$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.mft File: kS3Nd84XYnPZShzEJZKtBclnamI.mft (raw, json) Hash identifier: wSg0fDLfyYamOxaVbWcu8TCsWfMYVf8k4saDO27//c4= Subject key identifier: 3D:F9:A2:9D:99:24:76:0B:D3:18:10:3C:89:B8:BC:8F:7C:CD:6B:BF Authority key identifier: 91:2D:CD:77:CE:17:62:73:D9:4A:1C:C4:25:92:AD:05:C9:67:6A:62 Certificate issuer: /CN=A91CA6E6/serialNumber=912DCD77CE176273D94A1CC42592AD05C9676A62 Certificate serial: 01CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS3Nd84XYnPZShzEJZKtBclnamI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.mft Manifest number: 02E3 Signing time: Mon 03 Nov 2025 02:48:27 +0000 Manifest this update: Mon 03 Nov 2025 02:48:26 +0000 Manifest next update: Mon 10 Nov 2025 02:48:26 +0000 Files and hashes: 1: kS3Nd84XYnPZShzEJZKtBclnamI.crl (hash: LzEIQDfc7mG84u/sqcYOf8b6nGm8rDu/E0TSE7glOv8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.crl rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS3Nd84XYnPZShzEJZKtBclnamI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:48:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 463 (0x1cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA6E6, serialNumber=912DCD77CE176273D94A1CC42592AD05C9676A62 Validity Not Before: Nov 3 02:48:26 2025 GMT Not After : Nov 10 02:48:26 2025 GMT Subject: CN=690817fb-6ffc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2e:1a:b7:a9:39:c4:b1:37:03:27:01:69:d8: 47:97:6b:dc:d6:a2:83:e3:71:48:fc:c1:ee:06:45: 0c:d7:12:96:92:25:4e:52:6c:a5:9f:dd:d6:5c:22: 48:27:29:89:67:12:b9:f9:dc:78:f4:18:fc:11:5c: de:27:a9:84:22:b8:b6:f5:71:cd:50:ee:46:89:4e: a4:57:d7:9f:27:66:1f:37:ba:52:59:8d:02:7a:12: 3c:f2:47:08:db:e0:c9:cf:d6:0a:a9:84:0a:31:67: 4c:97:90:1a:39:9c:5a:0d:42:f3:dd:23:ce:4a:2d: ad:af:c1:54:90:47:29:33:38:03:f6:e4:80:ac:e1: 4f:f2:3c:4e:cb:b0:3e:22:aa:15:77:16:3b:a4:c9: 40:f7:bb:0c:76:8c:64:e1:1d:2a:59:05:ad:a2:0f: d7:8b:48:bd:26:be:06:46:03:0f:1e:56:49:c8:37: e2:48:c7:37:5b:14:65:7d:5f:d2:bf:34:ad:c4:25: fc:34:21:83:dd:81:c0:6f:5f:01:98:43:0b:a3:47: b4:3e:6e:27:fd:b4:95:f7:05:b4:d1:2e:3d:e1:9d: 60:ba:28:f4:7b:ed:11:6b:88:13:42:d2:2e:9e:50: 01:c6:bf:25:ab:df:e8:74:ef:cc:92:d8:2c:d2:04: f2:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:F9:A2:9D:99:24:76:0B:D3:18:10:3C:89:B8:BC:8F:7C:CD:6B:BF X509v3 Authority Key Identifier: keyid:91:2D:CD:77:CE:17:62:73:D9:4A:1C:C4:25:92:AD:05:C9:67:6A:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS3Nd84XYnPZShzEJZKtBclnamI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:f2:8e:12:75:ad:e4:a6:f0:d9:99:55:90:6b:0d:c5:be:0f: 6d:50:ee:14:08:15:89:67:ae:0f:db:6c:f7:61:18:42:18:6e: df:2f:7d:c2:de:03:be:41:02:22:c4:33:96:16:e1:c2:3d:63: 93:9e:4a:b9:66:e6:da:f3:49:61:c1:66:29:f0:6a:b9:a0:de: 86:0f:71:bc:b4:18:7c:64:64:5c:73:90:17:85:cc:c1:04:a7: 9c:36:f5:ae:5e:c5:09:b1:ce:0f:8f:5d:54:4f:a4:ae:1a:7b: ed:48:d7:dd:b3:9e:1e:32:2f:83:11:8c:21:1b:ec:55:5b:23: 77:d4:51:eb:4f:05:6a:5d:bf:4b:c5:8c:34:12:1f:f7:4e:40: 1c:5a:8e:24:94:fa:3d:c9:c9:24:17:fc:72:73:36:30:65:f0: 3e:0a:9b:dd:c9:c8:65:b9:3a:a6:af:c4:61:79:3e:59:a1:f5: 43:67:06:8b:71:99:d2:ee:16:76:0d:d2:b8:d1:b3:a9:73:f7: 1f:af:0e:74:e2:b4:06:3b:cc:8d:2e:bc:6b:7e:68:a0:fc:a6: b0:fe:db:05:28:bc:cf:79:41:1d:51:9e:a6:a5:e2:f2:43:69: 70:c1:e7:74:56:cc:22:7d:d5:83:b9:72:ac:c6:2c:d8:40:ba: 7e:c2:d6:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0E2RTYxMTAvBgNVBAUTKDkxMkRDRDc3Q0UxNzYyNzNEOTRBMUNDNDI1OTJBRDA1 Qzk2NzZBNjIwHhcNMjUxMTAzMDI0ODI2WhcNMjUxMTEwMDI0ODI2WjAYMRYwFAYD VQQDEw02OTA4MTdmYi02ZmZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtC4at6k5xLE3AycBadhHl2vc1qKD43FI/MHuBkUM1xKWkiVOUmyln93WXCJI JymJZxK5+dx49Bj8EVzeJ6mEIri29XHNUO5GiU6kV9efJ2YfN7pSWY0CehI88kcI 2+DJz9YKqYQKMWdMl5AaOZxaDULz3SPOSi2tr8FUkEcpMzgD9uSArOFP8jxOy7A+ IqoVdxY7pMlA97sMdoxk4R0qWQWtog/Xi0i9Jr4GRgMPHlZJyDfiSMc3WxRlfV/S vzStxCX8NCGD3YHAb18BmEMLo0e0Pm4n/bSV9wW00S494Z1guij0e+0Ra4gTQtIu nlABxr8lq9/odO/Mktgs0gTylwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD35op2Z JHYL0xgQPIm4vI98zWu/MB8GA1UdIwQYMBaAFJEtzXfOF2Jz2UocxCWSrQXJZ2pi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTZFNi8zQjgzQUZFMEYw RDAxMUVEODA1MDc2NkFDNEY5QUUwMi9rUzNOZDg0WFluUFpTaHpFSlpLdEJjbG5h bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tTM05kODRYWW5QWlNoekVKWkt0QmNsbmFtSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTZFNi8zQjgzQUZFMEYwRDAxMUVEODA1MDc2NkFDNEY5QUUwMi9rUzNOZDg0WFlu UFpTaHpFSlpLdEJjbG5hbUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBn8o4Sda3kpvDZmVWQaw3Fvg9tUO4UCBWJZ64P22z3YRhCGG7fL33C 3gO+QQIixDOWFuHCPWOTnkq5Zuba80lhwWYp8Gq5oN6GD3G8tBh8ZGRcc5AXhczB BKecNvWuXsUJsc4Pj11UT6SuGnvtSNfds54eMi+DEYwhG+xVWyN31FHrTwVqXb9L xYw0Eh/3TkAcWo4klPo9yckkF/xyczYwZfA+CpvdychluTqmr8RheT5ZofVDZwaL cZnS7hZ2DdK40bOpc/cfrw504rQGO8yNLrxrfmig/Kaw/tsFKLzPeUEdUZ6mpeLy Q2lwwed0VswifdWDuXKsxizYQLp+wtZa -----END CERTIFICATE-----Generated at Mon Nov 3 18:19:17 2025 by rpki-client