$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA447/5F4C6CF2426211EA94C5C466C4F9AE02/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.mft File: 3Ji1RLFsSamN0Fhc-WckJkFVLqQ.mft (raw, json) Hash identifier: E3rCaE/1WYm6yUnLpsAKjzG1lGEXujfNiM4GHanGZks= Subject key identifier: 90:FD:71:0A:A6:85:0E:7C:52:9E:05:8C:E1:3F:F8:22:28:D0:86:B8 Authority key identifier: DC:98:B5:44:B1:6C:49:A9:8D:D0:58:5C:F9:67:24:26:41:55:2E:A4 Certificate issuer: /CN=A91BA447/serialNumber=DC98B544B16C49A98DD0585CF967242641552EA4 Certificate serial: 0B61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA447/5F4C6CF2426211EA94C5C466C4F9AE02/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.mft Manifest number: 0B5A Signing time: Sun 02 Nov 2025 19:08:04 +0000 Manifest this update: Sun 02 Nov 2025 19:08:04 +0000 Manifest next update: Sun 09 Nov 2025 19:08:04 +0000 Files and hashes: 1: 3Ji1RLFsSamN0Fhc-WckJkFVLqQ.crl (hash: wFevmRG9060hxCVF0RZ73R64oYiFpLNaubspVdM4d64=) 2: 07F14B9C426411EABA91B569C4F9AE02.roa (hash: F4BgB3+37H1vj4fhyDwAENhQ6lWTOrd3il938AR6caY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA447/5F4C6CF2426211EA94C5C466C4F9AE02/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.crl rsync://rpki.apnic.net/member_repository/A91BA447/5F4C6CF2426211EA94C5C466C4F9AE02/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:08:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2913 (0xb61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA447, serialNumber=DC98B544B16C49A98DD0585CF967242641552EA4 Validity Not Before: Nov 2 19:08:04 2025 GMT Not After : Nov 9 19:08:04 2025 GMT Subject: CN=6907ac14-c57f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:83:83:5e:ad:53:85:47:ce:e0:1e:c7:ca:f5: d6:eb:06:4e:ac:00:5a:2a:80:f4:d6:68:42:ab:a7: aa:cc:4c:00:eb:4e:3f:41:b4:bc:a4:89:db:de:14: 61:0f:86:a7:a8:38:26:e3:10:d9:7c:6b:f0:9d:f2: 9a:a9:3b:16:21:98:cd:c6:cc:00:e9:7a:b2:ec:ab: ae:c8:2f:39:fa:e1:74:12:fa:12:b1:54:39:f2:58: 2b:b8:79:75:38:27:42:b6:79:fb:86:5f:66:48:b1: 12:05:e5:fd:f7:24:81:9f:ee:0d:2e:2d:c7:54:01: f7:0a:0d:a1:34:cb:34:37:ee:31:71:92:5f:df:76: 8a:85:d8:19:5b:6d:18:22:dc:26:5e:f3:0d:cc:62: f9:23:e7:b5:68:27:0c:a9:9d:ff:7a:48:09:cc:56: bb:2f:e9:f3:14:fb:5e:73:9f:6c:14:a1:11:9f:4d: c6:f2:7c:19:b3:ac:91:34:d3:9d:81:8b:37:b7:ee: 47:c6:68:f6:28:a1:6e:27:04:05:30:a9:78:f0:5d: c1:12:b0:8e:38:db:02:8a:63:8e:ac:2e:f7:8f:dc: 23:d4:12:ca:16:3b:35:45:88:1c:a1:34:66:e5:2f: 97:13:33:45:2d:7a:f9:5e:5b:ee:2e:97:ec:9c:39: b2:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:FD:71:0A:A6:85:0E:7C:52:9E:05:8C:E1:3F:F8:22:28:D0:86:B8 X509v3 Authority Key Identifier: