$ rpki-client -vvf rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.mft File: l3a_sejqihq8j4z9b2Yic23YyjQ.mft (raw, json) Hash identifier: Zfeuhf1n14uSoNZlRBdc2YzuulTH6SmpDy6dRdKFSFk= Subject key identifier: E4:D0:57:97:57:95:D5:D2:5A:2B:17:DD:A7:B2:EE:B9:B3:A5:49:D6 Authority key identifier: 97:76:BF:B1:E8:EA:8A:1A:BC:8F:8C:FD:6F:66:22:73:6D:D8:CA:34 Certificate issuer: /CN=A91616DC/serialNumber=9776BFB1E8EA8A1ABC8F8CFD6F6622736DD8CA34 Certificate serial: 0CDA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l3a_sejqihq8j4z9b2Yic23YyjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.mft Manifest number: 0CAB Signing time: Sun 02 Nov 2025 18:26:31 +0000 Manifest this update: Sun 02 Nov 2025 18:26:31 +0000 Manifest next update: Sun 09 Nov 2025 18:26:31 +0000 Files and hashes: 1: l3a_sejqihq8j4z9b2Yic23YyjQ.crl (hash: msRAvdmVgOLieMpNsvotgSx5z13Xt/8mnkxtTlbYkJA=) 2: 64A2C96E919E11EEA5241125C4F9AE02.roa (hash: /Guh9JZ2GlA6fGHvz6IyFArNWYosj9/jyWCo/gIcAcc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.crl rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l3a_sejqihq8j4z9b2Yic23YyjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:26:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3290 (0xcda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91616DC, serialNumber=9776BFB1E8EA8A1ABC8F8CFD6F6622736DD8CA34 Validity Not Before: Nov 2 18:26:31 2025 GMT Not After : Nov 9 18:26:31 2025 GMT Subject: CN=6907a257-0cdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:7b:fb:54:b2:00:db:05:6f:73:8e:01:f2:71: 15:9b:9a:56:49:c8:8d:13:74:65:ad:79:6c:50:88: 32:6f:8f:b6:01:67:f8:bd:d8:b9:05:ad:ff:cf:c6: 13:8a:23:74:60:43:3c:78:7a:d6:82:9c:bd:7b:ef: 9a:87:dc:9a:d2:e1:e3:17:41:4d:11:81:f7:74:92: 14:ac:4c:82:84:47:1e:29:a8:ac:0f:7f:76:57:6d: f4:77:cc:93:50:4c:3a:c6:61:d4:09:cb:3b:89:50: cb:7e:59:75:8c:31:05:c5:d1:f8:48:06:46:72:36: a7:25:c3:99:84:9b:3d:2a:8b:45:97:6f:e0:1c:cb: db:dd:97:1b:e4:2d:e6:3c:6c:0e:b8:af:90:78:12: f9:4a:1c:fd:78:ac:ce:1b:60:1a:83:04:e6:6a:5d: 1d:d7:ec:2b:29:5b:ef:e5:ea:c7:79:e4:c1:df:2f: ce:fd:f1:88:c6:21:3b:66:c8:c2:b1:b2:f7:b8:2a: c9:27:4a:8d:3a:70:b0:14:79:0a:2f:2e:5b:fe:f3: ca:29:88:04:b3:08:63:d2:c2:7a:2b:21:ca:2d:4f: e0:f8:ac:2f:0a:ca:ec:91:e3:2c:47:44:af:98:b4: bf:71:96:9d:93:57:30:cc:28:70:80:1f:3a:b9:9c: d6:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:D0:57:97:57:95:D5:D2:5A:2B:17:DD:A7:B2:EE:B9:B3:A5:49:D6 X509v3 Authority Key Identifier: keyid:97:76:BF:B1:E8:EA:8A:1A:BC:8F:8C:FD:6F:66:22:73:6D:D8:CA:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l3a_sejqihq8j4z9b2Yic23YyjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:a6:ee:54:52:6c:b1:f5:87:b1:88:fb:4e:ec:5c:01:a0:6e: 98:1b:93:8e:2b:e5:0a:73:32:8e:7c:24:8a:dc:e5:a6:54:eb: 9d:08:50:df:39:ca:ef:27:8e:4b:2b:09:2a:7c:70:cc:27:84: 96:7e:29:4d:46:f0:79:da:bd:37:45:30:53:36:7c:80:93:00: 91:d5:98:07:83:5a:3a:32:6b:e8:cd:05:52:81:a7:07:27:a3: ed:38:7f:0a:35:ec:d4:5e:dd:4f:68:c1:b1:e7:5b:3e:a7:ac: 2b:c0:a2:23:80:be:3b:cd:7a:da:65:34:ed:10:df:4c:ea:b6: 72:1f:5c:fb:07:f9:db:19:79:23:92:a6:c6:5e:7a:ce:6b:20: ad:9e:ae:99:ec:ee:f7:81:18:6e:1c:a2:ba:6a:4a:44:96:6a: 66:97:b7:18:8a:bc:33:e9:eb:d4:42:1f:61:89:66:8e:76:ab: ec:b0:4c:06:ab:7f:2e:d6:6a:1e:74:b5:d5:4f:e9:fa:39:c4: a9:eb:ae:39:65:27:99:4b:6c:a5:a9:c6:c4:df:87:30:ad:e3: 5e:7e:67:67:a5:bd:5e:c9:cd:c1:6a:36:a9:69:90:02:e0:81: 31:00:34:bf:8c:2a:2f:9d:17:91:b7:5b:80:5b:4e:8b:59:79: ac:54:99:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDNowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjE2REMxMTAvBgNVBAUTKDk3NzZCRkIxRThFQThBMUFCQzhGOENGRDZGNjYyMjcz NkREOENBMzQwHhcNMjUxMTAyMTgyNjMxWhcNMjUxMTA5MTgyNjMxWjAYMRYwFAYD VQQDEw02OTA3YTI1Ny0wY2RkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Xv7VLIA2wVvc44B8nEVm5pWSciNE3RlrXlsUIgyb4+2AWf4vdi5Ba3/z8YT iiN0YEM8eHrWgpy9e++ah9ya0uHjF0FNEYH3dJIUrEyChEceKaisD392V230d8yT UEw6xmHUCcs7iVDLfll1jDEFxdH4SAZGcjanJcOZhJs9KotFl2/gHMvb3Zcb5C3m PGwOuK+QeBL5Shz9eKzOG2AagwTmal0d1+wrKVvv5erHeeTB3y/O/fGIxiE7ZsjC sbL3uCrJJ0qNOnCwFHkKLy5b/vPKKYgEswhj0sJ6KyHKLU/g+KwvCsrskeMsR0Sv mLS/cZadk1cwzChwgB86uZzWMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOTQV5dX ldXSWisX3aey7rmzpUnWMB8GA1UdIwQYMBaAFJd2v7Ho6ooavI+M/W9mInNt2Mo0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTZEQy80NEE3RTVFODA5 NUYxMUVBQTI4MTY4MURDNEY5QUUwMi9sM2Ffc2VqcWlocThqNHo5YjJZaWMyM1l5 alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wzYV9zZWpxaWhxOGo0ejliMllpYzIzWXlqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTZEQy80NEE3RTVFODA5NUYxMUVBQTI4MTY4MURDNEY5QUUwMi9sM2Ffc2VqcWlo cThqNHo5YjJZaWMyM1l5alEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0pu5UUmyx9YexiPtO7FwBoG6YG5OOK+UKczKOfCSK3OWmVOudCFDf OcrvJ45LKwkqfHDMJ4SWfilNRvB52r03RTBTNnyAkwCR1ZgHg1o6MmvozQVSgacH J6PtOH8KNezUXt1PaMGx51s+p6wrwKIjgL47zXraZTTtEN9M6rZyH1z7B/nbGXkj kqbGXnrOayCtnq6Z7O73gRhuHKK6akpElmpml7cYirwz6evUQh9hiWaOdqvssEwG q38u1moedLXVT+n6OcSp6645ZSeZS2ylqcbE34cwreNefmdnpb1eyc3BajapaZAC 4IExADS/jCovnReRt1uAW06LWXmsVJkt -----END CERTIFICATE-----Generated at Mon Nov 3 18:17:06 2025 by rpki-client