$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.mft File: r3mHQ9q2R4aKtmZzr3oTbC6g6ls.mft (raw, json) Hash identifier: jyfGaB6o4mLpXGjOZaNPEXtQhWcr6J2MM7u4fCaGPpk= Subject key identifier: 02:0E:10:D7:25:43:09:0F:AD:33:D5:73:E0:0C:0A:CA:F5:12:1B:61 Authority key identifier: AF:79:87:43:DA:B6:47:86:8A:B6:66:73:AF:7A:13:6C:2E:A0:EA:5B Certificate issuer: /CN=A91F5972/serialNumber=AF798743DAB647868AB66673AF7A136C2EA0EA5B Certificate serial: 05C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.mft Manifest number: 05B2 Signing time: Tue 04 Nov 2025 23:15:27 +0000 Manifest this update: Tue 04 Nov 2025 23:15:27 +0000 Manifest next update: Tue 11 Nov 2025 23:15:27 +0000 Files and hashes: 1: r3mHQ9q2R4aKtmZzr3oTbC6g6ls.crl (hash: I4WxrxR4hbsb0a0IkU9ks31rqjlYQlY7cj7diXs40yE=) 2: A240A20A9EB711F0914DBF7FC4F9AE02.roa (hash: psrGPY0f9n8CoPgbqVuyb4fxwFwRtYR1pcMoDSLQHS8=) 3: 02EA5FFC9EBC11F09AF0472DC4F9AE02.roa (hash: pWB5XmkyQkIJX6VT83Icq4ouDP45IlQtI/F1JSbGUwk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.crl rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:15:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1480 (0x5c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5972, serialNumber=AF798743DAB647868AB66673AF7A136C2EA0EA5B Validity Not Before: Nov 4 23:15:27 2025 GMT Not After : Nov 11 23:15:27 2025 GMT Subject: CN=690a890f-63ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:61:99:e7:c2:91:ce:42:3a:f4:cd:9d:15:e5: 3e:60:80:a0:1e:b9:82:41:0b:82:cc:f5:81:8f:e3: 3f:10:26:41:fc:9b:cf:7a:dc:1b:8c:fe:f1:08:ba: 58:60:68:f3:4c:0b:13:1e:b4:f7:ad:47:5f:b0:64: 0b:6d:02:ac:fd:cc:77:6e:cf:af:b1:fd:26:01:b3: ae:e1:a2:39:03:52:31:82:e7:e4:b0:87:db:eb:37: f4:ad:85:de:60:e2:94:61:60:13:8e:cd:0b:a2:b6: e1:91:06:86:14:38:d0:3c:dc:bd:1e:fb:7a:b0:d3: 28:d9:d4:73:05:1a:7f:ce:fe:e5:eb:24:a2:49:82: 0a:10:fd:eb:6f:1c:07:8f:b5:53:36:8e:36:20:8f: 21:7b:21:cd:0f:0d:9e:9f:bb:03:f6:9b:0f:9b:2f: b2:a0:a9:f9:59:8f:cf:8b:be:8d:7b:8d:a2:d2:43: 06:d6:21:8b:5f:2e:4d:a4:4e:42:44:df:ea:ef:5b: 52:c4:1d:e7:93:bc:47:f2:50:73:5b:30:cd:b5:95: c2:2f:1a:27:ee:74:0d:67:f9:81:b3:cb:cb:59:ea: c4:35:30:3a:3c:dd:5d:06:03:08:1d:a1:2b:d5:67: b8:7b:9f:b8:ad:23:54:e3:0f:5c:8b:39:7f:c3:72: 6d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:0E:10:D7:25:43:09:0F:AD:33:D5:73:E0:0C:0A:CA:F5:12:1B:61 X509v3 Authority Key Identifier: keyid:AF:79:87:43:DA:B6:47:86:8A:B6:66:73:AF:7A:13:6C:2E:A0:EA:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:a4:93:35:d3:22:1c:0e:32:ab:6d:48:63:37:cd:a5:97:1e: 