$ rpki-client -vvf rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.mft File: S3Z_4wTU8n9REYZLp0O5R5zhSns.mft (raw, json) Hash identifier: Y3c8iSL22qHKJaMIzeRwDwCXyqMIsffCdzJ9Jv4EJSk= Subject key identifier: FD:19:B6:A5:15:45:CF:2B:1D:D7:07:89:1D:8F:97:F0:1B:11:20:B8 Authority key identifier: 4B:76:7F:E3:04:D4:F2:7F:51:11:86:4B:A7:43:B9:47:9C:E1:4A:7B Certificate issuer: /CN=A91D53AC/serialNumber=4B767FE304D4F27F5111864BA743B9479CE14A7B Certificate serial: 34DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S3Z_4wTU8n9REYZLp0O5R5zhSns.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.mft Manifest number: 34D9 Signing time: Tue 04 Nov 2025 14:54:30 +0000 Manifest this update: Tue 04 Nov 2025 14:54:30 +0000 Manifest next update: Tue 11 Nov 2025 14:54:29 +0000 Files and hashes: 1: S3Z_4wTU8n9REYZLp0O5R5zhSns.crl (hash: GFh1uhuZ66AEpUXS6s4pJvxTCtoQrCsLBj7/lmG6rHo=) 2: 0C9FD154619611EEADD97F70C4F9AE02.roa (hash: 6tys2kBORt2e9LfTgwSygjIdDqVtnmqGXLJS1SjEsWs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.crl rsync://rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S3Z_4wTU8n9REYZLp0O5R5zhSns.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:54:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13532 (0x34dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D53AC, serialNumber=4B767FE304D4F27F5111864BA743B9479CE14A7B Validity Not Before: Nov 4 14:54:30 2025 GMT Not After : Nov 11 14:54:29 2025 GMT Subject: CN=690a13a6-966f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a5:ed:5d:8d:63:a0:47:20:2e:e3:d5:a5:ad: c8:e8:11:bc:03:fb:72:20:1b:bf:44:d0:8f:ba:a9: 60:c2:80:80:f4:54:cf:17:9e:61:89:f6:14:bc:65: 57:f6:8a:7a:ac:25:ae:21:a9:89:57:6d:64:84:7c: ab:de:72:aa:eb:c2:cf:a5:bb:0b:ac:7b:f2:db:9a: 3e:97:2b:e1:12:8c:9f:11:0b:e5:cd:3c:4d:da:41: 27:ab:05:f1:ac:14:9b:e8:b4:4d:1a:b3:a3:a2:07: a4:00:16:09:5f:44:ec:c1:e7:4b:ff:4c:09:b3:5b: 30:0c:f9:72:8c:bd:72:fb:17:25:82:04:c9:01:d3: 8c:70:b2:db:cb:11:b2:10:89:d9:b9:5d:d4:ed:bf: 4c:83:79:27:82:50:03:5d:be:bb:89:64:b0:41:7e: e7:ad:e6:3c:57:3b:de:15:fc:77:c3:6b:8c:a5:74: de:52:e1:08:5d:f3:19:4f:e2:93:a0:07:12:4a:82: bc:50:26:7a:e6:d5:76:d4:3f:78:18:fb:ec:e2:cb: 93:48:19:c3:18:68:25:a2:1c:35:f8:41:d3:98:98: 56:ba:e9:2a:ce:e9:eb:24:84:a4:69:f9:a5:ed:5f: bd:24:0f:ff:04:6a:1d:b7:aa:b4:a7:c8:02:22:df: 30:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:19:B6:A5:15:45:CF:2B:1D:D7:07:89:1D:8F:97:F0:1B:11:20:B8 X509v3 Authority Key Identifier: keyid:4B:76:7F:E3:04:D4:F2:7F:51:11:86:4B:A7:43:B9:47:9C:E1:4A:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S3Z_4wTU8n9REYZLp0O5R5zhSns.