$ rpki-client -vvf rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.mft File: 3VdGDwwSvgVGE6L0KWewfaVoe_A.mft (raw, json) Hash identifier: F4DpFHd1f/fyoFW5GCaUf09EOuY5yVabdWXBxnniFlA= Subject key identifier: 55:31:21:56:47:25:EA:20:05:E2:2F:8A:C1:3D:F8:6F:86:1F:0F:46 Authority key identifier: DD:57:46:0F:0C:12:BE:05:46:13:A2:F4:29:67:B0:7D:A5:68:7B:F0 Certificate issuer: /CN=A91566DC/serialNumber=DD57460F0C12BE054613A2F42967B07DA5687BF0 Certificate serial: CB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3VdGDwwSvgVGE6L0KWewfaVoe_A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.mft Manifest number: CA Signing time: Wed 05 Nov 2025 05:54:22 +0000 Manifest this update: Wed 05 Nov 2025 05:54:21 +0000 Manifest next update: Wed 12 Nov 2025 05:54:21 +0000 Files and hashes: 1: 3VdGDwwSvgVGE6L0KWewfaVoe_A.crl (hash: bIZJ+CN4QIWrd9jOyFEzyJ2CU8jszjJR5oNwzBxc8ps=) 2: ABF1FAF2860211EF8D8AD011C4F9AE02.roa (hash: FjxvcClLpMvzDMGgYVpt3T25fLDEAyl8BO+4pScMyJU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.crl rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3VdGDwwSvgVGE6L0KWewfaVoe_A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:54:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 203 (0xcb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91566DC, serialNumber=DD57460F0C12BE054613A2F42967B07DA5687BF0 Validity Not Before: Nov 5 05:54:21 2025 GMT Not After : Nov 12 05:54:21 2025 GMT Subject: CN=690ae68d-6daf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:46:22:e8:3e:04:c5:a7:7f:be:e1:a5:8c:37: bb:31:0d:26:db:af:22:8b:0a:fe:d3:53:14:b2:fd: 1e:ba:ac:5e:0a:16:92:e7:8d:60:d1:9b:a8:2c:c2: 54:bd:1c:a4:a1:ba:6f:32:46:9e:f9:2b:a4:7c:57: 91:35:cd:de:9d:0a:89:d3:40:34:db:3d:d4:7a:dc: 88:fa:61:a1:63:53:d7:8e:c4:3e:dc:e3:0c:74:d3: f6:15:f0:be:4f:d1:61:10:4d:fa:23:70:9d:23:54: 4b:7a:0f:67:78:c5:77:61:1d:9a:b0:2e:ee:e5:40: e0:35:22:47:97:92:44:fb:83:b6:2f:df:bf:ef:d4: 46:f0:79:7f:c7:e2:4d:a4:99:68:cb:74:82:e8:46: 82:6b:76:4e:05:0c:5f:f4:e7:f8:f2:5e:3e:48:0f: dc:56:a3:08:c5:1c:5c:83:49:ce:65:41:4f:38:6a: 9a:00:f3:1c:ea:0f:98:f7:40:82:0d:1e:9c:f4:c6: c4:dc:93:c8:0c:8c:aa:05:f6:0c:c7:10:97:1d:e1: a6:d6:4b:42:fc:ec:a6:50:7a:a3:de:8f:9b:53:2c: 5b:95:7e:78:e2:1f:9a:29:58:67:8a:dd:28:a4:02: 57:d7:a7:30:23:82:9c:27:41:c6:91:d6:f0:d4:52: d6:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:31:21:56:47:25:EA:20:05:E2:2F:8A:C1:3D:F8:6F:86:1F:0F:46 X509v3 Authority Key Identifier: