$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft File: L3f37TT2am_GcID7m2G7JnkvhaE.mft (raw, json) Hash identifier: d09HRSH8m9gPxif3gv0oddeco+NUWGwZjXQp/5oG1kk= Subject key identifier: E4:A6:5F:DA:5E:78:77:BD:27:58:56:70:61:9E:3D:D7:CD:EC:85:30 Authority key identifier: 2F:77:F7:ED:34:F6:6A:6F:C6:70:80:FB:9B:61:BB:26:79:2F:85:A1 Certificate issuer: /CN=A91A5C90/serialNumber=2F77F7ED34F66A6FC67080FB9B61BB26792F85A1 Certificate serial: 04E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3f37TT2am_GcID7m2G7JnkvhaE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft Manifest number: 04D9 Signing time: Tue 04 Nov 2025 23:52:37 +0000 Manifest this update: Tue 04 Nov 2025 23:52:37 +0000 Manifest next update: Tue 11 Nov 2025 23:52:37 +0000 Files and hashes: 1: L3f37TT2am_GcID7m2G7JnkvhaE.crl (hash: Yu2vCRm4MljG9Es8luRr9CrQoLtRdQDuWOzEpqkb6M4=) 2: CDA06D9C3D2A11EC8ECCEB1FC4F9AE02.roa (hash: cJIs31sqlgOhonhzClBxUM9SmxEaq46WFcZovXHGcPw=) 3: CE319EDE3D2A11EC8ECCEB1FC4F9AE02.roa (hash: Mum2g6Ft9eC1OvjjJ0nqhQo1XRrbGEG1M1RHx+Vnh0c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.crl rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3f37TT2am_GcID7m2G7JnkvhaE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:52:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1249 (0x4e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5C90, serialNumber=2F77F7ED34F66A6FC67080FB9B61BB26792F85A1 Validity Not Before: Nov 4 23:52:37 2025 GMT Not After : Nov 11 23:52:37 2025 GMT Subject: CN=690a91c5-669a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:4c:82:d4:bc:c7:ac:c5:fb:93:c7:a6:0d:73: 57:6e:25:8a:c6:43:cd:1d:06:66:09:51:da:85:59: 31:ce:20:02:14:b2:54:61:f5:84:81:f4:06:2f:2d: e0:1d:16:2c:fe:30:a5:95:80:7e:21:1a:c8:af:d6: f1:48:40:d4:db:ed:ed:ff:55:2f:36:e8:0e:f5:4c: 72:3b:3a:76:b4:09:dc:72:00:c8:ae:40:8f:0e:bf: 2a:16:49:d0:20:0c:57:53:72:bc:05:6d:31:9a:cc: d6:06:87:5f:a8:d3:7c:3c:83:15:85:79:bd:e8:e9: 15:25:9b:be:7a:ec:ad:78:ec:f1:16:9e:d9:70:79: 98:4a:25:a3:3a:ed:2e:5c:20:e2:4b:66:22:26:4f: 9c:da:8c:e0:d9:5f:90:47:71:a5:43:72:82:b8:e2: f1:1e:08:04:c4:2c:3c:a4:e1:4c:e1:ef:6a:da:9d: 8f:f8:76:a8:44:32:40:be:21:16:1a:48:49:71:a4: 25:48:eb:0e:08:80:01:1e:9a:06:e1:ad:32:ac:c3: 29:2c:c0:f8:8b:48:f1:24:6b:49:7a:bf:6f:ac:95: bd:ab:e5:e5:66:07:63:14:be:b2:06:76:2f:be:b4: cb:cc:96:3a:cd:08:b9:d3:28:32:d4:6b:56:4c:c4: d0:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:A6:5F:DA:5E:78:77:BD:27:58:56:70:61:9E:3D:D7:CD:EC:85:30 X509v3 Authority Key Identifier: keyid:2F:77:F7:ED:34:F6:6A:6F:C6:70:80:FB:9B:61:BB:26:79:2F:85:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3f37TT2am_GcID7m2G7JnkvhaE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:4d:7d:b4:54:b8:5f:b8:f7:83:f6:a3:a6:e8:1e:d3:c0:9e: dd:a5:da:55:d5:7d:c8:17:28:85:0e:41:6f:93:9f:99:6d:18: 6d:9a:57:c4:61:2a:9f:92:c1:48:36:d2:06:f8:5a:41:6d:10: 1d:9e:90:c2:f1:a0:6b:b7:34:a3:8b:56:3a:be:69:d4:97:8a: cd:3f:a0:d3:d4:0f:5b:62:53:81:97:9d:0f:e4:9f:0a:27:b5: 10:b0:8a:10:7c:4a:b0:a4:63:e0:fa:13:2d:b1:4b:ca:72:d7: 11:3f:e1:13:d8:e4:e2:c4:22:7b:87:34:c1:21:2e:d9:89:63: b1:cd:70:13:5a:cf:de:8d:ea:fc:8f:53:7e:67:5a:64:01:59: d1:e6:f0:e5:ce:b4:c1:03:43:bb:26:63:9d:23:91:bc:44:96: ca:ec:6f:36:23:78:65:6e:1d:bf:5d:a9:de:41:34:71:3f:c0: 53:dd:4d:a5:65:34:23:12:2c:95:67:83:3d:b1:95:b5:7d:1b: 9f:36:f3:b1:d1:93:1c:d1:a1:7e:b0:42:8e:92:00:2b:da:26: de:89:5b:2b:aa:6b:30:dc:d4:0f:a8:b8:17:5e:00:51:b8:b0: ed:22:7f:5e:b2:30:d1:78:7c:b1:6b:28:1e:39:82:03:60:5c: 77:ad:18:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVDOTAxMTAvBgNVBAUTKDJGNzdGN0VEMzRGNjZBNkZDNjcwODBGQjlCNjFCQjI2 NzkyRjg1QTEwHhcNMjUxMTA0MjM1MjM3WhcNMjUxMTExMjM1MjM3WjAYMRYwFAYD VQQDEw02OTBhOTFjNS02NjlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA00yC1LzHrMX7k8emDXNXbiWKxkPNHQZmCVHahVkxziACFLJUYfWEgfQGLy3g HRYs/jCllYB+IRrIr9bxSEDU2+3t/1UvNugO9UxyOzp2tAnccgDIrkCPDr8qFknQ IAxXU3K8BW0xmszWBodfqNN8PIMVhXm96OkVJZu+euyteOzxFp7ZcHmYSiWjOu0u XCDiS2YiJk+c2ozg2V+QR3GlQ3KCuOLxHggExCw8pOFM4e9q2p2P+HaoRDJAviEW GkhJcaQlSOsOCIABHpoG4a0yrMMpLMD4i0jxJGtJer9vrJW9q+XlZgdjFL6yBnYv vrTLzJY6zQi50ygy1GtWTMTQMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOSmX9pe eHe9J1hWcGGePdfN7IUwMB8GA1UdIwQYMBaAFC939+009mpvxnCA+5thuyZ5L4Wh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUM5MC80MkUxRkQyQTNE MjkxMUVDQjBCQ0QyMUZDNEY5QUUwMi9MM2YzN1RUMmFtX0djSUQ3bTJHN0pua3Zo YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wzZjM3VFQyYW1fR2NJRDdtMkc3Sm5rdmhhRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUM5MC80MkUxRkQyQTNEMjkxMUVDQjBCQ0QyMUZDNEY5QUUwMi9MM2YzN1RUMmFt X0djSUQ3bTJHN0pua3ZoYUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3TX20VLhfuPeD9qOm6B7TwJ7dpdpV1X3IFyiFDkFvk5+ZbRhtmlfE YSqfksFINtIG+FpBbRAdnpDC8aBrtzSji1Y6vmnUl4rNP6DT1A9bYlOBl50P5J8K J7UQsIoQfEqwpGPg+hMtsUvKctcRP+ET2OTixCJ7hzTBIS7ZiWOxzXATWs/ejer8 j1N+Z1pkAVnR5vDlzrTBA0O7JmOdI5G8RJbK7G82I3hlbh2/XaneQTRxP8BT3U2l ZTQjEiyVZ4M9sZW1fRufNvOx0ZMc0aF+sEKOkgAr2ibeiVsrqmsw3NQPqLgXXgBR uLDtIn9esjDReHyxaygeOYIDYFx3rRhq -----END CERTIFICATE-----Generated at Wed Nov 5 15:18:00 2025 by rpki-client