$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5D53/FC7D6086AC8311EF8214972BC4F9AE02/j3TBdV8YhwjM46Z97ChZk2SN8YM.mft File: j3TBdV8YhwjM46Z97ChZk2SN8YM.mft (raw, json) Hash identifier: C1aBFFu3yanti39YWa8QcJ2Geduu/CM2p+QV4DQO+Oo= Subject key identifier: 58:7D:78:99:BE:86:18:D1:09:62:25:69:9A:5D:36:54:E0:E1:AD:4A Authority key identifier: 8F:74:C1:75:5F:18:87:08:CC:E3:A6:7D:EC:28:59:93:64:8D:F1:83 Certificate issuer: /CN=A91C5D53/serialNumber=8F74C1755F188708CCE3A67DEC285993648DF183 Certificate serial: B3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/j3TBdV8YhwjM46Z97ChZk2SN8YM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5D53/FC7D6086AC8311EF8214972BC4F9AE02/j3TBdV8YhwjM46Z97ChZk2SN8YM.mft Manifest number: B1 Signing time: Mon 03 Nov 2025 06:07:46 +0000 Manifest this update: Mon 03 Nov 2025 06:07:45 +0000 Manifest next update: Mon 10 Nov 2025 06:07:45 +0000 Files and hashes: 1: j3TBdV8YhwjM46Z97ChZk2SN8YM.crl (hash: sk+Bv9BlCCG48zAkiTGtTumJ3QMUyfeINPca0wlMwzM=) 2: 916E1DB8C1D611EFB61BE32DC4F9AE02.roa (hash: f2L7OBQuOuTd2LqrR7JU6rutnUdXM8FYIeFEOoAz1u8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5D53/FC7D6086AC8311EF8214972BC4F9AE02/j3TBdV8YhwjM46Z97ChZk2SN8YM.crl rsync://rpki.apnic.net/member_repository/A91C5D53/FC7D6086AC8311EF8214972BC4F9AE02/j3TBdV8YhwjM46Z97ChZk2SN8YM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/j3TBdV8YhwjM46Z97ChZk2SN8YM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:07:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 179 (0xb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5D53, serialNumber=8F74C1755F188708CCE3A67DEC285993648DF183 Validity Not Before: Nov 3 06:07:45 2025 GMT Not After : Nov 10 06:07:45 2025 GMT Subject: CN=690846b2-73eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c0:8e:34:83:17:47:23:e2:fe:89:d1:52:b2: 1f:bb:ac:df:92:c9:db:30:5c:4a:db:9e:46:5b:48: de:fa:f4:ce:4d:55:18:46:ed:db:38:ef:f4:13:ec: 13:71:84:d7:dc:4f:ec:44:d3:06:2e:60:a9:66:e0: c4:9d:9a:35:c2:ee:c9:a9:c5:e0:22:57:7f:27:80: 49:78:48:de:ca:0d:d8:45:bd:2f:84:77:8f:91:c7: 22:0b:79:c8:c4:16:78:0b:03:b9:05:f6:99:66:af: f3:cb:da:62:f2:d5:3f:79:65:2a:96:70:1b:1f:06: 52:59:a0:ca:6f:01:6a:da:56:4f:3e:60:e3:66:9f: ef:13:08:b9:cf:3a:98:1c:ff:81:f2:c4:a1:b1:f2: 42:11:f5:0e:6e:ca:83:cd:47:5f:54:99:6f:09:08: 92:53:10:1b:1e:a0:c6:dd:30:ec:7d:96:23:58:32: 71:97:12:72:86:95:f8:eb:0a:7c:ab:24:5c:9b:32: 77:b3:4e:ca:e1:88:b6:54:9f:f9:5b:bf:a2:f6:09: 4e:ca:74:26:fe:02:b6:65:c4:8d:a0:95:58:a2:d5: 42:9c:b2:36:a0:36:6b:4a:14:82:d3:4f:4d:2c:16: 44:ad:be:d6:1e:ab:3a:4e:fc:1c:ed:f0:12:c4:11: 9a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:7D:78:99:BE:86:18:D1:09:62:25:69:9A:5D:36:54:E0:E1:AD:4A X509v3 Authority Key Identifier: keyid:8F:74:C1:75:5F:18:87:08:CC:E3:A6:7D:EC:28:59:93:64:8D:F1:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5D53/FC7D6086AC8311EF8214972BC4F9AE02/j3TBdV8YhwjM46Z97ChZk2SN8YM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/j3TBdV8YhwjM46Z97ChZk2SN8YM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5D53/FC7D6086AC8311EF8214972BC4F9AE02/j3TBdV8YhwjM46Z97ChZk2SN8YM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:a0:bd:d9:4a:38:99:51:0d:0d:66:d2:a2:41:75:27:e7:ef: 66:90:28:a4:95:22:91:e6:9e:46:27:92:5b:67:73:4e:5b:96: 4d:e1:e3:04:05:a7:64:4d:5b:68:b0:d6:cb:62:1b:6c:d5:06: 09:29:bf:25:cf:c8:01:66:30:a0:e2:5b:f9:e8:12:dc:85:ad: 83:e7:1c:16:fd:64:1f:2f:27:e1:8d:88:06:a7:35:2f:b2:6b: d6:e9:4b:2c:1e:50:3d:f1:54:c5:cf:8e:6f:18:43:1a:d2:80: 03:55:da:c1:39:6e:5b:79:df:90:b2:f2:98:ef:14:82:33:c0: 8c:e9:36:76:a1:71:ed:f4:07:e3:96:2e:d0:b7:77:4a:c0:4b: 37:32:81:15:d6:e0:a4:ae:a5:a7:51:22:a8:3c:94:01:69:33: 77:c1:a7:d8:ce:b1:70:a9:f1:f3:81:99:1a:1f:a2:43:0f:0d: 00:c8:84:62:21:40:6e:6b:a4:14:19:14:40:8c:fe:4e:ea:d3: 0d:d5:f0:8a:fa:f1:67:e6:01:2b:72:83:3f:b9:40:06:36:34: 63:2b:2b:33:6e:eb:8d:d7:f5:a3:86:df:5f:06:d9:df:dd:f2: 7d:58:7f:08:5d:bd:0b:72:bb:19:6b:2b:70:5a:d7:17:8f:e1: 22:5b:5a:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVENTMxMTAvBgNVBAUTKDhGNzRDMTc1NUYxODg3MDhDQ0UzQTY3REVDMjg1OTkz NjQ4REYxODMwHhcNMjUxMTAzMDYwNzQ1WhcNMjUxMTEwMDYwNzQ1WjAYMRYwFAYD VQQDEw02OTA4NDZiMi03M2ViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAosCONIMXRyPi/onRUrIfu6zfksnbMFxK255GW0je+vTOTVUYRu3bOO/0E+wT cYTX3E/sRNMGLmCpZuDEnZo1wu7JqcXgIld/J4BJeEjeyg3YRb0vhHePkcciC3nI xBZ4CwO5BfaZZq/zy9pi8tU/eWUqlnAbHwZSWaDKbwFq2lZPPmDjZp/vEwi5zzqY HP+B8sShsfJCEfUObsqDzUdfVJlvCQiSUxAbHqDG3TDsfZYjWDJxlxJyhpX46wp8 qyRcmzJ3s07K4Yi2VJ/5W7+i9glOynQm/gK2ZcSNoJVYotVCnLI2oDZrShSC009N LBZErb7WHqs6Tvwc7fASxBGa1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFh9eJm+ hhjRCWIlaZpdNlTg4a1KMB8GA1UdIwQYMBaAFI90wXVfGIcIzOOmfewoWZNkjfGD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUQ1My9GQzdENjA4NkFD ODMxMUVGODIxNDk3MkJDNEY5QUUwMi9qM1RCZFY4WWh3ak00Nlo5N0NoWmsyU044 WU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ozVEJkVjhZaHdqTTQ2Wjk3Q2haazJTTjhZTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUQ1My9GQzdENjA4NkFDODMxMUVGODIxNDk3MkJDNEY5QUUwMi9qM1RCZFY4WWh3 ak00Nlo5N0NoWmsyU044WU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDBoL3ZSjiZUQ0NZtKiQXUn5+9mkCiklSKR5p5GJ5JbZ3NOW5ZN4eME BadkTVtosNbLYhts1QYJKb8lz8gBZjCg4lv56BLcha2D5xwW/WQfLyfhjYgGpzUv smvW6UssHlA98VTFz45vGEMa0oADVdrBOW5bed+QsvKY7xSCM8CM6TZ2oXHt9Afj li7Qt3dKwEs3MoEV1uCkrqWnUSKoPJQBaTN3wafYzrFwqfHzgZkaH6JDDw0AyIRi IUBua6QUGRRAjP5O6tMN1fCK+vFn5gErcoM/uUAGNjRjKyszbuuN1/Wjht9fBtnf 3fJ9WH8IXb0LcrsZaytwWtcXj+EiW1qz -----END CERTIFICATE-----Generated at Wed Nov 5 04:47:22 2025 by rpki-client