02B7178184365416B31E1C Certificate serial: 03DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MvMmJOAkJntArcXgYQ2VBazHhw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.mft Manifest number: 03D6 Signing time: Wed 05 Nov 2025 00:41:57 +0000 Manifest this update: Wed 05 Nov 2025 00:41:57 +0000 Manifest next update: Wed 12 Nov 2025 00:41:57 +0000 Files and hashes: 1: 3MvMmJOAkJntArcXgYQ2VBazHhw.crl (hash: AYLP/E+bMY+akYWI6t292Zi5rTlWtfMy6f0Hg6mZruY=) 2: 23F9CE72A41911ECBDBED829C4F9AE02.roa (hash: vZ/WaADoEuy2hBBHTZfwXR0fuTeB5hZjwEti8AL2NUM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.crl rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MvMmJOAkJntArcXgYQ2VBazHhw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:41:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 987 (0x3db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913AE91, serialNumber=DCCBCC9893809099ED02B7178184365416B31E1C Validity Not Before: Nov 5 00:41:57 2025 GMT Not After : Nov 12 00:41:57 2025 GMT Subject: CN=690a9d55-efbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:01:1f:73:0b:1d:c0:66:8d:4b:75:61:44:c0: 1b:1c:71:c4:20:ec:40:a4:1e:c2:42:ed:ba:03:39: 54:9a:c2:b2:40:ae:ba:a4:15:9e:d1:c9:50:5a:ad: 68:23:57:2a:dd:8e:a6:14:80:61:8b:00:2e:3f:6c: c7:cc:d8:6e:d3:1d:c5:96:e2:3b:77:8e:26:43:cc: 2a:43:4b:6f:bc:75:0c:c5:ea:dd:e4:87:35:a7:41: 0a:55:04:69:3b:13:59:01:b4:d7:09:a9:75:77:31: cc:38:df:d7:f8:b1:c9:5c:14:f7:2c:4f:12:8b:ea: f5:42:40:72:3a:30:4a:e4:22:aa:b1:92:f9:a7:11: 04:f9:05:fb:7e:ee:3d:c6:4a:24:34:1b:4d:b6:13: 7f:e1:53:e7:09:48:a1:a3:fa:59:dd:e9:a0:a3:70: 12:89:ac:38:4c:f2:6c:e2:49:08:58:8a:8a:b6:48: eb:a3:2a:b4:35:32:fb:bb:fc:3e:b6:62:d8:6e:c2: ba:8b:a0:49:19:61:07:68:82:ab:69:37:21:f8:0d: d1:e9:71:57:89:95:65:de:93:53:b9:63:56:7f:b1: 3e:3f:5f:fc:55:f1:aa:98:e3:54:eb:85:91:38:af: 55:d1:d4:81:fc:bf:0c:75:1c:f8:38:a2:d0:9e:d0: 12:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:25:D5:71:2F:14:3F:06:3F:0D:55:DD:0C:7B:0A:23:DF:E5:9E:2C X509v3 Authority Key Identifier: keyid:DC:CB:CC:98:93:80:90:99:ED:02:B7:17:81:84:36:54:16:B3:1E:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MvMmJOAkJntArcXgYQ2VBazHhw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:b4:39:90:43:5c:42:b3:57:89:8b:91:5f:16:68:57:3b:c3: 