$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft File: 3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft (raw, json) Hash identifier: obaQ8gOfcr13AaIvBUU4JAmfYE8FkwoJ3rGYPK40oPA= Subject key identifier: AC:06:06:08:64:A5:85:35:61:4F:0F:D0:55:D6:5B:5E:A6:18:F9:91 Authority key identifier: DE:55:A3:69:AE:D9:18:69:8C:2D:63:C3:2E:F6:1B:DB:C5:98:05:96 Certificate issuer: /CN=A91A5CC3/serialNumber=DE55A369AED918698C2D63C32EF61BDBC5980596 Certificate serial: 01BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lWjaa7ZGGmMLWPDLvYb28WYBZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft Manifest number: 01BA Signing time: Tue 04 Nov 2025 14:30:28 +0000 Manifest this update: Tue 04 Nov 2025 14:30:27 +0000 Manifest next update: Tue 11 Nov 2025 14:30:27 +0000 Files and hashes: 1: 3lWjaa7ZGGmMLWPDLvYb28WYBZY.crl (hash: bOqc/zVw8KRn13Vmp+Zaz5EqjZudDE7qqpCJql5KlzU=) 2: CD1C75D8B98A11F0A26C3854C4F9AE02.roa (hash: QF4RGp/e9uxGVWxRkpZcmyBEIK+c31pCcfLGh7O93y0=) 3: B67FD220B98A11F0AB76E244C4F9AE02.roa (hash: HFrOvijyyqsRLcotTRRA/PGjBjIyClKOdRjQDsGlSHY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.crl rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lWjaa7ZGGmMLWPDLvYb28WYBZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:30:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 447 (0x1bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5CC3, serialNumber=DE55A369AED918698C2D63C32EF61BDBC5980596 Validity Not Before: Nov 4 14:30:27 2025 GMT Not After : Nov 11 14:30:27 2025 GMT Subject: CN=690a0e04-04fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e6:41:4d:7b:a1:f6:24:6c:00:f0:49:62:4a: 71:d5:71:92:80:40:51:a3:85:54:52:58:31:75:d5: 7e:e9:25:2c:d2:fb:ed:92:bb:2c:80:08:e4:cb:c3: 24:05:a4:d2:6d:53:7d:cd:37:49:89:48:96:a2:37: ed:ea:ce:d7:a9:f0:71:46:44:34:1f:6f:ea:0e:4c: 2a:42:47:0d:07:b8:7a:67:ce:7f:5b:ba:00:6e:8b: ed:e3:ff:27:7f:4b:3e:ed:2c:bb:f2:69:9e:36:c6: aa:fc:ab:ad:f7:ca:28:60:20:1f:c6:35:f8:cc:68: 57:0e:10:b6:fa:f3:22:e8:a4:77:d1:8f:06:87:7a: ae:b8:a7:12:4e:2c:d5:96:b7:c1:f0:26:78:03:96: c3:ff:92:63:b5:98:40:ed:6b:f2:0a:52:e2:a7:10: 65:b7:b3:8b:15:87:c5:84:e7:33:46:74:39:0f:58: be:97:64:09:50:94:62:db:b6:3f:38:9b:c0:ca:9f: 0c:92:39:7f:7e:54:2f:9e:e5:d6:50:2e:00:1d:b6: 7d:70:47:d8:42:95:4d:3b:db:dc:78:a4:06:aa:7b: ca:d0:ee:3d:c3:9e:f2:b6:a9:a7:17:41:ec:c1:b6: 68:b9:32:fb:3b:93:3c:8b:28:8d:53:59:9f:79:87: 79:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:06:06:08:64:A5:85:35:61:4F:0F:D0:55:D6:5B:5E:A6:18:F9:91 X509v3 Authority Key Identifier: