$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft File: A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft (raw, json) Hash identifier: Eerv8SqpQpinhI+L+14cK6q/rOJ3OuTUBqDiTTSrpAA= Subject key identifier: 01:28:FF:38:46:E9:D4:8C:C0:BB:10:E9:B7:AB:C7:8D:46:C9:EF:8E Authority key identifier: 03:72:46:D5:14:B8:23:40:ED:E0:62:89:BF:1B:C8:C4:59:DB:FC:E5 Certificate issuer: /CN=A91E6DB3/serialNumber=037246D514B82340EDE06289BF1BC8C459DBFCE5 Certificate serial: 038A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft Manifest number: 0382 Signing time: Wed 05 Nov 2025 00:56:06 +0000 Manifest this update: Wed 05 Nov 2025 00:56:06 +0000 Manifest next update: Wed 12 Nov 2025 00:56:06 +0000 Files and hashes: 1: A3JG1RS4I0Dt4GKJvxvIxFnb_OU.crl (hash: uLrhdZ16pH4xhVqEtUbOHtNgKsPVFLQVhyd8jxzQlJs=) 2: 67A55414D56911EFB3E08134C4F9AE02.roa (hash: rSusYrdxwzMZ/h0NAAbSd/+Fpawy/2pH16Z/11B0adc=) 3: 671C31AAC6C811ECA5A9AB33C4F9AE02.roa (hash: 0dwKgZ8jlIMiRytgvBci6vNzPpvAs9BdKSq60BEmluY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.crl rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:56:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 906 (0x38a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6DB3, serialNumber=037246D514B82340EDE06289BF1BC8C459DBFCE5 Validity Not Before: Nov 5 00:56:06 2025 GMT Not After : Nov 12 00:56:06 2025 GMT Subject: CN=690aa0a6-d9a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:95:c8:76:7b:16:75:e5:15:4e:1e:db:51:e2: 2a:12:50:78:46:0b:c1:8e:12:cd:37:4d:e7:b9:fa: d3:b5:10:dc:e5:07:76:53:1a:d5:1d:98:9e:4a:48: e1:fb:2a:ec:c8:02:e7:b7:a8:5d:af:f7:5b:c9:40: 64:fd:33:53:5d:c6:17:69:12:13:20:f7:c8:de:f5: 00:20:28:a6:e5:44:3a:5e:94:16:48:b2:c9:6e:20: 76:d7:7d:62:b9:bd:5e:d8:d5:5a:00:41:14:3f:f2: da:18:3e:fb:87:72:60:1b:59:61:13:ee:bf:0d:33: 77:4a:66:40:4d:9f:e7:99:56:37:6f:b8:b3:4a:c9: 1d:02:4f:a9:3f:b5:27:b0:ac:70:4a:8f:ed:a6:bc: 4b:3c:f4:5c:6f:ed:30:c4:0a:46:f0:f5:12:45:27: 27:4f:59:97:93:b3:1e:86:53:68:7d:bf:dd:d2:f6: 2f:1e:2e:9d:6c:28:38:93:e5:9a:32:64:27:b8:71: b8:0e:e4:f5:e1:f8:78:8d:b3:0f:8e:93:c8:ab:56: 3b:4f:9b:9d:01:54:fe:9a:6f:ea:aa:ef:d8:f3:c5: 86:a2:ac:6d:bc:a0:21:47:6f:fd:32:5a:4d:12:07: 53:b6:3a:1e:55:0e:56:59:92:24:21:92:40:30:d9: 65:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:28:FF:38:46:E9:D4:8C:C0:BB:10:E9:B7:AB:C7:8D:46:C9:EF:8E X509v3 Authority Key Identifier: keyid:03:72:46:D5:14:B8:23:40:ED:E0:62:89:BF:1B:C8:C4:59:DB:FC:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:ca:7a:bf:83:f8:23:33:e8:f5:63:7f:7f:45:77:d7:74:43: c9:ac:9d:5d:33:ea:a9:f0:62:1c:a7:84:10:27:21:e1:3f:34: 5a:5b:14:34:51:77:f8:f7:e7:71:e0:2a:a8:b8:6f:05:e2:fd: 20:84:bd:2d:72:ae:13:51:08:87:d1:4b:90:a0:b9:3a:30:8e: 08:fb:1d:3e:8a:38:29:07:cf:74:ea:3b:43:34:d3:45:e5:00: 84:87:be:5d:2d:ec:e8:ae:3d:3a:b4:dd:96:dc:8c:a3:9c:33: 67:61:f6:62:93:d3:f7:82:4c:83:05:0c:9b:f9:d5:97:72:f1: 23:13:5c:40:fa:c0:37:ba:ca:80:ac:7f:da:3f:7b:6e:fa:71: 89:c3:7f:81:d5:f1:ca:d0:b3:14:76:9f:69:8b:2d:c5:b4:b9: 98:d6:7f:04:09:e9:8d:04:61:d9:83:81:b4:21:8f:c8:98:26: 6a:90:a8:a3:fb:35:df:e5:c3:af:1a:d1:c7:00:14:d4:62:c8: 9b:f0:b0:e5:00:6f:b2:3c:11:9c:f4:d1:38:69:c6:21:fd:0c: 6f:67:5a:29:20:6a:1c:4c:94:5a:4d:5a:74:f7:aa:5a:8f:e0: 30:c9:00:be:72:6c:30:1f:f3:53:0f:6a:1b:22:8e:ae:f2:7b: 36:f4:4a:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZEQjMxMTAvBgNVBAUTKDAzNzI0NkQ1MTRCODIzNDBFREUwNjI4OUJGMUJDOEM0 NTlEQkZDRTUwHhcNMjUxMTA1MDA1NjA2WhcNMjUxMTEyMDA1NjA2WjAYMRYwFAYD VQQDEw02OTBhYTBhNi1kOWE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzpXIdnsWdeUVTh7bUeIqElB4RgvBjhLNN03nufrTtRDc5Qd2UxrVHZieSkjh +yrsyALnt6hdr/dbyUBk/TNTXcYXaRITIPfI3vUAICim5UQ6XpQWSLLJbiB2131i ub1e2NVaAEEUP/LaGD77h3JgG1lhE+6/DTN3SmZATZ/nmVY3b7izSskdAk+pP7Un sKxwSo/tprxLPPRcb+0wxApG8PUSRScnT1mXk7MehlNofb/d0vYvHi6dbCg4k+Wa MmQnuHG4DuT14fh4jbMPjpPIq1Y7T5udAVT+mm/qqu/Y88WGoqxtvKAhR2/9MlpN EgdTtjoeVQ5WWZIkIZJAMNllIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAEo/zhG 6dSMwLsQ6berx41Gye+OMB8GA1UdIwQYMBaAFANyRtUUuCNA7eBiib8byMRZ2/zl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkRCMy81M0FBMUJENEM2 MDgxMUVDOUIzMTQ0NkRDNEY5QUUwMi9BM0pHMVJTNEkwRHQ0R0tKdnh2SXhGbmJf T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0EzSkcxUlM0STBEdDRHS0p2eHZJeEZuYl9PVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkRCMy81M0FBMUJENEM2MDgxMUVDOUIzMTQ0NkRDNEY5QUUwMi9BM0pHMVJTNEkw RHQ0R0tKdnh2SXhGbmJfT1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGynq/g/gjM+j1Y39/RXfXdEPJrJ1dM+qp8GIcp4QQJyHhPzRaWxQ0 UXf49+dx4CqouG8F4v0ghL0tcq4TUQiH0UuQoLk6MI4I+x0+ijgpB8906jtDNNNF 5QCEh75dLezorj06tN2W3IyjnDNnYfZik9P3gkyDBQyb+dWXcvEjE1xA+sA3usqA rH/aP3tu+nGJw3+B1fHK0LMUdp9piy3FtLmY1n8ECemNBGHZg4G0IY/ImCZqkKij +zXf5cOvGtHHABTUYsib8LDlAG+yPBGc9NE4acYh/QxvZ1opIGocTJRaTVp096pa j+AwyQC+cmwwH/NTD2obIo6u8ns29Epv -----END CERTIFICATE-----Generated at Wed Nov 5 10:08:00 2025 by rpki-client