keyid:DD:57:46:0F:0C:12:BE:05:46:13:A2:F4:29:67:B0:7D:A5:68:7B:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3VdGDwwSvgVGE6L0KWewfaVoe_A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:e0:c2:8a:a6:9d:fc:1a:9a:25:a5:62:ad:a5:ae:cb:ef:0c: 24:c7:e3:00:de:ca:c4:8f:2e:22:73:5b:e3:54:de:c3:4b:5b: 13:94:01:bf:79:43:d3:4f:cc:cb:18:d6:90:41:54:ed:7b:41: 55:cd:75:bd:fc:b3:08:bc:58:95:af:20:bd:a7:8e:5e:4c:5e: a3:b7:3c:03:9d:9f:70:98:69:df:2d:dd:03:45:e0:80:b4:a1: f4:d5:36:1b:a8:8c:8f:6a:f9:c9:79:b2:f3:84:f4:56:e3:af: d7:4f:de:88:59:49:c7:5e:0f:a4:a9:a0:aa:f9:83:95:f2:9a: b0:a1:37:49:46:8c:3e:3b:c4:f9:60:a5:c3:c7:a8:f1:c2:d7: ec:5d:73:9e:02:ca:58:6d:fe:c5:0b:5a:6b:80:1f:7e:f9:4b: fb:9e:53:77:94:dd:68:6a:fe:f0:91:e9:84:52:9b:58:ae:bc: 98:28:1b:fb:5a:29:d7:1e:38:05:12:0a:1f:00:c6:66:15:e0: da:fd:c6:2b:62:4b:80:c1:09:c8:de:43:48:c4:b9:66:62:a2: 3f:f8:aa:9a:6a:d9:2e:2b:75:96:6f:a3:c7:92:b9:1a:12:7a: 2b:14:41:b3:5e:fb:84:26:14:3e:4a:b2:4f:bd:db:83:9b:78: 8e:96:51:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY2REMxMTAvBgNVBAUTKERENTc0NjBGMEMxMkJFMDU0NjEzQTJGNDI5NjdCMDdE QTU2ODdCRjAwHhcNMjUxMTA1MDU1NDIxWhcNMjUxMTEyMDU1NDIxWjAYMRYwFAYD VQQDEw02OTBhZTY4ZC02ZGFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5kYi6D4Exad/vuGljDe7MQ0m268iiwr+01MUsv0euqxeChaS541g0ZuoLMJU vRykobpvMkae+SukfFeRNc3enQqJ00A02z3UetyI+mGhY1PXjsQ+3OMMdNP2FfC+ T9FhEE36I3CdI1RLeg9neMV3YR2asC7u5UDgNSJHl5JE+4O2L9+/79RG8Hl/x+JN pJloy3SC6EaCa3ZOBQxf9Of48l4+SA/cVqMIxRxcg0nOZUFPOGqaAPMc6g+Y90CC DR6c9MbE3JPIDIyqBfYMxxCXHeGm1ktC/OymUHqj3o+bUyxblX544h+aKVhnit0o pAJX16cwI4KcJ0HGkdbw1FLWswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFUxIVZH JeogBeIvisE9+G+GHw9GMB8GA1UdIwQYMBaAFN1XRg8MEr4FRhOi9ClnsH2laHvw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjZEQy81QTE4MkM3Qzg1 MjMxMUVGOUI0OEZGNDFDNEY5QUUwMi8zVmRHRHd3U3ZnVkdFNkwwS1dld2ZhVm9l X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzNWZEdEd3dTdmdWR0U2TDBLV2V3ZmFWb2VfQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjZEQy81QTE4MkM3Qzg1MjMxMUVGOUI0OEZGNDFDNEY5QUUwMi8zVmRHRHd3U3Zn VkdFNkwwS1dld2ZhVm9lX0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBI4MKKpp38GpolpWKtpa7L7wwkx+MA3srEjy4ic1vjVN7DS1sTlAG/ eUPTT8zLGNaQQVTte0FVzXW9/LMIvFiVryC9p45eTF6jtzwDnZ9wmGnfLd0DReCA tKH01TYbqIyPavnJebLzhPRW46/XT96IWUnHXg+kqaCq+YOV8pqwoTdJRow+O8T5 YKXDx6jxwtfsXXOeAspYbf7FC1prgB9++Uv7nlN3lN1oav7wkemEUptYrryYKBv7 WinXHjgFEgofAMZmFeDa/cYrYkuAwQnI3kNIxLlmYqI/+KqaatkuK3WWb6PHkrka EnorFEGzXvuEJhQ+SrJPvduDm3iOllGu -----END CERTIFICATE-----Generated at Wed Nov 5 15:02:54 2025 by rpki-client