$ rpki-client -vvf rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.mft File: 3-Ss3KCmIkNlS9IJNoIFeOktJSQ.mft (raw, json) Hash identifier: uumS6Q5pRLFT1Q3OCdgDKNGvHgJKvAE+BmLCkN7PcIg= Subject key identifier: 53:61:75:D7:95:F6:8D:61:20:F8:FD:2E:64:15:26:F8:3B:BF:93:1F Authority key identifier: DF:E4:AC:DC:A0:A6:22:43:65:4B:D2:09:36:82:05:78:E9:2D:25:24 Certificate issuer: /CN=A91B31CB/serialNumber=DFE4ACDCA0A62243654BD20936820578E92D2524 Certificate serial: CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.mft Manifest number: C8 Signing time: Wed 05 Nov 2025 05:57:52 +0000 Manifest this update: Wed 05 Nov 2025 05:57:52 +0000 Manifest next update: Wed 12 Nov 2025 05:57:52 +0000 Files and hashes: 1: 3-Ss3KCmIkNlS9IJNoIFeOktJSQ.crl (hash: AFyHoR/z+cXTvhSqSk6IHdqv03aj9u2NOAFwKqUY+I4=) 2: 67030B7889F111EFB3186A7BC4F9AE02.roa (hash: jpoA3nOwURms9S72GBWIhr5w5HiTb8jNg/HLvSF6ab8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.crl rsync://rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:57:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 202 (0xca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B31CB, serialNumber=DFE4ACDCA0A62243654BD20936820578E92D2524 Validity Not Before: Nov 5 05:57:52 2025 GMT Not After : Nov 12 05:57:52 2025 GMT Subject: CN=690ae760-4fba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6b:20:f0:31:78:fd:a7:bc:48:9e:34:15:1f: e5:1d:db:7f:fe:f4:c3:cf:54:d5:d7:56:1d:cc:34: 49:2b:1f:de:ac:21:43:8b:55:fc:2b:0e:7c:05:94: 7a:da:58:89:d2:c7:90:20:78:3d:4e:d0:97:69:00: 1b:4d:c8:eb:ba:dc:08:4f:ff:12:2c:9a:5a:3d:ee: 8e:b9:ed:26:3d:9b:af:48:23:ad:7e:a3:9d:a2:52: 9d:7a:f1:d0:46:8f:52:61:37:69:19:5c:d6:06:18: e6:ff:e3:e6:d0:a2:b6:9d:2e:61:b9:a2:87:6d:14: 34:85:07:60:43:51:ac:7a:95:b1:7a:08:a3:76:fc: de:75:5d:70:41:c4:11:ac:13:a9:25:8b:a1:90:6b: 7e:de:79:69:a9:10:04:18:eb:67:08:f8:6b:e6:2b: 3a:c5:d3:33:d4:99:11:20:8f:bd:d6:35:01:d7:87: ae:87:7a:4b:93:60:c6:8c:19:41:6d:ac:9a:d3:cf: a4:1c:10:38:f0:b2:33:5b:8a:fa:f2:60:f3:04:d8: e4:c8:a4:21:a9:9a:96:f2:d0:69:74:2b:b6:59:27: 1b:e0:34:85:a5:e0:42:f1:1c:04:42:71:f2:ac:ff: 8e:3c:8f:69:00:44:63:ca:3a:04:1b:48:b4:3a:16: 06:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:61:75:D7:95:F6:8D:61:20:F8:FD:2E:64:15:26:F8:3B:BF:93:1F X509v3 Authority Key Identifier: keyid:DF:E4:AC:DC:A0:A6:22:43:65:4B:D2:09:36:82:05:78:E9:2D:25:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:b6:34:e9:04:ef:8c:4a:27:c9:3b:65:2a:90:ce:ee:83:84: 