$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.mft File: 3UAamS3TKfk027INWAtMpyeQ37E.mft (raw, json) Hash identifier: WlQYWcyjiFvyQKaGN6HE5jSt8/0EtHBLBs2m+rZ5sow= Subject key identifier: A2:04:F9:5C:F4:F4:4C:4D:0F:28:5F:09:72:E9:9D:99:3E:3B:94:99 Authority key identifier: DD:40:1A:99:2D:D3:29:F9:34:DB:B2:0D:58:0B:4C:A7:27:90:DF:B1 Certificate issuer: /CN=A91EAB64/serialNumber=DD401A992DD329F934DBB20D580B4CA72790DFB1 Certificate serial: 040F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3UAamS3TKfk027INWAtMpyeQ37E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.mft Manifest number: 05EA Signing time: Wed 05 Nov 2025 00:30:47 +0000 Manifest this update: Wed 05 Nov 2025 00:30:47 +0000 Manifest next update: Wed 12 Nov 2025 00:30:47 +0000 Files and hashes: 1: 3UAamS3TKfk027INWAtMpyeQ37E.crl (hash: gtIfxk/tPc5pxXPkA3UGxS07JoM5KdwvZJIXFX+bPTM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.crl rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3UAamS3TKfk027INWAtMpyeQ37E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:30:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1039 (0x40f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAB64, serialNumber=DD401A992DD329F934DBB20D580B4CA72790DFB1 Validity Not Before: Nov 5 00:30:47 2025 GMT Not After : Nov 12 00:30:47 2025 GMT Subject: CN=690a9ab7-749f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f8:33:0f:74:60:21:78:3e:d7:ec:43:3b:50: 4c:b8:cc:83:d7:b2:86:95:12:ed:c5:7c:95:53:8b: f8:0f:bb:9e:e0:34:5b:8c:6c:0e:59:0b:6f:e6:3c: 32:3b:84:24:89:bf:05:4b:f4:de:c7:81:f6:93:3d: b4:3c:22:f1:12:25:f4:8f:2d:56:d2:ff:94:12:75: 4c:7f:a9:d1:1c:cd:f0:bb:58:4c:f2:d5:dd:69:fc: 16:84:fc:d7:40:d3:dd:e5:67:89:0e:9f:3f:22:ad: 52:94:95:56:77:68:7c:0b:81:f9:e2:72:19:14:ee: ba:14:f5:c1:af:3d:b4:6b:87:38:ea:57:81:12:0e: 5b:01:e2:1b:73:d2:63:39:d6:b7:51:b2:2a:6f:01: b4:aa:17:c7:c6:ff:e9:60:3c:71:25:5e:9d:b6:6e: 58:53:18:76:d1:f3:09:38:16:cb:8d:40:8a:38:eb: 54:0a:79:4f:f6:6f:b2:e2:8d:0a:a0:6f:df:d9:64: ad:ff:06:d8:3b:8c:ba:3d:6d:ff:85:3d:92:79:0a: 01:7a:6a:17:5d:37:c6:3b:41:0d:93:19:3f:7d:42: 12:bf:69:d7:68:23:c0:d2:84:b8:56:c3:bd:bd:98: 8f:a1:fb:e1:3b:6b:10:27:1d:db:b9:f4:ed:b1:4e: b0:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:04:F9:5C:F4:F4:4C:4D:0F:28:5F:09:72:E9:9D:99:3E:3B:94:99 X509v3 Authority Key Identifier: keyid:DD:40:1A:99:2D:D3:29:F9:34:DB:B2:0D:58:0B:4C:A7:27:90:DF:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3UAamS3TKfk027INWAtMpyeQ37E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:30:26:34:ba:b5:a0:5a:25:4c:13:2f:2d:75:63:d1:b9:5f: 