$ rpki-client -vvf rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.mft File: 3BEw2GFrq8bOCI9fIOaXGamcMrs.mft (raw, json) Hash identifier: 0m4kKY5Snoj6QHXXweqO0QAylxrFtsDj9PBNmqjie6g= Subject key identifier: 1D:BA:3E:C2:CD:59:A3:21:BC:F4:2D:C0:79:B4:42:B5:E9:A2:87:64 Authority key identifier: DC:11:30:D8:61:6B:AB:C6:CE:08:8F:5F:20:E6:97:19:A9:9C:32:BB Certificate issuer: /CN=A91B732A/serialNumber=DC1130D8616BABC6CE088F5F20E69719A99C32BB Certificate serial: AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3BEw2GFrq8bOCI9fIOaXGamcMrs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.mft Manifest number: AA Signing time: Mon 03 Nov 2025 06:12:47 +0000 Manifest this update: Mon 03 Nov 2025 06:12:47 +0000 Manifest next update: Mon 10 Nov 2025 06:12:47 +0000 Files and hashes: 1: 3BEw2GFrq8bOCI9fIOaXGamcMrs.crl (hash: JbqYazrdYSYjN/n1z+HxKnHuzR7xvMF8sUYp3Sh12/Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.crl rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3BEw2GFrq8bOCI9fIOaXGamcMrs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:12:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 170 (0xaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B732A, serialNumber=DC1130D8616BABC6CE088F5F20E69719A99C32BB Validity Not Before: Nov 3 06:12:47 2025 GMT Not After : Nov 10 06:12:47 2025 GMT Subject: CN=690847df-e3ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:88:32:f8:09:e6:b9:4c:b4:a3:bf:b9:65:ef: 46:49:d5:d2:38:56:35:7c:e5:7d:86:e4:42:f4:85: 27:36:48:19:16:5d:f2:a4:4b:c6:d3:63:04:d4:32: 15:df:fd:34:12:e9:57:e1:24:35:c3:f8:e7:e5:24: d1:98:d4:de:6a:b2:8a:4a:9f:05:3d:5c:31:47:3a: 1a:6c:ad:73:f1:b8:47:f7:23:0c:f7:ef:1c:cb:8f: fe:bb:22:81:d6:5e:da:57:b3:48:95:b6:58:f9:9b: 75:51:a6:35:a4:9b:0c:04:c2:7f:46:a1:c8:3e:04: 41:d3:75:f1:5d:ca:07:3e:5e:be:05:4b:19:c7:58: ef:97:22:ec:5a:d8:19:91:8f:4a:00:80:1c:b9:98: 5a:c9:47:9b:3a:d0:37:39:ec:35:2c:27:a2:51:bd: 72:76:4c:8f:38:38:f3:df:6a:1d:49:dd:73:94:78: eb:3e:6e:92:e5:e7:62:9f:f2:45:c0:9b:2b:6c:00: 64:db:cf:87:85:56:83:5e:0f:3e:c3:da:2e:03:6b: d5:54:9a:ab:cb:fa:35:6a:c1:e4:72:5f:cf:53:4a: 23:13:6c:41:6a:5d:55:2a:60:c2:0c:31:7f:dc:6c: 97:2d:b7:0f:b6:e4:96:5c:8d:a9:7a:96:2c:d8:7a: 2c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:BA:3E:C2:CD:59:A3:21:BC:F4:2D:C0:79:B4:42:B5:E9:A2:87:64 X509v3 Authority Key Identifier: keyid:DC:11:30:D8:61:6B:AB:C6:CE:08:8F:5F:20:E6:97:19:A9:9C:32:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3BEw2GFrq8bOCI9fIOaXGamcMrs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:b6:d0:05:07:84:a6:48:1f:e5:9d:f1:18:a7:f1:f0:56:87: c8:47:16:f4:7a:75:e3:ee:7f:96:69:88:c2:3a:ac:12:45:fb: b4:06:50:95:b8:9f:48:dc:26:1e:c1:cb:a8:41:90:f6:c8:c3: 3a:bc:1b:3f:1a:c7:fe:1e:55:5b:c1:d5:ec:f7:ed:dc:8d:6c: 36:fc:6b:ac:8d:59:b5:bf:47:fc:25:a3:12:5c:c5:80:37:00: c3:a3:ad:c8:05:97:18:c6:92:b0:37:7f:a5:24:52:c1:36:cd: 38:0d:80:7e:3e:d1:42:0e:d3:80:df:d8:1f:66:09:62:2e:30: e1:cb:c4:45:d0:b1:84:83:22:ed:54:38:ca:bb:57:da:c2:d2: 4d:1a:21:13:ad:bb:39:00:f5:ae:88:93:0d:d3:b4:d0:79:71: c6:4c:5f:47:6b:7c:94:ed:3c:41:c6:56:6e:a7:bf:bf:35:bd: 74:4b:e7:cd:07:af:c9:99:79:57:05:ae:18:21:17:ad:4d:0f: 0c:b3:32:0e:1d:22:94:d9:b3:06:8c:b5:2b:93:db:88:cb:05: ce:eb:9f:11:12:cd:75:34:88:a2:ae:2a:d0:78:21:b0:05:39: 12:29:f5:7f:3d:95:29:bf:62:8b:a8:44:50:a9:cc:b7:d1:bc: 8c:29:6c:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjczMkExMTAvBgNVBAUTKERDMTEzMEQ4NjE2QkFCQzZDRTA4OEY1RjIwRTY5NzE5 QTk5QzMyQkIwHhcNMjUxMTAzMDYxMjQ3WhcNMjUxMTEwMDYxMjQ3WjAYMRYwFAYD VQQDEw02OTA4NDdkZi1lM2FlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA14gy+AnmuUy0o7+5Ze9GSdXSOFY1fOV9huRC9IUnNkgZFl3ypEvG02ME1DIV 3/00EulX4SQ1w/jn5STRmNTearKKSp8FPVwxRzoabK1z8bhH9yMM9+8cy4/+uyKB 1l7aV7NIlbZY+Zt1UaY1pJsMBMJ/RqHIPgRB03XxXcoHPl6+BUsZx1jvlyLsWtgZ kY9KAIAcuZhayUebOtA3Oew1LCeiUb1ydkyPODjz32odSd1zlHjrPm6S5edin/JF wJsrbABk28+HhVaDXg8+w9ouA2vVVJqry/o1asHkcl/PU0ojE2xBal1VKmDCDDF/ 3GyXLbcPtuSWXI2pepYs2HosqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB26PsLN WaMhvPQtwHm0QrXpoodkMB8GA1UdIwQYMBaAFNwRMNhha6vGzgiPXyDmlxmpnDK7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzMyQS8wODlCQzRFNkI2 MzExMUVGQTJEN0ZCNjNDNEY5QUUwMi8zQkV3MkdGcnE4Yk9DSTlmSU9hWEdhbWNN cnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNCRXcyR0ZycThiT0NJOWZJT2FYR2FtY01ycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzMyQS8wODlCQzRFNkI2MzExMUVGQTJEN0ZCNjNDNEY5QUUwMi8zQkV3MkdGcnE4 Yk9DSTlmSU9hWEdhbWNNcnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsttAFB4SmSB/lnfEYp/HwVofIRxb0enXj7n+WaYjCOqwSRfu0BlCV uJ9I3CYewcuoQZD2yMM6vBs/Gsf+HlVbwdXs9+3cjWw2/GusjVm1v0f8JaMSXMWA NwDDo63IBZcYxpKwN3+lJFLBNs04DYB+PtFCDtOA39gfZgliLjDhy8RF0LGEgyLt VDjKu1fawtJNGiETrbs5APWuiJMN07TQeXHGTF9Ha3yU7TxBxlZup7+/Nb10S+fN B6/JmXlXBa4YIRetTQ8MszIOHSKU2bMGjLUrk9uIywXO658REs11NIiirirQeCGw BTkSKfV/PZUpv2KLqERQqcy30byMKWz7 -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:12 2025 by rpki-client