keyid:DE:55:A3:69:AE:D9:18:69:8C:2D:63:C3:2E:F6:1B:DB:C5:98:05:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lWjaa7ZGGmMLWPDLvYb28WYBZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:b5:92:a0:48:e6:0c:ca:6e:74:4f:b2:fb:e8:39:da:5d:43: aa:29:1a:b4:81:fd:cf:b1:fc:7a:23:c0:84:49:63:ed:c1:db: ad:a1:4d:2e:9d:a5:d6:8d:86:2b:1f:8f:78:6e:ad:f6:c0:14: da:9d:85:2e:58:2f:76:d2:a5:1f:94:75:0d:82:0f:b6:48:17: 94:70:41:b0:11:cd:92:7c:e4:11:e0:ad:9a:fc:f9:12:09:e6: c7:c7:e9:e6:a3:fb:9b:8f:c1:fb:9d:9d:22:d4:f9:b1:cf:71: 14:17:8c:1e:2f:5c:b0:e9:53:a2:de:8a:e1:87:63:41:dc:d8: 8d:28:29:c1:4a:c7:47:e0:b1:46:43:3e:f7:24:38:dc:c7:7f: 72:b2:02:3d:2e:24:d6:21:02:6f:72:ac:56:9a:c4:8b:3e:49: 70:43:83:14:1a:f9:62:af:dc:4d:32:b4:eb:1d:69:75:95:98: ce:68:dc:02:ca:d8:48:95:7e:13:b5:05:d3:f8:0c:a1:19:95: 48:9e:69:85:a9:bb:ad:0d:80:be:57:b7:c4:1b:c2:4c:d2:ac: 80:c3:4e:ac:8c:0a:02:26:69:ee:d3:72:32:4d:cb:d7:cb:21: c4:e7:2b:12:cd:58:82:4c:75:5f:54:c0:6a:f3:3e:db:b6:88: 3a:57:44:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAb8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVDQzMxMTAvBgNVBAUTKERFNTVBMzY5QUVEOTE4Njk4QzJENjNDMzJFRjYxQkRC QzU5ODA1OTYwHhcNMjUxMTA0MTQzMDI3WhcNMjUxMTExMTQzMDI3WjAYMRYwFAYD VQQDEw02OTBhMGUwNC0wNGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvOZBTXuh9iRsAPBJYkpx1XGSgEBRo4VUUlgxddV+6SUs0vvtkrssgAjky8Mk BaTSbVN9zTdJiUiWojft6s7XqfBxRkQ0H2/qDkwqQkcNB7h6Z85/W7oAbovt4/8n f0s+7Sy78mmeNsaq/Kut98ooYCAfxjX4zGhXDhC2+vMi6KR30Y8Gh3quuKcSTizV lrfB8CZ4A5bD/5JjtZhA7WvyClLipxBlt7OLFYfFhOczRnQ5D1i+l2QJUJRi27Y/ OJvAyp8Mkjl/flQvnuXWUC4AHbZ9cEfYQpVNO9vceKQGqnvK0O49w57ytqmnF0Hs wbZouTL7O5M8iyiNU1mfeYd5xQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKwGBghk pYU1YU8P0FXWW16mGPmRMB8GA1UdIwQYMBaAFN5Vo2mu2RhpjC1jwy72G9vFmAWW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUNDMy82NDE2RDgzODE0 QzAxMUVFOTZFQTU0MjFDNEY5QUUwMi8zbFdqYWE3WkdHbU1MV1BETHZZYjI4V1lC WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNsV2phYTdaR0dtTUxXUERMdlliMjhXWUJaWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUNDMy82NDE2RDgzODE0QzAxMUVFOTZFQTU0MjFDNEY5QUUwMi8zbFdqYWE3WkdH bU1MV1BETHZZYjI4V1lCWlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDNtZKgSOYMym50T7L76DnaXUOqKRq0gf3Psfx6I8CESWPtwdutoU0u naXWjYYrH494bq32wBTanYUuWC920qUflHUNgg+2SBeUcEGwEc2SfOQR4K2a/PkS CebHx+nmo/ubj8H7nZ0i1Pmxz3EUF4weL1yw6VOi3orhh2NB3NiNKCnBSsdH4LFG Qz73JDjcx39ysgI9LiTWIQJvcqxWmsSLPklwQ4MUGvlir9xNMrTrHWl1lZjOaNwC ythIlX4TtQXT+AyhGZVInmmFqbutDYC+V7fEG8JM0qyAw06sjAoCJmnu03IyTcvX yyHE5ysSzViCTHVfVMBq8z7btog6V0RA -----END CERTIFICATE-----Generated at Tue Nov 4 21:35:00 2025 by rpki-client