$ rpki-client -vvf rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft File: k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft (raw, json) Hash identifier: i531eeHv6SfglyCUQar3Hspcn4axpE9GtZ2pQTLKySE= Subject key identifier: 89:70:F7:11:34:3A:69:CB:C8:37:15:B8:95:A3:30:8E:E1:BD:BD:EA Authority key identifier: 93:7A:1B:5F:EB:0A:29:33:60:EA:4E:88:47:35:2E:7F:D3:6C:C7:A5 Certificate issuer: /CN=A91D73BB/serialNumber=937A1B5FEB0A293360EA4E8847352E7FD36CC7A5 Certificate serial: 0147 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k3obX-sKKTNg6k6IRzUuf9Nsx6U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft Manifest number: 013D Signing time: Wed 05 Nov 2025 04:39:52 +0000 Manifest this update: Wed 05 Nov 2025 04:39:52 +0000 Manifest next update: Wed 12 Nov 2025 04:39:52 +0000 Files and hashes: 1: k3obX-sKKTNg6k6IRzUuf9Nsx6U.crl (hash: G7mKW2xFSTADkAn//nT9VTRFoUcB8ReAYALkZdTLMus=) 2: CFE87CFEE74911EE9E36BA2AC4F9AE02.roa (hash: 6O+gN+s3nYuHADI/TEqtB2x9DBi8NBjryPUz/maJeSc=) 3: F74BBA0E307C11F09D502B0DC4F9AE02.roa (hash: Tr2BD+TjkZLpINWnT5Dv/SJcrrMfCgyU3wvXQZmqI2g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.crl rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k3obX-sKKTNg6k6IRzUuf9Nsx6U.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:39:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 327 (0x147) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D73BB, serialNumber=937A1B5FEB0A293360EA4E8847352E7FD36CC7A5 Validity Not Before: Nov 5 04:39:52 2025 GMT Not After : Nov 12 04:39:52 2025 GMT Subject: CN=690ad518-7b46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:bb:79:27:9d:2d:f6:17:db:56:b3:91:a1:29: c8:e0:61:32:c7:12:95:f3:fe:6d:49:9c:96:9c:8d: 21:24:ac:64:e2:ad:7a:8b:3a:8e:37:6e:eb:71:50: 9e:bd:c9:24:24:45:95:ef:fc:9e:03:e1:2a:5d:05: 66:b3:ae:0d:01:42:20:ca:38:a6:1c:83:39:73:07: 54:71:d6:15:fa:51:b0:9c:e1:77:40:39:80:e4:90: 39:57:81:4a:ee:83:48:a5:55:d0:0e:f6:f1:41:42: f0:40:94:5d:7e:33:de:8f:6c:b2:31:04:b1:69:7f: d4:02:e4:5f:80:69:24:f8:ef:20:d7:b1:98:68:54: cd:f7:3d:df:7a:46:a8:e0:df:b6:0e:97:83:54:08: 8e:6b:51:98:89:02:28:90:66:47:1f:3d:5d:db:8f: 67:ca:24:e3:f4:8f:80:3e:b8:2c:91:c1:8f:0a:3f: f4:1e:4f:af:8d:50:6a:42:12:85:2e:74:c1:97:99: ec:b2:d4:5f:5b:3e:00:31:8d:81:c9:7d:90:fb:f1: b6:ef:a5:a0:12:c3:e1:62:fc:6e:e6:45:a6:cc:ed: b3:2f:bc:6d:90:23:6e:6b:d8:f8:09:df:25:20:62: f2:b5:6a:66:1a:d7:b2:1e:3d:0b:08:5d:85:09:ba: e3:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:70:F7:11:34:3A:69:CB:C8:37:15:B8:95:A3:30:8E:E1:BD:BD:EA X509v3 Authority Key Identifier: keyid:93:7A:1B:5F:EB:0A:29:33:60:EA:4E:88:47:35:2E:7F:D3:6C:C7:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k3obX-sKKTNg6k6IRzUuf9Nsx6U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:2a:92:dc:c4:ea:ea:80:9f:66:5d:5d:b0:db:42:f8:7e:4e: 69:4a:91:6d:bb:e5:76:16:c8:5e:43:cc:4f:e3:41:af:8d:f0: be:31:f7:29:57:7f:54:27:da:fc:c3:8f:5f:8c:5a:76:55:1f: f6:4f:27:ad:fe:93:f8:8d:60:1e:c3:e1:27:4a:cc:6a:53:aa: f0:57:ec:bc:a2:df:cd:0c:e0:6b:27:c1:da:45:5e:34:5d:26: 9b:23:02:2c:fd:3a:79:e8:a5:8c:2c:7c:3e:6f:a6:1b:b2:40: 68:c6:af:a4:84:f5:f8:c4:8a:ad:af:ec:44:c5:3a:24:26:ac: 1a:e7:a4:09:f3:68:1f:d9:5e:f6:bf:02:1c:1a:c2:80:b6:c1: 81:8c:3b:6a:c7:a8:58:0e:68:4a:29:16:c1:50:da:9e:c0:a1: db:e6:e8:87:6e:fd:b6:4a:b1:9e:2c:0d:91:af:b4:3f:f9:85: 4b:35:ae:38:f1:6a:e4:76:ef:31:40:e0:a8:86:5a:73:83:63: fb:50:f0:29:5f:3e:7a:cf:3c:0b:70:31:04:bb:e6:6a:58:0d: c1:cb:eb:c1:d8:6c:39:13:c6:a7:b0:cb:2e:0e:f3:2a:4d:32: f8:57:61:e7:87:54:23:31:53:41:a3:5b:dc:12:fe:33:44:0e: e7:75:55:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDczQkIxMTAvBgNVBAUTKDkzN0ExQjVGRUIwQTI5MzM2MEVBNEU4ODQ3MzUyRTdG RDM2Q0M3QTUwHhcNMjUxMTA1MDQzOTUyWhcNMjUxMTEyMDQzOTUyWjAYMRYwFAYD VQQDEw02OTBhZDUxOC03YjQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApLt5J50t9hfbVrORoSnI4GEyxxKV8/5tSZyWnI0hJKxk4q16izqON27rcVCe vckkJEWV7/yeA+EqXQVms64NAUIgyjimHIM5cwdUcdYV+lGwnOF3QDmA5JA5V4FK 7oNIpVXQDvbxQULwQJRdfjPej2yyMQSxaX/UAuRfgGkk+O8g17GYaFTN9z3fekao 4N+2DpeDVAiOa1GYiQIokGZHHz1d249nyiTj9I+APrgskcGPCj/0Hk+vjVBqQhKF LnTBl5nsstRfWz4AMY2ByX2Q+/G276WgEsPhYvxu5kWmzO2zL7xtkCNua9j4Cd8l IGLytWpmGteyHj0LCF2FCbrjwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIlw9xE0 OmnLyDcVuJWjMI7hvb3qMB8GA1UdIwQYMBaAFJN6G1/rCikzYOpOiEc1Ln/TbMel MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzNCQi83RUQ1NzU4NkUx OEQxMUVFOTkwRkVDNEZDNEY5QUUwMi9rM29iWC1zS0tUTmc2azZJUnpVdWY5TnN4 NlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2szb2JYLXNLS1ROZzZrNklSelV1ZjlOc3g2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzNCQi83RUQ1NzU4NkUxOEQxMUVFOTkwRkVDNEZDNEY5QUUwMi9rM29iWC1zS0tU Tmc2azZJUnpVdWY5TnN4NlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3KpLcxOrqgJ9mXV2w20L4fk5pSpFtu+V2FsheQ8xP40GvjfC+Mfcp V39UJ9r8w49fjFp2VR/2Tyet/pP4jWAew+EnSsxqU6rwV+y8ot/NDOBrJ8HaRV40 XSabIwIs/Tp56KWMLHw+b6YbskBoxq+khPX4xIqtr+xExTokJqwa56QJ82gf2V72 vwIcGsKAtsGBjDtqx6hYDmhKKRbBUNqewKHb5uiHbv22SrGeLA2Rr7Q/+YVLNa44 8Wrkdu8xQOCohlpzg2P7UPApXz56zzwLcDEEu+ZqWA3By+vB2Gw5E8ansMsuDvMq TTL4V2Hnh1QjMVNBo1vcEv4zRA7ndVU+ -----END CERTIFICATE-----Generated at Wed Nov 5 16:41:28 2025 by rpki-client