94:10:19:e8:b7:e8:81:e7:46:4e:4f:8d:c5:c1:f0:00:e7:b3: 10:af:67:b8:17:2a:02:56:f0:b0:bf:85:cc:a6:24:a5:0e:e7: 17:23:9a:78:a7:33:16:9e:2a:8d:4e:4d:15:e5:8a:8e:a2:e5: 26:90:0e:b0:21:07:b1:c6:65:ed:ef:0d:f6:cb:b2:2a:56:a1: 88:0d:cf:59:59:6b:98:46:48:cf:f5:e1:4c:cc:b0:8d:2f:9c: 44:b6:4e:b5:4b:f2:5c:41:29:f8:a9:d3:bc:66:21:dc:cd:77: 50:14:d4:f4:8a:01:ea:c8:cc:0f:6d:42:0b:7e:7d:07:fe:ad: 90:81:8b:27:a2:50:92:f8:4e:d2:be:a1:05:30:bc:f8:03:f8: 39:41:a0:a2:ed:d4:d2:ba:37:6e:32:7f:99:84:d1:79:48:93: cf:7b:5e:13:42:31:b2:c6:a6:b7:8b:1e:83:5e:e2:72:29:84: ca:d0:4d:a8:6c:95:cd:05:6b:76:cb:62:bf:30:a8:39:f3:30: 51:6b:f1:32:8a:7d:a7:2f:64:85:a4:57:0b:f7:67:82:7e:87: 45:be:94:4f:61:d5:40:0f:eb:98:f7:c7:9f:a2:5b:02:41:28: 09:32:22:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBcgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU5NzIxMTAvBgNVBAUTKEFGNzk4NzQzREFCNjQ3ODY4QUI2NjY3M0FGN0ExMzZD MkVBMEVBNUIwHhcNMjUxMTA0MjMxNTI3WhcNMjUxMTExMjMxNTI3WjAYMRYwFAYD VQQDEw02OTBhODkwZi02M2VhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuWGZ58KRzkI69M2dFeU+YICgHrmCQQuCzPWBj+M/ECZB/JvPetwbjP7xCLpY YGjzTAsTHrT3rUdfsGQLbQKs/cx3bs+vsf0mAbOu4aI5A1IxgufksIfb6zf0rYXe YOKUYWATjs0LorbhkQaGFDjQPNy9Hvt6sNMo2dRzBRp/zv7l6ySiSYIKEP3rbxwH j7VTNo42II8heyHNDw2en7sD9psPmy+yoKn5WY/Pi76Ne42i0kMG1iGLXy5NpE5C RN/q71tSxB3nk7xH8lBzWzDNtZXCLxon7nQNZ/mBs8vLWerENTA6PN1dBgMIHaEr 1We4e5+4rSNU4w9cizl/w3JtTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAIOENcl QwkPrTPVc+AMCsr1EhthMB8GA1UdIwQYMBaAFK95h0PatkeGirZmc696E2wuoOpb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTk3Mi85QkY2QzQ0RUYw MzExMUVCOTVGNzY3NDhDNEY5QUUwMi9yM21IUTlxMlI0YUt0bVp6cjNvVGJDNmc2 bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IzbUhROXEyUjRhS3RtWnpyM29UYkM2ZzZscy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTk3Mi85QkY2QzQ0RUYwMzExMUVCOTVGNzY3NDhDNEY5QUUwMi9yM21IUTlxMlI0 YUt0bVp6cjNvVGJDNmc2bHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBupJM10yIcDjKrbUhjN82llx6UEBnot+iB50ZOT43FwfAA57MQr2e4 FyoCVvCwv4XMpiSlDucXI5p4pzMWniqNTk0V5YqOouUmkA6wIQexxmXt7w32y7Iq VqGIDc9ZWWuYRkjP9eFMzLCNL5xEtk61S/JcQSn4qdO8ZiHczXdQFNT0igHqyMwP bUILfn0H/q2QgYsnolCS+E7SvqEFMLz4A/g5QaCi7dTSujduMn+ZhNF5SJPPe14T QjGyxqa3ix6DXuJyKYTK0E2obJXNBWt2y2K/MKg58zBRa/Eyin2nL2SFpFcL92eC fodFvpRPYdVAD+uY98efolsCQSgJMiJ2 -----END CERTIFICATE-----Generated at Wed Nov 5 16:29:58 2025 by rpki-client