$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft File: fn-3i_rxIdy3dJPgd5raTNDVmBo.mft (raw, json) Hash identifier: 24ht7TepXiX9jyIo22Gt5+hIzqVZNG2m3C5tY2OD3L0= Subject key identifier: F9:D9:D9:BF:85:C3:25:4D:69:EB:DD:AB:8F:BE:8B:12:4A:E8:63:32 Authority key identifier: 7E:7F:B7:8B:FA:F1:21:DC:B7:74:93:E0:77:9A:DA:4C:D0:D5:98:1A Certificate issuer: /CN=A91DE7DE/serialNumber=7E7FB78BFAF121DCB77493E0779ADA4CD0D5981A Certificate serial: 11B2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fn-3i_rxIdy3dJPgd5raTNDVmBo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft Manifest number: 11AB Signing time: Tue 04 Nov 2025 17:17:36 +0000 Manifest this update: Tue 04 Nov 2025 17:17:35 +0000 Manifest next update: Tue 11 Nov 2025 17:17:35 +0000 Files and hashes: 1: fn-3i_rxIdy3dJPgd5raTNDVmBo.crl (hash: KuPEKcm493iSGUmRgYPGOxKe0cgTwvENssuqx7o5KOo=) 2: D728B250060011F0A0448C64C4F9AE02.roa (hash: 63yl1Teyi3N0la02MDXzZvU9fOguPMEqkEgxVdH5wiQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.crl rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fn-3i_rxIdy3dJPgd5raTNDVmBo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:17:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4530 (0x11b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE7DE, serialNumber=7E7FB78BFAF121DCB77493E0779ADA4CD0D5981A Validity Not Before: Nov 4 17:17:35 2025 GMT Not After : Nov 11 17:17:35 2025 GMT Subject: CN=690a3530-819e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d2:ca:74:5c:61:90:f0:0d:84:37:8d:1b:42: 95:1d:3c:b4:68:b4:97:90:27:f1:8c:e9:df:ee:c3: d7:e8:83:ef:4a:e4:f0:e2:80:99:0a:75:87:88:0d: e9:a4:b6:1c:7d:20:45:60:44:2b:78:cc:29:51:08: 02:c3:57:8d:61:8e:cf:8c:be:b3:bd:0a:ec:38:b6: 86:4a:ab:90:fd:ee:5b:67:4d:87:f5:d8:a5:69:a0: 28:4b:f6:9e:30:c3:85:8d:fa:84:c9:41:d1:28:fb: df:9f:42:82:95:97:f5:82:db:d1:2d:39:17:e5:00: 50:9d:a1:82:b2:22:ba:23:5c:c5:1e:4a:f2:f8:47: 98:a4:2b:9b:e7:16:7a:ef:91:dd:17:89:06:1e:bb: a5:55:13:2d:fc:6d:7d:6e:1d:9c:80:00:ff:07:8b: d6:10:4d:73:67:22:aa:20:eb:84:1f:3f:82:51:31: b4:2c:4a:6c:7e:b0:c2:12:47:fd:ba:5a:a2:b2:b7: 21:33:91:64:e0:7d:95:97:ea:41:c8:05:a1:e3:f4: c8:ae:2f:0a:80:59:38:88:96:ae:6f:ed:d5:4a:c7: 2d:6f:9e:48:c3:44:0a:66:1d:29:f8:82:3a:b9:ef: 08:44:90:b8:b9:18:db:bc:b4:ae:cd:ad:32:6e:a8: 0c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:D9:D9:BF:85:C3:25:4D:69:EB:DD:AB:8F:BE:8B:12:4A:E8:63:32 X509v3 Authority Key Identifier: keyid:7E:7F:B7:8B:FA:F1:21:DC:B7:74:93:E0:77:9A:DA:4C:D0:D5:98:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fn-3i_rxIdy3dJPgd5raTNDVmBo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:5e:e7:f4:05:57:06:9c:01:75:00:af:b1:52:0e:67:d1:bd: b9:51:35:9d:3f:3d:7b:c3:c0:f3:c6:97:b9:8a:d3:32:44:8f: 22:e6:de:6f:17:1f:3d:d1:00:c8:27:31:bb:3e:09:3b:cc:0d: eb:47:7a:46:6a:e2:09:f4:50:a9:45:ae:7e:b4:93:90:63:8b: 0c:23:50:2c:9a:8e:36:b5:57:cf:01:7e:f1:1c:8c:0b:71:9c: 42:58:de:b7:25:10:9d:21:34:a5:a2:45:e4:3a:9d:bd:a6:3b: 7f:4b:bc:2d:0e:c4:2d:9e:9d:f9:69:ad:c3:12:48:f0:45:0f: a0:6d:49:7c:56:8f:f6:bf:d6:ff:0e:68:5b:13:7b:3c:8c:40: 28:5a:8e:43:13:27:1a:ed:04:8f:13:88:17:0f:7f:c3:73:cd: fe:91:63:83:7f:5f:1f:d9:91:d6:8a:ad:42:fa:9c:fe:1c:52: 33:b7:cd:18:ab:3e:0d:5a:83:42:b1:2b:21:a5:79:fe:46:cf: 39:62:dd:08:ac:2b:e7:d2:b5:e2:9e:2f:8f:9c:5f:e2:49:e1: 22:4d:d1:d1:8c:34:7d:af:ab:d7:e9:18:83:6b:bf:fa:86:a0: 8d:d2:2c:cd:80:ed:1b:4d:27:39:1a:b1:c2:fd:dc:fc:72:cc: 9d:54:f5:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU3REUxMTAvBgNVBAUTKDdFN0ZCNzhCRkFGMTIxRENCNzc0OTNFMDc3OUFEQTRD RDBENTk4MUEwHhcNMjUxMTA0MTcxNzM1WhcNMjUxMTExMTcxNzM1WjAYMRYwFAYD VQQDEw02OTBhMzUzMC04MTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuNLKdFxhkPANhDeNG0KVHTy0aLSXkCfxjOnf7sPX6IPvSuTw4oCZCnWHiA3p pLYcfSBFYEQreMwpUQgCw1eNYY7PjL6zvQrsOLaGSquQ/e5bZ02H9dilaaAoS/ae MMOFjfqEyUHRKPvfn0KClZf1gtvRLTkX5QBQnaGCsiK6I1zFHkry+EeYpCub5xZ6 75HdF4kGHrulVRMt/G19bh2cgAD/B4vWEE1zZyKqIOuEHz+CUTG0LEpsfrDCEkf9 ulqisrchM5Fk4H2Vl+pByAWh4/TIri8KgFk4iJaub+3VSsctb55Iw0QKZh0p+II6 ue8IRJC4uRjbvLSuza0ybqgMawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPnZ2b+F wyVNaevdq4++ixJK6GMyMB8GA1UdIwQYMBaAFH5/t4v68SHct3ST4Hea2kzQ1Zga MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTdERS9DMzMyQUZCNjA0 RTExMUU5OEVBN0Q4NzJDNEY5QUUwMi9mbi0zaV9yeElkeTNkSlBnZDVyYVRORFZt Qm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ZuLTNpX3J4SWR5M2RKUGdkNXJhVE5EVm1Cby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTdERS9DMzMyQUZCNjA0RTExMUU5OEVBN0Q4NzJDNEY5QUUwMi9mbi0zaV9yeElk eTNkSlBnZDVyYVRORFZtQm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFXuf0BVcGnAF1AK+xUg5n0b25UTWdPz17w8Dzxpe5itMyRI8i5t5v Fx890QDIJzG7Pgk7zA3rR3pGauIJ9FCpRa5+tJOQY4sMI1Asmo42tVfPAX7xHIwL cZxCWN63JRCdITSlokXkOp29pjt/S7wtDsQtnp35aa3DEkjwRQ+gbUl8Vo/2v9b/ DmhbE3s8jEAoWo5DEyca7QSPE4gXD3/Dc83+kWODf18f2ZHWiq1C+pz+HFIzt80Y qz4NWoNCsSshpXn+Rs85Yt0IrCvn0rXini+PnF/iSeEiTdHRjDR9r6vX6RiDa7/6 hqCN0izNgO0bTSc5GrHC/dz8csydVPVd -----END CERTIFICATE-----Generated at Wed Nov 5 05:18:25 2025 by rpki-client