$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBC61/4C6F6856B6C411EFA24AA616C4F9AE02/C3f3vSPLQoWNC7_29-OscxNVMdU.mft File: C3f3vSPLQoWNC7_29-OscxNVMdU.mft (raw, json) Hash identifier: 8wp7+33SSRU1Gv5/uOrJVmRIUezvvFMvL2GX4O9HrHs= Subject key identifier: 84:30:8A:EE:C3:EB:F2:70:BE:3B:F9:35:C6:7D:7A:9B:C4:C6:96:35 Authority key identifier: 0B:77:F7:BD:23:CB:42:85:8D:0B:BF:F6:F7:E3:AC:73:13:55:31:D5 Certificate issuer: /CN=A91EBC61/serialNumber=0B77F7BD23CB42858D0BBFF6F7E3AC73135531D5 Certificate serial: AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C3f3vSPLQoWNC7_29-OscxNVMdU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBC61/4C6F6856B6C411EFA24AA616C4F9AE02/C3f3vSPLQoWNC7_29-OscxNVMdU.mft Manifest number: AA Signing time: Wed 05 Nov 2025 06:25:04 +0000 Manifest this update: Wed 05 Nov 2025 06:25:04 +0000 Manifest next update: Wed 12 Nov 2025 06:25:03 +0000 Files and hashes: 1: C3f3vSPLQoWNC7_29-OscxNVMdU.crl (hash: LmT00RiisKnxGPFi4Tm6fnIY3hDe3Uan6lBcaVUnYkA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBC61/4C6F6856B6C411EFA24AA616C4F9AE02/C3f3vSPLQoWNC7_29-OscxNVMdU.crl rsync://rpki.apnic.net/member_repository/A91EBC61/4C6F6856B6C411EFA24AA616C4F9AE02/C3f3vSPLQoWNC7_29-OscxNVMdU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C3f3vSPLQoWNC7_29-OscxNVMdU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:25:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 170 (0xaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBC61, serialNumber=0B77F7BD23CB42858D0BBFF6F7E3AC73135531D5 Validity Not Before: Nov 5 06:25:04 2025 GMT Not After : Nov 12 06:25:03 2025 GMT Subject: CN=690aedc0-0cf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:07:c6:49:4c:0c:ea:5f:ac:54:ef:5e:e2:fc: b3:f1:ab:b7:b8:79:d4:f6:aa:19:8c:40:e5:7c:c4: fb:85:18:34:bd:f1:7d:9a:aa:86:30:81:0b:be:52: a0:12:1a:84:95:03:06:26:6f:b2:84:d1:2b:41:43: 0c:c4:aa:d7:aa:fa:8a:ef:4e:55:d2:e2:0f:1c:d8: cb:8e:06:32:6d:08:4d:26:1e:7b:05:fa:0c:c9:e1: 3c:3d:0b:61:b4:2a:bf:e2:4d:49:65:d1:ab:33:89: ac:89:3e:15:cd:d0:2d:37:28:9b:8a:b4:d8:c4:74: 0a:30:4f:c0:8e:6b:e2:18:67:73:98:a0:6c:9a:2f: cd:e8:a7:6d:95:ec:17:df:04:d3:6e:ef:b6:83:31: 92:3a:78:bb:2c:f3:2c:6d:c6:ba:d6:37:c7:33:cb: ae:7d:9c:fc:ee:49:9f:eb:80:b8:78:12:8a:aa:0a: 66:67:68:6f:06:f3:a0:27:f6:ea:ae:db:95:31:36: 76:6b:46:9b:d3:5b:3f:fe:dc:d6:7f:e7:a3:ae:63: 94:10:52:7c:9f:9a:dd:0d:55:87:e3:d0:29:3e:f0: 4a:cf:0c:46:49:a0:c5:79:8e:2a:87:62:9e:95:c7: 4d:3b:f7:c2:70:04:6c:74:de:38:2b:17:d0:05:6e: 1b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:30:8A:EE:C3:EB:F2:70:BE:3B:F9:35:C6:7D:7A:9B:C4:C6:96:35 X509v3 Authority Key Identifier: keyid:0B:77:F7:BD:23:CB:42:85:8D:0B:BF:F6:F7:E3:AC:73:13:55:31:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBC61/4C6F6856B6C411EFA24AA616C4F9AE02/C3f3vSPLQoWNC7_29-OscxNVMdU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C3f3vSPLQoWNC7_29-OscxNVMdU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBC61/4C6F6856B6C411EFA24AA616C4F9AE02/C3f3vSPLQoWNC7_29-OscxNVMdU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:83:30:11:81:0b:8d:a7:2a:3b:5a:e4:b4:57:b5:0e:b4:92: 84:bd:39:f0:95:a9:53:97:41:7e:67:95:9e:64:db:16:2e:64: 43:6d:86:10:8f:60:9f:eb:da:b4:29:83:8c:0a:15:26:c6:07: 7e:32:97:91:e7:32:46:c8:52:42:e7:0c:f5:a3:7d:87:65:26: 6b:ba:33:04:53:bf:6c:c5:b4:ab:46:bc:78:8d:d7:a8:cd:61: d4:1a:f8:5e:8d:07:b7:19:65:04:82:22:8c:1c:30:27:55:ae: 47:d5:00:62:ce:9e:fb:da:a1:fd:28:27:bc:95:46:c8:05:c8: 2b:b2:50:dc:a6:50:03:8b:69:58:e4:65:cf:31:9d:03:b5:73: 4c:36:7d:53:8e:6c:c1:e9:40:5f:09:76:03:b2:7c:ce:cb:30: 02:b5:8a:12:ff:48:14:bd:93:f7:fe:4a:c0:07:44:cd:92:4f: 5c:dd:35:0f:70:10:67:f2:2d:6f:05:8a:eb:0a:1c:57:76:ae: 9c:6f:b8:e9:93:0c:25:33:e2:6f:a5:4c:1b:0c:b4:80:21:af: ca:bb:ef:12:8e:51:24:29:34:f6:85:ca:be:30:65:d0:a4:36: 6b:09:8a:ed:ed:36:81:39:93:8b:e1:10:5a:15:6e:6b:55:e8: c6:8d:a0:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJDNjExMTAvBgNVBAUTKDBCNzdGN0JEMjNDQjQyODU4RDBCQkZGNkY3RTNBQzcz MTM1NTMxRDUwHhcNMjUxMTA1MDYyNTA0WhcNMjUxMTEyMDYyNTAzWjAYMRYwFAYD VQQDEw02OTBhZWRjMC0wY2Y5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoAfGSUwM6l+sVO9e4vyz8au3uHnU9qoZjEDlfMT7hRg0vfF9mqqGMIELvlKg EhqElQMGJm+yhNErQUMMxKrXqvqK705V0uIPHNjLjgYybQhNJh57BfoMyeE8PQth tCq/4k1JZdGrM4msiT4VzdAtNyibirTYxHQKME/AjmviGGdzmKBsmi/N6KdtlewX 3wTTbu+2gzGSOni7LPMsbca61jfHM8uufZz87kmf64C4eBKKqgpmZ2hvBvOgJ/bq rtuVMTZ2a0ab01s//tzWf+ejrmOUEFJ8n5rdDVWH49ApPvBKzwxGSaDFeY4qh2Ke lcdNO/fCcARsdN44KxfQBW4b6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIQwiu7D 6/Jwvjv5NcZ9epvExpY1MB8GA1UdIwQYMBaAFAt3970jy0KFjQu/9vfjrHMTVTHV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkM2MS80QzZGNjg1NkI2 QzQxMUVGQTI0QUE2MTZDNEY5QUUwMi9DM2YzdlNQTFFvV05DN18yOS1Pc2N4TlZN ZFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MzZjN2U1BMUW9XTkM3XzI5LU9zY3hOVk1kVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkM2MS80QzZGNjg1NkI2QzQxMUVGQTI0QUE2MTZDNEY5QUUwMi9DM2YzdlNQTFFv V05DN18yOS1Pc2N4TlZNZFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4gzARgQuNpyo7WuS0V7UOtJKEvTnwlalTl0F+Z5WeZNsWLmRDbYYQ j2Cf69q0KYOMChUmxgd+MpeR5zJGyFJC5wz1o32HZSZrujMEU79sxbSrRrx4jdeo zWHUGvhejQe3GWUEgiKMHDAnVa5H1QBizp772qH9KCe8lUbIBcgrslDcplADi2lY 5GXPMZ0DtXNMNn1TjmzB6UBfCXYDsnzOyzACtYoS/0gUvZP3/krAB0TNkk9c3TUP cBBn8i1vBYrrChxXdq6cb7jpkwwlM+JvpUwbDLSAIa/Ku+8SjlEkKTT2hcq+MGXQ pDZrCYrt7TaBOZOL4RBaFW5rVejGjaAG -----END CERTIFICATE-----Generated at Wed Nov 5 12:24:42 2025 by rpki-client