$ rpki-client -vvf rpki.apnic.net/member_repository/A91A58AA/CA50C926240211F0961B646DC4F9AE02/I3Q0S3Gynw44NSDK_GyINQw1YWg.mft File: I3Q0S3Gynw44NSDK_GyINQw1YWg.mft (raw, json) Hash identifier: j9jMCgNe7lhqu7UHJ2FU2+qKM6IGDRDC1ZRwvpRBo8o= Subject key identifier: A2:60:B8:46:4C:BB:EB:99:97:91:DB:A0:94:5C:30:59:2F:A6:40:BC Authority key identifier: 23:74:34:4B:71:B2:9F:0E:38:35:20:CA:FC:6C:88:35:0C:35:61:68 Certificate issuer: /CN=A91A58AA/serialNumber=2374344B71B29F0E383520CAFC6C88350C356168 Certificate serial: 61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3Q0S3Gynw44NSDK_GyINQw1YWg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A58AA/CA50C926240211F0961B646DC4F9AE02/I3Q0S3Gynw44NSDK_GyINQw1YWg.mft Manifest number: 61 Signing time: Mon 03 Nov 2025 07:03:43 +0000 Manifest this update: Mon 03 Nov 2025 07:03:43 +0000 Manifest next update: Mon 10 Nov 2025 07:03:43 +0000 Files and hashes: 1: I3Q0S3Gynw44NSDK_GyINQw1YWg.crl (hash: 3jir85Q8zntmrLdn2r2LoBNeDNU4M4DW39v8deIjOhc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A58AA/CA50C926240211F0961B646DC4F9AE02/I3Q0S3Gynw44NSDK_GyINQw1YWg.crl rsync://rpki.apnic.net/member_repository/A91A58AA/CA50C926240211F0961B646DC4F9AE02/I3Q0S3Gynw44NSDK_GyINQw1YWg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3Q0S3Gynw44NSDK_GyINQw1YWg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:03:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 97 (0x61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A58AA, serialNumber=2374344B71B29F0E383520CAFC6C88350C356168 Validity Not Before: Nov 3 07:03:43 2025 GMT Not After : Nov 10 07:03:43 2025 GMT Subject: CN=690853cf-9dcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:66:07:7e:26:03:5f:e0:fd:c0:49:04:85:de: 1c:32:e4:95:85:06:f8:f0:7c:65:81:26:b4:88:33: bb:7e:2b:0e:5f:50:02:1a:d4:84:dc:04:bb:e9:54: b4:7c:58:e2:08:52:1b:39:c8:c8:bc:e4:4a:3a:6d: 6f:a9:81:db:8b:70:34:71:6e:13:61:6e:37:e2:b6: 40:cd:a4:62:b5:6d:ea:55:a6:56:7b:35:91:a1:0b: 58:02:16:41:2a:00:50:9c:e3:10:75:44:b2:37:e9: 76:6f:a9:3f:49:d9:44:54:a0:b7:49:18:f4:60:3c: 96:76:46:4d:39:2f:21:f6:db:0d:85:33:9b:a8:b8: 1f:70:74:0f:66:14:06:36:2f:e4:79:ec:62:fc:af: e7:00:42:77:4f:e6:ed:29:a8:71:d9:f8:15:12:20: 9e:ed:db:ad:39:20:f1:cb:13:bb:d4:78:19:ab:2e: 2c:2d:b5:84:07:2f:aa:e2:3a:6a:82:8e:49:83:6a: b8:30:57:0f:fa:9b:63:ee:13:86:97:c1:4e:bb:6f: 7b:60:59:9f:de:fc:c7:84:f0:81:a7:28:98:9b:47: 12:64:25:67:2b:9c:68:b5:9a:6c:14:86:77:58:9b: f6:e7:60:49:e2:68:f6:a1:8c:d8:8a:4c:cb:31:a2: 9f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:60:B8:46:4C:BB:EB:99:97:91:DB:A0:94:5C:30:59:2F:A6:40:BC X509v3 Authority Key Identifier: keyid:23:74:34:4B:71:B2:9F:0E:38:35:20:CA:FC:6C:88:35:0C:35:61:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A58AA/CA50C926240211F0961B646DC4F9AE02/I3Q0S3Gynw44NSDK_GyINQw1YWg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3Q0S3Gynw44NSDK_GyINQw1YWg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A58AA/CA50C926240211F0961B646DC4F9AE02/I3Q0S3Gynw44NSDK_GyINQw1YWg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:d0:82:97:e9:c3:25:b4:6b:bf:59:10:c5:cf:3a:de:ee:30: 1b:ba:7e:e1:be:54:69:40:94:74:a7:c1:ff:55:ea:15:58:2f: 43:a2:d7:a4:e2:c2:f4:e0:71:05:66:28:35:a7:9f:dc:ff:69: a9:dc:0b:52:23:8d:9b:6b:06:c7:02:d9:c5:d6:c2:d4:41:b6: 12:49:b9:26:bd:e0:1b:90:9a:cc:e4:74:f5:97:bf:20:b3:f5: ea:57:67:34:7e:1c:40:59:81:57:b7:40:cb:e6:6a:77:c6:3e: be:50:66:70:7a:14:b4:73:7c:93:db:66:97:58:f3:bd:ce:f7: 37:aa:d5:a7:fc:d9:fa:9f:5a:21:ac:66:47:ef:b8:19:44:87: 44:6d:df:09:e3:1e:6b:fa:18:99:07:27:9e:29:7c:e7:1e:b5: cf:98:44:04:d2:31:65:ea:29:da:ab:94:55:10:70:a3:44:1b: c3:a9:55:4d:f4:7a:0e:e5:d9:82:44:d0:8e:82:5a:b0:93:ab: 6e:f1:29:84:ba:f3:a5:79:90:e8:b6:54:cb:6e:59:92:96:9e: 98:cd:91:30:f7:8d:aa:95:49:42:f1:3b:39:22:a4:a3:b5:09: cf:53:77:f2:74:ee:a4:f7:41:37:29:a3:12:25:9b:c4:49:61: a1:26:35:ad -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NThBQTExMC8GA1UEBRMoMjM3NDM0NEI3MUIyOUYwRTM4MzUyMENBRkM2Qzg4MzUw QzM1NjE2ODAeFw0yNTExMDMwNzAzNDNaFw0yNTExMTAwNzAzNDNaMBgxFjAUBgNV BAMTDTY5MDg1M2NmLTlkY2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCeZgd+JgNf4P3ASQSF3hwy5JWFBvjwfGWBJrSIM7t+Kw5fUAIa1ITcBLvpVLR8 WOIIUhs5yMi85Eo6bW+pgduLcDRxbhNhbjfitkDNpGK1bepVplZ7NZGhC1gCFkEq AFCc4xB1RLI36XZvqT9J2URUoLdJGPRgPJZ2Rk05LyH22w2FM5uouB9wdA9mFAY2 L+R57GL8r+cAQndP5u0pqHHZ+BUSIJ7t2605IPHLE7vUeBmrLiwttYQHL6riOmqC jkmDargwVw/6m2PuE4aXwU67b3tgWZ/e/MeE8IGnKJibRxJkJWcrnGi1mmwUhndY m/bnYEniaPahjNiKTMsxop+XAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUomC4Rky7 65mXkduglFwwWS+mQLwwHwYDVR0jBBgwFoAUI3Q0S3Gynw44NSDK/GyINQw1YWgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1OEFBL0NBNTBDOTI2MjQw MjExRjA5NjFCNjQ2REM0RjlBRTAyL0kzUTBTM0d5bnc0NE5TREtfR3lJTlF3MVlX Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSTNRMFMzR3ludzQ0TlNES19HeUlOUXcxWVdnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1 OEFBL0NBNTBDOTI2MjQwMjExRjA5NjFCNjQ2REM0RjlBRTAyL0kzUTBTM0d5bnc0 NE5TREtfR3lJTlF3MVlXZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIPQgpfpwyW0a79ZEMXPOt7uMBu6fuG+VGlAlHSnwf9V6hVYL0Oi16Ti wvTgcQVmKDWnn9z/aancC1IjjZtrBscC2cXWwtRBthJJuSa94BuQmszkdPWXvyCz 9epXZzR+HEBZgVe3QMvmanfGPr5QZnB6FLRzfJPbZpdY873O9zeq1af82fqfWiGs ZkfvuBlEh0Rt3wnjHmv6GJkHJ54pfOcetc+YRATSMWXqKdqrlFUQcKNEG8OpVU30 eg7l2YJE0I6CWrCTq27xKYS686V5kOi2VMtuWZKWnpjNkTD3jaqVSULxOzkipKO1 Cc9Td/J07qT3QTcpoxIlm8RJYaEmNa0= -----END CERTIFICATE-----Generated at Wed Nov 5 08:02:41 2025 by rpki-client