$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft File: 3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft (raw, json) Hash identifier: cRhYLxL0Vc1s31P3DZctaDu2Yo3UwhHSj8e9znT6v/I= Subject key identifier: 55:E6:FC:01:26:21:2C:8D:C1:00:B5:71:47:75:38:AE:2D:24:1E:3D Authority key identifier: DE:A2:D0:26:0C:17:09:51:67:E1:E3:BC:D6:59:89:FE:76:47:CB:6A Certificate issuer: /CN=A91AE6B9/serialNumber=DEA2D0260C17095167E1E3BCD65989FE7647CB6A Certificate serial: 0C9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qLQJgwXCVFn4eO81lmJ_nZHy2o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft Manifest number: 0C96 Signing time: Thu 30 Oct 2025 18:15:50 +0000 Manifest this update: Thu 30 Oct 2025 18:15:50 +0000 Manifest next update: Thu 06 Nov 2025 18:15:50 +0000 Files and hashes: 1: 3qLQJgwXCVFn4eO81lmJ_nZHy2o.crl (hash: iuuU6Mg6gv9Cp//RI/pm1C91xAAKoEhAvZ3C1PhhYpY=) 2: D91746DE044F11EA8C37D012C4F9AE02.roa (hash: alyiVZNnvo5j+FeNDvZT50h35M8ryhRQyKsBnyLFnkg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.crl rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qLQJgwXCVFn4eO81lmJ_nZHy2o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 18:15:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3229 (0xc9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE6B9, serialNumber=DEA2D0260C17095167E1E3BCD65989FE7647CB6A Validity Not Before: Oct 30 18:15:50 2025 GMT Not After : Nov 6 18:15:50 2025 GMT Subject: CN=6903ab56-2b0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:52:19:ef:fc:2d:aa:4a:78:85:1c:4d:f9:f9: 28:26:97:15:f3:79:99:84:a4:b4:94:92:81:3c:99: 2d:6b:2b:cd:e2:ae:50:98:d2:6c:5e:f9:b4:25:57: 54:1f:a6:15:20:ea:db:76:db:cb:5f:c0:35:9e:37: 54:08:e3:b6:9b:17:09:1d:31:b0:56:7b:a3:b4:a5: 64:44:53:48:cf:8c:93:df:8c:da:92:9d:51:e0:7c: c3:f4:18:ee:fa:39:02:ea:2d:27:dc:f9:d9:a0:c6: 24:c6:0d:ae:b0:11:9b:87:e5:2f:20:49:e2:38:bd: 90:1c:f6:14:7a:5a:11:8a:eb:a6:ae:7a:45:4c:3e: 6b:59:37:fa:8b:4f:d0:be:dd:23:0b:d9:0a:6e:57: b6:b3:73:19:2e:69:83:eb:b1:84:b0:5b:96:69:b0: 0a:d4:48:db:10:8f:77:d3:33:b1:8e:dd:e3:85:4b: 0f:c8:fa:05:16:43:70:58:03:89:bd:20:c0:28:06: b1:af:30:a1:e0:da:14:4d:c4:31:ab:9b:ee:21:67: b8:b5:11:14:3c:71:76:76:15:15:0e:5e:fc:a3:19: c6:ee:50:4b:95:d2:05:29:f8:7d:9f:59:1a:99:d3: 4f:11:06:5b:01:d5:c3:d5:19:44:f3:4a:8b:e2:1b: d1:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:E6:FC:01:26:21:2C:8D:C1:00:B5:71:47:75:38:AE:2D:24:1E:3D X509v3 Authority Key Identifier: keyid:DE:A2:D0:26:0C:17:09:51:67:E1:E3:BC:D6:59:89:FE:76:47:CB:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qLQJgwXCVFn4eO81lmJ_nZHy2o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:86:3c:1c:00:ec:d1:89:c4:40:b3:8f:fb:3d:78:2d:19:bd: c3:a1:31:13:6c:a8:c7:83:27:f8:1c:f8:74:2d:88:2d:7f:e3: 95:16:77:6d:12:9d:07:68:94:0f:27:88:44:bc:8e:08:8c:c2: 06:c6:b1:76:42:4a:43:68:30:bb:85:ab:1c:b5:21:0b:41:f8: f6:c5:55:8f:c3:e1:54:18:18:bd:f1:7e:25:76:ac:d5:c4:d5: d7:5a:02:df:85:fd:cf:c7:c8:e5:c6:bc:82:70:a7:eb:08:d1: ad:ce:cf:53:3f:58:ec:82:5f:ff:60:ef:eb:d1:f5:a1:fa:5d: 80:bc:6d:8e:15:e4:45:ed:8f:3f:ad:a9:7e:2a:97:0e:62:20: 32:59:5a:29:13:98:62:f0:42:46:6e:cc:03:29:b3:9f:15:a4: 55:cd:4e:87:cb:be:ff:92:44:b2:df:d7:c6:e5:93:af:be:b6: a3:37:80:1c:4e:1d:17:23:bf:42:b2:f8:af:e9:e7:05:06:23: 3f:dd:80:89:d4:b3:20:fd:d7:3d:86:35:95:b9:f1:60:14:23: 34:3f:eb:19:57:5e:2c:da:7d:c3:22:0b:90:84:bb:e7:a4:10: 2c:b3:26:23:c5:a2:c6:05:83:64:f0:8d:e4:04:cb:c5:0a:4b: 60:af:e5:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU2QjkxMTAvBgNVBAUTKERFQTJEMDI2MEMxNzA5NTE2N0UxRTNCQ0Q2NTk4OUZF NzY0N0NCNkEwHhcNMjUxMDMwMTgxNTUwWhcNMjUxMTA2MTgxNTUwWjAYMRYwFAYD VQQDEw02OTAzYWI1Ni0yYjBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA41IZ7/wtqkp4hRxN+fkoJpcV83mZhKS0lJKBPJktayvN4q5QmNJsXvm0JVdU H6YVIOrbdtvLX8A1njdUCOO2mxcJHTGwVnujtKVkRFNIz4yT34zakp1R4HzD9Bju +jkC6i0n3PnZoMYkxg2usBGbh+UvIEniOL2QHPYUeloRiuumrnpFTD5rWTf6i0/Q vt0jC9kKble2s3MZLmmD67GEsFuWabAK1EjbEI930zOxjt3jhUsPyPoFFkNwWAOJ vSDAKAaxrzCh4NoUTcQxq5vuIWe4tREUPHF2dhUVDl78oxnG7lBLldIFKfh9n1ka mdNPEQZbAdXD1RlE80qL4hvRywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFXm/AEm ISyNwQC1cUd1OK4tJB49MB8GA1UdIwQYMBaAFN6i0CYMFwlRZ+HjvNZZif52R8tq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTZCOS81MjZFMTZBNDA0 NEUxMUVBODQ0MkQ0MEZDNEY5QUUwMi8zcUxRSmd3WENWRm40ZU84MWxtSl9uWkh5 Mm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNxTFFKZ3dYQ1ZGbjRlTzgxbG1KX25aSHkyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTZCOS81MjZFMTZBNDA0NEUxMUVBODQ0MkQ0MEZDNEY5QUUwMi8zcUxRSmd3WENW Rm40ZU84MWxtSl9uWkh5Mm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCthjwcAOzRicRAs4/7PXgtGb3DoTETbKjHgyf4HPh0LYgtf+OVFndt Ep0HaJQPJ4hEvI4IjMIGxrF2QkpDaDC7hasctSELQfj2xVWPw+FUGBi98X4ldqzV xNXXWgLfhf3Px8jlxryCcKfrCNGtzs9TP1jsgl//YO/r0fWh+l2AvG2OFeRF7Y8/ ral+KpcOYiAyWVopE5hi8EJGbswDKbOfFaRVzU6Hy77/kkSy39fG5ZOvvrajN4Ac Th0XI79Csviv6ecFBiM/3YCJ1LMg/dc9hjWVufFgFCM0P+sZV14s2n3DIguQhLvn pBAssyYjxaLGBYNk8I3kBMvFCktgr+XR -----END CERTIFICATE-----Generated at Thu Oct 30 19:48:20 2025 by rpki-client