$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.mft File: 3lBUK-oQggGncsALyfJRrRf6ls0.mft (raw, json) Hash identifier: ulaMnt3sYMi0v95PyDywkB2NgBbafouuM8JE2hvMF3w= Subject key identifier: 0E:91:22:67:EE:10:60:54:7A:73:63:C8:8F:54:56:9A:C4:B0:9F:29 Authority key identifier: DE:50:54:2B:EA:10:82:01:A7:72:C0:0B:C9:F2:51:AD:17:FA:96:CD Certificate issuer: /CN=A91DEBE3/serialNumber=DE50542BEA108201A772C00BC9F251AD17FA96CD Certificate serial: 0D09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lBUK-oQggGncsALyfJRrRf6ls0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.mft Manifest number: 0CCC Signing time: Sun 02 Nov 2025 18:16:48 +0000 Manifest this update: Sun 02 Nov 2025 18:16:47 +0000 Manifest next update: Sun 09 Nov 2025 18:16:47 +0000 Files and hashes: 1: 3lBUK-oQggGncsALyfJRrRf6ls0.crl (hash: XZ771CqUQYW+o2bffibicJVXUR0Wr2H7jXrUvShYFsU=) 2: AF0508E8B1EE11EF93E70F63C4F9AE02.roa (hash: /m7E0Dw/anD8qYNxCWedW44uleLaVBkf0eBmZ6XFvMk=) 3: D59CB8F4968511EF93AE8239C4F9AE02.roa (hash: rZ4CQjG/7W0/b4/xy8McSOxNbiTi926f91iRcbtKHeo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.crl rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lBUK-oQggGncsALyfJRrRf6ls0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:16:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3337 (0xd09) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEBE3, serialNumber=DE50542BEA108201A772C00BC9F251AD17FA96CD Validity Not Before: Nov 2 18:16:47 2025 GMT Not After : Nov 9 18:16:47 2025 GMT Subject: CN=6907a010-3fef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8f:2e:64:f8:f0:82:22:06:f2:d0:40:29:2c: c7:8e:12:51:f7:b8:e5:94:77:b0:52:5d:72:7d:c3: 32:18:f7:1f:be:fc:41:4b:c9:63:29:51:8a:6f:8b: 5f:dd:d7:cb:65:91:10:d9:77:e7:fe:9f:8e:88:d7: a3:1d:a1:16:3b:93:df:21:ae:f8:f5:04:44:39:b7: 48:66:56:b7:e6:09:dc:f9:8b:f5:9d:91:67:08:5d: 92:a6:36:02:88:f9:61:35:63:23:f0:48:a8:6a:57: 75:1b:d5:bb:0e:05:c5:66:2d:bb:2f:22:f9:bf:87: 90:38:ee:5f:4c:f5:b5:04:50:eb:dc:d9:e1:a8:03: ed:93:05:04:89:d0:d1:02:7a:d5:a9:96:ed:84:c9: 7d:75:7d:1a:80:cc:a6:d1:57:3d:1a:14:bf:04:b0: 73:ce:07:49:e5:52:75:21:4e:2b:07:6d:7a:4e:7d: 88:fe:35:cd:98:dc:d3:b5:17:99:20:94:a1:77:53: 25:ce:64:45:5d:68:c7:f1:ac:54:a8:4a:45:e2:6f: 14:72:35:0b:5d:53:8c:97:3e:48:4c:20:32:d6:33: 61:13:e0:69:28:81:b9:c1:b1:4d:df:7e:63:b0:4f: 50:4a:e7:cc:7d:58:15:f4:30:20:9d:bb:e1:72:12: 29:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:91:22:67:EE:10:60:54:7A:73:63:C8:8F:54:56:9A:C4:B0:9F:29 X509v3 Authority Key Identifier: keyid:DE:50:54:2B:EA:10:82:01:A7:72:C0:0B:C9:F2:51:AD:17:FA:96:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lBUK-oQggGncsALyfJRrRf6ls0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:63:18:61:de:8e:1a:0f:c4:26:d9:94:d4:79:9e:a8:3b:fc: 79:44:d4:d6:aa:5d:9d:e2:3c:1f:a6:73:d0:04:4e:35:6a:c5: bd:b0:af:f3:aa:36:41:b0:50:04:67:d1:a5:e5:64:c3:c1:5a: 82:26:7c:c2:a9:98:7a:9a:ae:e0:5d:5a:44:39:a2:90:65:7c: ef:e8:41:3a:0c:a2:22:f4:42:79:c8:6f:e7:37:50:2a:f1:02: 3d:0d:b7:94:ce:fc:e2:17:f1:ba:15:55:49:3b:38:62:b3:e0: 0f:84:02:1b:14:65:24:be:a0:7f:33:e5:3c:16:9d:ea:9f:0e: 7b:8b:94:5b:fa:33:74:cc:0a:c7:b3:1c:58:af:65:e4:46:cd: 3d:c2:9b:b9:b9:2f:72:63:3b:4d:61:13:fc:59:6a:a8:19:d4: 41:b1:c9:22:18:c5:06:09:07:d1:05:16:a1:72:7f:aa:d1:4e: e7:b7:da:d0:ef:10:e7:54:31:0b:56:b2:42:a9:c1:58:83:b5: 08:48:f1:4a:e5:01:db:2c:cf:80:c2:b5:30:e8:21:70:bb:37: a0:e3:ae:0d:44:5e:ed:ea:94:31:cd:0e:d5:62:fa:41:2a:af: 15:80:46:62:ae:0f:ed:b4:7b:e4:44:ed:98:db:61:b6:01:c9: 3d:f2:21:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVCRTMxMTAvBgNVBAUTKERFNTA1NDJCRUExMDgyMDFBNzcyQzAwQkM5RjI1MUFE MTdGQTk2Q0QwHhcNMjUxMTAyMTgxNjQ3WhcNMjUxMTA5MTgxNjQ3WjAYMRYwFAYD VQQDEw02OTA3YTAxMC0zZmVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAso8uZPjwgiIG8tBAKSzHjhJR97jllHewUl1yfcMyGPcfvvxBS8ljKVGKb4tf 3dfLZZEQ2Xfn/p+OiNejHaEWO5PfIa749QREObdIZla35gnc+Yv1nZFnCF2SpjYC iPlhNWMj8Eioald1G9W7DgXFZi27LyL5v4eQOO5fTPW1BFDr3NnhqAPtkwUEidDR AnrVqZbthMl9dX0agMym0Vc9GhS/BLBzzgdJ5VJ1IU4rB216Tn2I/jXNmNzTtReZ IJShd1MlzmRFXWjH8axUqEpF4m8UcjULXVOMlz5ITCAy1jNhE+BpKIG5wbFN335j sE9QSufMfVgV9DAgnbvhchIpwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA6RImfu EGBUenNjyI9UVprEsJ8pMB8GA1UdIwQYMBaAFN5QVCvqEIIBp3LAC8nyUa0X+pbN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUJFMy84MEFFMTBDNjA0 NTAxMUVBQkE4MkM0MTVDNEY5QUUwMi8zbEJVSy1vUWdnR25jc0FMeWZKUnJSZjZs czAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNsQlVLLW9RZ2dHbmNzQUx5ZkpSclJmNmxzMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUJFMy84MEFFMTBDNjA0NTAxMUVBQkE4MkM0MTVDNEY5QUUwMi8zbEJVSy1vUWdn R25jc0FMeWZKUnJSZjZsczAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQYxhh3o4aD8Qm2ZTUeZ6oO/x5RNTWql2d4jwfpnPQBE41asW9sK/z qjZBsFAEZ9Gl5WTDwVqCJnzCqZh6mq7gXVpEOaKQZXzv6EE6DKIi9EJ5yG/nN1Aq 8QI9DbeUzvziF/G6FVVJOzhis+APhAIbFGUkvqB/M+U8Fp3qnw57i5Rb+jN0zArH sxxYr2XkRs09wpu5uS9yYztNYRP8WWqoGdRBsckiGMUGCQfRBRahcn+q0U7nt9rQ 7xDnVDELVrJCqcFYg7UISPFK5QHbLM+AwrUw6CFwuzeg464NRF7t6pQxzQ7VYvpB Kq8VgEZirg/ttHvkRO2Y22G2Ack98iHz -----END CERTIFICATE-----Generated at Tue Nov 4 12:21:14 2025 by rpki-client