$ rpki-client -vvf rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.mft File: 3Fys5yJTQlYHBjKHYfkTyTZJius.mft (raw, json) Hash identifier: EzHO//xvUzAbPky/Z3jzc+JErJ+ogOVAwxzLj1keI08= Subject key identifier: 84:BC:16:86:D0:A1:C3:22:26:D3:35:25:64:4D:7B:8C:A0:1D:07:EC Authority key identifier: DC:5C:AC:E7:22:53:42:56:07:06:32:87:61:F9:13:C9:36:49:8A:EB Certificate issuer: /CN=A91317CB/serialNumber=DC5CACE7225342560706328761F913C936498AEB Certificate serial: 1567 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Fys5yJTQlYHBjKHYfkTyTZJius.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.mft Manifest number: 155F Signing time: Sun 02 Nov 2025 16:46:51 +0000 Manifest this update: Sun 02 Nov 2025 16:46:51 +0000 Manifest next update: Sun 09 Nov 2025 16:46:51 +0000 Files and hashes: 1: 3Fys5yJTQlYHBjKHYfkTyTZJius.crl (hash: 19EXx7aZzlbKDybiiAxrNwKxtwCQWpm1kRtwSaiDRxU=) 2: CBA65F7C4AB411E887FB7E29C4F9AE02.roa (hash: ZrtNu0pCM+YSuzrUqWxCD6BDNZGKsa/yqsobccT0UqY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.crl rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Fys5yJTQlYHBjKHYfkTyTZJius.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 16:46:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5479 (0x1567) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91317CB, serialNumber=DC5CACE7225342560706328761F913C936498AEB Validity Not Before: Nov 2 16:46:51 2025 GMT Not After : Nov 9 16:46:51 2025 GMT Subject: CN=69078afb-2281 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:24:80:2d:fb:c5:b5:9e:99:f9:dc:67:3a:01: bd:3b:b0:9c:06:a6:13:df:03:2a:7a:8d:3c:74:1a: f1:1c:a6:eb:b0:49:f9:bf:46:c7:9d:ce:ad:c9:7d: 32:fb:e7:41:f8:8c:73:8c:8c:50:d8:32:55:82:5f: 75:f3:37:de:ce:3d:fb:49:f9:25:bf:fb:c3:8e:4e: 94:e1:1c:3b:a9:ef:81:aa:7f:f5:25:11:bf:30:a5: a8:67:b1:78:c5:f5:54:91:ef:cb:de:88:8e:03:07: d7:03:5c:03:ff:22:e9:be:de:26:13:57:ac:3a:e4: 56:35:4f:9b:f4:49:14:68:3b:94:4b:0a:f5:5e:00: fd:03:56:95:be:4f:31:81:43:bf:d7:83:2e:57:da: 6f:3e:ca:05:dd:56:aa:c8:ea:fd:1c:be:bc:7e:85: 24:5b:8f:51:f1:4b:82:ae:5a:ff:c9:d4:35:4a:23: 76:50:e0:55:f8:0c:d3:03:4b:62:d2:3b:19:6e:b6: 95:fe:ee:c4:31:31:99:03:03:7c:24:1c:34:2c:c4: 89:87:fd:d2:de:38:f5:76:1a:76:e3:28:95:44:4a: b1:f4:b6:8a:43:33:4c:11:7d:77:b1:69:87:52:22: 9b:d4:bc:44:51:fe:e0:fd:47:52:9e:10:44:34:6c: 15:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:BC:16:86:D0:A1:C3:22:26:D3:35:25:64:4D:7B:8C:A0:1D:07:EC X509v3 Authority Key Identifier: keyid:DC:5C:AC:E7:22:53:42:56:07:06:32:87:61:F9:13:C9:36:49:8A:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Fys5yJTQlYHBjKHYfkTyTZJius.