$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC64D/B2EF3E3495D611EB98215C18C4F9AE02/3xHpJo0GrlO6-3QTvTT_OHjk7tA.mft File: 3xHpJo0GrlO6-3QTvTT_OHjk7tA.mft (raw, json) Hash identifier: SlrMCmFLwa735ZbiyeCw3WsDbcb9WLmKN0xEv0Zy5Xs= Subject key identifier: 04:71:21:11:5F:59:03:46:E3:AA:0D:75:CD:06:93:35:10:C9:7F:78 Authority key identifier: DF:11:E9:26:8D:06:AE:53:BA:FB:74:13:BD:34:FF:38:78:E4:EE:D0 Certificate issuer: /CN=A91BC64D/serialNumber=DF11E9268D06AE53BAFB7413BD34FF3878E4EED0 Certificate serial: 068F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3xHpJo0GrlO6-3QTvTT_OHjk7tA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC64D/B2EF3E3495D611EB98215C18C4F9AE02/3xHpJo0GrlO6-3QTvTT_OHjk7tA.mft Manifest number: 0684 Signing time: Tue 04 Nov 2025 22:32:36 +0000 Manifest this update: Tue 04 Nov 2025 22:32:36 +0000 Manifest next update: Tue 11 Nov 2025 22:32:36 +0000 Files and hashes: 1: 3xHpJo0GrlO6-3QTvTT_OHjk7tA.crl (hash: yS17PDVaRPyEg1OCzTLjQa0AnW2wm5tMvPtixblbwm4=) 2: FC583AC6CC8511EC8D238672C4F9AE02.roa (hash: 4nQWYZbXWSJ3PqE4ZBiXzBzUwOjlbjDx0Oq7v5W8vCQ=) 3: FD987A54CC8511EC8D238672C4F9AE02.roa (hash: MzEQJvzOJlRcf4tMcorSrwSuzHCC7BZBlDirsliZQdI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC64D/B2EF3E3495D611EB98215C18C4F9AE02/3xHpJo0GrlO6-3QTvTT_OHjk7tA.crl rsync://rpki.apnic.net/member_repository/A91BC64D/B2EF3E3495D611EB98215C18C4F9AE02/3xHpJo0GrlO6-3QTvTT_OHjk7tA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3xHpJo0GrlO6-3QTvTT_OHjk7tA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:32:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1679 (0x68f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC64D, serialNumber=DF11E9268D06AE53BAFB7413BD34FF3878E4EED0 Validity Not Before: Nov 4 22:32:36 2025 GMT Not After : Nov 11 22:32:36 2025 GMT Subject: CN=690a7f04-11ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a0:08:db:07:ca:7c:c4:39:db:04:6a:21:4f: 19:96:1e:fe:2e:ae:36:f9:df:cc:e5:f5:8f:5b:4a: 7e:9a:4a:70:5a:5d:90:e9:f7:e9:0a:fd:94:44:3f: d1:ff:44:aa:d8:51:06:e2:22:84:29:5f:9f:39:64: 51:bf:29:07:ff:af:10:fa:f8:0f:5a:d2:b6:20:e5: ce:ae:2f:d4:a9:7a:48:9b:fa:e4:24:c7:4e:f7:81: a9:e1:86:b3:c9:ed:cb:80:2a:4f:9c:81:c9:40:4b: 20:79:7e:0a:d2:48:77:fb:8c:13:db:9f:6b:56:ac: f5:02:57:1a:79:7b:71:45:5a:31:25:88:c5:a7:8d: c8:d0:94:f0:99:c5:c8:72:e7:7a:a3:1b:af:2d:86: 6c:3c:76:08:c6:ae:84:1f:2a:f8:79:88:d0:11:ad: 28:4f:a4:ea:a4:b2:8a:c5:98:51:99:b5:ec:b9:b2: 23:0c:bf:1a:d9:2a:31:f9:e0:36:aa:6f:3f:7b:65: 30:3b:1c:98:e1:88:d5:a9:fe:9f:9f:ca:11:8e:48: 61:fc:c4:a5:3b:dd:47:14:6f:e3:f9:d6:33:41:11: 48:13:8f:53:85:ef:e2:9c:9e:63:72:f6:45:d5:b5: 29:8c:e9:ec:4b:95:d3:fc:bb:1f:51:0f:7b:e8:e0: d2:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:71:21:11:5F:59:03:46:E3:AA:0D:75:CD:06:93:35:10:C9:7F:78 X509v3 Authority Key Identifier: