$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft File: 3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft (raw, json) Hash identifier: 4TqUsO19Xd+c//IqbGiCitzvk8unYmQXx5Yre0cFzuU= Subject key identifier: 3B:41:CB:E3:B6:5D:E4:B6:B2:21:13:85:30:1B:1B:06:43:4E:6B:E0 Authority key identifier: DE:A2:D0:26:0C:17:09:51:67:E1:E3:BC:D6:59:89:FE:76:47:CB:6A Certificate issuer: /CN=A91AE6B9/serialNumber=DEA2D0260C17095167E1E3BCD65989FE7647CB6A Certificate serial: 0CA3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qLQJgwXCVFn4eO81lmJ_nZHy2o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft Manifest number: 0C9B Signing time: Tue 04 Nov 2025 18:37:27 +0000 Manifest this update: Tue 04 Nov 2025 18:37:26 +0000 Manifest next update: Tue 11 Nov 2025 18:37:26 +0000 Files and hashes: 1: 3qLQJgwXCVFn4eO81lmJ_nZHy2o.crl (hash: HuLCXdUidlkU92lFVVmCiANYRPBwo1x+yFiAhRXCX1k=) 2: D91746DE044F11EA8C37D012C4F9AE02.roa (hash: liuK4GzoDV4Wyb2t40R5cZyZpCOcxyykm4qNE0iKYKI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.crl rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qLQJgwXCVFn4eO81lmJ_nZHy2o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:37:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3235 (0xca3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE6B9, serialNumber=DEA2D0260C17095167E1E3BCD65989FE7647CB6A Validity Not Before: Nov 4 18:37:26 2025 GMT Not After : Nov 11 18:37:26 2025 GMT Subject: CN=690a47e6-688a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b6:4b:a9:40:52:da:a0:7e:8c:21:81:9b:4e: 1a:a9:cb:80:7e:df:45:09:5c:fb:f3:90:2b:18:80: 70:be:d4:f6:23:12:f0:ca:a1:68:63:d4:f8:ee:32: d1:6b:aa:c8:87:db:98:53:46:d4:db:51:a3:62:7f: 0d:74:55:97:f4:d6:c8:ba:8f:4b:b3:f4:27:06:4e: 7b:02:2d:1d:46:00:77:22:76:4d:c2:75:bf:11:95: 64:54:75:c8:e9:07:c1:aa:e5:bb:cb:35:54:07:80: ba:2a:58:ec:12:3b:c5:d9:11:6e:76:e5:1c:7c:b8: 91:b9:48:9c:e8:ec:10:db:f2:47:59:34:59:01:b1: e8:50:b9:f2:46:4d:a3:fa:3c:f8:ca:15:d7:c9:be: 94:60:07:e0:a4:82:c1:4b:8f:d5:77:8e:cc:a1:9a: da:41:95:74:f2:d9:10:29:56:50:36:a1:9d:23:67: aa:36:26:80:fb:b9:39:bd:df:6d:af:ca:a5:67:1a: ce:27:8b:71:6a:fa:75:3b:10:d1:83:78:c4:41:95: ac:a0:e5:86:79:69:67:50:e3:4a:ef:e8:3b:54:99: 30:18:7b:d3:05:81:88:db:fa:70:54:41:56:7c:45: f5:3b:7c:1b:c4:7d:da:05:d9:1a:7b:47:46:75:bf: 45:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:41:CB:E3:B6:5D:E4:B6:B2:21:13:85:30:1B:1B:06:43:4E:6B:E0 X509v3 Authority Key Identifier: