$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.mft File: 3COmnqHvwaN5SSwT6awUfEn1rQQ.mft (raw, json) Hash identifier: VlhNT+kOtPifnpI15+7R9qpYDPqPeVT4tMy+sq+O/W8= Subject key identifier: B8:3A:97:67:87:F3:E4:BC:80:CA:69:90:74:1F:94:C6:C1:E7:98:A5 Authority key identifier: DC:23:A6:9E:A1:EF:C1:A3:79:49:2C:13:E9:AC:14:7C:49:F5:AD:04 Certificate issuer: /CN=A91BB4C2/serialNumber=DC23A69EA1EFC1A379492C13E9AC147C49F5AD04 Certificate serial: 022A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3COmnqHvwaN5SSwT6awUfEn1rQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.mft Manifest number: 01FB Signing time: Wed 05 Nov 2025 03:02:59 +0000 Manifest this update: Wed 05 Nov 2025 03:02:58 +0000 Manifest next update: Wed 12 Nov 2025 03:02:58 +0000 Files and hashes: 1: 3COmnqHvwaN5SSwT6awUfEn1rQQ.crl (hash: kTMF23/7rOuBP3wiBkeVCLK6/btze0KAvhcIJDIKshQ=) 2: CBF7E2CE2D3611EEA81A490BC4F9AE02.roa (hash: 4yj8sZR6Z/FxcvXrPscntmMUZkXTFX7XG+1HhFVkn+I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.crl rsync://rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3COmnqHvwaN5SSwT6awUfEn1rQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:02:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 554 (0x22a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB4C2, serialNumber=DC23A69EA1EFC1A379492C13E9AC147C49F5AD04 Validity Not Before: Nov 5 03:02:58 2025 GMT Not After : Nov 12 03:02:58 2025 GMT Subject: CN=690abe63-efcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:17:d6:eb:f7:67:b2:5c:7d:2b:2d:69:5d:89: 56:9e:3c:51:d0:a0:00:59:75:65:ef:f9:9c:be:98: 40:a2:32:7d:38:bf:d2:13:d6:e0:68:12:ec:ee:a5: e0:52:4c:4a:9e:00:ed:46:98:ac:91:ec:39:7a:fc: ac:fc:e8:f3:0e:b2:33:d5:48:71:98:43:18:b9:db: 21:67:20:8a:22:b2:97:9b:2d:3c:81:b0:fd:b6:36: 5e:87:7f:69:f7:e7:24:04:97:17:15:24:af:67:48: 53:26:da:20:8b:5b:ae:19:23:8e:de:b7:6a:c5:89: a7:6d:90:8f:27:9a:2f:1c:d8:6e:9d:7f:21:c5:0f: 89:33:39:60:18:4e:3b:81:82:10:d5:78:58:41:1d: fd:70:2a:2a:89:90:67:08:23:57:59:ca:4a:50:29: 0c:a3:7b:50:d7:2b:93:a5:ab:59:1a:c3:2c:8f:f1: 48:b9:33:c8:75:10:45:de:b6:c7:56:37:3a:63:68: 51:01:7a:c2:82:04:9f:40:ad:e7:5c:bd:df:64:66: 33:68:5e:bc:ba:ce:32:9c:5b:a6:51:04:f2:7a:08: 4d:a6:29:22:a5:f2:6a:c3:e8:4f:b7:20:f1:bf:4c: 93:9a:b4:25:1c:ac:ec:b8:38:31:46:47:90:06:5b: 85:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:3A:97:67:87:F3:E4:BC:80:CA:69:90:74:1F:94:C6:C1:E7:98:A5 X509v3 Authority Key Identifier: keyid:DC:23:A6:9E:A1:EF:C1:A3:79:49:2C:13:E9:AC:14:7C:49:F5:AD:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3COmnqHvwaN5SSwT6awUfEn1rQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:4e:3f:f8:69:88:7b:0d:fe:f2:3a:53:dc:73:34:9a:f5:f4: 32:78:09:ad:49:8a:6f:80:fa:5a:e0:46:ae:42:bc:d8:bc:35: 58:ce:7b:a9:2d:2f:97:ad:c4:66:22:95:65:6d:04:9a:ad:db: 24:6b:53:39:8e:7b:61:90:f4:43:c6:35:1d:33:59:31:0c:42: b1:11:15:b1:8a:f0:36:5f:be:0b:ac:3f:08:73:f1:6e:9a:55: f9:f3:98:ec:8e:50:5c:6a:f3:3f:cc:ba:5c:1c:79:52:da:01: 7e:b3:74:97:fd:18:aa:66:e7:f7:27:11:82:33:e0:ed:d0:cf: 27:90:03:d4:37:2b:9d:94:ff:d2:0c:ed:31:bd:c8:99:74:b0: 86:27:1d:72:d5:6a:b7:d2:06:7a:0a:ff:1a:a0:d5:c8:f0:ac: 04:42:11:47:c6:38:e1:74:9b:d9:e9:a4:b3:c6:c5:64:88:21: 43:fa:53:5b:ad:64:a9:a0:72:89:20:e0:fd:27:0a:95:f1:f4: 60:20:b2:8a:1b:a8:15:91:32:c3:86:c9:70:e7:3d:c4:17:88: af:e4:3e:c4:3a:c4:05:58:ca:ec:3b:11:92:4d:8a:af:3a:42: 21:53:74:f2:8b:06:1d:33:9a:6f:2f:05:8f:4e:f8:38:6c:f5: 01:a4:53:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI0QzIxMTAvBgNVBAUTKERDMjNBNjlFQTFFRkMxQTM3OTQ5MkMxM0U5QUMxNDdD NDlGNUFEMDQwHhcNMjUxMTA1MDMwMjU4WhcNMjUxMTEyMDMwMjU4WjAYMRYwFAYD VQQDEw02OTBhYmU2My1lZmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwhfW6/dnslx9Ky1pXYlWnjxR0KAAWXVl7/mcvphAojJ9OL/SE9bgaBLs7qXg UkxKngDtRpiskew5evys/OjzDrIz1UhxmEMYudshZyCKIrKXmy08gbD9tjZeh39p 9+ckBJcXFSSvZ0hTJtogi1uuGSOO3rdqxYmnbZCPJ5ovHNhunX8hxQ+JMzlgGE47 gYIQ1XhYQR39cCoqiZBnCCNXWcpKUCkMo3tQ1yuTpatZGsMsj/FIuTPIdRBF3rbH Vjc6Y2hRAXrCggSfQK3nXL3fZGYzaF68us4ynFumUQTyeghNpikipfJqw+hPtyDx v0yTmrQlHKzsuDgxRkeQBluF7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLg6l2eH 8+S8gMppkHQflMbB55ilMB8GA1UdIwQYMBaAFNwjpp6h78GjeUksE+msFHxJ9a0E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjRDMi9CMTdFOTVENjAz NzAxMUVFOUJCNjJDMkZDNEY5QUUwMi8zQ09tbnFIdndhTjVTU3dUNmF3VWZFbjFy UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNDT21ucUh2d2FONVNTd1Q2YXdVZkVuMXJRUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjRDMi9CMTdFOTVENjAzNzAxMUVFOUJCNjJDMkZDNEY5QUUwMi8zQ09tbnFIdndh TjVTU3dUNmF3VWZFbjFyUVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnTj/4aYh7Df7yOlPcczSa9fQyeAmtSYpvgPpa4EauQrzYvDVYznup LS+XrcRmIpVlbQSardska1M5jnthkPRDxjUdM1kxDEKxERWxivA2X74LrD8Ic/Fu mlX585jsjlBcavM/zLpcHHlS2gF+s3SX/RiqZuf3JxGCM+Dt0M8nkAPUNyudlP/S DO0xvciZdLCGJx1y1Wq30gZ6Cv8aoNXI8KwEQhFHxjjhdJvZ6aSzxsVkiCFD+lNb rWSpoHKJIOD9JwqV8fRgILKKG6gVkTLDhslw5z3EF4iv5D7EOsQFWMrsOxGSTYqv OkIhU3TyiwYdM5pvLwWPTvg4bPUBpFO9 -----END CERTIFICATE-----Generated at Wed Nov 5 15:03:40 2025 by rpki-client