keyid:DF:11:E9:26:8D:06:AE:53:BA:FB:74:13:BD:34:FF:38:78:E4:EE:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC64D/B2EF3E3495D611EB98215C18C4F9AE02/3xHpJo0GrlO6-3QTvTT_OHjk7tA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3xHpJo0GrlO6-3QTvTT_OHjk7tA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC64D/B2EF3E3495D611EB98215C18C4F9AE02/3xHpJo0GrlO6-3QTvTT_OHjk7tA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:f9:34:e0:4f:56:60:a6:32:56:d7:ee:df:3b:18:1f:0d:ab: 75:d8:94:28:54:b8:fc:47:4e:8e:88:ca:0d:6f:e4:d5:01:db: 68:dc:d6:ee:32:55:4e:e1:d9:6b:32:f0:ea:be:f2:cb:4b:af: 32:fd:86:2e:66:52:6f:25:46:d5:45:1c:74:43:fd:94:92:20: 2c:a1:58:37:63:2a:97:c6:5c:da:99:9f:f3:59:be:c5:98:3b: 08:69:7f:95:84:4a:cf:e6:7a:32:f2:a1:ad:90:9c:d6:00:7b: 94:90:27:fa:9a:63:dd:5e:6d:15:e9:82:58:f6:df:45:32:e0: 9e:9c:9c:bf:93:76:23:5a:2a:e3:be:f9:e6:ca:fd:2f:d4:00: 19:38:82:a5:32:45:8c:64:dd:8d:7a:83:01:2c:02:4c:0e:12: 7c:2e:1a:99:08:aa:01:a2:ea:04:9f:a0:af:60:77:2d:6f:d2: 5c:48:fc:1d:c4:7e:ad:95:26:2c:6a:25:0e:c0:69:17:6e:1e: fe:5f:50:0f:e9:f7:2e:66:ba:27:a0:30:1e:89:18:c9:4a:b1: a7:03:bd:6c:51:4e:40:58:45:34:1c:dd:a3:85:ed:06:95:e7: 7b:67:3a:0d:dd:f0:23:53:5f:dc:00:8c:a1:d9:5b:1c:8f:3a: ae:ad:e8:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBo8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM2NEQxMTAvBgNVBAUTKERGMTFFOTI2OEQwNkFFNTNCQUZCNzQxM0JEMzRGRjM4 NzhFNEVFRDAwHhcNMjUxMTA0MjIzMjM2WhcNMjUxMTExMjIzMjM2WjAYMRYwFAYD VQQDEw02OTBhN2YwNC0xMWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2KAI2wfKfMQ52wRqIU8Zlh7+Lq42+d/M5fWPW0p+mkpwWl2Q6ffpCv2URD/R /0Sq2FEG4iKEKV+fOWRRvykH/68Q+vgPWtK2IOXOri/UqXpIm/rkJMdO94Gp4Yaz ye3LgCpPnIHJQEsgeX4K0kh3+4wT259rVqz1AlcaeXtxRVoxJYjFp43I0JTwmcXI cud6oxuvLYZsPHYIxq6EHyr4eYjQEa0oT6TqpLKKxZhRmbXsubIjDL8a2Sox+eA2 qm8/e2UwOxyY4YjVqf6fn8oRjkhh/MSlO91HFG/j+dYzQRFIE49The/inJ5jcvZF 1bUpjOnsS5XT/LsfUQ976ODShwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFARxIRFf WQNG46oNdc0GkzUQyX94MB8GA1UdIwQYMBaAFN8R6SaNBq5Tuvt0E700/zh45O7Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzY0RC9CMkVGM0UzNDk1 RDYxMUVCOTgyMTVDMThDNEY5QUUwMi8zeEhwSm8wR3JsTzYtM1FUdlRUX09Iams3 dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzN4SHBKbzBHcmxPNi0zUVR2VFRfT0hqazd0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzY0RC9CMkVGM0UzNDk1RDYxMUVCOTgyMTVDMThDNEY5QUUwMi8zeEhwSm8wR3Js TzYtM1FUdlRUX09Iams3dEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQ+TTgT1ZgpjJW1+7fOxgfDat12JQoVLj8R06OiMoNb+TVAdto3Nbu MlVO4dlrMvDqvvLLS68y/YYuZlJvJUbVRRx0Q/2UkiAsoVg3YyqXxlzamZ/zWb7F mDsIaX+VhErP5noy8qGtkJzWAHuUkCf6mmPdXm0V6YJY9t9FMuCenJy/k3YjWirj vvnmyv0v1AAZOIKlMkWMZN2NeoMBLAJMDhJ8LhqZCKoBouoEn6CvYHctb9JcSPwd xH6tlSYsaiUOwGkXbh7+X1AP6fcuZronoDAeiRjJSrGnA71sUU5AWEU0HN2jhe0G led7ZzoN3fAjU1/cAIyh2Vscjzquregf -----END CERTIFICATE-----Generated at Wed Nov 5 12:05:16 2025 by rpki-client