$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA58E/908DB4C88C6811F0BCEEB171C4F9AE02/P3JyYLCUlEIN1npzBNggXUL_P_E.mft File: P3JyYLCUlEIN1npzBNggXUL_P_E.mft (raw, json) Hash identifier: XvWyTh8osiubJ7rsDbAHS964lo+hjn1KfiFZ4Bb5yjM= Subject key identifier: 3E:FF:AD:FF:03:B6:0D:18:44:B1:1E:5C:72:F1:98:88:9D:3B:F0:9D Authority key identifier: 3F:72:72:60:B0:94:94:42:0D:D6:7A:73:04:D8:20:5D:42:FF:3F:F1 Certificate issuer: /CN=A91CA58E/serialNumber=3F727260B09494420DD67A7304D8205D42FF3FF1 Certificate serial: 1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3JyYLCUlEIN1npzBNggXUL_P_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA58E/908DB4C88C6811F0BCEEB171C4F9AE02/P3JyYLCUlEIN1npzBNggXUL_P_E.mft Manifest number: 1E Signing time: Wed 05 Nov 2025 07:57:58 +0000 Manifest this update: Wed 05 Nov 2025 07:57:57 +0000 Manifest next update: Wed 12 Nov 2025 07:57:57 +0000 Files and hashes: 1: P3JyYLCUlEIN1npzBNggXUL_P_E.crl (hash: H7XnvJKLTzbOuhePtAaxghdPXGn8lbEOvBw8GUQZLBs=) 2: 3DC1FF148C6911F08611A235C4F9AE02.roa (hash: fLngag0jvcUXsL/3ScrJd5vhIuo9JacsTzQUqtZ8EUg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA58E/908DB4C88C6811F0BCEEB171C4F9AE02/P3JyYLCUlEIN1npzBNggXUL_P_E.crl rsync://rpki.apnic.net/member_repository/A91CA58E/908DB4C88C6811F0BCEEB171C4F9AE02/P3JyYLCUlEIN1npzBNggXUL_P_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3JyYLCUlEIN1npzBNggXUL_P_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:57:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA58E, serialNumber=3F727260B09494420DD67A7304D8205D42FF3FF1 Validity Not Before: Nov 5 07:57:57 2025 GMT Not After : Nov 12 07:57:57 2025 GMT Subject: CN=690b0385-f2a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:71:3c:ce:9a:43:f8:ba:01:b0:00:a9:c0:31: df:78:46:2e:b3:3a:df:d1:b3:8f:9d:1b:c7:12:ba: 06:57:9c:20:f6:e3:a4:47:6c:fa:2b:36:35:70:26: 34:20:3a:6e:9b:e3:80:cd:15:1e:84:c6:90:65:8e: 7a:ea:79:7f:c1:ab:c7:f6:19:1f:04:5c:ba:c1:56: ac:82:db:45:e4:ce:4b:dc:1b:57:14:19:e0:ab:f2: 22:ac:a3:a4:18:23:2a:ba:b5:03:07:be:9d:8c:de: 1e:c4:dd:b5:5b:d0:3c:75:c9:9b:8c:d7:1b:67:4c: 14:b2:90:cc:0c:d6:33:8b:5d:af:cc:3a:be:34:63: f3:eb:97:25:0e:e4:7b:9c:73:db:31:0e:a9:32:ad: 96:c9:1e:90:82:60:e8:a5:f5:73:9d:9c:b3:ab:8d: 0e:7a:0f:6f:a4:34:83:87:3a:e6:00:bd:82:9a:3a: 1d:4f:01:39:93:50:b2:c9:e7:c3:af:48:a9:13:2c: 47:50:53:44:df:b3:e1:c7:e8:5f:7a:49:08:61:e8: 12:f0:63:44:30:20:1e:34:9e:64:89:57:68:7f:65: a1:b9:e3:38:eb:f0:5c:a5:0e:00:b6:b5:ac:59:be: 57:1e:bd:b0:18:20:07:91:b5:36:29:6e:f4:d9:8d: 6e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:FF:AD:FF:03:B6:0D:18:44:B1:1E:5C:72:F1:98:88:9D:3B:F0:9D X509v3 Authority Key Identifier: keyid:3F:72:72:60:B0:94:94:42:0D:D6:7A:73:04:D8:20:5D:42:FF:3F:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA58E/908DB4C88C6811F0BCEEB171C4F9AE02/P3JyYLCUlEIN1npzBNggXUL_P_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3JyYLCUlEIN1npzBNggXUL_P_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA58E/908DB4C88C6811F0BCEEB171C4F9AE02/P3JyYLCUlEIN1npzBNggXUL_P_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:40:56:3b:7d:72:ad:fa:57:c6:3b:1e:ae:5e:a4:14:38:98: 05:55:59:9f:17:9b:05:90:49:2e:a3:6a:a9:aa:ae:80:3f:91: e6:0c:7c:b3:45:aa:79:b9:01:3b:17:75:a8:12:cf:3d:58:5a: dd:91:f3:b7:91:13:ca:f9:52:46:eb:b8:e0:f6:89:e3:60:3d: c1:fa:18:7e:c1:bd:3e:88:65:e7:40:83:9e:76:45:dd:63:2a: 71:93:09:8c:61:ac:05:95:12:b8:33:61:88:d0:d6:79:05:7f: 3a:65:17:6f:d4:ce:40:41:7d:69:d4:75:34:1b:23:98:c3:0d: ec:ad:33:56:17:cf:25:ac:58:b5:18:bb:76:c7:83:80:fd:8a: 15:64:0e:74:57:72:49:ff:32:d6:68:11:0d:4f:34:1e:e6:50: 2b:91:00:44:f0:8f:98:6c:a9:b6:f1:fd:8e:f8:c9:4e:28:79: 5c:f6:f1:76:ee:12:96:5f:33:ea:d7:23:36:fc:41:0c:b4:ea: 2d:a6:d9:c4:4f:8e:a9:1a:8b:a6:6a:ea:af:4b:5f:62:b6:15: ad:b8:89:d6:0a:1d:0e:01:6a:72:bf:54:22:d7:4b:23:fe:2b: bc:a2:8e:2a:37:59:c3:88:8f:dd:de:3c:e4:da:96:de:be:63: 42:3f:cb:d9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QTU4RTExMC8GA1UEBRMoM0Y3MjcyNjBCMDk0OTQ0MjBERDY3QTczMDREODIwNUQ0 MkZGM0ZGMTAeFw0yNTExMDUwNzU3NTdaFw0yNTExMTIwNzU3NTdaMBgxFjAUBgNV BAMTDTY5MGIwMzg1LWYyYTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUcTzOmkP4ugGwAKnAMd94Ri6zOt/Rs4+dG8cSugZXnCD246RHbPorNjVwJjQg Om6b44DNFR6ExpBljnrqeX/Bq8f2GR8EXLrBVqyC20XkzkvcG1cUGeCr8iKso6QY Iyq6tQMHvp2M3h7E3bVb0Dx1yZuM1xtnTBSykMwM1jOLXa/MOr40Y/PrlyUO5Huc c9sxDqkyrZbJHpCCYOil9XOdnLOrjQ56D2+kNIOHOuYAvYKaOh1PATmTULLJ58Ov SKkTLEdQU0Tfs+HH6F96SQhh6BLwY0QwIB40nmSJV2h/ZaG54zjr8FylDgC2taxZ vlcevbAYIAeRtTYpbvTZjW7VAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPv+t/wO2 DRhEsR5ccvGYiJ078J0wHwYDVR0jBBgwFoAUP3JyYLCUlEIN1npzBNggXUL/P/Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNBNThFLzkwOERCNEM4OEM2 ODExRjBCQ0VFQjE3MUM0RjlBRTAyL1AzSnlZTENVbEVJTjFucHpCTmdnWFVMX1Bf RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUDNKeVlMQ1VsRUlOMW5wekJOZ2dYVUxfUF9FLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNB NThFLzkwOERCNEM4OEM2ODExRjBCQ0VFQjE3MUM0RjlBRTAyL1AzSnlZTENVbEVJ TjFucHpCTmdnWFVMX1BfRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFJAVjt9cq36V8Y7Hq5epBQ4mAVVWZ8XmwWQSS6jaqmqroA/keYMfLNF qnm5ATsXdagSzz1YWt2R87eRE8r5UkbruOD2ieNgPcH6GH7BvT6IZedAg552Rd1j KnGTCYxhrAWVErgzYYjQ1nkFfzplF2/UzkBBfWnUdTQbI5jDDeytM1YXzyWsWLUY u3bHg4D9ihVkDnRXckn/MtZoEQ1PNB7mUCuRAETwj5hsqbbx/Y74yU4oeVz28Xbu EpZfM+rXIzb8QQy06i2m2cRPjqkai6Zq6q9LX2K2Fa24idYKHQ4BanK/VCLXSyP+ K7yijio3WcOIj93ePOTalt6+Y0I/y9k= -----END CERTIFICATE-----Generated at Wed Nov 5 19:28:26 2025 by rpki-client