$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8C13/D06117160B2D11EE867E6A17C4F9AE02/3SNdNwiQmzPViUtMzckQXGH9Fq4.mft File: 3SNdNwiQmzPViUtMzckQXGH9Fq4.mft (raw, json) Hash identifier: YEdmBZc3ZN1fWMLlsEa14cU/vuEKqcurfiujStzIOBI= Subject key identifier: 36:AA:06:ED:88:34:DC:21:80:FB:E8:5E:1F:0D:3D:D0:21:E9:2B:74 Authority key identifier: DD:23:5D:37:08:90:9B:33:D5:89:4B:4C:CD:C9:10:5C:61:FD:16:AE Certificate issuer: /CN=A91B8C13/serialNumber=DD235D3708909B33D5894B4CCDC9105C61FD16AE Certificate serial: 01C7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3SNdNwiQmzPViUtMzckQXGH9Fq4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8C13/D06117160B2D11EE867E6A17C4F9AE02/3SNdNwiQmzPViUtMzckQXGH9Fq4.mft Manifest number: 01C6 Signing time: Tue 04 Nov 2025 15:20:12 +0000 Manifest this update: Tue 04 Nov 2025 15:20:11 +0000 Manifest next update: Tue 11 Nov 2025 15:20:11 +0000 Files and hashes: 1: 3SNdNwiQmzPViUtMzckQXGH9Fq4.crl (hash: bsCP1IBZDkygNvVIarDUBFqnEp68gqua5kYFNDaoM3I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8C13/D06117160B2D11EE867E6A17C4F9AE02/3SNdNwiQmzPViUtMzckQXGH9Fq4.crl rsync://rpki.apnic.net/member_repository/A91B8C13/D06117160B2D11EE867E6A17C4F9AE02/3SNdNwiQmzPViUtMzckQXGH9Fq4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3SNdNwiQmzPViUtMzckQXGH9Fq4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:20:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 455 (0x1c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8C13, serialNumber=DD235D3708909B33D5894B4CCDC9105C61FD16AE Validity Not Before: Nov 4 15:20:11 2025 GMT Not After : Nov 11 15:20:11 2025 GMT Subject: CN=690a19ab-d041 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a3:83:48:14:c5:61:32:41:ed:23:1d:93:de: 32:af:8d:80:9b:84:0e:1e:3b:7b:d2:a6:6a:35:dc: 13:8a:b6:65:82:b6:2b:ed:11:1f:4d:5c:b9:63:9d: 9f:4c:fa:d2:17:27:f9:d3:96:16:84:63:76:d4:dd: cf:bc:b3:d8:7a:a9:42:db:59:9c:a6:5e:53:82:9c: bb:38:e0:6f:b8:ab:18:f5:ee:87:75:b0:00:02:0e: 5b:87:8b:ac:11:28:d8:4a:37:f7:ed:b5:b3:0e:6b: be:66:75:4e:2d:8a:69:ad:25:c8:0b:73:18:7e:34: 15:51:99:20:bd:e8:86:bf:33:6d:84:da:72:26:20: 2a:07:78:43:09:48:bb:b1:d7:aa:b6:ff:d8:5b:fc: 30:d4:c8:0c:2c:80:c3:e6:6b:40:57:c9:20:52:c3: 39:53:24:d7:48:11:cf:73:3d:91:b5:52:6b:94:2f: 23:52:ff:bd:2a:79:a9:90:2c:d5:2f:9a:f2:58:d5: 2d:7b:ae:d2:dc:23:4d:f5:ea:95:ed:c8:b8:e9:5c: f5:fa:c6:18:18:51:6d:6a:64:e4:76:72:27:65:0f: ee:f1:0f:5d:9e:35:59:6a:90:05:73:7b:79:9b:88: ac:61:b1:bb:3c:17:63:f8:c0:49:7f:e8:c9:db:00: 80:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:AA:06:ED:88:34:DC:21:80:FB:E8:5E:1F:0D:3D:D0:21:E9:2B:74 X509v3 Authority Key Identifier: keyid:DD:23:5D:37:08:90:9B:33:D5:89:4B:4C:CD:C9:10:5C:61:FD:16:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8C13/D06117160B2D11EE867E6A17C4F9AE02/3SNdNwiQmzPViUtMzckQXGH9Fq4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3SNdNwiQmzPViUtMzckQXGH9Fq4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8C13/D06117160B2D11EE867E6A17C4F9AE02/3SNdNwiQmzPViUtMzckQXGH9Fq4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:bb:d5:62:28:29:78:cb:df:f2:4f:ca:f2:0d:0a:2f:b4:16: 7a:a9:06:cb:bf:b8:fc:11:22:7a:e6:e1:73:d8:fe:bb:f5:40: d7:e8:0f:b2:6a:36:c4:29:f8:c4:45:1e:a8:c5:ec:f1:ee:33: a7:01:dc:2f:b5:7a:af:75:5b:21:09:f3:d2:96:91:f9:32:90: b0:c5:f9:95:14:8c:86:af:1d:37:b2:ed:ea:e7:e2:44:88:0c: a9:de:04:ad:b0:da:7e:d6:5d:df:ab:db:bf:67:28:84:a3:2e: 35:99:49:e1:8b:5b:db:8e:61:9e:26:84:62:be:88:45:ca:1e: d1:a1:ff:76:2a:5b:52:27:bf:83:3f:bc:a4:80:ae:48:4a:5a: 2e:7f:cc:45:97:48:f3:39:91:4d:85:79:c0:8d:3b:ff:6b:40: 09:59:3c:79:3d:2c:5c:10:18:78:9a:f5:e1:bf:0a:ef:49:9f: 79:d0:39:b5:56:33:f4:29:ca:8e:72:32:ee:2b:39:51:44:ac: 4d:69:63:b0:56:cd:bc:4f:e3:53:6e:4e:93:20:0f:4d:c4:e9: db:a7:8e:7a:cd:b4:8b:9c:2f:c7:9c:9c:a5:24:d9:49:c2:df: e2:5a:fa:f2:2e:80:18:3b:a6:ec:e4:62:c4:2a:0d:a4:09:86: bf:0e:98:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhDMTMxMTAvBgNVBAUTKEREMjM1RDM3MDg5MDlCMzNENTg5NEI0Q0NEQzkxMDVD NjFGRDE2QUUwHhcNMjUxMTA0MTUyMDExWhcNMjUxMTExMTUyMDExWjAYMRYwFAYD VQQDEw02OTBhMTlhYi1kMDQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2aODSBTFYTJB7SMdk94yr42Am4QOHjt70qZqNdwTirZlgrYr7REfTVy5Y52f TPrSFyf505YWhGN21N3PvLPYeqlC21mcpl5Tgpy7OOBvuKsY9e6HdbAAAg5bh4us ESjYSjf37bWzDmu+ZnVOLYpprSXIC3MYfjQVUZkgveiGvzNthNpyJiAqB3hDCUi7 sdeqtv/YW/ww1MgMLIDD5mtAV8kgUsM5UyTXSBHPcz2RtVJrlC8jUv+9KnmpkCzV L5ryWNUte67S3CNN9eqV7ci46Vz1+sYYGFFtamTkdnInZQ/u8Q9dnjVZapAFc3t5 m4isYbG7PBdj+MBJf+jJ2wCA+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDaqBu2I NNwhgPvoXh8NPdAh6St0MB8GA1UdIwQYMBaAFN0jXTcIkJsz1YlLTM3JEFxh/Rau MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEMxMy9EMDYxMTcxNjBC MkQxMUVFODY3RTZBMTdDNEY5QUUwMi8zU05kTndpUW16UFZpVXRNemNrUVhHSDlG cTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzNTTmROd2lRbXpQVmlVdE16Y2tRWEdIOUZxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEMxMy9EMDYxMTcxNjBCMkQxMUVFODY3RTZBMTdDNEY5QUUwMi8zU05kTndpUW16 UFZpVXRNemNrUVhHSDlGcTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsu9ViKCl4y9/yT8ryDQovtBZ6qQbLv7j8ESJ65uFz2P679UDX6A+y ajbEKfjERR6oxezx7jOnAdwvtXqvdVshCfPSlpH5MpCwxfmVFIyGrx03su3q5+JE iAyp3gStsNp+1l3fq9u/ZyiEoy41mUnhi1vbjmGeJoRivohFyh7Rof92KltSJ7+D P7ykgK5ISlouf8xFl0jzOZFNhXnAjTv/a0AJWTx5PSxcEBh4mvXhvwrvSZ950Dm1 VjP0KcqOcjLuKzlRRKxNaWOwVs28T+NTbk6TIA9NxOnbp456zbSLnC/HnJylJNlJ wt/iWvryLoAYO6bs5GLEKg2kCYa/Dpi/ -----END CERTIFICATE-----Generated at Tue Nov 4 23:09:55 2025 by rpki-client