$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5727/2543244C920711F0A837414CC4F9AE02/3mzaaasayJrnX3Zc53Jz4Rt_1n4.mft File: 3mzaaasayJrnX3Zc53Jz4Rt_1n4.mft (raw, json) Hash identifier: qxDVn5VvOJnnZ91o12ABJ1raiXl8kmpUm5Foqpq4AU4= Subject key identifier: 1F:DF:1B:C4:94:8C:1A:C2:89:AC:27:13:6C:DB:37:AB:40:F6:BB:64 Authority key identifier: DE:6C:DA:69:AB:1A:C8:9A:E7:5F:76:5C:E7:72:73:E1:1B:7F:D6:7E Certificate issuer: /CN=A91C5727/serialNumber=DE6CDA69AB1AC89AE75F765CE77273E11B7FD67E Certificate serial: 1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3mzaaasayJrnX3Zc53Jz4Rt_1n4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5727/2543244C920711F0A837414CC4F9AE02/3mzaaasayJrnX3Zc53Jz4Rt_1n4.mft Manifest number: 1A Signing time: Mon 03 Nov 2025 07:49:51 +0000 Manifest this update: Mon 03 Nov 2025 07:49:50 +0000 Manifest next update: Mon 10 Nov 2025 07:49:50 +0000 Files and hashes: 1: 3mzaaasayJrnX3Zc53Jz4Rt_1n4.crl (hash: uqO4zKaeBIizzxg7hXUB2ok0EiqOpfPLYy94XCP0E/E=) 2: 54338F04B19111F0A5C55920C4F9AE02.roa (hash: 698t+8gbmef5TGfM4Cz5spoT/C6WF9SKp+ihzDQ5RW0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5727/2543244C920711F0A837414CC4F9AE02/3mzaaasayJrnX3Zc53Jz4Rt_1n4.crl rsync://rpki.apnic.net/member_repository/A91C5727/2543244C920711F0A837414CC4F9AE02/3mzaaasayJrnX3Zc53Jz4Rt_1n4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3mzaaasayJrnX3Zc53Jz4Rt_1n4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5727, serialNumber=DE6CDA69AB1AC89AE75F765CE77273E11B7FD67E Validity Not Before: Nov 3 07:49:50 2025 GMT Not After : Nov 10 07:49:50 2025 GMT Subject: CN=69085e9e-5fce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7d:44:a7:63:76:3b:56:1b:0b:d5:48:c0:26: b0:08:a3:19:df:11:34:eb:53:d7:75:36:5d:80:87: 75:be:56:45:b9:f8:fc:db:7d:57:68:13:9b:d8:41: 5f:b6:ba:af:75:b6:be:06:75:30:ad:0b:40:d6:b0: 0d:58:6d:7e:c6:06:09:49:7b:e4:9a:8e:04:c0:8e: 2e:38:1a:93:1b:be:3d:4b:bb:5f:a4:42:94:d0:18: 4b:26:8a:ad:3b:e3:cf:12:bf:91:5c:2c:4f:ec:a0: 2c:fd:e0:40:94:bb:f4:8f:4f:53:e6:9b:d7:2f:cd: b8:92:7b:ed:e9:2c:06:be:2a:4f:4c:26:21:4b:b0: 1c:85:39:fb:9f:86:cb:6a:cd:70:a6:d3:61:1b:dc: c6:85:99:10:6d:fc:46:3c:cf:29:f2:1e:6b:b8:9f: a0:96:ea:6a:9c:f0:27:6c:2b:0f:6a:ff:e6:21:00: aa:be:6b:dc:e3:c1:5c:16:b8:b4:ce:5a:93:e2:3a: 03:87:d1:cd:c7:08:b0:07:4a:17:42:36:26:0f:23: ab:ed:58:c5:08:73:c6:7e:6e:6e:71:ed:9b:ea:3c: 30:a2:7d:7e:70:89:2f:de:7d:d6:b2:f4:f0:19:6a: 9f:8c:9d:87:44:1d:8e:9b:de:3e:85:da:02:e1:91: 86:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:DF:1B:C4:94:8C:1A:C2:89:AC:27:13:6C:DB:37:AB:40:F6:BB:64 X509v3 Authority Key Identifier: