$ rpki-client -vvf rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.mft File: j3AW2iLylktW9Cz0bZ8SOvNoMas.mft (raw, json) Hash identifier: /mKIRD4qEOjSgChDVGCRANdJaJTuJluv3VjVBKzY4t8= Subject key identifier: DA:D1:B9:3C:26:5B:70:C1:95:B8:51:C9:05:45:52:AC:D5:75:2C:4B Authority key identifier: 8F:70:16:DA:22:F2:96:4B:56:F4:2C:F4:6D:9F:12:3A:F3:68:31:AB Certificate issuer: /CN=A91884A1/serialNumber=8F7016DA22F2964B56F42CF46D9F123AF36831AB Certificate serial: 01C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j3AW2iLylktW9Cz0bZ8SOvNoMas.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.mft Manifest number: 01BF Signing time: Mon 03 Nov 2025 03:02:49 +0000 Manifest this update: Mon 03 Nov 2025 03:02:48 +0000 Manifest next update: Mon 10 Nov 2025 03:02:48 +0000 Files and hashes: 1: j3AW2iLylktW9Cz0bZ8SOvNoMas.crl (hash: GEmk7S6XkQ3qoFvijyKDsFYdCAtrj3I+mgmPcsAs4u0=) 2: 87695D32591811EE973B1058C4F9AE02.roa (hash: t+UtlSfQB7uB9LxMHNDwpYNTZSeeRrSKvGFeOr/lo+0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.crl rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j3AW2iLylktW9Cz0bZ8SOvNoMas.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:02:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 453 (0x1c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91884A1, serialNumber=8F7016DA22F2964B56F42CF46D9F123AF36831AB Validity Not Before: Nov 3 03:02:48 2025 GMT Not After : Nov 10 03:02:48 2025 GMT Subject: CN=69081b58-950c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:87:da:a9:5c:7e:fd:7a:75:f0:c9:9c:b9:83: dc:3a:14:8f:56:1d:ae:6e:8b:00:01:5a:c1:15:8f: 50:5f:35:66:0a:c0:31:81:d7:00:e8:9a:f8:94:8a: 9f:fb:95:a2:fc:13:f9:66:cc:f7:f0:f6:d6:79:17: d2:a6:86:30:f2:90:b2:57:26:be:8c:ee:df:83:96: 4f:c5:f7:d5:3d:fd:65:0d:c5:d1:8c:40:18:7d:e3: dc:85:93:d1:37:0f:b7:7c:67:9e:2d:9c:ee:6c:58: 51:53:c3:18:ea:97:ab:9c:01:3b:c4:0c:ee:a8:06: cd:1f:53:d1:38:59:66:c9:96:06:9c:bc:4b:64:be: 34:72:40:5a:86:1d:ce:8c:cf:f2:79:bf:35:25:fb: dd:69:f2:3e:d5:32:b4:ac:03:65:72:38:0e:14:af: 44:51:a0:11:32:25:bf:23:c8:c2:38:e1:2b:72:3d: 08:8e:c4:e5:b3:fe:e7:e2:79:ea:9e:ac:e1:0d:cc: 8f:39:bb:1c:04:42:56:da:37:a5:1e:64:74:56:58: 85:9f:47:27:db:aa:41:c2:2a:61:af:d5:9b:b8:b8: 6c:96:d7:9a:16:14:09:40:95:74:0b:ac:f3:07:1d: 23:57:d3:7a:3a:12:cc:ce:3f:e8:44:2e:9f:dd:97: 98:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:D1:B9:3C:26:5B:70:C1:95:B8:51:C9:05:45:52:AC:D5:75:2C:4B X509v3 Authority Key Identifier: keyid:8F:70:16:DA:22:F2:96:4B:56:F4:2C:F4:6D:9F:12:3A:F3:68:31:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j3AW2iLylktW9Cz0bZ8SOvNoMas.