$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA58E/908DB4C88C6811F0BCEEB171C4F9AE02/P3JyYLCUlEIN1npzBNggXUL_P_E.mft File: P3JyYLCUlEIN1npzBNggXUL_P_E.mft (raw, json) Hash identifier: TgwhzqGQM6IF/svOz03fnhy2Rl0QFKUOiTjqPUAD49k= Subject key identifier: 23:05:F2:41:A0:E4:9F:E4:17:99:9C:98:94:F8:57:7D:1A:87:84:8D Authority key identifier: 3F:72:72:60:B0:94:94:42:0D:D6:7A:73:04:D8:20:5D:42:FF:3F:F1 Certificate issuer: /CN=A91CA58E/serialNumber=3F727260B09494420DD67A7304D8205D42FF3FF1 Certificate serial: 1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3JyYLCUlEIN1npzBNggXUL_P_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA58E/908DB4C88C6811F0BCEEB171C4F9AE02/P3JyYLCUlEIN1npzBNggXUL_P_E.mft Manifest number: 1D Signing time: Mon 03 Nov 2025 07:46:25 +0000 Manifest this update: Mon 03 Nov 2025 07:46:25 +0000 Manifest next update: Mon 10 Nov 2025 07:46:24 +0000 Files and hashes: 1: P3JyYLCUlEIN1npzBNggXUL_P_E.crl (hash: w3NJM5SD523rtnaUZAt76nqgbyqisEY44WjBUXOJwhQ=) 2: 3DC1FF148C6911F08611A235C4F9AE02.roa (hash: fLngag0jvcUXsL/3ScrJd5vhIuo9JacsTzQUqtZ8EUg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA58E/908DB4C88C6811F0BCEEB171C4F9AE02/P3JyYLCUlEIN1npzBNggXUL_P_E.crl rsync://rpki.apnic.net/member_repository/A91CA58E/908DB4C88C6811F0BCEEB171C4F9AE02/P3JyYLCUlEIN1npzBNggXUL_P_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3JyYLCUlEIN1npzBNggXUL_P_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:46:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30 (0x1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA58E, serialNumber=3F727260B09494420DD67A7304D8205D42FF3FF1 Validity Not Before: Nov 3 07:46:25 2025 GMT Not After : Nov 10 07:46:24 2025 GMT Subject: CN=69085dd1-cac1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b1:d4:29:fc:4b:5f:af:f1:9d:3f:27:96:44: 8a:c9:d2:8d:98:5c:c8:d7:67:52:81:14:9a:4a:76: a8:58:cd:d5:c9:93:bc:07:b2:59:3c:25:58:14:26: 36:58:70:be:9f:2f:a7:81:80:f9:cb:8a:19:c2:fd: 1b:f3:d1:f4:9a:3c:e9:be:ed:61:19:10:09:f2:52: 7c:d3:1a:47:44:ef:a2:8e:e4:54:a8:92:cb:c9:0b: 5c:de:ce:7a:9d:3b:b7:e0:c0:22:6c:12:79:6c:11: ad:64:f8:58:8f:8b:e2:70:a7:9c:c2:fc:e2:42:69: c9:06:0b:7c:e4:a4:74:c0:76:ff:4f:67:1d:1f:ff: 93:aa:59:32:e4:87:a6:da:6f:99:11:79:1a:7f:17: 7b:7d:d3:f0:11:64:df:d2:e7:77:6c:c2:ab:97:bf: 15:cc:5a:1c:c5:35:9d:8f:d9:e7:ff:ae:6c:19:73: e8:5c:bb:03:d4:e5:f7:9e:9d:93:2f:31:8e:5d:7a: 3f:8c:e8:fa:90:3d:90:e9:cb:1f:ee:ab:b0:cb:ba: ac:fb:13:48:01:b3:53:da:ac:5f:ae:41:e0:95:6e: 56:d3:4f:e2:5b:0a:ff:14:fd:b9:64:be:a3:88:77: 4c:c3:31:f3:3c:13:01:76:d3:ce:c9:6d:bc:4c:db: cc:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:05:F2:41:A0:E4:9F:E4:17:99:9C:98:94:F8:57:7D:1A:87:84:8D X509v3 Authority Key Identifier: keyid:3F:72:72:60:B0:94:94:42:0D:D6:7A:73:04:D8:20:5D:42:FF:3F:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA58E/908DB4C88C6811F0BCEEB171C4F9AE02/P3JyYLCUlEIN1npzBNggXUL_P_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3JyYLCUlEIN1npzBNggXUL_P_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA58E/908DB4C88C6811F0BCEEB171C4F9AE02/P3JyYLCUlEIN1npzBNggXUL_P_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:19:18:ff:b2:35:12:b0:09:65:90:3e:83:7a:26:95:c9:27: bc:aa:41:bb:71:26:09:af:42:b6:6b:ab:d5:d4:5a:27:a0:73: 16:e3:98:d3:16:bb:d4:a5:1b:3f:de:0c:10:f9:5d:35:15:3d: ab:f1:64:e1:29:99:d1:57:29:b5:ff:d6:ee:6a:23:0b:92:7a: be:32:60:89:b9:ef:15:d3:ab:a6:00:67:19:47:07:40:4c:ef: fe:82:3f:06:d5:87:a7:a3:e1:7b:03:4f:53:8d:ae:ec:35:b0: 84:f5:00:2b:3b:69:0e:e2:e6:e0:28:df:a6:43:c1:53:75:e2: 26:9f:b2:9c:7b:5b:3d:34:d7:de:59:24:05:e6:6b:af:10:24: a2:47:27:56:2a:50:db:b6:dc:7e:b3:8e:93:85:20:8b:88:89: 6b:c9:4a:e1:71:01:75:40:69:83:27:4e:2a:69:8a:f9:f0:bc: 1a:fa:dc:9c:45:2f:d1:c8:12:88:f5:ac:df:61:7a:7e:02:7e: 8b:6c:d7:19:c8:e3:11:b8:bf:a6:63:b5:8c:1f:38:a9:92:1d: cb:3b:e4:56:c3:8a:4a:12:8e:6d:3f:25:85:7f:06:45:b3:81: d5:0c:45:d4:b6:55:07:88:a1:0f:b4:7e:c4:1d:d3:40:e3:00: e4:6e:6c:be -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QTU4RTExMC8GA1UEBRMoM0Y3MjcyNjBCMDk0OTQ0MjBERDY3QTczMDREODIwNUQ0 MkZGM0ZGMTAeFw0yNTExMDMwNzQ2MjVaFw0yNTExMTAwNzQ2MjRaMBgxFjAUBgNV BAMTDTY5MDg1ZGQxLWNhYzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCgsdQp/Etfr/GdPyeWRIrJ0o2YXMjXZ1KBFJpKdqhYzdXJk7wHslk8JVgUJjZY cL6fL6eBgPnLihnC/Rvz0fSaPOm+7WEZEAnyUnzTGkdE76KO5FSoksvJC1zeznqd O7fgwCJsEnlsEa1k+FiPi+Jwp5zC/OJCackGC3zkpHTAdv9PZx0f/5OqWTLkh6ba b5kReRp/F3t90/ARZN/S53dswquXvxXMWhzFNZ2P2ef/rmwZc+hcuwPU5feenZMv MY5dej+M6PqQPZDpyx/uq7DLuqz7E0gBs1ParF+uQeCVblbTT+JbCv8U/blkvqOI d0zDMfM8EwF2087JbbxM28yDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIwXyQaDk n+QXmZyYlPhXfRqHhI0wHwYDVR0jBBgwFoAUP3JyYLCUlEIN1npzBNggXUL/P/Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNBNThFLzkwOERCNEM4OEM2 ODExRjBCQ0VFQjE3MUM0RjlBRTAyL1AzSnlZTENVbEVJTjFucHpCTmdnWFVMX1Bf RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUDNKeVlMQ1VsRUlOMW5wekJOZ2dYVUxfUF9FLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNB NThFLzkwOERCNEM4OEM2ODExRjBCQ0VFQjE3MUM0RjlBRTAyL1AzSnlZTENVbEVJ TjFucHpCTmdnWFVMX1BfRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJsZGP+yNRKwCWWQPoN6JpXJJ7yqQbtxJgmvQrZrq9XUWiegcxbjmNMW u9SlGz/eDBD5XTUVPavxZOEpmdFXKbX/1u5qIwuSer4yYIm57xXTq6YAZxlHB0BM 7/6CPwbVh6ej4XsDT1ONruw1sIT1ACs7aQ7i5uAo36ZDwVN14iafspx7Wz00195Z JAXma68QJKJHJ1YqUNu23H6zjpOFIIuIiWvJSuFxAXVAaYMnTippivnwvBr63JxF L9HIEoj1rN9hen4Cfots1xnI4xG4v6ZjtYwfOKmSHcs75FbDikoSjm0/JYV/BkWz gdUMRdS2VQeIoQ+0fsQd00DjAORubL4= -----END CERTIFICATE-----Generated at Wed Nov 5 05:38:06 2025 by rpki-client