$ rpki-client -vvf rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.mft File: aq89m8Pfo6ElCCll2P8zuBKPKR8.mft (raw, json) Hash identifier: k8nW1OipRmN2DpX9OndkTRuk1+65+0QNkYPtxlWWSp8= Subject key identifier: 12:3E:9D:A7:EE:21:0E:BE:56:2B:F6:E1:0A:5E:52:DB:69:23:37:F5 Authority key identifier: 6A:AF:3D:9B:C3:DF:A3:A1:25:08:29:65:D8:FF:33:B8:12:8F:29:1F Certificate issuer: /CN=A91476E2/serialNumber=6AAF3D9BC3DFA3A125082965D8FF33B8128F291F Certificate serial: A9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aq89m8Pfo6ElCCll2P8zuBKPKR8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.mft Manifest number: A3 Signing time: Wed 05 Nov 2025 06:50:45 +0000 Manifest this update: Wed 05 Nov 2025 06:50:45 +0000 Manifest next update: Wed 12 Nov 2025 06:50:45 +0000 Files and hashes: 1: aq89m8Pfo6ElCCll2P8zuBKPKR8.crl (hash: hE/AHlgOAsId0BMKheQHhR1dXjP3nNk9vLOMkMHQnw8=) 2: 79E40530CB5A11EFA1C64B62C4F9AE02.roa (hash: drd+idSshs98eOD0pXc/+ttH+udrA5TRp96UQZXHfUU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.crl rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aq89m8Pfo6ElCCll2P8zuBKPKR8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:50:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 169 (0xa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91476E2, serialNumber=6AAF3D9BC3DFA3A125082965D8FF33B8128F291F Validity Not Before: Nov 5 06:50:45 2025 GMT Not After : Nov 12 06:50:45 2025 GMT Subject: CN=690af3c5-5eb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2e:ca:64:06:98:97:38:78:09:ad:0f:b5:8b: 52:5f:5b:32:aa:94:23:cd:8b:a0:0a:2b:c0:77:ce: fe:ee:66:06:6b:bb:2b:7b:a7:22:5a:ce:b1:9c:05: 01:22:92:a0:3c:12:c6:ff:9b:63:05:40:a6:fd:d8: 27:8c:dd:80:91:7c:6f:45:2f:a0:44:a0:32:24:98: be:0a:48:4d:6f:7b:ed:a7:ea:f2:9b:1f:33:f0:42: 8e:a5:44:53:1b:f7:1e:f1:60:f4:66:88:d0:d4:2f: ac:c2:e3:47:d1:32:6b:83:d8:a3:23:d7:5d:ed:8c: 55:85:43:d9:2f:5f:61:db:7b:00:d9:3f:eb:c0:41: 04:6c:ca:23:10:32:20:d7:8d:eb:87:23:7f:ec:1f: be:a2:b7:6f:fe:99:f9:c3:b1:58:0d:e7:bb:81:a4: 46:5a:4a:03:ce:cf:c2:bc:3f:2c:c9:ae:ad:56:da: 84:a2:40:6b:7b:f3:10:61:ee:76:0c:5a:38:6c:57: 0d:5b:a4:94:a9:81:24:38:da:12:14:35:76:c5:ec: 97:c2:dd:52:27:1f:31:5b:1e:87:dd:b6:ba:56:d4: 90:18:2f:fe:09:b5:28:74:2b:dc:a8:e2:b1:4a:92: fa:69:22:76:e7:58:c7:8c:d5:0e:7b:b7:04:9a:39: de:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:3E:9D:A7:EE:21:0E:BE:56:2B:F6:E1:0A:5E:52:DB:69:23:37:F5 X509v3 Authority Key Identifier: