$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.mft File: 3SQy2K1rs-npllWAu8bSIhkHs_c.mft (raw, json) Hash identifier: C2otOr3i72QuDmr0iCRa+HdQGBSaqXEHjUYNA0AOUy0= Subject key identifier: 16:10:2B:85:78:39:87:9D:45:1D:26:4C:A4:03:48:5F:DC:4A:B8:32 Authority key identifier: DD:24:32:D8:AD:6B:B3:E9:E9:96:55:80:BB:C6:D2:22:19:07:B3:F7 Certificate issuer: /CN=A91AAE2E/serialNumber=DD2432D8AD6BB3E9E9965580BBC6D2221907B3F7 Certificate serial: 012C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SQy2K1rs-npllWAu8bSIhkHs_c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.mft Manifest number: 0129 Signing time: Mon 03 Nov 2025 04:38:51 +0000 Manifest this update: Mon 03 Nov 2025 04:38:51 +0000 Manifest next update: Mon 10 Nov 2025 04:38:51 +0000 Files and hashes: 1: 3SQy2K1rs-npllWAu8bSIhkHs_c.crl (hash: 4AHwFR+WKZpjzlk77Fny0tyhgY483Td5vpw4uDEghs0=) 2: 121E99A8F21911EE95F21158C4F9AE02.roa (hash: /IMJX7XsSqXWSBpPQa+GU6jkXrtHKjX0kCU46WfMzTI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.crl rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SQy2K1rs-npllWAu8bSIhkHs_c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:38:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 300 (0x12c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAE2E, serialNumber=DD2432D8AD6BB3E9E9965580BBC6D2221907B3F7 Validity Not Before: Nov 3 04:38:51 2025 GMT Not After : Nov 10 04:38:51 2025 GMT Subject: CN=690831db-0e8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ae:78:1d:e8:d8:36:c4:63:a6:96:ab:84:01: eb:a4:cd:e2:26:d0:b2:ef:cf:38:94:ea:4a:5a:72: 0f:69:b8:c6:fe:bd:6a:cf:58:45:e4:29:b7:08:45: 7b:b7:3a:52:56:24:be:e3:ac:f1:55:66:60:2d:4c: 30:e8:a5:2c:ac:1c:58:e7:55:88:61:1a:a2:00:87: 00:a6:60:50:3a:37:7e:4d:22:bb:9f:cd:1a:a0:72: 57:7a:50:56:ae:ed:c1:bd:0e:d3:a1:11:23:10:3c: bc:a3:14:2a:b2:e4:50:ca:a2:9e:8a:e2:37:b5:2e: e4:81:d4:35:58:1d:57:30:e6:45:49:f0:9d:c0:ba: c8:2f:ee:77:36:b5:b2:40:ed:f8:16:ed:ec:db:51: d5:c2:68:c6:a8:28:c5:42:a9:0e:4c:8f:c9:e0:6a: d6:16:51:82:f1:df:9b:3e:bb:2c:46:e5:0e:1b:e5: f0:79:da:8f:e5:47:6b:14:8a:61:74:b3:4f:71:53: 0a:3d:b1:92:b0:fe:77:ed:f8:dd:97:bc:f8:e4:7b: c5:28:ec:2e:bc:1b:1d:94:63:9b:5d:19:e6:c2:3e: 76:c5:4d:5b:31:f5:9c:b4:13:ab:d4:2b:da:a5:ce: aa:31:76:56:e8:3b:e2:37:d6:0c:06:87:28:af:1c: 71:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:10:2B:85:78:39:87:9D:45:1D:26:4C:A4:03:48:5F:DC:4A:B8:32 X509v3 Authority Key Identifier: