$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEE4B/63DFF80245A411EA942E0957C4F9AE02/t3KDxTMROjkeMdlFJxhqz4OZol8.mft File: t3KDxTMROjkeMdlFJxhqz4OZol8.mft (raw, json) Hash identifier: 7wc4AXfVyEQxsnXmpL7O19H1/qR4eFlg32oqzCWpBUU= Subject key identifier: EF:3E:8A:77:46:D9:6A:DE:8C:89:02:C2:9D:39:23:E0:4B:BE:D6:39 Authority key identifier: B7:72:83:C5:33:11:3A:39:1E:31:D9:45:27:18:6A:CF:83:99:A2:5F Certificate issuer: /CN=A91AEE4B/serialNumber=B77283C533113A391E31D94527186ACF8399A25F Certificate serial: 0B54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t3KDxTMROjkeMdlFJxhqz4OZol8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AEE4B/63DFF80245A411EA942E0957C4F9AE02/t3KDxTMROjkeMdlFJxhqz4OZol8.mft Manifest number: 0B4A Signing time: Sun 02 Nov 2025 19:11:14 +0000 Manifest this update: Sun 02 Nov 2025 19:11:13 +0000 Manifest next update: Sun 09 Nov 2025 19:11:13 +0000 Files and hashes: 1: t3KDxTMROjkeMdlFJxhqz4OZol8.crl (hash: 43hpH0x/lfU76vAojntTmE2X1OmyeFKam3MQ6UBLQj4=) 2: 02F1850E45A611EA81CD145AC4F9AE02.roa (hash: 58+0TyNKJb4Dhk7ED+Dg5ahFyoV+/K06n+R45NAzh68=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AEE4B/63DFF80245A411EA942E0957C4F9AE02/t3KDxTMROjkeMdlFJxhqz4OZol8.crl rsync://rpki.apnic.net/member_repository/A91AEE4B/63DFF80245A411EA942E0957C4F9AE02/t3KDxTMROjkeMdlFJxhqz4OZol8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t3KDxTMROjkeMdlFJxhqz4OZol8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:11:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2900 (0xb54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AEE4B, serialNumber=B77283C533113A391E31D94527186ACF8399A25F Validity Not Before: Nov 2 19:11:13 2025 GMT Not After : Nov 9 19:11:13 2025 GMT Subject: CN=6907acd2-add0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:68:5f:97:6f:8d:02:29:56:29:28:27:07:a8: 1e:0e:b1:05:aa:01:5b:c3:f2:3b:f1:c1:8c:d9:60: 29:33:16:68:89:c3:7b:d2:fd:41:33:aa:df:d0:80: 3c:82:9d:09:dc:ee:b1:c3:20:36:25:38:91:f3:4b: f3:1b:4c:a5:32:c7:15:92:2b:47:47:6e:55:dc:8f: ea:c8:32:71:35:0b:2f:39:7b:5e:09:a8:55:3b:9c: f9:f1:4b:d5:53:5a:c0:f4:4c:01:55:f6:fc:92:e0: 66:16:9e:46:af:4f:25:4e:d3:c2:ac:97:b4:17:e8: 28:4b:99:b4:4a:5f:7b:bc:c9:76:dd:0b:34:ea:b1: 3a:21:b0:f2:dd:ba:df:51:95:dc:a3:4c:a9:07:0b: 03:82:76:d7:c9:c2:38:05:63:82:4a:ca:f5:dd:df: 60:d9:4b:b4:d3:c1:e8:60:db:5e:91:30:48:0b:57: 28:c1:5d:e3:fd:77:99:10:5d:b9:e6:00:f8:6b:58: 62:24:fe:43:b3:65:26:02:fb:05:e7:e1:ec:4d:93: eb:c0:69:e6:5f:1e:73:45:57:8f:eb:53:1c:89:9c: fe:19:f5:ba:15:8c:46:d3:f8:cf:58:76:51:ef:a4: 72:b3:d1:c4:85:41:0d:86:1e:5d:e2:d6:b6:b6:d8: a0:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:3E:8A:77:46:D9:6A:DE:8C:89:02:C2:9D:39:23:E0:4B:BE:D6:39 X509v3 Authority Key Identifier: keyid:B7:72:83:C5:33:11:3A:39:1E:31:D9:45:27:18:6A:CF:83:99:A2:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AEE4B/63DFF80245A411EA942E0957C4F9AE02/t3KDxTMROjkeMdlFJxhqz4OZol8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t3KDxTMROjkeMdlFJxhqz4OZol8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEE4B/63DFF80245A411EA942E0957C4F9AE02/t3KDxTMROjkeMdlFJxhqz4OZol8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:da:a1:0e:e1:c6:dc:b9:25:c8:67:dd:a1:5b:6f:8e:6e:ff: d0:65:ba:99:2f:ac:b6:c3:ff:44:1d:af:bd:e4:d0:ba:15:6a: 78:2b:79:08:5e:6a:1f:f2:65:a6:0b:e4:18:8d:58:16:2a:8f: ec:16:90:75:b9:a3:8d:13:c8:71:ac:43:35:03:75:7e:83:0f: 01:79:f6:9b:df:cd:95:6f:6c:b0:f6:06:53:dd:9e:19:1f:40: 36:f7:e1:48:9b:cb:10:61:42:09:1d:7d:bd:f2:fd:0b:75:53: 2b:df:af:b9:f7:70:ef:29:c6:e6:ee:50:47:37:8a:f8:d5:1e: 68:e7:45:7f:4e:eb:f5:c0:09:fd:95:da:3b:ed:23:bb:a1:13: 1d:09:9f:a9:35:95:c8:a4:c7:c0:a0:0f:81:fb:76:4d:fb:18: ab:e7:24:78:78:fe:1a:05:e2:15:ce:78:b7:af:fa:03:09:7a: 61:0c:21:fb:24:39:d5:51:fd:69:4f:c4:0e:d7:e8:74:16:81: 97:df:bd:76:a5:ca:33:de:cb:8e:ae:d8:17:97:4d:d4:56:91: 0c:4f:d1:04:f1:a9:c2:51:69:35:02:79:29:95:92:fa:49:70: df:40:bd:dc:f5:94:16:e6:bd:a8:a2:6b:7c:89:06:39:ee:ea: 1c:32:85:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUVFNEIxMTAvBgNVBAUTKEI3NzI4M0M1MzMxMTNBMzkxRTMxRDk0NTI3MTg2QUNG ODM5OUEyNUYwHhcNMjUxMTAyMTkxMTEzWhcNMjUxMTA5MTkxMTEzWjAYMRYwFAYD VQQDEw02OTA3YWNkMi1hZGQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwGhfl2+NAilWKSgnB6geDrEFqgFbw/I78cGM2WApMxZoicN70v1BM6rf0IA8 gp0J3O6xwyA2JTiR80vzG0ylMscVkitHR25V3I/qyDJxNQsvOXteCahVO5z58UvV U1rA9EwBVfb8kuBmFp5Gr08lTtPCrJe0F+goS5m0Sl97vMl23Qs06rE6IbDy3brf UZXco0ypBwsDgnbXycI4BWOCSsr13d9g2Uu008HoYNtekTBIC1cowV3j/XeZEF25 5gD4a1hiJP5Ds2UmAvsF5+HsTZPrwGnmXx5zRVeP61MciZz+GfW6FYxG0/jPWHZR 76Rys9HEhUENhh5d4ta2ttigfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO8+indG 2WrejIkCwp05I+BLvtY5MB8GA1UdIwQYMBaAFLdyg8UzETo5HjHZRScYas+DmaJf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRUU0Qi82M0RGRjgwMjQ1 QTQxMUVBOTQyRTA5NTdDNEY5QUUwMi90M0tEeFRNUk9qa2VNZGxGSnhocXo0T1pv bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3QzS0R4VE1ST2prZU1kbEZKeGhxejRPWm9sOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RUU0Qi82M0RGRjgwMjQ1QTQxMUVBOTQyRTA5NTdDNEY5QUUwMi90M0tEeFRNUk9q a2VNZGxGSnhocXo0T1pvbDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBz2qEO4cbcuSXIZ92hW2+Obv/QZbqZL6y2w/9EHa+95NC6FWp4K3kI Xmof8mWmC+QYjVgWKo/sFpB1uaONE8hxrEM1A3V+gw8Befab382Vb2yw9gZT3Z4Z H0A29+FIm8sQYUIJHX298v0LdVMr36+593DvKcbm7lBHN4r41R5o50V/Tuv1wAn9 ldo77SO7oRMdCZ+pNZXIpMfAoA+B+3ZN+xir5yR4eP4aBeIVzni3r/oDCXphDCH7 JDnVUf1pT8QO1+h0FoGX3712pcoz3suOrtgXl03UVpEMT9EE8anCUWk1AnkplZL6 SXDfQL3c9ZQW5r2oomt8iQY57uocMoU2 -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:34 2025 by rpki-client