keyid:6A:AF:3D:9B:C3:DF:A3:A1:25:08:29:65:D8:FF:33:B8:12:8F:29:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aq89m8Pfo6ElCCll2P8zuBKPKR8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:86:8f:10:89:bd:2c:b7:5f:19:90:26:3e:17:76:83:10:70: ba:a2:74:67:61:11:19:30:66:06:35:ba:ce:6e:18:af:e3:f6: 5c:25:06:ee:cf:5b:38:86:f5:1d:71:d4:89:28:10:97:ed:b3: a0:44:cf:ef:34:e2:59:b7:f7:09:0f:45:9d:b6:30:bd:39:91: f9:83:0e:73:f8:c0:5a:75:73:97:1d:a8:7b:72:62:52:44:ae: 0b:42:36:a0:86:5c:33:6d:4c:7a:6c:f6:b6:e6:58:3b:ef:9a: 28:ed:8e:19:47:42:7e:fc:f5:c4:d4:cb:38:8d:f5:29:65:50: 65:90:a4:c8:0d:9d:6f:71:c8:46:23:96:93:bc:2a:bd:00:d7: e3:b3:f5:47:9f:1f:a7:b4:be:11:ab:b2:3f:17:cb:f4:70:0c: c1:bc:18:ec:04:18:50:e8:ef:88:33:26:1e:69:60:9c:cb:04: df:60:04:2d:a0:28:42:ac:4e:ba:17:84:36:f1:60:c5:37:4a: 04:53:08:6b:a7:72:d1:00:88:49:b0:a5:3a:67:bc:91:35:21: a6:2c:b7:69:32:bf:ad:96:51:f8:28:5b:f0:9b:99:d2:ef:2a: db:b7:11:45:ea:6c:c9:79:35:c1:a2:7a:9d:fe:84:c4:cd:b7: a0:19:0a:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc2RTIxMTAvBgNVBAUTKDZBQUYzRDlCQzNERkEzQTEyNTA4Mjk2NUQ4RkYzM0I4 MTI4RjI5MUYwHhcNMjUxMTA1MDY1MDQ1WhcNMjUxMTEyMDY1MDQ1WjAYMRYwFAYD VQQDEw02OTBhZjNjNS01ZWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoS7KZAaYlzh4Ca0PtYtSX1syqpQjzYugCivAd87+7mYGa7sre6ciWs6xnAUB IpKgPBLG/5tjBUCm/dgnjN2AkXxvRS+gRKAyJJi+CkhNb3vtp+rymx8z8EKOpURT G/ce8WD0ZojQ1C+swuNH0TJrg9ijI9dd7YxVhUPZL19h23sA2T/rwEEEbMojEDIg 143rhyN/7B++ordv/pn5w7FYDee7gaRGWkoDzs/CvD8sya6tVtqEokBre/MQYe52 DFo4bFcNW6SUqYEkONoSFDV2xeyXwt1SJx8xWx6H3ba6VtSQGC/+CbUodCvcqOKx SpL6aSJ251jHjNUOe7cEmjnebQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBI+nafu IQ6+Viv24QpeUttpIzf1MB8GA1UdIwQYMBaAFGqvPZvD36OhJQgpZdj/M7gSjykf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzZFMi8zQjU0MUYyMENC M0QxMUVGODcwM0Y3NUFDNEY5QUUwMi9hcTg5bThQZm82RWxDQ2xsMlA4enVCS1BL UjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2FxODltOFBmbzZFbENDbGwyUDh6dUJLUEtSOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzZFMi8zQjU0MUYyMENCM0QxMUVGODcwM0Y3NUFDNEY5QUUwMi9hcTg5bThQZm82 RWxDQ2xsMlA4enVCS1BLUjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnho8Qib0st18ZkCY+F3aDEHC6onRnYREZMGYGNbrObhiv4/ZcJQbu z1s4hvUdcdSJKBCX7bOgRM/vNOJZt/cJD0WdtjC9OZH5gw5z+MBadXOXHah7cmJS RK4LQjaghlwzbUx6bPa25lg775oo7Y4ZR0J+/PXE1Ms4jfUpZVBlkKTIDZ1vcchG I5aTvCq9ANfjs/VHnx+ntL4Rq7I/F8v0cAzBvBjsBBhQ6O+IMyYeaWCcywTfYAQt oChCrE66F4Q28WDFN0oEUwhrp3LRAIhJsKU6Z7yRNSGmLLdpMr+tllH4KFvwm5nS 7yrbtxFF6mzJeTXBonqd/oTEzbegGQrH -----END CERTIFICATE-----Generated at Wed Nov 5 15:02:45 2025 by rpki-client