$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.mft File: t3KRfLXAdn3YuelMQMGnqqZZ3yo.mft (raw, json) Hash identifier: JhYsnowdm4FhMSN2q/jEelVs0PDh7zCGiPDCSJXY5rA= Subject key identifier: ED:D5:B2:A0:AC:D8:4F:E2:FD:ED:02:F8:49:79:E5:7B:0F:B7:9B:DF Authority key identifier: B7:72:91:7C:B5:C0:76:7D:D8:B9:E9:4C:40:C1:A7:AA:A6:59:DF:2A Certificate issuer: /CN=A91EF72D/serialNumber=B772917CB5C0767DD8B9E94C40C1A7AAA659DF2A Certificate serial: 0452 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t3KRfLXAdn3YuelMQMGnqqZZ3yo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.mft Manifest number: 044F Signing time: Wed 05 Nov 2025 00:17:36 +0000 Manifest this update: Wed 05 Nov 2025 00:17:35 +0000 Manifest next update: Wed 12 Nov 2025 00:17:35 +0000 Files and hashes: 1: t3KRfLXAdn3YuelMQMGnqqZZ3yo.crl (hash: 7B07d1IWCFU25X27QgZieVySmWvf39dlL6nRnLVt1G4=) 2: 46F09F74546A11EF9B82D11DC4F9AE02.roa (hash: QPIlgvNpdxz2M9+klBq+UYhVT3TOPqyM+K3bldlrxAE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.crl rsync://rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t3KRfLXAdn3YuelMQMGnqqZZ3yo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:17:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1106 (0x452) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF72D, serialNumber=B772917CB5C0767DD8B9E94C40C1A7AAA659DF2A Validity Not Before: Nov 5 00:17:35 2025 GMT Not After : Nov 12 00:17:35 2025 GMT Subject: CN=690a979f-66de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a7:17:09:16:5f:e6:6a:37:20:64:e7:4d:19: 7a:14:e8:4a:fb:15:7c:78:13:de:10:76:6c:5d:e3: d1:16:74:c8:fe:45:b1:04:f5:db:f5:77:c5:41:1c: 85:62:31:6e:ea:65:3d:97:2a:58:ab:b8:c5:ac:39: c3:32:b5:c3:d0:4e:82:d3:7a:fd:d9:6b:c5:2c:40: 3b:c6:c9:c5:85:97:95:e9:60:3f:d7:76:72:12:78: a2:1b:7b:b3:c6:54:a0:98:09:13:b8:3e:96:55:eb: e8:4c:4c:4c:5a:da:34:c6:e1:d9:c3:b4:4b:e9:97: 8d:07:9f:44:46:c7:da:97:22:44:da:b8:73:4e:b6: 9a:b6:67:da:9e:a5:e4:de:46:67:2a:17:81:03:cc: a4:79:17:d6:bb:51:fe:91:13:da:ac:67:72:da:ad: 6c:72:5d:76:70:16:13:48:0d:c4:35:ce:90:2c:03: da:83:44:38:21:77:fe:35:d1:78:62:a9:f3:ca:24: c6:37:0a:94:99:4f:be:cb:df:b3:53:e2:22:e0:0e: 53:7f:f0:46:98:7d:9a:a5:63:a8:50:e3:7a:6a:53: fe:94:00:08:2b:8e:81:f0:8a:73:c2:8c:c8:58:43: 48:83:f1:42:80:e8:92:de:24:5d:3a:d0:33:0b:48: a3:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:D5:B2:A0:AC:D8:4F:E2:FD:ED:02:F8:49:79:E5:7B:0F:B7:9B:DF X509v3 Authority Key Identifier: keyid:B7:72:91:7C:B5:C0:76:7D:D8:B9:E9:4C:40:C1:A7:AA:A6:59:DF:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t3KRfLXAdn3YuelMQMGnqqZZ3yo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:78:7d:56:5b:0c:47:dc:11:1a:be:42:42:6f:e7:e1:ce:d3: 24:7c:96:9c:7c:63:14:78:8b:9e:f8:01:88:96:15:2c:2b:42: 2e:b1:9d:0c:a0:56:2f:b1:81:e8:34:9b:97:dd:70:16:92:8a: 7d:22:61:f8:b5:bd:ec:89:97:15:0f:3a:a4:7f:0b:62:26:1a: 59:0e:20:05:8b:e5:70:7b:fe:19:23:ce:04:73:b2:1d:41:9f: a3:14:09:2c:42:c3:f1:ff:30:3e:3e:cd:df:9c:88:75:36:7a: ca:e2:b6:c9:5f:c0:2a:5d:93:10:69:13:cb:8a:da:e8:c1:e0: e9:ac:b3:d6:5e:45:20:8d:1d:d9:62:f5:58:bf:f9:61:54:43: 3d:5b:ed:3f:44:ae:b4:46:bb:c0:06:47:54:d8:7b:88:8b:7f: 61:9e:75:15:19:96:f9:b3:b3:42:43:bf:12:84:3e:76:37:0b: 3c:1f:a2:3c:66:4c:cb:32:ad:34:8f:f3:a8:52:10:3e:53:3d: f5:1e:84:bb:3b:d8:ab:64:f5:ec:88:58:51:8b:49:6d:f1:31: b2:ba:c8:c3:06:03:20:01:8a:05:ae:ef:35:0b:e5:40:8b:ea: dc:81:0e:6f:99:f8:e7:2f:bf:83:72:e9:2f:c1:c3:da:01:3c: 04:74:06:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY3MkQxMTAvBgNVBAUTKEI3NzI5MTdDQjVDMDc2N0REOEI5RTk0QzQwQzFBN0FB QTY1OURGMkEwHhcNMjUxMTA1MDAxNzM1WhcNMjUxMTEyMDAxNzM1WjAYMRYwFAYD VQQDEw02OTBhOTc5Zi02NmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyacXCRZf5mo3IGTnTRl6FOhK+xV8eBPeEHZsXePRFnTI/kWxBPXb9XfFQRyF YjFu6mU9lypYq7jFrDnDMrXD0E6C03r92WvFLEA7xsnFhZeV6WA/13ZyEniiG3uz xlSgmAkTuD6WVevoTExMWto0xuHZw7RL6ZeNB59ERsfalyJE2rhzTraatmfanqXk 3kZnKheBA8ykeRfWu1H+kRParGdy2q1scl12cBYTSA3ENc6QLAPag0Q4IXf+NdF4 YqnzyiTGNwqUmU++y9+zU+Ii4A5Tf/BGmH2apWOoUON6alP+lAAIK46B8IpzwozI WENIg/FCgOiS3iRdOtAzC0ijqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO3VsqCs 2E/i/e0C+El55XsPt5vfMB8GA1UdIwQYMBaAFLdykXy1wHZ92LnpTEDBp6qmWd8q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjcyRC84NDg1RjI0QTcz Q0YxMUVDQkMzNTU0ODVDNEY5QUUwMi90M0tSZkxYQWRuM1l1ZWxNUU1HbnFxWloz eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3QzS1JmTFhBZG4zWXVlbE1RTUducXFaWjN5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjcyRC84NDg1RjI0QTczQ0YxMUVDQkMzNTU0ODVDNEY5QUUwMi90M0tSZkxYQWRu M1l1ZWxNUU1HbnFxWlozeW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/eH1WWwxH3BEavkJCb+fhztMkfJacfGMUeIue+AGIlhUsK0IusZ0M oFYvsYHoNJuX3XAWkop9ImH4tb3siZcVDzqkfwtiJhpZDiAFi+Vwe/4ZI84Ec7Id QZ+jFAksQsPx/zA+Ps3fnIh1NnrK4rbJX8AqXZMQaRPLitroweDprLPWXkUgjR3Z YvVYv/lhVEM9W+0/RK60RrvABkdU2HuIi39hnnUVGZb5s7NCQ78ShD52Nws8H6I8 ZkzLMq00j/OoUhA+Uz31HoS7O9irZPXsiFhRi0lt8TGyusjDBgMgAYoFru81C+VA i+rcgQ5vmfjnL7+DcukvwcPaATwEdAaW -----END CERTIFICATE-----Generated at Wed Nov 5 05:18:52 2025 by rpki-client