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:0d:cb:7d:ff:bc:d3:0e:be:e0:b8:81:e6:a4:a7:cc:a3:2f: c3:c5:87:d3:3d:dd:94:6f:0b:03:7a:db:bb:60:92:9a:43:d6: 40:b8:c4:2a:a1:fe:56:24:dc:5e:bb:c4:e4:8d:51:8b:77:e1: fc:c0:36:a7:45:bd:c4:59:6f:57:db:e5:12:86:76:fc:5e:ac: 14:fd:cb:ba:e9:cd:83:a5:bf:4c:ad:ca:a8:56:d6:0b:24:96: 51:3b:89:d6:8d:4d:3c:5c:86:ea:d3:d1:79:40:a3:64:ca:1d: 6f:ab:cb:4a:0f:0e:79:c9:bd:d4:e4:73:e1:4d:0a:7d:f5:72: 36:bf:e0:c8:ce:2d:50:a2:d3:f0:d8:d5:29:17:89:88:4c:5d: 2f:33:f5:fd:e6:86:6f:88:24:7c:a2:bd:a4:e1:36:b5:b7:93: 20:6d:97:77:9d:6b:e2:de:3f:5e:5b:e0:f9:63:c6:7a:be:2b: de:81:7f:bc:71:68:95:14:b7:da:ea:7d:fa:50:15:7f:f8:ca: 95:0d:0b:cd:9d:ec:86:08:8c:4e:08:49:cb:2d:cf:15:8c:57: 2d:0c:2d:51:42:ba:72:99:1a:e8:da:9b:7e:02:3c:81:61:e7: 96:47:82:62:90:3f:f8:aa:1b:fa:16:5d:46:20:7b:17:a7:97: a0:69:74:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg0QTExMTAvBgNVBAUTKDhGNzAxNkRBMjJGMjk2NEI1NkY0MkNGNDZEOUYxMjNB RjM2ODMxQUIwHhcNMjUxMTAzMDMwMjQ4WhcNMjUxMTEwMDMwMjQ4WjAYMRYwFAYD VQQDEw02OTA4MWI1OC05NTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoofaqVx+/Xp18MmcuYPcOhSPVh2ubosAAVrBFY9QXzVmCsAxgdcA6Jr4lIqf +5Wi/BP5Zsz38PbWeRfSpoYw8pCyVya+jO7fg5ZPxffVPf1lDcXRjEAYfePchZPR Nw+3fGeeLZzubFhRU8MY6pernAE7xAzuqAbNH1PROFlmyZYGnLxLZL40ckBahh3O jM/yeb81JfvdafI+1TK0rANlcjgOFK9EUaARMiW/I8jCOOErcj0IjsTls/7n4nnq nqzhDcyPObscBEJW2jelHmR0VliFn0cn26pBwiphr9WbuLhslteaFhQJQJV0C6zz Bx0jV9N6OhLMzj/oRC6f3ZeYoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNrRuTwm W3DBlbhRyQVFUqzVdSxLMB8GA1UdIwQYMBaAFI9wFtoi8pZLVvQs9G2fEjrzaDGr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODRBMS9EN0RCMUM2MDE0 OUUxMUVFQUJEQzc1MzJDNEY5QUUwMi9qM0FXMmlMeWxrdFc5Q3owYlo4U092Tm9N YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ozQVcyaUx5bGt0VzlDejBiWjhTT3ZOb01hcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODRBMS9EN0RCMUM2MDE0OUUxMUVFQUJEQzc1MzJDNEY5QUUwMi9qM0FXMmlMeWxr dFc5Q3owYlo4U092Tm9NYXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBDct9/7zTDr7guIHmpKfMoy/DxYfTPd2UbwsDetu7YJKaQ9ZAuMQq of5WJNxeu8TkjVGLd+H8wDanRb3EWW9X2+UShnb8XqwU/cu66c2Dpb9MrcqoVtYL JJZRO4nWjU08XIbq09F5QKNkyh1vq8tKDw55yb3U5HPhTQp99XI2v+DIzi1QotPw 2NUpF4mITF0vM/X95oZviCR8or2k4Ta1t5MgbZd3nWvi3j9eW+D5Y8Z6vivegX+8 cWiVFLfa6n36UBV/+MqVDQvNneyGCIxOCEnLLc8VjFctDC1RQrpymRro2pt+AjyB YeeWR4JikD/4qhv6Fl1GIHsXp5egaXQi -----END CERTIFICATE-----Generated at Tue Nov 4 16:08:50 2025 by rpki-client