4f:95:70:31:f2:e8:1a:10:59:f8:ba:0b:54:58:b4:be:a0:3a: d2:b4:a2:9e:d3:d5:60:e2:53:b8:bc:b8:8c:b6:93:4d:c5:00: f8:5d:4b:ec:22:09:1f:0a:74:6d:b3:3b:5a:8d:d8:59:e9:a6: b1:b0:a3:34:f6:4b:03:76:94:2d:ab:2f:14:84:77:35:b7:2d: 1b:7d:4a:30:74:4b:6f:a7:77:36:3f:c4:9b:dd:15:47:d5:4f: 54:40:b7:e7:a7:2c:33:82:78:ba:96:05:70:b3:59:fa:3d:dd: d9:b1:cd:67:e3:a6:52:7e:a8:e3:f3:52:da:0a:4a:9a:e6:20: de:2d:c2:ee:1b:24:f5:6d:87:db:7c:a4:08:0f:31:e1:15:1a: d4:1f:33:63:36:21:9a:22:23:47:24:bd:e0:03:ca:cd:99:9b: 0d:be:64:d1:11:fa:05:26:3e:e4:e4:16:35:df:13:fd:da:99: 80:8c:1a:62:af:51:56:7f:74:a1:5a:21:ec:a2:fc:c2:18:b4: 56:8b:b7:18:7f:10:51:fe:ac:17:62:5e:f3:93:c8:7e:f3:50: 70:67:24:dd:65:f7:8d:7e:3e:c7:e0:17:11:c5:1f:72:d2:f1: c8:5a:8d:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0FFOTExMTAvBgNVBAUTKERDQ0JDQzk4OTM4MDkwOTlFRDAyQjcxNzgxODQzNjU0 MTZCMzFFMUMwHhcNMjUxMTA1MDA0MTU3WhcNMjUxMTEyMDA0MTU3WjAYMRYwFAYD VQQDEw02OTBhOWQ1NS1lZmJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwQEfcwsdwGaNS3VhRMAbHHHEIOxApB7CQu26AzlUmsKyQK66pBWe0clQWq1o I1cq3Y6mFIBhiwAuP2zHzNhu0x3FluI7d44mQ8wqQ0tvvHUMxerd5Ic1p0EKVQRp OxNZAbTXCal1dzHMON/X+LHJXBT3LE8Si+r1QkByOjBK5CKqsZL5pxEE+QX7fu49 xkokNBtNthN/4VPnCUiho/pZ3emgo3ASiaw4TPJs4kkIWIqKtkjroyq0NTL7u/w+ tmLYbsK6i6BJGWEHaIKraTch+A3R6XFXiZVl3pNTuWNWf7E+P1/8VfGqmONU64WR OK9V0dSB/L8MdRz4OKLQntAS8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD8l1XEv FD8GPw1V3Qx7CiPf5Z4sMB8GA1UdIwQYMBaAFNzLzJiTgJCZ7QK3F4GENlQWsx4c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUU5MS8yRTkyMTYzNkE0 MTUxMUVDQkU5MDBBN0JDNEY5QUUwMi8zTXZNbUpPQWtKbnRBcmNYZ1lRMlZCYXpI aHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNNdk1tSk9Ba0pudEFyY1hnWVEyVkJhekhody5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QUU5MS8yRTkyMTYzNkE0MTUxMUVDQkU5MDBBN0JDNEY5QUUwMi8zTXZNbUpPQWtK bnRBcmNYZ1lRMlZCYXpIaHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7tDmQQ1xCs1eJi5FfFmhXO8NPlXAx8ugaEFn4ugtUWLS+oDrStKKe 09Vg4lO4vLiMtpNNxQD4XUvsIgkfCnRtsztajdhZ6aaxsKM09ksDdpQtqy8UhHc1 ty0bfUowdEtvp3c2P8Sb3RVH1U9UQLfnpywzgni6lgVws1n6Pd3Zsc1n46ZSfqjj 81LaCkqa5iDeLcLuGyT1bYfbfKQIDzHhFRrUHzNjNiGaIiNHJL3gA8rNmZsNvmTR EfoFJj7k5BY13xP92pmAjBpir1FWf3ShWiHsovzCGLRWi7cYfxBR/qwXYl7zk8h+ 81BwZyTdZfeNfj7H4BcRxR9y0vHIWo0u -----END CERTIFICATE-----Generated at Wed Nov 5 10:30:58 2025 by rpki-client