$ rpki-client -vvf rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft File: 3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft (raw, json) Hash identifier: nTEEFrajnn+r/kVFuJxp5pim6k7G3H20daV6tFxHjII= Subject key identifier: D4:80:CF:4C:B4:BD:12:64:9B:BD:1B:7D:76:09:97:28:C4:A0:48:94 Authority key identifier: DE:78:F7:BD:59:24:A8:06:74:90:BF:BD:32:E4:7E:7F:FA:B6:77:20 Certificate issuer: /CN=A9113C02/serialNumber=DE78F7BD5924A8067490BFBD32E47E7FFAB67720 Certificate serial: 089B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft Manifest number: 261C Signing time: Sun 02 Nov 2025 16:19:35 +0000 Manifest this update: Sun 02 Nov 2025 16:19:35 +0000 Manifest next update: Sun 09 Nov 2025 16:19:35 +0000 Files and hashes: 1: 3nj3vVkkqAZ0kL-9MuR-f_q2dyA.crl (hash: WbiOzccGJhUqQEJjcqIhv8DJJ0j5DgZoblvHRZZgpvk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.crl rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 16:19:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2203 (0x89b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113C02, serialNumber=DE78F7BD5924A8067490BFBD32E47E7FFAB67720 Validity Not Before: Nov 2 16:19:35 2025 GMT Not After : Nov 9 16:19:35 2025 GMT Subject: CN=69078497-766a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:de:6d:75:5d:6d:eb:56:37:b3:cf:38:8f:77: f6:6c:a1:92:09:c8:29:49:df:d3:e3:af:52:4a:a3: b0:48:e5:2e:81:26:d2:ed:79:c4:c7:c6:6a:a0:8b: 46:97:98:7a:39:2c:96:ae:88:d9:e9:d7:e5:d9:b7: 67:eb:95:a6:07:3d:51:f2:42:6e:22:07:48:03:4d: a9:c4:a7:96:35:20:fe:47:cc:5c:7f:f5:39:3c:b5: 6d:74:87:77:2e:07:20:02:1e:17:75:29:1f:68:d6: a7:5b:52:ec:99:ea:c8:3e:57:4a:03:35:49:35:ec: a3:9c:e6:54:52:8f:67:4b:bd:6a:f2:67:dc:9f:1e: d1:19:37:67:3c:73:87:45:e4:ff:ed:dc:bc:3a:a3: 36:0c:d8:fe:e7:be:58:74:13:42:7c:1c:f2:d2:35: 7e:90:1c:44:bc:6d:3f:e3:03:93:b8:ea:06:92:fb: 95:f3:62:6c:8a:25:7a:cc:4f:c4:c2:51:60:be:2a: 19:7c:e9:9a:f4:c4:77:95:1a:3b:2a:97:4c:00:c0: 40:69:96:57:83:58:7b:45:97:2d:08:2f:6d:d0:8a: 1a:b4:af:c7:46:69:89:05:56:67:5b:60:47:24:04: 27:5b:45:df:a1:ae:13:85:e2:39:8d:97:f8:23:70: 6e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:80:CF:4C:B4:BD:12:64:9B:BD:1B:7D:76:09:97:28:C4:A0:48:94 X509v3 Authority Key Identifier: keyid:DE:78:F7:BD:59:24:A8:06:74:90:BF:BD:32:E4:7E:7F:FA:B6:77:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:88:28:63:3a:ed:ee:0f:aa:6e:c8:c2:07:1d:ea:95:12:9d: 