keyid:DE:A2:D0:26:0C:17:09:51:67:E1:E3:BC:D6:59:89:FE:76:47:CB:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qLQJgwXCVFn4eO81lmJ_nZHy2o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:cc:93:fc:21:2a:75:55:38:3a:5a:7b:43:7d:8b:35:0f:ab: 5c:9d:d2:f6:4f:58:d1:be:3c:1a:84:47:ba:34:bf:7a:86:a1: f3:a7:7f:57:4c:41:35:cf:91:e2:ab:7c:56:ac:7a:09:8e:1d: 87:e4:61:9b:8f:43:1d:d1:37:20:29:a2:ac:bd:3c:33:d2:9c: dc:46:03:fd:a3:3b:80:b8:5e:68:62:fc:cb:c3:b9:cc:80:ec: a2:55:08:0a:16:2e:6e:3c:67:05:3c:44:51:18:b4:85:72:80: b5:db:9d:4d:e5:13:71:8e:98:ea:49:7f:35:0a:43:12:63:78: 64:51:69:4a:14:ed:84:e8:a8:c9:d4:b5:48:85:91:e2:d5:35: 5e:e8:7f:52:ac:fb:bb:b7:e9:94:41:c6:c4:7f:05:47:ba:f8: 16:a5:61:e8:89:b3:cc:21:bc:f8:24:a6:1c:0a:06:11:62:94: a2:5f:75:5c:ed:6b:5c:c6:1e:50:64:46:d4:52:95:5a:5c:71: c0:4e:8d:25:13:76:1e:b7:e7:2c:d3:e7:7e:27:31:ad:21:f1: a2:77:a2:28:a3:6f:7a:0d:10:6b:73:2e:4d:bb:fe:4b:88:74: a9:96:fd:8b:4c:bc:53:2f:d3:c8:ca:41:d4:68:74:2c:1b:bd: 11:92:b5:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU2QjkxMTAvBgNVBAUTKERFQTJEMDI2MEMxNzA5NTE2N0UxRTNCQ0Q2NTk4OUZF NzY0N0NCNkEwHhcNMjUxMTA0MTgzNzI2WhcNMjUxMTExMTgzNzI2WjAYMRYwFAYD VQQDEw02OTBhNDdlNi02ODhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy7ZLqUBS2qB+jCGBm04aqcuAft9FCVz785ArGIBwvtT2IxLwyqFoY9T47jLR a6rIh9uYU0bU21GjYn8NdFWX9NbIuo9Ls/QnBk57Ai0dRgB3InZNwnW/EZVkVHXI 6QfBquW7yzVUB4C6KljsEjvF2RFuduUcfLiRuUic6OwQ2/JHWTRZAbHoULnyRk2j +jz4yhXXyb6UYAfgpILBS4/Vd47MoZraQZV08tkQKVZQNqGdI2eqNiaA+7k5vd9t r8qlZxrOJ4txavp1OxDRg3jEQZWsoOWGeWlnUONK7+g7VJkwGHvTBYGI2/pwVEFW fEX1O3wbxH3aBdkae0dGdb9F8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDtBy+O2 XeS2siEThTAbGwZDTmvgMB8GA1UdIwQYMBaAFN6i0CYMFwlRZ+HjvNZZif52R8tq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTZCOS81MjZFMTZBNDA0 NEUxMUVBODQ0MkQ0MEZDNEY5QUUwMi8zcUxRSmd3WENWRm40ZU84MWxtSl9uWkh5 Mm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNxTFFKZ3dYQ1ZGbjRlTzgxbG1KX25aSHkyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTZCOS81MjZFMTZBNDA0NEUxMUVBODQ0MkQ0MEZDNEY5QUUwMi8zcUxRSmd3WENW Rm40ZU84MWxtSl9uWkh5Mm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuzJP8ISp1VTg6WntDfYs1D6tcndL2T1jRvjwahEe6NL96hqHzp39X TEE1z5Hiq3xWrHoJjh2H5GGbj0Md0TcgKaKsvTwz0pzcRgP9ozuAuF5oYvzLw7nM gOyiVQgKFi5uPGcFPERRGLSFcoC1251N5RNxjpjqSX81CkMSY3hkUWlKFO2E6KjJ 1LVIhZHi1TVe6H9SrPu7t+mUQcbEfwVHuvgWpWHoibPMIbz4JKYcCgYRYpSiX3Vc 7Wtcxh5QZEbUUpVaXHHATo0lE3Yet+cs0+d+JzGtIfGid6Ioo296DRBrcy5Nu/5L iHSplv2LTLxTL9PIykHUaHQsG70RkrVb -----END CERTIFICATE-----Generated at Wed Nov 5 05:49:47 2025 by rpki-client