keyid:DD:24:32:D8:AD:6B:B3:E9:E9:96:55:80:BB:C6:D2:22:19:07:B3:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SQy2K1rs-npllWAu8bSIhkHs_c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:6c:d4:1f:c7:62:c9:b7:4d:ab:89:71:7a:d3:dd:9d:93:00: e0:ce:33:bc:d5:f1:87:ce:ae:26:f6:fc:05:b4:b1:57:02:41: 37:aa:ce:c4:31:08:e5:a2:06:cb:ce:e8:fe:8a:0c:ea:81:6f: 89:3e:63:7c:3c:d0:92:d7:fb:1e:ba:2f:9a:97:b4:5c:51:c9: 7a:ae:56:27:0c:9f:30:3a:10:37:6a:b9:1b:76:08:8e:b8:eb: 1e:79:39:bd:7b:31:57:9e:9c:9f:e6:ce:dc:eb:12:23:a6:73: 16:f0:4b:59:ee:d6:f6:f3:34:1a:7b:f4:ff:5c:5e:be:87:4c: 45:c8:05:d0:b0:43:33:a2:fe:a3:1f:bb:c5:aa:95:77:64:95: 05:5b:f6:3a:e6:98:46:ea:9e:ea:28:db:1c:dd:a0:6c:a3:5e: f7:c3:81:77:6a:e5:d7:0c:ec:66:98:4b:da:e0:31:d7:ac:24: 35:ab:5a:c0:54:63:e5:b5:86:f1:a8:b6:96:bd:fa:e9:0d:5c: 22:22:c8:7c:39:9d:f2:bb:55:f3:bd:df:bd:aa:e9:ca:92:42: 6e:a6:68:91:d3:1a:5a:c4:a7:4a:a1:f5:09:7e:87:79:d5:e3: 1c:ff:42:b1:ee:26:cd:62:bb:c8:d0:e9:e8:8d:99:b7:c4:53: a4:c1:06:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFFMkUxMTAvBgNVBAUTKEREMjQzMkQ4QUQ2QkIzRTlFOTk2NTU4MEJCQzZEMjIy MTkwN0IzRjcwHhcNMjUxMTAzMDQzODUxWhcNMjUxMTEwMDQzODUxWjAYMRYwFAYD VQQDEw02OTA4MzFkYi0wZThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1a54HejYNsRjpparhAHrpM3iJtCy7884lOpKWnIPabjG/r1qz1hF5Cm3CEV7 tzpSViS+46zxVWZgLUww6KUsrBxY51WIYRqiAIcApmBQOjd+TSK7n80aoHJXelBW ru3BvQ7ToREjEDy8oxQqsuRQyqKeiuI3tS7kgdQ1WB1XMOZFSfCdwLrIL+53NrWy QO34Fu3s21HVwmjGqCjFQqkOTI/J4GrWFlGC8d+bPrssRuUOG+XwedqP5UdrFIph dLNPcVMKPbGSsP537fjdl7z45HvFKOwuvBsdlGObXRnmwj52xU1bMfWctBOr1Cva pc6qMXZW6DviN9YMBocorxxxQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBYQK4V4 OYedRR0mTKQDSF/cSrgyMB8GA1UdIwQYMBaAFN0kMtita7Pp6ZZVgLvG0iIZB7P3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUUyRS9FNzFBMEJCQ0Yy MTcxMUVFQkNDQzMxMjBDNEY5QUUwMi8zU1F5MksxcnMtbnBsbFdBdThiU0loa0hz X2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNTUXkySzFycy1ucGxsV0F1OGJTSWhrSHNfYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUUyRS9FNzFBMEJCQ0YyMTcxMUVFQkNDQzMxMjBDNEY5QUUwMi8zU1F5MksxcnMt bnBsbFdBdThiU0loa0hzX2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBobNQfx2LJt02riXF6092dkwDgzjO81fGHzq4m9vwFtLFXAkE3qs7E MQjlogbLzuj+igzqgW+JPmN8PNCS1/seui+al7RcUcl6rlYnDJ8wOhA3arkbdgiO uOseeTm9ezFXnpyf5s7c6xIjpnMW8EtZ7tb28zQae/T/XF6+h0xFyAXQsEMzov6j H7vFqpV3ZJUFW/Y65phG6p7qKNsc3aBso173w4F3auXXDOxmmEva4DHXrCQ1q1rA VGPltYbxqLaWvfrpDVwiIsh8OZ3yu1Xzvd+9qunKkkJupmiR0xpaxKdKofUJfod5 1eMc/0Kx7ibNYrvI0OnojZm3xFOkwQYL -----END CERTIFICATE-----Generated at Mon Nov 3 18:09:31 2025 by rpki-client