$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.mft File: 3vCat-atSADQZ9cCq_MCJincVuA.mft (raw, json) Hash identifier: xaYMK74rYbsiaFwWJ4/HpaFbBbKnaSjSY4m1Qp7imj0= Subject key identifier: 6D:45:51:4D:AB:5E:54:60:3A:E4:7F:2C:10:D2:24:3D:5D:6D:18:C3 Authority key identifier: DE:F0:9A:B7:E6:AD:48:00:D0:67:D7:02:AB:F3:02:26:29:DC:56:E0 Certificate issuer: /CN=A91B7B32/serialNumber=DEF09AB7E6AD4800D067D702ABF3022629DC56E0 Certificate serial: 0193 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vCat-atSADQZ9cCq_MCJincVuA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.mft Manifest number: 0190 Signing time: Mon 03 Nov 2025 03:27:19 +0000 Manifest this update: Mon 03 Nov 2025 03:27:19 +0000 Manifest next update: Mon 10 Nov 2025 03:27:19 +0000 Files and hashes: 1: 3vCat-atSADQZ9cCq_MCJincVuA.crl (hash: 22iVB8Kw8aGiytiqik3QMkMpF0DXAT6LJZ3mUgu0t/w=) 2: 2B7210D251F211EEA079D567C4F9AE02.roa (hash: yvW+7KEN1r2AnGybLD+cJdYpMMr9FOvcXCauGaGi/l8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.crl rsync://rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vCat-atSADQZ9cCq_MCJincVuA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:27:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 403 (0x193) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7B32, serialNumber=DEF09AB7E6AD4800D067D702ABF3022629DC56E0 Validity Not Before: Nov 3 03:27:19 2025 GMT Not After : Nov 10 03:27:19 2025 GMT Subject: CN=69082117-6131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:cb:01:ef:d1:7f:bd:c8:54:fe:d0:0c:e4:34: 1d:e4:d7:1e:32:2a:90:5b:1a:4b:2a:45:02:bf:39: 94:2e:32:21:3e:20:75:fd:6c:d4:8e:84:c5:80:5b: 93:cb:c3:e2:99:30:8f:a1:e0:fc:f3:38:44:8d:a0: cf:a9:8d:31:e7:55:39:ac:0d:02:e5:0b:38:7f:da: 5c:86:f8:86:f4:0a:87:69:4c:aa:d5:78:09:23:17: d5:fd:15:e7:6f:55:5d:46:47:11:20:f1:f5:68:65: 6e:ac:3c:8d:7e:94:9d:4a:7d:7a:2e:b5:ea:6c:1c: 83:53:dd:87:6e:9b:af:a4:f1:65:15:ef:31:8e:7a: c0:56:b8:6c:0b:e0:19:bd:e0:2a:f7:e1:63:e2:cb: 45:6b:ed:f2:a5:db:8a:54:7f:db:7b:d5:b2:4e:ef: ed:d5:a7:06:97:5c:ff:8f:a5:8b:23:e3:8c:8f:af: 8c:b6:83:4d:44:b3:a1:e0:9e:33:41:81:5e:a9:92: 0f:af:64:bc:70:bf:fb:4c:cd:e7:de:8c:b6:84:44: b8:21:21:57:fc:6c:da:64:a6:55:68:04:88:fd:65: 58:2b:2f:bc:36:4c:bc:74:a1:dd:8a:07:30:60:c0: f6:b0:85:f0:8d:82:6c:cd:ec:e4:66:58:38:be:96: 23:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:45:51:4D:AB:5E:54:60:3A:E4:7F:2C:10:D2:24:3D:5D:6D:18:C3 X509v3 Authority Key Identifier: keyid:DE:F0:9A:B7:E6:AD:48:00:D0:67:D7:02:AB:F3:02:26:29:DC:56:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vCat-atSADQZ9cCq_MCJincVuA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:3a:26:73:5e:82:a2:71:22:20:94:4d:f2:99:29:c2:77:7e: be:62:5f:c1:39:4f:2d:dc:79:df:56:3a:ae:d2:be:36:86:0a: 80:4f:d4:c2:a9:6f:26:91:f2:0d:1e:56:d0:3e:15:70:c7:08: d2:33:24:97:4f:b0:10:66:2e:a3:3a:dd:b2:c7:5e:ff:e9:83: 73:bc:69:12:76:e4:18:c0:e9:9c:75:ae:fe:e2:06:de:b8:d6: c7:08:48:f2:d0:08:51:88:36:6e:78:aa:46:61:49:7e:46:ac: 05:bf:58:7d:7e:10:2b:19:81:46:64:fc:b3:5f:ab:1d:a5:e0: 49:44:43:8e:4e:7e:ea:cd:43:df:ab:62:e2:fc:4e:e1:23:37: 0c:e6:cf:24:c5:36:90:17:f8:4c:cf:41:60:61:39:38:ea:d4: bd:9c:b4:08:f2:b8:03:40:7a:af:2b:00:e5:93:af:c6:db:c8: 2c:e5:d7:48:e2:5f:ea:dd:07:55:51:04:dc:27:15:36:cc:84: 1b:f0:3a:bc:3a:18:41:ac:e6:b2:ed:5b:e5:0b:32:fa:14:17: b9:01:0c:24:fb:de:e5:bf:c3:3e:47:3d:95:7d:b7:46:3d:be: f6:91:73:25:ce:77:73:56:15:c7:3a:9e:ca:ec:77:6c:9b:c6: da:9c:6e:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdCMzIxMTAvBgNVBAUTKERFRjA5QUI3RTZBRDQ4MDBEMDY3RDcwMkFCRjMwMjI2 MjlEQzU2RTAwHhcNMjUxMTAzMDMyNzE5WhcNMjUxMTEwMDMyNzE5WjAYMRYwFAYD VQQDEw02OTA4MjExNy02MTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAucsB79F/vchU/tAM5DQd5NceMiqQWxpLKkUCvzmULjIhPiB1/WzUjoTFgFuT y8PimTCPoeD88zhEjaDPqY0x51U5rA0C5Qs4f9pchviG9AqHaUyq1XgJIxfV/RXn b1VdRkcRIPH1aGVurDyNfpSdSn16LrXqbByDU92HbpuvpPFlFe8xjnrAVrhsC+AZ veAq9+Fj4stFa+3ypduKVH/be9WyTu/t1acGl1z/j6WLI+OMj6+MtoNNRLOh4J4z QYFeqZIPr2S8cL/7TM3n3oy2hES4ISFX/GzaZKZVaASI/WVYKy+8Nky8dKHdigcw YMD2sIXwjYJszezkZlg4vpYjZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG1FUU2r XlRgOuR/LBDSJD1dbRjDMB8GA1UdIwQYMBaAFN7wmrfmrUgA0GfXAqvzAiYp3Fbg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0IzMi9BQzM2QjM2ODUx RjExMUVFQTdEQzI2NjZDNEY5QUUwMi8zdkNhdC1hdFNBRFFaOWNDcV9NQ0ppbmNW dUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzN2Q2F0LWF0U0FEUVo5Y0NxX01DSmluY1Z1QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0IzMi9BQzM2QjM2ODUxRjExMUVFQTdEQzI2NjZDNEY5QUUwMi8zdkNhdC1hdFNB RFFaOWNDcV9NQ0ppbmNWdUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMOiZzXoKicSIglE3ymSnCd36+Yl/BOU8t3HnfVjqu0r42hgqAT9TC qW8mkfINHlbQPhVwxwjSMySXT7AQZi6jOt2yx17/6YNzvGkSduQYwOmcda7+4gbe uNbHCEjy0AhRiDZueKpGYUl+RqwFv1h9fhArGYFGZPyzX6sdpeBJREOOTn7qzUPf q2Li/E7hIzcM5s8kxTaQF/hMz0FgYTk46tS9nLQI8rgDQHqvKwDlk6/G28gs5ddI 4l/q3QdVUQTcJxU2zIQb8Dq8OhhBrOay7VvlCzL6FBe5AQwk+97lv8M+Rz2VfbdG Pb72kXMlzndzVhXHOp7K7Hdsm8banG5F -----END CERTIFICATE-----Generated at Mon Nov 3 18:06:57 2025 by rpki-client