keyid:DE:6C:DA:69:AB:1A:C8:9A:E7:5F:76:5C:E7:72:73:E1:1B:7F:D6:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5727/2543244C920711F0A837414CC4F9AE02/3mzaaasayJrnX3Zc53Jz4Rt_1n4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3mzaaasayJrnX3Zc53Jz4Rt_1n4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5727/2543244C920711F0A837414CC4F9AE02/3mzaaasayJrnX3Zc53Jz4Rt_1n4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:bc:ea:c9:65:5c:2d:05:63:eb:38:4b:57:e1:2a:2d:81:18: 1c:27:8a:64:ac:27:cd:8a:c7:e7:03:72:d4:5a:a7:64:ab:7b: 77:3c:ea:47:4b:1e:2a:8d:c9:08:bd:92:a4:f3:a0:8c:09:66: c7:e0:13:71:1b:91:1e:b4:60:d4:6f:3d:7d:27:32:0e:2f:c3: 73:be:72:85:16:94:f8:48:31:95:3e:b9:88:b2:b0:bc:65:3a: d8:e7:ce:62:bd:43:55:5d:6b:58:b5:3c:fe:97:e7:ea:b8:d9: 64:c5:2a:01:f0:1a:93:2a:f1:a3:ed:6c:17:70:18:e9:d2:58: b6:e7:62:d1:30:34:7a:71:31:ad:d8:6c:cf:80:09:96:6e:f5: 4c:17:34:fb:5f:63:f3:db:ac:f7:8d:a4:fa:7d:30:b5:ce:d5: 14:5e:1a:9e:03:38:c7:c5:56:ee:44:20:78:5c:d4:a5:af:05: fc:3b:5d:fc:cb:ae:49:f6:5b:6f:c5:a6:95:e9:2b:9f:8b:1a: 65:f3:b2:af:80:ed:7d:dd:a7:c7:07:b8:bf:c5:89:81:8c:3d: ba:f9:2b:88:25:c6:de:fc:4f:ba:6b:a0:44:5a:34:61:d7:70: f4:21:20:f2:84:33:9c:fe:82:cc:35:67:65:6f:75:ee:88:65: b1:d9:f2:04 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NTcyNzExMC8GA1UEBRMoREU2Q0RBNjlBQjFBQzg5QUU3NUY3NjVDRTc3MjczRTEx QjdGRDY3RTAeFw0yNTExMDMwNzQ5NTBaFw0yNTExMTAwNzQ5NTBaMBgxFjAUBgNV BAMTDTY5MDg1ZTllLTVmY2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCpfUSnY3Y7VhsL1UjAJrAIoxnfETTrU9d1Nl2Ah3W+VkW5+PzbfVdoE5vYQV+2 uq91tr4GdTCtC0DWsA1YbX7GBglJe+SajgTAji44GpMbvj1Lu1+kQpTQGEsmiq07 488Sv5FcLE/soCz94ECUu/SPT1Pmm9cvzbiSe+3pLAa+Kk9MJiFLsByFOfufhstq zXCm02Eb3MaFmRBt/EY8zynyHmu4n6CW6mqc8CdsKw9q/+YhAKq+a9zjwVwWuLTO WpPiOgOH0c3HCLAHShdCNiYPI6vtWMUIc8Z+bm5x7ZvqPDCifX5wiS/efday9PAZ ap+MnYdEHY6b3j6F2gLhkYahAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUH98bxJSM GsKJrCcTbNs3q0D2u2QwHwYDVR0jBBgwFoAU3mzaaasayJrnX3Zc53Jz4Rt/1n4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM1NzI3LzI1NDMyNDRDOTIw NzExRjBBODM3NDE0Q0M0RjlBRTAyLzNtemFhYXNheUpyblgzWmM1M0p6NFJ0XzFu NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM216YWFhc2F5SnJuWDNaYzUzSno0UnRfMW40LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM1 NzI3LzI1NDMyNDRDOTIwNzExRjBBODM3NDE0Q0M0RjlBRTAyLzNtemFhYXNheUpy blgzWmM1M0p6NFJ0XzFuNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB286sllXC0FY+s4S1fhKi2BGBwnimSsJ82Kx+cDctRap2Sre3c86kdL HiqNyQi9kqTzoIwJZsfgE3EbkR60YNRvPX0nMg4vw3O+coUWlPhIMZU+uYiysLxl OtjnzmK9Q1Vda1i1PP6X5+q42WTFKgHwGpMq8aPtbBdwGOnSWLbnYtEwNHpxMa3Y bM+ACZZu9UwXNPtfY/PbrPeNpPp9MLXO1RReGp4DOMfFVu5EIHhc1KWvBfw7XfzL rkn2W2/FppXpK5+LGmXzsq+A7X3dp8cHuL/FiYGMPbr5K4glxt78T7proERaNGHX cPQhIPKEM5z+gsw1Z2Vvde6IZbHZ8gQ= -----END CERTIFICATE-----Generated at Mon Nov 3 18:06:47 2025 by rpki-client