$ rpki-client -vvf rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.mft File: 3JAYFdyRlzyvoZqLV2-GjphBPjk.mft (raw, json) Hash identifier: N+Asu/9aEykZNIqYTgWz5Xuq41hrVVNjv6AqRFe8+rc= Subject key identifier: 46:9D:A5:36:72:36:B2:01:39:B4:A7:EA:F2:49:7C:F6:D0:CF:E4:1D Authority key identifier: DC:90:18:15:DC:91:97:3C:AF:A1:9A:8B:57:6F:86:8E:98:41:3E:39 Certificate issuer: /CN=A91168B5/serialNumber=DC901815DC91973CAFA19A8B576F868E98413E39 Certificate serial: 1C22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3JAYFdyRlzyvoZqLV2-GjphBPjk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.mft Manifest number: 1C21 Signing time: Tue 04 Nov 2025 16:18:04 +0000 Manifest this update: Tue 04 Nov 2025 16:18:03 +0000 Manifest next update: Tue 11 Nov 2025 16:18:03 +0000 Files and hashes: 1: 3JAYFdyRlzyvoZqLV2-GjphBPjk.crl (hash: VfzAfxE9d97MU2wegKfp0V9hgKgxFtQql/BWGaCP7Bg=) 2: 947F9724B93411F0909C206FC4F9AE02.roa (hash: alPFbBRcOswykY6CDpgLiaSVoTM2OjUAdTBuklnb8AI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.crl rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3JAYFdyRlzyvoZqLV2-GjphBPjk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:18:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7202 (0x1c22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91168B5, serialNumber=DC901815DC91973CAFA19A8B576F868E98413E39 Validity Not Before: Nov 4 16:18:03 2025 GMT Not After : Nov 11 16:18:03 2025 GMT Subject: CN=690a273b-7046 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:11:7a:52:62:f0:70:92:13:e6:0c:bf:c6:9b: b8:96:c1:91:5d:7c:2b:ce:ea:b4:ac:28:3f:24:6d: c8:1a:56:63:f1:3c:60:05:2a:c1:4a:5d:e2:c2:d6: 5a:fb:ee:96:5f:f8:c1:e1:da:95:03:d4:e0:d5:ac: 53:b9:ea:3f:fc:92:27:c9:3d:94:a6:3c:fd:78:20: f0:7f:1a:e9:86:b7:8a:8c:f7:36:41:26:5a:79:90: 43:d1:7f:4a:23:22:f9:4f:51:ee:b1:3d:91:db:dd: 72:2a:d6:d3:3b:af:14:e0:cd:60:fd:86:c1:87:fd: 5b:df:e5:0b:29:7f:51:3d:d8:c7:b1:53:df:61:a0: 89:62:3f:65:85:a0:af:2f:e6:66:35:3a:ab:3e:d4: c3:b0:7a:7f:b1:a8:0e:c0:c6:84:69:13:ad:3e:23: f2:35:6b:98:97:9f:08:a5:bd:de:dc:ac:55:52:2d: ca:bd:2f:fd:4e:77:c7:25:0a:ee:01:11:0d:0d:af: 39:06:d8:71:5a:a4:28:6f:04:19:12:6e:16:70:06: 99:db:34:81:42:df:10:23:76:ca:9e:51:07:d2:89: da:50:c0:c2:5f:01:80:d5:d7:a4:a0:13:24:5e:3d: 73:d1:11:d9:e0:62:7a:55:22:ce:d3:42:f0:15:89: fc:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:9D:A5:36:72:36:B2:01:39:B4:A7:EA:F2:49:7C:F6:D0:CF:E4:1D X509v3 Authority Key Identifier: keyid:DC:90:18:15:DC:91:97:3C:AF:A1:9A:8B:57:6F:86:8E:98:41:3E:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3JAYFdyRlzyvoZqLV2-GjphBPjk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:e1:3a:b9:23:66:1d:4c:b4:f9:4e:8c:d9:0d:2b:f9:d2:32: d0:af:3f:8d:e4:86:f8:46:c0:0c:11:0f:97:70:91:7a:ae:12: 52:db:e1:c4:e1:46:8a:ea:0b:d5:1f:29:50:e8:e8:dd:64:6b: 46:6a:42:c0:4f:1b:63:b8:da:df:28:68:07:5d:12:d7:78:7b: a1:e8:64:2f:56:c1:8a:70:01:24:3e:48:65:82:81:5e:26:5c: 66:38:53:9c:35:a5:1b:95:9a:7e:d6:5b:96:20:08:8c:32:9d: f6:fd:e0:85:71:42:f5:48:31:0e:94:fe:b2:60:a4:a5:57:e0: 78:3e:b7:28:4d:3f:dd:21:90:b1:52:c0:70:36:73:21:28:99: 49:5f:35:73:a0:89:d0:b3:07:21:2e:9f:67:ba:35:c4:33:90: d9:e0:d6:9a:42:e0:2d:38:73:fa:d6:1c:56:d2:f6:8f:7d:78: d0:1d:f6:56:5c:01:85:37:6e:c8:34:c0:a0:49:b4:d2:f5:5d: 45:b2:9d:27:59:5b:5d:8b:dc:d3:80:70:94:d5:64:ab:82:dc: 1e:93:a5:79:ae:39:29:03:6f:d6:7f:ea:06:df:94:bf:09:15: c1:0d:2f:df:cc:54:96:ee:1e:ad:f9:ec:45:6b:42:bb:6d:8e: 57:dd:a5:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHCIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY4QjUxMTAvBgNVBAUTKERDOTAxODE1REM5MTk3M0NBRkExOUE4QjU3NkY4NjhF OTg0MTNFMzkwHhcNMjUxMTA0MTYxODAzWhcNMjUxMTExMTYxODAzWjAYMRYwFAYD VQQDEw02OTBhMjczYi03MDQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyRF6UmLwcJIT5gy/xpu4lsGRXXwrzuq0rCg/JG3IGlZj8TxgBSrBSl3iwtZa ++6WX/jB4dqVA9Tg1axTueo//JInyT2Upjz9eCDwfxrphreKjPc2QSZaeZBD0X9K IyL5T1HusT2R291yKtbTO68U4M1g/YbBh/1b3+ULKX9RPdjHsVPfYaCJYj9lhaCv L+ZmNTqrPtTDsHp/sagOwMaEaROtPiPyNWuYl58Ipb3e3KxVUi3KvS/9TnfHJQru ARENDa85BthxWqQobwQZEm4WcAaZ2zSBQt8QI3bKnlEH0onaUMDCXwGA1dekoBMk Xj1z0RHZ4GJ6VSLO00LwFYn8DQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEadpTZy NrIBObSn6vJJfPbQz+QdMB8GA1UdIwQYMBaAFNyQGBXckZc8r6Gai1dvho6YQT45 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjhCNS8zMkM2NTY4Q0Y2 RTAxMUU2OTJBMjBCODdDNEY5QUUwMi8zSkFZRmR5Umx6eXZvWnFMVjItR2pwaEJQ amsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNKQVlGZHlSbHp5dm9acUxWMi1HanBoQlBqay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjhCNS8zMkM2NTY4Q0Y2RTAxMUU2OTJBMjBCODdDNEY5QUUwMi8zSkFZRmR5Umx6 eXZvWnFMVjItR2pwaEJQamsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCt4Tq5I2YdTLT5TozZDSv50jLQrz+N5Ib4RsAMEQ+XcJF6rhJS2+HE 4UaK6gvVHylQ6OjdZGtGakLATxtjuNrfKGgHXRLXeHuh6GQvVsGKcAEkPkhlgoFe JlxmOFOcNaUblZp+1luWIAiMMp32/eCFcUL1SDEOlP6yYKSlV+B4PrcoTT/dIZCx UsBwNnMhKJlJXzVzoInQswchLp9nujXEM5DZ4NaaQuAtOHP61hxW0vaPfXjQHfZW XAGFN27INMCgSbTS9V1Fsp0nWVtdi9zTgHCU1WSrgtwek6V5rjkpA2/Wf+oG35S/ CRXBDS/fzFSW7h6t+exFa0K7bY5X3aUp -----END CERTIFICATE-----Generated at Wed Nov 5 08:10:11 2025 by rpki-client