$ rpki-client -vvf rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.mft File: 3CH4ZzeyOX3SsmCej7QGhuPI92E.mft (raw, json) Hash identifier: WahA8Uj7HQlst8WENNNHcLwCrcUlovy5efzThgZ4wOo= Subject key identifier: 54:04:89:81:62:0F:7F:1C:10:DE:D7:07:D5:3F:35:97:63:0B:EB:B3 Authority key identifier: DC:21:F8:67:37:B2:39:7D:D2:B2:60:9E:8F:B4:06:86:E3:C8:F7:61 Certificate issuer: /CN=A91C799C/serialNumber=DC21F86737B2397DD2B2609E8FB40686E3C8F761 Certificate serial: 07CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CH4ZzeyOX3SsmCej7QGhuPI92E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.mft Manifest number: 07CA Signing time: Tue 04 Nov 2025 21:19:36 +0000 Manifest this update: Tue 04 Nov 2025 21:19:36 +0000 Manifest next update: Tue 11 Nov 2025 21:19:36 +0000 Files and hashes: 1: 3CH4ZzeyOX3SsmCej7QGhuPI92E.crl (hash: udTJh7O9/9wEyZk7zB2+o25WPEqEPu+SLfKGuEbuwxg=) 2: 9F5F0EC6135911EBBC97C718C4F9AE02.roa (hash: SiUJ7SYlbA21+yPfD2uZbgHjH4MPfQViyjJFRbUxFiY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.crl rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CH4ZzeyOX3SsmCej7QGhuPI92E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:19:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1999 (0x7cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C799C, serialNumber=DC21F86737B2397DD2B2609E8FB40686E3C8F761 Validity Not Before: Nov 4 21:19:36 2025 GMT Not After : Nov 11 21:19:36 2025 GMT Subject: CN=690a6de8-c9a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b0:63:55:ae:a8:76:dd:27:0f:61:a1:2b:36: 48:84:b8:f2:2c:3d:d4:3f:77:bb:9f:4e:6a:e3:02: f0:54:99:68:b1:cd:2d:ae:3a:06:d4:34:02:9a:bc: b2:96:e3:0d:cd:14:66:be:f2:cf:5c:5b:42:a5:fb: f1:2c:d9:d1:7a:7d:8e:38:ae:73:9a:c7:54:1f:af: 05:87:2c:da:a0:a5:f9:93:ce:9b:1f:6e:ae:d9:0c: 40:db:b3:74:4c:2e:41:a9:3b:54:10:ca:1b:9f:55: 34:26:29:70:84:db:e6:70:03:17:80:c8:3b:27:d7: d2:22:1d:1c:db:5c:e3:c8:40:8c:3d:51:28:69:85: 18:fa:c7:f3:ed:e4:8f:d4:29:a5:d9:31:05:e6:9e: b6:a3:b3:29:cc:bf:45:eb:30:c2:58:7c:d7:ef:a2: b3:5b:4e:1e:86:52:d8:36:07:82:ab:63:87:59:04: 8e:11:af:45:1e:19:28:e1:63:94:55:76:2f:a5:72: 99:11:10:db:5e:6a:28:60:97:1b:2e:04:d4:fb:27: f7:18:2b:12:b4:e2:e2:91:84:ef:7b:b7:a0:9c:b5: b2:bf:60:7a:b6:25:21:d3:56:8c:9f:ae:ae:b7:6c: 74:9f:48:24:88:f3:7a:c8:80:08:f1:e1:fc:b2:69: a2:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:04:89:81:62:0F:7F:1C:10:DE:D7:07:D5:3F:35:97:63:0B:EB:B3 X509v3 Authority Key Identifier: keyid:DC:21:F8:67:37:B2:39:7D:D2:B2:60:9E:8F:B4:06:86:E3:C8:F7:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CH4ZzeyOX3SsmCej7QGhuPI92E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:eb:53:46:c4:40:76:c8:d4:97:5f:4b:f7:dd:af:70:65:85: e5:c3:a6:bb:8d:7a:7a:e6:8b:a9:eb:ce:68:a0:8a:d1:7c:ad: 58:d0:4a:74:ae:b0:e8:6e:7f:b1:55:c8:68:b5:47:10:30:de: 62:fa:cd:e9:a9:9d:bd:a9:53:d6:7c:d6:12:b8:8c:c2:db:c7: e5:70:c2:69:0f:e6:38:c7:0a:07:1e:45:e8:0f:c1:c3:9b:04: db:72:b6:78:2a:80:72:86:11:a3:1a:ae:19:20:e1:89:6e:7f: 99:0b:a9:56:57:e0:bf:86:8d:64:11:35:cd:cb:8f:37:6d:8b: 64:7e:88:0b:37:27:b9:77:cc:cd:92:47:80:8f:54:23:af:7c: db:28:44:16:b0:ff:73:be:a2:e2:82:17:1c:db:d2:25:68:e0: d8:8e:3c:7a:ae:85:1c:7a:89:48:4a:65:e8:40:59:dd:9d:76: 0a:42:15:46:54:11:2d:92:aa:b2:98:28:42:8e:dc:06:54:84: 8c:ab:ac:3f:13:f6:64:ec:2d:04:4a:5c:f4:65:df:ce:90:1f: d1:fe:d4:55:ed:95:b1:0a:6c:f7:30:da:96:16:66:d7:a3:fe: 8b:a3:e0:d9:cf:46:3b:af:8f:cb:da:bf:46:1a:59:1d:4c:d1: ee:70:27:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB88wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc5OUMxMTAvBgNVBAUTKERDMjFGODY3MzdCMjM5N0REMkIyNjA5RThGQjQwNjg2 RTNDOEY3NjEwHhcNMjUxMTA0MjExOTM2WhcNMjUxMTExMjExOTM2WjAYMRYwFAYD VQQDEw02OTBhNmRlOC1jOWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxrBjVa6odt0nD2GhKzZIhLjyLD3UP3e7n05q4wLwVJlosc0trjoG1DQCmryy luMNzRRmvvLPXFtCpfvxLNnRen2OOK5zmsdUH68FhyzaoKX5k86bH26u2QxA27N0 TC5BqTtUEMobn1U0JilwhNvmcAMXgMg7J9fSIh0c21zjyECMPVEoaYUY+sfz7eSP 1Cml2TEF5p62o7MpzL9F6zDCWHzX76KzW04ehlLYNgeCq2OHWQSOEa9FHhko4WOU VXYvpXKZERDbXmooYJcbLgTU+yf3GCsStOLikYTve7egnLWyv2B6tiUh01aMn66u t2x0n0gkiPN6yIAI8eH8smmiGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFQEiYFi D38cEN7XB9U/NZdjC+uzMB8GA1UdIwQYMBaAFNwh+Gc3sjl90rJgno+0BobjyPdh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzk5Qy9BMkRGQjMzNjEz NTcxMUVCOEQxM0IyMTVDNEY5QUUwMi8zQ0g0WnpleU9YM1NzbUNlajdRR2h1UEk5 MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNDSDRaemV5T1gzU3NtQ2VqN1FHaHVQSTkyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Nzk5Qy9BMkRGQjMzNjEzNTcxMUVCOEQxM0IyMTVDNEY5QUUwMi8zQ0g0WnpleU9Y M1NzbUNlajdRR2h1UEk5MkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCa61NGxEB2yNSXX0v33a9wZYXlw6a7jXp65oup685ooIrRfK1Y0Ep0 rrDobn+xVchotUcQMN5i+s3pqZ29qVPWfNYSuIzC28flcMJpD+Y4xwoHHkXoD8HD mwTbcrZ4KoByhhGjGq4ZIOGJbn+ZC6lWV+C/ho1kETXNy483bYtkfogLNye5d8zN kkeAj1Qjr3zbKEQWsP9zvqLighcc29IlaODYjjx6roUceolISmXoQFndnXYKQhVG VBEtkqqymChCjtwGVISMq6w/E/Zk7C0ESlz0Zd/OkB/R/tRV7ZWxCmz3MNqWFmbX o/6Lo+DZz0Y7r4/L2r9GGlkdTNHucCd5 -----END CERTIFICATE-----Generated at Wed Nov 5 10:00:46 2025 by rpki-client