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:6f:1c:3d:7d:44:aa:59:fc:24:f0:ed:c0:51:b2:98:74:3e: a8:91:ca:fd:2c:4b:7e:5e:23:8e:52:7f:81:38:d1:c6:51:29: 17:90:9f:db:6c:ea:7a:8c:61:a3:2c:21:07:6f:4d:3a:62:b0: cd:2a:3b:48:37:cc:0e:1e:e2:d1:fd:e4:41:56:bc:5c:51:6a: 10:a8:30:87:1b:6f:19:5e:43:8e:16:df:ce:4f:7f:0c:5b:da: 81:c2:86:55:b4:5c:2b:b3:df:5a:53:f0:23:79:ee:09:f3:0a: ed:23:cd:41:2b:8c:c3:1b:d5:58:7e:89:5c:ff:b0:13:a3:0c: 8e:d6:44:86:a0:9f:ba:46:d4:6e:f1:e1:cb:68:8a:5d:15:8b: 0c:ad:50:fe:4c:f3:0a:75:3b:66:6e:98:81:34:bf:0c:19:2e: 75:03:7d:b2:b0:3e:21:70:50:da:43:a9:55:44:e1:71:4c:11: ec:2d:c3:63:f1:4b:92:54:dc:ce:a3:c9:49:60:7e:e6:a6:b3: 20:74:29:0f:ed:94:02:b3:cf:fa:c8:8d:87:ed:7d:4a:68:54: d8:74:16:bf:21:dd:88:5a:4b:55:b4:a9:cd:62:56:9b:82:b0: 14:4b:77:5d:a6:39:27:15:39:85:b0:c8:87:1e:25:16:45:af: ab:16:8e:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUzQUMxMTAvBgNVBAUTKDRCNzY3RkUzMDRENEYyN0Y1MTExODY0QkE3NDNCOTQ3 OUNFMTRBN0IwHhcNMjUxMTA0MTQ1NDMwWhcNMjUxMTExMTQ1NDI5WjAYMRYwFAYD VQQDEw02OTBhMTNhNi05NjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApKXtXY1joEcgLuPVpa3I6BG8A/tyIBu/RNCPuqlgwoCA9FTPF55hifYUvGVX 9op6rCWuIamJV21khHyr3nKq68LPpbsLrHvy25o+lyvhEoyfEQvlzTxN2kEnqwXx rBSb6LRNGrOjogekABYJX0TswedL/0wJs1swDPlyjL1y+xclggTJAdOMcLLbyxGy EInZuV3U7b9Mg3knglADXb67iWSwQX7nreY8VzveFfx3w2uMpXTeUuEIXfMZT+KT oAcSSoK8UCZ65tV21D94GPvs4suTSBnDGGglohw1+EHTmJhWuukqzunrJISkafml 7V+9JA//BGodt6q0p8gCIt8wIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP0ZtqUV Rc8rHdcHiR2Pl/AbESC4MB8GA1UdIwQYMBaAFEt2f+ME1PJ/URGGS6dDuUec4Up7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTNBQy8wMzE2OEM0RTFE OTcxMUUyOEI2QzAwODAwOEIwMkNEMi9TM1pfNHdUVThuOVJFWVpMcDBPNVI1emhT bnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1MzWl80d1RVOG45UkVZWkxwME81UjV6aFNucy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTNBQy8wMzE2OEM0RTFEOTcxMUUyOEI2QzAwODAwOEIwMkNEMi9TM1pfNHdUVThu OVJFWVpMcDBPNVI1emhTbnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZbxw9fUSqWfwk8O3AUbKYdD6okcr9LEt+XiOOUn+BONHGUSkXkJ/b bOp6jGGjLCEHb006YrDNKjtIN8wOHuLR/eRBVrxcUWoQqDCHG28ZXkOOFt/OT38M W9qBwoZVtFwrs99aU/Ajee4J8wrtI81BK4zDG9VYfolc/7ATowyO1kSGoJ+6RtRu 8eHLaIpdFYsMrVD+TPMKdTtmbpiBNL8MGS51A32ysD4hcFDaQ6lVROFxTBHsLcNj 8UuSVNzOo8lJYH7mprMgdCkP7ZQCs8/6yI2H7X1KaFTYdBa/Id2IWktVtKnNYlab grAUS3ddpjknFTmFsMiHHiUWRa+rFo71 -----END CERTIFICATE-----Generated at Wed Nov 5 05:26:30 2025 by rpki-client