$ rpki-client -vvf rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.mft File: Sn0mxMvxZwAkXWf79pULcSkYmTk.mft (raw, json) Hash identifier: BXXw9qIaLj5rFC8dM0Hdsq/kTL7Smit8MgTGmDOJfKw= Subject key identifier: 9D:13:F5:EA:3C:1F:64:3B:36:3F:1C:98:C0:7B:19:76:8B:9B:AB:A0 Authority key identifier: 4A:7D:26:C4:CB:F1:67:00:24:5D:67:FB:F6:95:0B:71:29:18:99:39 Certificate issuer: /CN=A91839CF/serialNumber=4A7D26C4CBF16700245D67FBF6950B7129189939 Certificate serial: B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sn0mxMvxZwAkXWf79pULcSkYmTk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.mft Manifest number: B3 Signing time: Mon 03 Nov 2025 06:05:50 +0000 Manifest this update: Mon 03 Nov 2025 06:05:50 +0000 Manifest next update: Mon 10 Nov 2025 06:05:50 +0000 Files and hashes: 1: Sn0mxMvxZwAkXWf79pULcSkYmTk.crl (hash: ExwRsGLVi1TBLKIctZ8+KANlzkJXB4wUW9QnHaxMZlo=) 2: 305EB30EA98D11EF8C023466C4F9AE02.roa (hash: mTvWjDqRpjoE4gToiz3x8YclXADkkIN+m00HGh0rTzw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.crl rsync://rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sn0mxMvxZwAkXWf79pULcSkYmTk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:05:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 181 (0xb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91839CF, serialNumber=4A7D26C4CBF16700245D67FBF6950B7129189939 Validity Not Before: Nov 3 06:05:50 2025 GMT Not After : Nov 10 06:05:50 2025 GMT Subject: CN=6908463e-1c1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:fa:94:6c:e1:4a:3d:d1:a2:94:9f:fb:43:4e: 6a:75:86:32:59:aa:87:b2:99:2c:04:d7:7c:2a:56: 7b:fe:cd:b5:78:7c:f5:2d:24:f2:b5:be:23:71:c3: d1:12:f4:de:55:61:23:67:04:93:66:4e:1c:4b:16: c7:d7:f5:98:b9:7a:b0:4d:c7:d5:2a:fa:4a:3f:7a: 39:ac:59:c7:22:ab:66:84:bc:7a:87:74:63:63:09: e5:4a:d5:58:7b:5e:cc:9b:4f:2d:47:6f:c2:61:b8: 64:2c:b7:b6:a7:45:c5:ba:b7:ea:cd:f7:21:57:ae: 76:b3:bc:2a:40:14:47:87:e8:02:73:a8:45:b7:fd: 22:5d:52:3f:4f:6d:b8:65:6d:e7:31:56:92:18:73: 33:f9:0d:3b:34:de:78:bc:1b:19:fb:a3:1c:1a:6b: 57:e1:26:8b:6d:18:1d:2b:c4:73:a6:d2:c9:20:59: 03:f7:8a:f2:7e:17:9c:5e:c4:3c:4e:03:ea:09:72: ce:ad:56:00:1c:b5:b9:60:4f:ff:ef:05:21:13:34: 07:e5:e0:ca:9b:ee:94:a7:5e:d1:7c:3c:f5:7a:e2: c8:fb:bc:e0:48:e5:bf:f6:bc:77:49:08:df:07:a2: 9d:2b:c9:b7:77:ef:d9:d8:dd:1a:63:df:bf:98:b8: 77:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:13:F5:EA:3C:1F:64:3B:36:3F:1C:98:C0:7B:19:76:8B:9B:AB:A0 X509v3 Authority Key Identifier: keyid:4A:7D:26:C4:CB:F1:67:00:24:5D:67:FB:F6:95:0B:71:29:18:99:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sn0mxMvxZwAkXWf79pULcSkYmTk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:3a:da:7b:d7:1c:1c:90:79:45:7e:16:7f:58:76:f4:d6:bf: 5d:3a:cd:cd:1f:61:e8:ae:4d:a5:02:1f:29:6d:dc:88:b1:82: ab:52:4d:70:9f:4d:e4:30:f7:89:40:79:58:45:24:3b:42:af: 81:c4:32:8d:63:79:8e:99:65:a9:29:9f:71:b8:39:d1:ce:18: 69:0e:53:72:65:35:1d:5b:a4:98:e6:66:2b:2e:63:33:b7:93: 06:ae:2e:c8:28:71:21:0e:77:f5:b5:49:52:f0:18:67:80:00: 71:6e:bd:fd:63:d6:1c:11:10:73:b3:a3:77:d3:a2:8b:ee:3b: 78:51:3d:ec:53:20:0d:dc:d3:b7:04:54:5c:b8:04:5c:20:85: 01:30:e9:49:7b:d0:74:61:60:aa:b8:5c:71:ec:65:64:1b:45: 88:27:58:91:6c:45:90:cc:f8:b2:e7:e8:ec:ac:ca:52:d0:2f: c4:e0:d8:13:b5:59:cc:15:a8:9e:06:e4:56:5b:52:77:79:1b: 43:31:db:20:95:89:b2:6e:bf:54:db:ae:c4:ca:39:1e:d5:2a: 24:1f:49:32:d0:a1:5c:bc:5e:1f:7c:20:82:c5:21:9d:88:b9: 9e:bd:8b:84:b4:51:bb:f5:b4:00:16:4a:3b:a6:df:0a:a9:25: 04:04:24:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM5Q0YxMTAvBgNVBAUTKDRBN0QyNkM0Q0JGMTY3MDAyNDVENjdGQkY2OTUwQjcx MjkxODk5MzkwHhcNMjUxMTAzMDYwNTUwWhcNMjUxMTEwMDYwNTUwWjAYMRYwFAYD VQQDEw02OTA4NDYzZS0xYzFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyvqUbOFKPdGilJ/7Q05qdYYyWaqHspksBNd8KlZ7/s21eHz1LSTytb4jccPR EvTeVWEjZwSTZk4cSxbH1/WYuXqwTcfVKvpKP3o5rFnHIqtmhLx6h3RjYwnlStVY e17Mm08tR2/CYbhkLLe2p0XFurfqzfchV652s7wqQBRHh+gCc6hFt/0iXVI/T224 ZW3nMVaSGHMz+Q07NN54vBsZ+6McGmtX4SaLbRgdK8RzptLJIFkD94ryfhecXsQ8 TgPqCXLOrVYAHLW5YE//7wUhEzQH5eDKm+6Up17RfDz1euLI+7zgSOW/9rx3SQjf B6KdK8m3d+/Z2N0aY9+/mLh3vwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ0T9eo8 H2Q7Nj8cmMB7GXaLm6ugMB8GA1UdIwQYMBaAFEp9JsTL8WcAJF1n+/aVC3EpGJk5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzlDRi80REYyQkU1MkE5 OEMxMUVGQkEwNjg4NjRDNEY5QUUwMi9TbjBteE12eFp3QWtYV2Y3OXBVTGNTa1lt VGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NuMG14TXZ4WndBa1hXZjc5cFVMY1NrWW1Uay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzlDRi80REYyQkU1MkE5OEMxMUVGQkEwNjg4NjRDNEY5QUUwMi9TbjBteE12eFp3 QWtYV2Y3OXBVTGNTa1ltVGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnOtp71xwckHlFfhZ/WHb01r9dOs3NH2Hork2lAh8pbdyIsYKrUk1w n03kMPeJQHlYRSQ7Qq+BxDKNY3mOmWWpKZ9xuDnRzhhpDlNyZTUdW6SY5mYrLmMz t5MGri7IKHEhDnf1tUlS8BhngABxbr39Y9YcERBzs6N306KL7jt4UT3sUyAN3NO3 BFRcuARcIIUBMOlJe9B0YWCquFxx7GVkG0WIJ1iRbEWQzPiy5+jsrMpS0C/E4NgT tVnMFaieBuRWW1J3eRtDMdsglYmybr9U267Eyjke1SokH0ky0KFcvF4ffCCCxSGd iLmevYuEtFG79bQAFko7pt8KqSUEBCSV -----END CERTIFICATE-----Generated at Mon Nov 3 18:06:51 2025 by rpki-client