49:7f:28:69:05:d4:a3:d5:c2:5f:28:9f:c6:d7:01:1d:57:f6: bb:e9:e6:f8:7c:63:95:eb:cc:24:31:7e:1a:c0:9e:69:26:ca: 21:21:e4:db:ee:6e:7b:f2:69:0c:22:80:26:e2:75:27:97:84: 10:97:20:2e:c3:0a:ef:93:26:98:80:da:e5:b3:00:fa:83:58: ab:80:75:ac:de:65:6f:24:59:62:10:14:3f:fb:2f:7d:4a:6b: 94:80:84:24:b2:83:87:9f:01:49:30:2a:46:63:63:18:83:01: c4:38:b1:3a:5b:f9:4e:60:b6:0c:18:48:6d:40:12:1c:c5:92: 8d:9d:c7:7a:3e:1b:c6:ff:ca:58:f8:c9:11:00:5a:39:79:0d: ce:0c:75:89:47:2f:dd:0e:84:8d:ef:c1:fe:00:1e:cf:5c:6e: ca:74:2f:38:cc:88:e0:90:5f:cc:6c:14:61:97:97:a8:c8:5c: cd:33:a0:9f:67:ca:94:25:11:4b:25:4d:eb:0a:6d:f6:ea:1c: cb:a3:58:75:ec:30:95:ae:26:b6:d2:cb:a5:ac:f8:e0:e2:b0: bc:58:a8:0d:3f:91:05:d8:b1:b9:86:70:69:30:0e:b1:d2:6a: d8:d9:38:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTNDMDIxMTAvBgNVBAUTKERFNzhGN0JENTkyNEE4MDY3NDkwQkZCRDMyRTQ3RTdG RkFCNjc3MjAwHhcNMjUxMTAyMTYxOTM1WhcNMjUxMTA5MTYxOTM1WjAYMRYwFAYD VQQDEw02OTA3ODQ5Ny03NjZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnd5tdV1t61Y3s884j3f2bKGSCcgpSd/T469SSqOwSOUugSbS7XnEx8ZqoItG l5h6OSyWrojZ6dfl2bdn65WmBz1R8kJuIgdIA02pxKeWNSD+R8xcf/U5PLVtdId3 LgcgAh4XdSkfaNanW1LsmerIPldKAzVJNeyjnOZUUo9nS71q8mfcnx7RGTdnPHOH ReT/7dy8OqM2DNj+575YdBNCfBzy0jV+kBxEvG0/4wOTuOoGkvuV82JsiiV6zE/E wlFgvioZfOma9MR3lRo7KpdMAMBAaZZXg1h7RZctCC9t0IoatK/HRmmJBVZnW2BH JAQnW0Xfoa4TheI5jZf4I3BueQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNSAz0y0 vRJkm70bfXYJlyjEoEiUMB8GA1UdIwQYMBaAFN54971ZJKgGdJC/vTLkfn/6tncg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0MwMi80QzQwNkZCNjQw NTYxMUU3QUYwNDFBMzVDNEY5QUUwMi8zbmozdlZra3FBWjBrTC05TXVSLWZfcTJk eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNuajN2VmtrcUFaMGtMLTlNdVItZl9xMmR5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx M0MwMi80QzQwNkZCNjQwNTYxMUU3QUYwNDFBMzVDNEY5QUUwMi8zbmozdlZra3FB WjBrTC05TXVSLWZfcTJkeUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwiChjOu3uD6puyMIHHeqVEp1JfyhpBdSj1cJfKJ/G1wEdV/a76eb4 fGOV68wkMX4awJ5pJsohIeTb7m578mkMIoAm4nUnl4QQlyAuwwrvkyaYgNrlswD6 g1irgHWs3mVvJFliEBQ/+y99SmuUgIQksoOHnwFJMCpGY2MYgwHEOLE6W/lOYLYM GEhtQBIcxZKNncd6PhvG/8pY+MkRAFo5eQ3ODHWJRy/dDoSN78H+AB7PXG7KdC84 zIjgkF/MbBRhl5eoyFzNM6CfZ8qUJRFLJU3rCm326hzLo1h17DCVria20sulrPjg 4rC8WKgNP5EF2LG5hnBpMA6x0mrY2Tg1 -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:12 2025 by rpki-client