7e:8e:92:bc:97:50:70:45:18:36:06:9f:00:01:d4:9a:2e:28: 8b:37:be:99:46:f3:d5:85:2a:de:c8:eb:73:34:d2:99:4c:f1: 59:60:e2:66:85:df:67:00:c9:94:85:90:5b:2d:29:d5:df:7a: 87:b7:0e:70:65:5c:e0:1c:a6:d8:d2:df:15:c5:18:25:c0:27: 8a:b8:cd:33:3e:7e:31:11:f8:0f:e9:84:e6:c7:a0:68:9b:bd: e3:10:11:a0:d2:f3:75:b1:85:a9:d5:db:b6:89:15:bd:0b:12: c0:16:55:d8:02:30:33:23:52:42:a1:da:1a:7a:70:84:d7:5b: b8:21:c7:be:96:83:dd:e7:80:64:e1:10:87:f0:7e:14:bd:e1: 57:a4:7e:8d:82:d6:09:08:4f:3f:8f:7d:b2:d0:1e:74:23:9a: 6f:dd:42:a3:5c:12:10:a7:a3:e0:fc:f1:60:bd:4c:b9:e0:16: 63:85:0f:73:ee:19:e6:4e:f0:4e:9b:3c:e8:ff:90:7d:42:a2: 66:4d:ff:00:e8:2e:bc:dd:7f:90:05:61:a6:83:fa:a3:0f:37: 10:2a:74:26:4e:ec:23:4b:e5:d4:89:7e:18:7e:9b:20:7a:09: db:ad:7a:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBA8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFCNjQxMTAvBgNVBAUTKERENDAxQTk5MkREMzI5RjkzNERCQjIwRDU4MEI0Q0E3 Mjc5MERGQjEwHhcNMjUxMTA1MDAzMDQ3WhcNMjUxMTEyMDAzMDQ3WjAYMRYwFAYD VQQDEw02OTBhOWFiNy03NDlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv/gzD3RgIXg+1+xDO1BMuMyD17KGlRLtxXyVU4v4D7ue4DRbjGwOWQtv5jwy O4Qkib8FS/Tex4H2kz20PCLxEiX0jy1W0v+UEnVMf6nRHM3wu1hM8tXdafwWhPzX QNPd5WeJDp8/Iq1SlJVWd2h8C4H54nIZFO66FPXBrz20a4c46leBEg5bAeIbc9Jj Oda3UbIqbwG0qhfHxv/pYDxxJV6dtm5YUxh20fMJOBbLjUCKOOtUCnlP9m+y4o0K oG/f2WSt/wbYO4y6PW3/hT2SeQoBemoXXTfGO0ENkxk/fUISv2nXaCPA0oS4VsO9 vZiPofvhO2sQJx3bufTtsU6wMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKIE+Vz0 9ExNDyhfCXLpnZk+O5SZMB8GA1UdIwQYMBaAFN1AGpkt0yn5NNuyDVgLTKcnkN+x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUI2NC85QjQ0RUI3NDhG MjkxMUVDQjZBNjk5NkNDNEY5QUUwMi8zVUFhbVMzVEtmazAyN0lOV0F0TXB5ZVEz N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNVQWFtUzNUS2ZrMDI3SU5XQXRNcHllUTM3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUI2NC85QjQ0RUI3NDhGMjkxMUVDQjZBNjk5NkNDNEY5QUUwMi8zVUFhbVMzVEtm azAyN0lOV0F0TXB5ZVEzN0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmMCY0urWgWiVMEy8tdWPRuV9+jpK8l1BwRRg2Bp8AAdSaLiiLN76Z RvPVhSreyOtzNNKZTPFZYOJmhd9nAMmUhZBbLSnV33qHtw5wZVzgHKbY0t8VxRgl wCeKuM0zPn4xEfgP6YTmx6Bom73jEBGg0vN1sYWp1du2iRW9CxLAFlXYAjAzI1JC odoaenCE11u4Ice+loPd54Bk4RCH8H4UveFXpH6NgtYJCE8/j32y0B50I5pv3UKj XBIQp6Pg/PFgvUy54BZjhQ9z7hnmTvBOmzzo/5B9QqJmTf8A6C683X+QBWGmg/qj DzcQKnQmTuwjS+XUiX4YfpsgegnbrXof -----END CERTIFICATE-----Generated at Wed Nov 5 15:39:52 2025 by rpki-client