$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft File: 31_iG3yVUhWTRHF5TYsHBmPSs04.mft (raw, json) Hash identifier: Mv/77Y/+46P3aJozXq+lgbAzKMS0r70+HXf2cvNCjxQ= Subject key identifier: 15:6C:A3:3B:9D:EC:13:C9:26:06:1D:7D:7F:4E:34:BE:B7:4C:10:23 Authority key identifier: DF:5F:E2:1B:7C:95:52:15:93:44:71:79:4D:8B:07:06:63:D2:B3:4E Certificate issuer: /CN=A91F7537/serialNumber=DF5FE21B7C955215934471794D8B070663D2B34E Certificate serial: BF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft Manifest number: BA Signing time: Mon 03 Nov 2025 06:02:24 +0000 Manifest this update: Mon 03 Nov 2025 06:02:23 +0000 Manifest next update: Mon 10 Nov 2025 06:02:23 +0000 Files and hashes: 1: 31_iG3yVUhWTRHF5TYsHBmPSs04.crl (hash: kYAeI2CBMzdnvTQQc09dLJqu+kUKJvpRZyi8YqzX2L0=) 2: 42F359D22DE211F0A991F83DC4F9AE02.roa (hash: GS7VGsIuP00slQDLOowlxynsnmpTUaLEp1HD+LKtTww=) 3: 42230DF42DE211F0A991F83DC4F9AE02.roa (hash: ak2PMRQUjFtffexIQ55kAPaMfx+wqf8bsH7hFH3Plx4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.crl rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:02:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 191 (0xbf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7537, serialNumber=DF5FE21B7C955215934471794D8B070663D2B34E Validity Not Before: Nov 3 06:02:23 2025 GMT Not After : Nov 10 06:02:23 2025 GMT Subject: CN=69084570-f2ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:25:3c:ca:6d:25:6f:da:82:21:4f:e4:a6:ab: 2b:ba:9b:b2:42:56:c3:91:fd:3f:f5:a2:0f:a6:f5: ef:f9:f9:74:59:10:4f:95:61:c4:84:e2:9a:67:c8: 17:3c:bd:c1:a0:8f:88:6b:04:95:e3:1f:2c:fc:e9: 4e:3a:e4:91:eb:eb:9a:2d:47:46:60:5c:1a:d1:c8: 91:7a:26:8e:c7:6b:11:3f:42:91:61:12:75:84:21: 4d:e8:49:eb:c8:2a:f3:d9:80:b0:d3:ea:8f:07:79: 55:77:ec:7f:81:0c:a0:36:27:44:b9:e0:79:86:2f: d9:75:e4:0b:5a:a2:d8:bc:12:6c:90:c7:a5:11:34: 63:5a:8e:0c:f8:c8:97:23:d9:bc:14:6b:43:50:7e: 47:db:30:f7:04:cc:64:54:54:5b:1e:62:63:b8:33: 9b:84:bb:71:f0:48:f2:a5:90:f4:29:09:ef:8b:94: e1:a0:91:11:54:17:d7:01:0d:28:dd:b6:52:1f:64: 60:8c:72:48:15:32:d4:83:de:82:55:bb:11:f7:94: 8d:f5:d9:9b:5a:ae:5d:22:d6:c3:94:0c:28:74:83: aa:5f:b8:1d:c1:99:9e:db:75:3c:2e:58:08:8f:2b: 24:9f:4b:90:eb:73:10:62:b1:79:6e:1b:80:38:db: 9b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:6C:A3:3B:9D:EC:13:C9:26:06:1D:7D:7F:4E:34:BE:B7:4C:10:23 X509v3 Authority Key Identifier: keyid:DF:5F:E2:1B:7C:95:52:15:93:44:71:79:4D:8B:07:06:63:D2:B3:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:ef:de:b6:69:f5:47:75:7a:24:01:cd:f0:84:2b:25:b2:7f: e8:14:f9:d4:8f:37:3d:31:53:35:06:02:3d:ee:d2:d4:74:bd: a2:23:37:43:ed:ef:2c:46:16:e8:98:54:50:04:d8:3e:66:d2: 11:ee:00:b9:c2:c0:94:2e:24:da:73:ca:39:20:c1:e7:3a:73: 09:0a:d4:1a:5e:63:86:fd:08:ef:cb:28:5f:c4:fd:20:07:84: a8:04:1b:c1:a8:a9:34:33:b3:e4:6a:b3:93:9b:82:6e:23:aa: 6f:3a:04:a8:a8:21:72:50:0d:39:90:db:de:7d:6a:4c:67:58: 21:58:ec:b4:ec:29:81:14:16:39:30:37:91:e0:53:65:c4:01: a3:92:94:63:e3:1d:7b:18:c0:4a:4d:6b:6d:d7:55:45:60:e2: 5c:2d:41:0e:e2:98:53:73:8e:aa:60:2b:95:96:d5:2b:78:7a: a0:98:7b:e5:95:36:f9:0c:bf:09:16:24:24:59:ea:cb:78:da: d9:65:52:ce:e8:cb:05:85:73:4c:82:6c:57:e5:fd:88:75:0d: f2:8a:0f:cb:ec:e1:b7:94:03:c5:a5:86:81:27:b5:95:f1:9c: e4:14:01:29:fd:12:35:c7:2b:03:6f:5c:79:5d:d4:a3:5f:e8: 6e:8e:a2:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjc1MzcxMTAvBgNVBAUTKERGNUZFMjFCN0M5NTUyMTU5MzQ0NzE3OTREOEIwNzA2 NjNEMkIzNEUwHhcNMjUxMTAzMDYwMjIzWhcNMjUxMTEwMDYwMjIzWjAYMRYwFAYD VQQDEw02OTA4NDU3MC1mMmVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwyU8ym0lb9qCIU/kpqsrupuyQlbDkf0/9aIPpvXv+fl0WRBPlWHEhOKaZ8gX PL3BoI+IawSV4x8s/OlOOuSR6+uaLUdGYFwa0ciReiaOx2sRP0KRYRJ1hCFN6Enr yCrz2YCw0+qPB3lVd+x/gQygNidEueB5hi/ZdeQLWqLYvBJskMelETRjWo4M+MiX I9m8FGtDUH5H2zD3BMxkVFRbHmJjuDObhLtx8EjypZD0KQnvi5ThoJERVBfXAQ0o 3bZSH2RgjHJIFTLUg96CVbsR95SN9dmbWq5dItbDlAwodIOqX7gdwZme23U8LlgI jyskn0uQ63MQYrF5bhuAONubfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBVsozud 7BPJJgYdfX9ONL63TBAjMB8GA1UdIwQYMBaAFN9f4ht8lVIVk0RxeU2LBwZj0rNO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzUzNy84MDJBRTY0NkEy NzExMUVGQTM5MkYwNzlDNEY5QUUwMi8zMV9pRzN5VlVoV1RSSEY1VFlzSEJtUFNz MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzMxX2lHM3lWVWhXVFJIRjVUWXNIQm1QU3MwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzUzNy84MDJBRTY0NkEyNzExMUVGQTM5MkYwNzlDNEY5QUUwMi8zMV9pRzN5VlVo V1RSSEY1VFlzSEJtUFNzMDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBq7962afVHdXokAc3whCslsn/oFPnUjzc9MVM1BgI97tLUdL2iIzdD 7e8sRhbomFRQBNg+ZtIR7gC5wsCULiTac8o5IMHnOnMJCtQaXmOG/QjvyyhfxP0g B4SoBBvBqKk0M7PkarOTm4JuI6pvOgSoqCFyUA05kNvefWpMZ1ghWOy07CmBFBY5 MDeR4FNlxAGjkpRj4x17GMBKTWtt11VFYOJcLUEO4phTc46qYCuVltUreHqgmHvl lTb5DL8JFiQkWerLeNrZZVLO6MsFhXNMgmxX5f2IdQ3yig/L7OG3lAPFpYaBJ7WV 8ZzkFAEp/RI1xysDb1x5XdSjX+hujqJa -----END CERTIFICATE-----Generated at Wed Nov 5 04:46:05 2025 by rpki-client