$ rpki-client -vvf rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.mft File: u3-5V71tGEoIkjFpTPg4nbaI_lM.mft (raw, json) Hash identifier: JikoAG1hzmiZVrPdymF5trxZWPjKCWuVQVpv1xhInPM= Subject key identifier: 8E:A8:3B:D2:13:FB:C5:A2:78:43:DE:0E:F4:87:1B:5C:9A:1A:03:A7 Authority key identifier: BB:7F:B9:57:BD:6D:18:4A:08:92:31:69:4C:F8:38:9D:B6:88:FE:53 Certificate issuer: /CN=A91F39A9/serialNumber=BB7FB957BD6D184A089231694CF8389DB688FE53 Certificate serial: 04A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3-5V71tGEoIkjFpTPg4nbaI_lM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.mft Manifest number: 04A1 Signing time: Sun 02 Nov 2025 23:57:16 +0000 Manifest this update: Sun 02 Nov 2025 23:57:15 +0000 Manifest next update: Sun 09 Nov 2025 23:57:15 +0000 Files and hashes: 1: u3-5V71tGEoIkjFpTPg4nbaI_lM.crl (hash: XZRjWf6lJHK5LmgA53Q6C6babRv00WwiJ4Rq0mPXAM8=) 2: 12702794577711ECB7FD0C6FC4F9AE02.roa (hash: 7OgpQvkBU6+tUiHR/xeuBjYzt4Evz4MreUzB4Ql4bWc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.crl rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3-5V71tGEoIkjFpTPg4nbaI_lM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:57:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1191 (0x4a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F39A9, serialNumber=BB7FB957BD6D184A089231694CF8389DB688FE53 Validity Not Before: Nov 2 23:57:15 2025 GMT Not After : Nov 9 23:57:15 2025 GMT Subject: CN=6907efdc-465f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:ab:08:3b:27:cb:15:c2:ef:b7:a4:0b:86:c1: c5:8d:95:b3:50:91:18:bc:93:07:38:43:f7:f6:58: df:3b:07:70:a2:49:37:4c:f0:33:59:b3:8f:54:a7: 06:9e:81:ef:b5:bb:dc:ce:68:2c:02:a8:37:0f:3c: 41:be:14:48:37:c6:4f:2a:34:37:f6:7f:2b:9d:04: 6e:54:4e:c3:17:10:f2:da:17:21:ad:ae:b1:6b:09: fe:cf:4f:e1:5c:29:37:63:0d:a1:12:c8:d2:a2:9a: c0:56:f0:49:6a:8f:21:8c:28:d1:ae:86:63:71:c0: ed:b5:db:2c:5b:49:cf:0e:d2:b8:6d:3e:b0:fe:62: 22:48:c2:d8:cf:70:93:6f:14:20:d6:ca:9f:63:f0: 42:80:a7:25:41:72:b0:14:d4:06:05:99:35:7b:c3: c5:3d:a6:9a:47:eb:33:a8:6c:40:de:1c:e9:5c:50: 4c:a4:2f:56:52:18:9d:78:01:ab:cf:8f:49:f1:92: 38:cb:26:ad:ca:4c:1a:d6:0b:fc:e4:47:0e:f1:99: 42:af:cf:e0:09:41:29:c4:3f:14:41:c7:8e:85:f2: 13:ba:9c:b8:62:d2:12:10:cb:58:fc:4d:4c:47:b6: 9d:40:19:ae:1d:0c:32:15:9b:24:d1:46:4f:2f:9f: 34:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:A8:3B:D2:13:FB:C5:A2:78:43:DE:0E:F4:87:1B:5C:9A:1A:03:A7 X509v3 Authority Key Identifier: keyid:BB:7F:B9:57:BD:6D:18:4A:08:92:31:69:4C:F8:38:9D:B6:88:FE:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3-5V71tGEoIkjFpTPg4nbaI_lM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:33:49:4e:8e:98:a5:91:5e:f5:fa:82:eb:79:89:f1:4f:0e: 48:aa:7b:70:11:fc:1a:6b:73:ba:3d:b8:39:cc:0c:6d:19:b5: 6c:ec:f2:85:10:ab:96:47:ff:99:7c:c6:31:13:7c:6e:0c:8a: c7:ff:6c:1a:50:07:88:7f:61:1e:df:a2:96:bc:3f:b4:7e:11: 32:cf:e6:b0:9d:c7:bd:9c:71:66:7f:2d:ae:20:d8:0e:08:fa: d3:82:a0:88:8f:16:19:03:1e:31:9f:1d:d9:4e:cc:e4:29:52: c9:9d:5c:8a:b1:a5:8c:57:bf:d5:6a:4c:41:d2:bf:4e:5c:51: 4e:03:3b:78:a4:ad:b7:0a:e5:57:a6:44:ca:7b:21:d3:d9:1e: b1:09:c0:3f:5b:1d:5b:ff:ee:2e:ba:d7:99:e9:4f:0b:36:f8: 92:3a:a6:26:b8:8b:47:f5:6e:73:2c:26:7c:fe:a4:c0:76:d5: 91:8f:5a:98:69:b7:ed:d8:17:a8:86:13:f0:d9:32:d3:ca:ea: 5c:50:00:9d:f8:f3:66:4f:e0:f8:fa:b6:4f:60:81:38:20:dd: d8:ca:1a:2a:12:1d:92:6e:5d:01:37:90:a6:e3:35:3b:b2:e3: fa:e0:cd:d7:0c:e9:13:75:5b:67:93:0e:0a:4e:18:cc:0d:a8: 2e:28:67:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM5QTkxMTAvBgNVBAUTKEJCN0ZCOTU3QkQ2RDE4NEEwODkyMzE2OTRDRjgzODlE QjY4OEZFNTMwHhcNMjUxMTAyMjM1NzE1WhcNMjUxMTA5MjM1NzE1WjAYMRYwFAYD VQQDEw02OTA3ZWZkYy00NjVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA76sIOyfLFcLvt6QLhsHFjZWzUJEYvJMHOEP39ljfOwdwokk3TPAzWbOPVKcG noHvtbvczmgsAqg3DzxBvhRIN8ZPKjQ39n8rnQRuVE7DFxDy2hchra6xawn+z0/h XCk3Yw2hEsjSoprAVvBJao8hjCjRroZjccDttdssW0nPDtK4bT6w/mIiSMLYz3CT bxQg1sqfY/BCgKclQXKwFNQGBZk1e8PFPaaaR+szqGxA3hzpXFBMpC9WUhideAGr z49J8ZI4yyatykwa1gv85EcO8ZlCr8/gCUEpxD8UQceOhfITupy4YtISEMtY/E1M R7adQBmuHQwyFZsk0UZPL580WQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI6oO9IT +8WieEPeDvSHG1yaGgOnMB8GA1UdIwQYMBaAFLt/uVe9bRhKCJIxaUz4OJ22iP5T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzlBOS81MjU0ODZCODU2 NjIxMUVDQjhFQzczMzFDNEY5QUUwMi91My01VjcxdEdFb0lrakZwVFBnNG5iYUlf bE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UzLTVWNzF0R0VvSWtqRnBUUGc0bmJhSV9sTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzlBOS81MjU0ODZCODU2NjIxMUVDQjhFQzczMzFDNEY5QUUwMi91My01VjcxdEdF b0lrakZwVFBnNG5iYUlfbE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIM0lOjpilkV71+oLreYnxTw5IqntwEfwaa3O6Pbg5zAxtGbVs7PKF EKuWR/+ZfMYxE3xuDIrH/2waUAeIf2Ee36KWvD+0fhEyz+awnce9nHFmfy2uINgO CPrTgqCIjxYZAx4xnx3ZTszkKVLJnVyKsaWMV7/VakxB0r9OXFFOAzt4pK23CuVX pkTKeyHT2R6xCcA/Wx1b/+4uuteZ6U8LNviSOqYmuItH9W5zLCZ8/qTAdtWRj1qY abft2BeohhPw2TLTyupcUACd+PNmT+D4+rZPYIE4IN3YyhoqEh2Sbl0BN5Cm4zU7 suP64M3XDOkTdVtnkw4KThjMDaguKGeY -----END CERTIFICATE-----Generated at Tue Nov 4 16:04:41 2025 by rpki-client