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:5b:b7:5d:94:b6:7e:b9:18:c8:3b:2f:e6:fa:cb:32:af:04: dd:5b:c0:e5:68:71:47:95:3b:fe:6c:3a:33:aa:c3:dc:5c:a7: 5b:d3:57:f9:d7:1b:42:b1:9f:4b:ca:7b:db:01:57:11:bc:29: 12:be:33:b6:07:d9:3c:59:cc:08:8c:f4:ba:e7:41:a2:7a:0a: 75:60:a6:4a:9c:c0:1d:3a:32:9b:28:76:71:8f:16:84:9d:bc: c5:d8:f1:22:54:48:a6:6e:5d:1b:6a:9c:bc:00:8a:f3:93:a2: 25:3e:6b:e2:1c:c7:64:b1:95:39:53:7a:1e:89:cd:07:08:df: a3:8a:60:c3:be:98:4a:f4:40:45:6c:87:e2:36:09:88:7e:2a: 3f:57:be:ac:72:34:85:0a:ad:03:e5:e0:da:ec:7c:ea:d0:f8: 0f:7e:40:77:be:b3:fc:0f:01:c3:45:80:25:0e:c9:cb:9f:23: 7b:3c:e2:60:5e:bd:59:7c:97:f0:7e:3d:3a:7c:8a:a1:4d:5f: 22:24:30:7c:e8:12:c5:37:3b:74:3f:f2:f8:60:16:38:0a:f6: d4:0b:f7:d4:cf:c2:22:0e:47:4a:68:80:58:cc:e1:a6:b0:33: 90:69:4e:ff:70:d4:04:db:70:d8:fd:83:c8:c7:3b:a9:09:40: f4:a0:03:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE3Q0IxMTAvBgNVBAUTKERDNUNBQ0U3MjI1MzQyNTYwNzA2MzI4NzYxRjkxM0M5 MzY0OThBRUIwHhcNMjUxMTAyMTY0NjUxWhcNMjUxMTA5MTY0NjUxWjAYMRYwFAYD VQQDEw02OTA3OGFmYi0yMjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0SSALfvFtZ6Z+dxnOgG9O7CcBqYT3wMqeo08dBrxHKbrsEn5v0bHnc6tyX0y ++dB+IxzjIxQ2DJVgl918zfezj37Sfklv/vDjk6U4Rw7qe+Bqn/1JRG/MKWoZ7F4 xfVUke/L3oiOAwfXA1wD/yLpvt4mE1esOuRWNU+b9EkUaDuUSwr1XgD9A1aVvk8x gUO/14MuV9pvPsoF3VaqyOr9HL68foUkW49R8UuCrlr/ydQ1SiN2UOBV+AzTA0ti 0jsZbraV/u7EMTGZAwN8JBw0LMSJh/3S3jj1dhp24yiVREqx9LaKQzNMEX13sWmH UiKb1LxEUf7g/UdSnhBENGwVqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIS8FobQ ocMiJtM1JWRNe4ygHQfsMB8GA1UdIwQYMBaAFNxcrOciU0JWBwYyh2H5E8k2SYrr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTdDQi9DQjczRjc4NjRB QjMxMUU4QUQ0RDFFMjhDNEY5QUUwMi8zRnlzNXlKVFFsWUhCaktIWWZrVHlUWkpp dXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNGeXM1eUpUUWxZSEJqS0hZZmtUeVRaSml1cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTdDQi9DQjczRjc4NjRBQjMxMUU4QUQ0RDFFMjhDNEY5QUUwMi8zRnlzNXlKVFFs WUhCaktIWWZrVHlUWkppdXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlW7ddlLZ+uRjIOy/m+ssyrwTdW8DlaHFHlTv+bDozqsPcXKdb01f5 1xtCsZ9LynvbAVcRvCkSvjO2B9k8WcwIjPS650Giegp1YKZKnMAdOjKbKHZxjxaE nbzF2PEiVEimbl0bapy8AIrzk6IlPmviHMdksZU5U3oeic0HCN+jimDDvphK9EBF bIfiNgmIfio/V76scjSFCq0D5eDa7Hzq0PgPfkB3vrP8DwHDRYAlDsnLnyN7POJg Xr1ZfJfwfj06fIqhTV8iJDB86BLFNzt0P/L4YBY4CvbUC/fUz8IiDkdKaIBYzOGm sDOQaU7/cNQE23DY/YPIxzupCUD0oAOf -----END CERTIFICATE-----Generated at Mon Nov 3 18:17:18 2025 by rpki-client