keyid:DC:98:B5:44:B1:6C:49:A9:8D:D0:58:5C:F9:67:24:26:41:55:2E:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA447/5F4C6CF2426211EA94C5C466C4F9AE02/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA447/5F4C6CF2426211EA94C5C466C4F9AE02/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:f1:80:5f:54:ac:0f:ff:3c:a2:79:70:fa:b5:02:3c:ba:7f: 53:be:ea:bc:19:e5:90:d8:35:3c:83:50:20:6d:24:7e:49:7d: e4:66:0a:68:f1:13:5b:8b:a9:ad:a6:26:47:49:36:71:80:77: 38:7f:88:80:75:4e:be:e2:56:64:6b:bb:c8:83:2f:63:75:01: 2d:77:02:c8:7d:54:d1:80:99:a7:63:53:53:e5:86:3d:5a:40: 0b:0b:41:ec:26:dc:ee:8e:9a:51:2d:4c:57:28:df:84:8d:91: 3f:60:44:e5:c4:3d:d8:d6:87:be:81:50:ca:2d:9a:23:5b:9c: a7:c8:3e:23:d0:3a:28:2e:95:f4:f8:61:f0:99:d2:8a:4a:1c: 15:76:e3:27:9e:4a:66:cc:a9:50:6a:7d:cf:a3:f7:ba:ef:8d: a3:e1:71:a4:1f:d8:13:7a:dc:ca:49:3b:d9:63:fe:62:92:a6: ec:5c:e9:95:38:7b:13:e1:8e:c4:4f:93:3b:8e:6b:72:7c:e2: 9c:5c:6f:66:8e:32:16:d7:f0:8d:ca:72:11:6b:47:fc:7b:5d: 10:cd:f6:82:04:d5:18:e8:b4:a8:0f:c6:e0:0c:32:bf:4e:7c: 31:8f:e1:55:73:21:0b:c4:8b:f4:1c:9f:89:24:3d:39:b8:35: 98:2e:b6:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkE0NDcxMTAvBgNVBAUTKERDOThCNTQ0QjE2QzQ5QTk4REQwNTg1Q0Y5NjcyNDI2 NDE1NTJFQTQwHhcNMjUxMTAyMTkwODA0WhcNMjUxMTA5MTkwODA0WjAYMRYwFAYD VQQDEw02OTA3YWMxNC1jNTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr4ODXq1ThUfO4B7HyvXW6wZOrABaKoD01mhCq6eqzEwA604/QbS8pInb3hRh D4anqDgm4xDZfGvwnfKaqTsWIZjNxswA6Xqy7KuuyC85+uF0EvoSsVQ58lgruHl1 OCdCtnn7hl9mSLESBeX99ySBn+4NLi3HVAH3Cg2hNMs0N+4xcZJf33aKhdgZW20Y ItwmXvMNzGL5I+e1aCcMqZ3/ekgJzFa7L+nzFPtec59sFKERn03G8nwZs6yRNNOd gYs3t+5Hxmj2KKFuJwQFMKl48F3BErCOONsCimOOrC73j9wj1BLKFjs1RYgcoTRm 5S+XEzNFLXr5XlvuLpfsnDmy/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJD9cQqm hQ58Up4FjOE/+CIo0Ia4MB8GA1UdIwQYMBaAFNyYtUSxbEmpjdBYXPlnJCZBVS6k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTQ0Ny81RjRDNkNGMjQy NjIxMUVBOTRDNUM0NjZDNEY5QUUwMi8zSmkxUkxGc1NhbU4wRmhjLVdja0prRlZM cVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNKaTFSTEZzU2FtTjBGaGMtV2NrSmtGVkxxUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTQ0Ny81RjRDNkNGMjQyNjIxMUVBOTRDNUM0NjZDNEY5QUUwMi8zSmkxUkxGc1Nh bU4wRmhjLVdja0prRlZMcVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBK8YBfVKwP/zyieXD6tQI8un9Tvuq8GeWQ2DU8g1AgbSR+SX3kZgpo 8RNbi6mtpiZHSTZxgHc4f4iAdU6+4lZka7vIgy9jdQEtdwLIfVTRgJmnY1NT5YY9 WkALC0HsJtzujppRLUxXKN+EjZE/YETlxD3Y1oe+gVDKLZojW5ynyD4j0DooLpX0 +GHwmdKKShwVduMnnkpmzKlQan3Po/e6742j4XGkH9gTetzKSTvZY/5ikqbsXOmV OHsT4Y7ET5M7jmtyfOKcXG9mjjIW1/CNynIRa0f8e10QzfaCBNUY6LSoD8bgDDK/ Tnwxj+FVcyELxIv0HJ+JJD05uDWYLraU -----END CERTIFICATE-----Generated at Tue Nov 4 12:41:19 2025 by rpki-client