18:19:c4:c9:41:ad:69:9f:11:fd:14:69:e4:08:ea:e2:d3:18: 79:4a:a1:e8:cc:56:0e:fc:e8:40:5c:2b:1d:ce:d3:d9:49:fa: 7f:74:1c:2c:a2:78:c2:1c:d6:a2:5f:7b:b6:76:8f:6f:80:2c: dd:5b:78:b8:3f:0d:7f:4c:12:00:d4:18:e1:b7:74:12:5f:dd: d6:3e:c9:64:b6:af:ee:04:71:10:d9:ea:c3:7a:ed:e0:c5:bb: f2:e2:f2:2a:af:89:72:c2:4f:da:7b:8c:46:d8:fc:17:e4:04: c7:90:a1:df:0c:f1:d8:37:f3:90:46:b5:18:9e:b5:54:85:7c: 04:21:07:03:c0:97:41:c2:e8:4a:07:3e:ff:e8:92:04:30:34: bc:d6:f3:fa:26:5a:a5:96:28:e0:28:54:56:28:c1:59:52:ac: 74:07:91:b4:a5:75:e7:40:38:21:ea:3f:b0:3a:ce:21:bb:22: f2:6a:d8:dd:6d:1b:c3:0a:bd:37:95:cf:f6:46:0d:38:05:50: f5:2d:d9:1a:d2:83:53:e5:19:45:a7:7f:38:61:8a:d2:78:ba: 10:94:71:4b:04:bf:42:ad:c3:b9:09:7e:10:7d:20:12:f7:b9: 6d:ee:0c:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjMxQ0IxMTAvBgNVBAUTKERGRTRBQ0RDQTBBNjIyNDM2NTRCRDIwOTM2ODIwNTc4 RTkyRDI1MjQwHhcNMjUxMTA1MDU1NzUyWhcNMjUxMTEyMDU1NzUyWjAYMRYwFAYD VQQDEw02OTBhZTc2MC00ZmJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsWsg8DF4/ae8SJ40FR/lHdt//vTDz1TV11YdzDRJKx/erCFDi1X8Kw58BZR6 2liJ0seQIHg9TtCXaQAbTcjrutwIT/8SLJpaPe6Oue0mPZuvSCOtfqOdolKdevHQ Ro9SYTdpGVzWBhjm/+Pm0KK2nS5huaKHbRQ0hQdgQ1GsepWxegijdvzedV1wQcQR rBOpJYuhkGt+3nlpqRAEGOtnCPhr5is6xdMz1JkRII+91jUB14euh3pLk2DGjBlB baya08+kHBA48LIzW4r68mDzBNjkyKQhqZqW8tBpdCu2WScb4DSFpeBC8RwEQnHy rP+OPI9pAERjyjoEG0i0OhYG3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFNhddeV 9o1hIPj9LmQVJvg7v5MfMB8GA1UdIwQYMBaAFN/krNygpiJDZUvSCTaCBXjpLSUk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzFDQi9GNDRDQ0Y3RTg5 RjAxMUVGQUQyNkI5N0FDNEY5QUUwMi8zLVNzM0tDbUlrTmxTOUlKTm9JRmVPa3RK U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMtU3MzS0NtSWtObFM5SUpOb0lGZU9rdEpTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzFDQi9GNDRDQ0Y3RTg5RjAxMUVGQUQyNkI5N0FDNEY5QUUwMi8zLVNzM0tDbUlr TmxTOUlKTm9JRmVPa3RKU1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCatjTpBO+MSifJO2UqkM7ug4QYGcTJQa1pnxH9FGnkCOri0xh5SqHo zFYO/OhAXCsdztPZSfp/dBwsonjCHNaiX3u2do9vgCzdW3i4Pw1/TBIA1Bjht3QS X93WPslktq/uBHEQ2erDeu3gxbvy4vIqr4lywk/ae4xG2PwX5ATHkKHfDPHYN/OQ RrUYnrVUhXwEIQcDwJdBwuhKBz7/6JIEMDS81vP6JlqllijgKFRWKMFZUqx0B5G0 pXXnQDgh6j+wOs4huyLyatjdbRvDCr03lc/2Rg04BVD1Ldka0oNT5RlFp384YYrS eLoQlHFLBL9CrcO5CX4QfSAS97lt7gzW -----END CERTIFICATE-----Generated at Wed Nov 5 08:02:52 2025 by rpki-client